last executing test programs: 10.370868202s ago: executing program 3 (id=4): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_getaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r6, 0x3ba0, 0x0) r7 = getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r7, 0x0, 0x5002) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}, {0x0}, {&(0x7f0000000380)}], 0x3, 0x0, 0x0, 0x7400}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) 9.116778134s ago: executing program 3 (id=11): semop(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) cachestat(0xffffffffffffffff, &(0x7f0000003340)={0x774, 0x7}, &(0x7f0000003380), 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r2, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2c020400) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000001c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)) 8.537340692s ago: executing program 4 (id=5): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'pim6reg0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0xa, @dev={0xac, 0x14, 0x14, 0x36}}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in={{0x2, 0x4e20, @local}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}, 0x5}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, {0x10}, {0xb}}, [@TCA_STAB={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10008094) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 8.47642691s ago: executing program 1 (id=12): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7.1189629s ago: executing program 0 (id=13): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@delchain={0x24, 0x65, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xb, 0xf}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.934119019s ago: executing program 3 (id=14): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 6.393718379s ago: executing program 2 (id=3): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x3, 0x200, "fe0140", 0x0, 0xf}) 6.148526206s ago: executing program 0 (id=15): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "03c1e18767694054fab9e60e9dbd3ab7"}]}}}}}}}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) 6.14175525s ago: executing program 1 (id=16): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x4000010, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x106, 0x9}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r10, r10], 0x2, r8, r9, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="170cf31f8e85bcdbb6ad484c26dfa6be3180020cc3ad083eb719a8495180e3411bca5a3904d99c037e2d8e3c1c72fa92fbc31f328a0634a228ba73fca36ab95455c2429a396c437ae822453d5dbfd246cfc6e49f4b77fbb58e3e23beae7970b5bdb6c5d6a4b76a6e910402706986d2c4da7f3cab1ec82c46628456875bad37ebb5c0bef76aeae81b5489235cc4a3533c44fae97f864aa56771761bf7b68f404289dfd955fc20d7c7eb05951df334942d46ba78c78f3c72a7e827134798ba9e611ff2de814c88b7ee20d6163a99b26f4756f5ed20986bfe8de8c2292656a566df0117b53931975aaa", 0xe8, 0x4000810, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0xa0, 0x108, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) 5.493071179s ago: executing program 2 (id=17): openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) dup(0xffffffffffffffff) r0 = syz_io_uring_setup(0x88f, &(0x7f00000002c0)={0x0, 0x3cfa, 0x0, 0x2, 0x26b}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_procfs$pagemap(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4.170866166s ago: executing program 1 (id=18): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x20008000) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) 4.044152086s ago: executing program 0 (id=19): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000007c0), &(0x7f0000000800)=0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x3b2}], 0x1, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200000000000000e3ffffffffffffff"], 0x50) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000740)={0x5, 0x8e, 0xf, 0x3, 0x9}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.350899503s ago: executing program 1 (id=20): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) 3.165798319s ago: executing program 0 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) 2.960560827s ago: executing program 3 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x500, 0x210, 0x0, 0xffffffff, 0xf0, 0x300, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv6=@loopback, @ipv4=@multicast1, @port=0x4e21, @gre_key=0x2}}}, {{@ipv6={@mcast1, @local, [0xffffff00, 0x0, 0xff000000, 0xff000000], [0xff, 0xffffffff, 0xff000000], 'ip_vti0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x8, 0x10}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3], 0xfffff156, 0x36, 0x2}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv4=@loopback, @port=0x4e20, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv4=@multicast2, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @gre_key=0x3, @port=0x4e24}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff, 0xff, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'veth0_to_batadv\x00', 'nr0\x00', {0xff}, {0xff}, 0xc, 0xab, 0x4, 0x17}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"cb5d"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0xff000000, 0xff000000, 0xff000000, 0xffffffff], 0x4e24, 0x4e21, 0x4e21, 0x4e20, 0x4, 0x2, 0x0, 0x1, 0x9b6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup2(r4, r5) ioctl$KVM_IOEVENTFD(r6, 0x40a0ae49, &(0x7f0000000000)={0x4, 0x0, 0x0, r7, 0x100000}) 2.96009988s ago: executing program 1 (id=23): semop(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) cachestat(0xffffffffffffffff, &(0x7f0000003340)={0x774, 0x7}, &(0x7f0000003380), 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r2, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2c020400) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000001c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)) 2.837012172s ago: executing program 2 (id=24): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x37, 0x40020, 0x8, 0x13, 0x3, 0x0, 0x0, 0xa9}) 2.643447805s ago: executing program 2 (id=25): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 1.778603034s ago: executing program 0 (id=26): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) 