last executing test programs: 13.748978087s ago: executing program 1 (id=2): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 11.52969235s ago: executing program 1 (id=7): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xe54, 0xfffffffffffffffe, 0x1, 0x800, 0x5548}, 0x0, &(0x7f0000000240)={0x1f, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 11.395517453s ago: executing program 3 (id=4): socket$inet6(0xa, 0x80002, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2714, 0x0, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff024}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r7, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r7, 0x4734}}, 0x10) close_range(r6, r6, 0x0) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x5) socket$inet6_udplite(0xa, 0x2, 0x88) 10.178148825s ago: executing program 4 (id=5): syslog(0x1, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xd000]}, 0x8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000040)={'pcl726\x00', [0x8, 0x401, 0x1, 0x74818ec, 0x4, 0x1, 0x5, 0x9, 0xb, 0x6, 0x2, 0xfffffffe, 0x4, 0x1ff, 0x8, 0x7ff, 0x1, 0x2, 0x9, 0xffffff7f, 0x6, 0x2, 0xd, 0x6, 0x10001, 0x6, 0x7, 0xffff8001, 0xd, 0x1, 0x6, 0xff]}) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x53}, @l2cap_cid_signaling={{0x4f}, [@l2cap_info_req={{0xa, 0x5, 0x2}, {0x1}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x2, 0x8b}}, @l2cap_conn_req={{0x2, 0xa, 0x4}, {0x2, 0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xfb, 0x2}, {0x8}}, @l2cap_conf_req={{0x4, 0x2, 0x17}, {0xf, 0x8000, [@l2cap_conf_ews={0x7, 0x2, 0x677}, @l2cap_conf_ews={0x7, 0x2, 0x100}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_ews={0x7, 0x2, 0xfffe}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_create_chan_req={{0xc, 0x4, 0x5}, {0xffff, 0x4, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x4, 0x4}, {0x79, 0x8}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x1000, 0xdd}}]}}, 0x58) syslog(0x2, &(0x7f0000000180)=""/152, 0x98) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x6}}}, 0x4) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x83}, "9c5efd27c0e4b10341a1414d563381f2bb806153d37e1e4f884a55bb6872004da2835d5cfbbfd5dd588472ed1fb287152e8c7ed3b2d4e466a11aec82b9c12e8ce0dc7108e4f629c36cf66e77ace1ab59ae387953b6bdffe7c381b5dedf608f261c820119ce90b359fa6d6813304474ee3f139641c4eceb922ffd6b54641dde9d626ab2"}, 0