1.48292264s ago: executing program 4 (id=27): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, &(0x7f0000000dc0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x8}) io_uring_enter(r1, 0x2ffb, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[], 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) 1.482159065s ago: executing program 1 (id=28): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffff, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x2000081) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$rds(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x24000001) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) 801.952943ms ago: executing program 3 (id=29): syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00') openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 0s ago: executing program 0 (id=30): vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x255}], 0x1, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r1 = openat(0xffffffffffffffff, 0x0, 0x200, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000180)) read$FUSE(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x63) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, 0x0, 0xe900) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x111200, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. [ 87.191831][ T10] cfg80211: failed to load regulatory.db [ 87.349365][ T5829] cgroup: Unknown subsys name 'net' [ 87.580121][ T5829] cgroup: Unknown subsys name 'cpuset' [ 87.615761][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.319520][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.101602][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.119902][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.122208][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.123123][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.127017][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.139524][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.148290][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.158665][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.196535][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.197378][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.200505][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.203515][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.203964][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.310806][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.343305][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.346481][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.364882][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.386397][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.395854][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.414672][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.415869][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.426265][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.448538][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.450138][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.451082][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.398759][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 93.409640][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 93.473448][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 93.718378][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 93.810037][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 94.386572][ T5848] Bluetooth: hci2: command tx timeout [ 94.386850][ T5849] Bluetooth: hci1: command tx timeout [ 94.437991][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.439402][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.440053][ T5844] bridge_slave_0: entered allmulticast mode [ 94.441891][ T5844] bridge_slave_0: entered promiscuous mode [ 94.469924][ T5849] Bluetooth: hci3: command tx timeout [ 94.470187][ T5849] Bluetooth: hci0: command tx timeout [ 94.470590][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.470721][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.471516][ T5846] bridge_slave_0: entered allmulticast mode [ 94.474940][ T5846] bridge_slave_0: entered promiscuous mode [ 94.545363][ T5848] Bluetooth: hci4: command tx timeout [ 94.591657][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.591797][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.592008][ T5844] bridge_slave_1: entered allmulticast mode [ 94.594073][ T5844] bridge_slave_1: entered promiscuous mode [ 94.623717][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.623829][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.623955][ T5846] bridge_slave_1: entered allmulticast mode [ 94.631385][ T5846] bridge_slave_1: entered promiscuous mode [ 94.633719][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.633871][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.634083][ T5841] bridge_slave_0: entered allmulticast mode [ 94.644493][ T5841] bridge_slave_0: entered promiscuous mode [ 94.927118][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.927271][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.927762][ T5841] bridge_slave_1: entered allmulticast mode [ 94.930804][ T5841] bridge_slave_1: entered promiscuous mode [ 95.380270][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.380524][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.380722][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.380891][ T5856] bridge_slave_0: entered allmulticast mode [ 95.382817][ T5856] bridge_slave_0: entered promiscuous mode [ 95.414702][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.476969][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.477099][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.477263][ T5851] bridge_slave_0: entered allmulticast mode [ 95.479056][ T5851] bridge_slave_0: entered promiscuous mode [ 95.484156][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.484454][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.484546][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.484659][ T5856] bridge_slave_1: entered allmulticast mode [ 95.549971][ T5856] bridge_slave_1: entered promiscuous mode [ 95.554777][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.559976][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.581423][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.581523][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.581740][ T5851] bridge_slave_1: entered allmulticast mode [ 95.583368][ T5851] bridge_slave_1: entered promiscuous mode [ 96.001367][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.389259][ T5844] team0: Port device team_slave_0 added [ 96.392681][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.408326][ T5846] team0: Port device team_slave_0 added [ 96.465329][ T5848] Bluetooth: hci1: command tx timeout [ 96.465362][ T5848] Bluetooth: hci2: command tx timeout [ 96.501234][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.503790][ T5844] team0: Port device team_slave_1 added [ 96.513102][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.517648][ T5846] team0: Port device team_slave_1 added [ 96.529525][ T5841] team0: Port device team_slave_0 added [ 96.545245][ T5849] Bluetooth: hci0: command tx timeout [ 96.545276][ T5849] Bluetooth: hci3: command tx timeout [ 96.619855][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.625214][ T5848] Bluetooth: hci4: command tx timeout [ 96.752356][ T5841] team0: Port device team_slave_1 added [ 97.448924][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.448941][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.448964][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.565592][ T5856] team0: Port device team_slave_0 added [ 97.568098][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.568111][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.568123][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.638949][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.638967][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.638990][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.642092][ T5851] team0: Port device team_slave_0 added [ 97.653633][ T5856] team0: Port device team_slave_1 added [ 97.666365][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.666380][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.666403][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.668233][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.668245][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.668266][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.716011][ T5851] team0: Port device team_slave_1 added [ 97.820967][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.820983][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.821003][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.068982][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.069001][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.069022][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.211209][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.211224][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.211237][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.212326][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.212339][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.212361][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.369537][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.369554][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.369577][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.546797][ T5848] Bluetooth: hci2: command tx timeout [ 98.546831][ T5848] Bluetooth: hci1: command tx timeout [ 98.576242][ T5844] hsr_slave_0: entered promiscuous mode [ 98.577201][ T5844] hsr_slave_1: entered promiscuous mode [ 98.598363][ T5846] hsr_slave_0: entered promiscuous mode [ 98.600101][ T5846] hsr_slave_1: entered promiscuous mode [ 98.601295][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 98.601418][ T5846] Cannot create hsr debugfs directory [ 98.625557][ T5849] Bluetooth: hci3: command tx timeout [ 98.625589][ T5849] Bluetooth: hci0: command tx timeout [ 98.703787][ T5841] hsr_slave_0: entered promiscuous mode [ 98.704749][ T5841] hsr_slave_1: entered promiscuous mode [ 98.705391][ T5848] Bluetooth: hci4: command tx timeout [ 98.707083][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 98.707111][ T5841] Cannot create hsr debugfs directory [ 99.198943][ T5856] hsr_slave_0: entered promiscuous mode [ 99.199880][ T5856] hsr_slave_1: entered promiscuous mode [ 99.200458][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 99.200477][ T5856] Cannot create hsr debugfs directory [ 99.361458][ T5851] hsr_slave_0: entered promiscuous mode [ 99.362521][ T5851] hsr_slave_1: entered promiscuous mode [ 99.363073][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 99.363094][ T5851] Cannot create hsr debugfs directory [ 100.625306][ T5848] Bluetooth: hci1: command tx timeout [ 100.625337][ T5848] Bluetooth: hci2: command tx timeout [ 100.706927][ T5849] Bluetooth: hci0: command tx timeout [ 100.706960][ T5849] Bluetooth: hci3: command tx timeout [ 100.786087][ T5848] Bluetooth: hci4: command tx timeout [ 100.895016][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.936625][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.969685][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.032002][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.205200][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.245394][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.275479][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.332544][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.501108][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.542947][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.573299][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.639254][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.816831][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.886214][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.935714][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.997833][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.043436][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.207455][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.264618][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.314949][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.324810][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.369645][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.427084][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.427284][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.490754][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.491763][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.524468][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.658478][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.712004][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.712205][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.743772][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.777507][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.777845][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.880056][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.941579][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.972473][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.973201][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.038667][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.038824][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.161728][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.212003][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.226717][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.226868][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.281202][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.281351][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.434109][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.443299][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.492769][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.493640][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.584514][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.584743][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.814472][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.924589][ T5844] veth0_vlan: entered promiscuous mode [ 104.026397][ T5844] veth1_vlan: entered promiscuous mode [ 104.281266][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.348902][ T5844] veth0_macvtap: entered promiscuous mode [ 104.395732][ T5844] veth1_macvtap: entered promiscuous mode [ 104.499693][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.593140][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.658059][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.699729][ T5856] veth0_vlan: entered promiscuous mode [ 104.728695][ T1308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.747812][ T1308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.758698][ T1308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.769522][ T1308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.799468][ T5856] veth1_vlan: entered promiscuous mode [ 104.851751][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.077411][ T5846] veth0_vlan: entered promiscuous mode [ 105.183985][ T5846] veth1_vlan: entered promiscuous mode [ 105.190857][ T5841] veth0_vlan: entered promiscuous mode [ 105.216213][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.216239][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.267380][ T5856] veth0_macvtap: entered promiscuous mode [ 105.313972][ T5841] veth1_vlan: entered promiscuous mode [ 105.352010][ T5856] veth1_macvtap: entered promiscuous mode [ 105.364714][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.364732][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.455311][ T5851] veth0_vlan: entered promiscuous mode [ 105.493639][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.549552][ T5846] veth0_macvtap: entered promiscuous mode [ 105.570395][ T5851] veth1_vlan: entered promiscuous mode [ 105.578849][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.601549][ T5846] veth1_macvtap: entered promiscuous mode [ 105.644702][ T5841] veth0_macvtap: entered promiscuous mode [ 105.658150][ T148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.666659][ T148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.673928][ T148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.705203][ T148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.708873][ T5841] veth1_macvtap: entered promiscuous mode [ 105.831297][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.945349][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.774474][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.842948][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.852808][ T1159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.887582][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.900700][ T1159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.902610][ T5851] veth0_macvtap: entered promiscuous mode [ 106.968038][ T1159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.087102][ T3486] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.143641][ T5851] veth1_macvtap: entered promiscuous mode [ 107.154123][ T3486] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.157367][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.157385][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.163247][ T3486] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.190282][ T3486] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.597159][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.618820][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.618840][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.806313][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.099328][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.099347][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.165611][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.183379][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.211564][ T3710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.235259][ T3710] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.335766][ T3710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.335786][ T3710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.667501][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.667520][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.872771][ T5978] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 109.872841][ T5978] netlink: 'syz.3.4': attribute type 8 has an invalid length. [ 109.872985][ T5978] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4'. [ 110.701978][ T3710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.701998][ T3710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.828671][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.828691][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.997002][ T4615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.997021][ T4615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.181157][ T5987] trusted_key: encrypted_key: insufficient parameters specified [ 111.235237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.325136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.755118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.875093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.875127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.935210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.935243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.135099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.699016][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 112.699036][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 112.699058][ T6000] netlink: 'syz.0.13': attribute type 20 has an invalid length. [ 112.805102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.051538][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 113.051562][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 113.052738][ T6000] netlink: 'syz.0.13': attribute type 20 has an invalid length. [ 113.084902][ T57] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.115367][ T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.117596][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.117892][ T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.119862][ T6000] Zero length message leads to an empty skb [ 113.335465][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.556161][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 113.556190][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.556207][ T45] usb 4-1: Product: syz [ 113.556220][ T45] usb 4-1: Manufacturer: syz [ 113.556232][ T45] usb 4-1: SerialNumber: syz [ 113.785650][ T37] audit: type=1326 audit(1756592146.999:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6009 comm="syz.1.16" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc19a58ebe9 code=0x0 [ 115.576208][ T45] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 115.645849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.989960][ T45] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 115.991178][ T45] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 115.991233][ T45] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 115.994711][ T45] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 116.071277][ T45] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 116.129296][ T45] usb 4-1: USB disconnect, device number 2 [ 116.709188][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 116.709211][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 116.709236][ T6033] netlink: 'syz.0.21': attribute type 13 has an invalid length. [ 117.947887][ T6041] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.689606][ T6046] af_packet: tpacket_rcv: packet too big, clamped from 7844 to 3952. macoff=96 [ 119.877443][ T6062] [ 119.877455][ T6062] ====================================================== [ 119.877463][ T6062] WARNING: possible circular locking dependency detected [ 119.877479][ T6062] syzkaller #0 Not tainted [ 119.877489][ T6062] ------------------------------------------------------ [ 119.877495][ T6062] syz.1.28/6062 is trying to acquire lock: [ 119.877505][ T6062] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 119.877578][ T6062] [ 119.877578][ T6062] but task is already holding lock: [ 119.877584][ T6062] ffffffff8efa6ba8 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 119.877626][ T6062] [ 119.877626][ T6062] which lock already depends on the new lock. [ 119.877626][ T6062] [ 119.877633][ T6062] [ 119.877633][ T6062] the existing dependency chain (in reverse order) is: [ 119.877639][ T6062] [ 119.877639][ T6062] -> #1 (smc_v6_hashinfo.lock){++.+}-{3:3}: [ 119.877662][ T6062] lock_acquire+0x120/0x360 [ 119.877682][ T6062] rt_write_lock+0x6a/0x110 [ 119.877697][ T6062] smc_hash_sk+0x8f/0x2a0 [ 119.877712][ T6062] smc_sk_init+0x5a4/0x7f0 [ 119.877728][ T6062] __smc_create+0x10d/0x280 [ 119.877748][ T6062] __sock_create+0x4b3/0x9f0 [ 119.877765][ T6062] __sys_socket+0xd7/0x1b0 [ 119.877781][ T6062] __x64_sys_socket+0x7a/0x90 [ 119.877796][ T6062] do_syscall_64+0xfa/0x3b0 [ 119.877816][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.877838][ T6062] [ 119.877838][ T6062] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 119.877863][ T6062] validate_chain+0xb9b/0x2140 [ 119.877885][ T6062] __lock_acquire+0xab9/0xd20 [ 119.877903][ T6062] reacquire_held_locks+0x127/0x1d0 [ 119.877927][ T6062] lock_release+0x1b4/0x3e0 [ 119.877944][ T6062] __local_bh_enable_ip+0x10c/0x270 [ 119.877961][ T6062] sock_i_ino+0xa9/0xc0 [ 119.877982][ T6062] smc_diag_dump_proto+0xa4c/0x1fb0 [ 119.877999][ T6062] smc_diag_dump+0x59/0xa0 [ 119.878015][ T6062] netlink_dump+0x6e4/0xe90 [ 119.878031][ T6062] __netlink_dump_start+0x5cb/0x7e0 [ 119.878048][ T6062] smc_diag_handler_dump+0x178/0x210 [ 119.878065][ T6062] sock_diag_rcv_msg+0x4c9/0x600 [ 119.878081][ T6062] netlink_rcv_skb+0x205/0x470 [ 119.878098][ T6062] netlink_unicast+0x843/0xa10 [ 119.878113][ T6062] netlink_sendmsg+0x805/0xb30 [ 119.878131][ T6062] __sock_sendmsg+0x219/0x270 [ 119.878146][ T6062] ____sys_sendmsg+0x508/0x820 [ 119.878165][ T6062] ___sys_sendmsg+0x21f/0x2a0 [ 119.878184][ T6062] __x64_sys_sendmsg+0x1a1/0x260 [ 119.878204][ T6062] do_syscall_64+0xfa/0x3b0 [ 119.878224][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.878239][ T6062] [ 119.878239][ T6062] other info that might help us debug this: [ 119.878239][ T6062] [ 119.878245][ T6062] Possible unsafe locking scenario: [ 119.878245][ T6062] [ 119.878250][ T6062] CPU0 CPU1 [ 119.878256][ T6062] ---- ---- [ 119.878261][ T6062] rlock(smc_v6_hashinfo.lock); [ 119.878274][ T6062] lock((softirq_ctrl.lock)); [ 119.878287][ T6062] lock(smc_v6_hashinfo.lock); [ 119.878300][ T6062] lock((softirq_ctrl.lock)); [ 119.878312][ T6062] [ 119.878312][ T6062] *** DEADLOCK *** [ 119.878312][ T6062] [ 119.878317][ T6062] 3 locks held by syz.1.28/6062: [ 119.878327][ T6062] #0: ffff8880364a6908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 119.878369][ T6062] #1: ffffffff8efa6ba8 (smc_v6_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 119.878414][ T6062] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 119.878455][ T6062] [ 119.878455][ T6062] stack backtrace: [ 119.878482][ T6062] CPU: 1 UID: 0 PID: 6062 Comm: syz.1.28 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.878509][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.878529][ T6062] Call Trace: [ 119.878537][ T6062] [ 119.878550][ T6062] dump_stack_lvl+0x189/0x250 [ 119.878577][ T6062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.878601][ T6062] ? __pfx__printk+0x10/0x10 [ 119.878620][ T6062] ? print_lock_name+0xde/0x100 [ 119.878639][ T6062] print_circular_bug+0x2ee/0x310 [ 119.878657][ T6062] check_noncircular+0x134/0x160 [ 119.878684][ T6062] validate_chain+0xb9b/0x2140 [ 119.878708][ T6062] ? rcu_is_watching+0x15/0xb0 [ 119.878731][ T6062] ? trace_irq_disable+0x37/0x110 [ 119.878749][ T6062] ? preempt_schedule_irq+0xde/0x150 [ 119.878768][ T6062] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 119.878792][ T6062] __lock_acquire+0xab9/0xd20 [ 119.878814][ T6062] reacquire_held_locks+0x127/0x1d0 [ 119.878837][ T6062] ? __local_bh_disable_ip+0x264/0x400 [ 119.878859][ T6062] lock_release+0x1b4/0x3e0 [ 119.878878][ T6062] ? __local_bh_enable_ip+0x100/0x270 [ 119.878900][ T6062] __local_bh_enable_ip+0x10c/0x270 [ 119.878919][ T6062] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 119.878942][ T6062] ? rt_read_unlock+0x65/0xa0 [ 119.878960][ T6062] ? sock_i_ino+0x24/0xc0 [ 119.878982][ T6062] sock_i_ino+0xa9/0xc0 [ 119.879005][ T6062] smc_diag_dump_proto+0xa4c/0x1fb0 [ 119.879034][ T6062] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 119.879054][ T6062] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 119.879081][ T6062] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 119.879107][ T6062] ? __phys_addr+0xd3/0x180 [ 119.879129][ T6062] ? __kasan_kmalloc_large+0x85/0xa0 [ 119.879151][ T6062] ? rcu_is_watching+0x15/0xb0 [ 119.879174][ T6062] ? rcu_is_watching+0x15/0xb0 [ 119.879197][ T6062] ? trace_kmalloc+0x1f/0xd0 [ 119.879215][ T6062] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 119.879241][ T6062] ? __build_skb_around+0x257/0x3e0 [ 119.879264][ T6062] smc_diag_dump+0x59/0xa0 [ 119.879282][ T6062] netlink_dump+0x6e4/0xe90 [ 119.879305][ T6062] ? __pfx_netlink_dump+0x10/0x10 [ 119.879323][ T6062] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 119.879344][ T6062] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.879373][ T6062] __netlink_dump_start+0x5cb/0x7e0 [ 119.879395][ T6062] smc_diag_handler_dump+0x178/0x210 [ 119.879415][ T6062] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 119.879434][ T6062] ? __pfx_smc_diag_dump+0x10/0x10 [ 119.879453][ T6062] ? sock_diag_lock_handler+0x19/0x290 [ 119.879471][ T6062] ? sock_diag_lock_handler+0x19/0x290 [ 119.879491][ T6062] sock_diag_rcv_msg+0x4c9/0x600 [ 119.879524][ T6062] netlink_rcv_skb+0x205/0x470 [ 119.879556][ T6062] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 119.879574][ T6062] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.879599][ T6062] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.879623][ T6062] netlink_unicast+0x843/0xa10 [ 119.879644][ T6062] ? __pfx_netlink_unicast+0x10/0x10 [ 119.879662][ T6062] ? netlink_sendmsg+0x642/0xb30 [ 119.879682][ T6062] ? skb_put+0x11b/0x210 [ 119.879703][ T6062] netlink_sendmsg+0x805/0xb30 [ 119.879728][ T6062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.879751][ T6062] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.879767][ T6062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.879787][ T6062] __sock_sendmsg+0x219/0x270 [ 119.879805][ T6062] ____sys_sendmsg+0x508/0x820 [ 119.879830][ T6062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.879855][ T6062] ? import_iovec+0x74/0xa0 [ 119.879874][ T6062] ___sys_sendmsg+0x21f/0x2a0 [ 119.879897][ T6062] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.879933][ T6062] ? __fget_files+0x2a/0x420 [ 119.879954][ T6062] ? __fget_files+0x3a6/0x420 [ 119.879979][ T6062] __x64_sys_sendmsg+0x1a1/0x260 [ 119.880002][ T6062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.880029][ T6062] ? rcu_is_watching+0x15/0xb0 [ 119.880053][ T6062] ? do_syscall_64+0xbe/0x3b0 [ 119.880076][ T6062] do_syscall_64+0xfa/0x3b0 [ 119.880097][ T6062] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.880116][ T6062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.880133][ T6062] ? clear_bhb_loop+0x60/0xb0 [ 119.880152][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.880169][ T6062] RIP: 0033:0x7fc19a58ebe9 [ 119.880191][ T6062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.880206][ T6062] RSP: 002b:00007fc198391038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.880225][ T6062] RAX: ffffffffffffffda RBX: 00007fc19a7c6270 RCX: 00007fc19a58ebe9 [ 119.880239][ T6062] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000007 [ 119.880251][ T6062] RBP: 00007fc19a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 119.880262][ T6062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.880273][ T6062] R13: 00007fc19a7c6308 R14: 00007fc19a7c6270 R15: 00007fff0c5d4718 [ 119.880294][ T6062] [ 120.832645][ T45] libceph: connect (1)[c::]:6789 error -101 [ 120.832796][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 121.106225][ T6064] ceph: No mds server is up or the cluster is laggy [ 121.144501][ T45] libceph: connect (1)[c::]:6789 error -101 [ 121.144622][ T45] libceph: mon0 (1)[c::]:6789 connect error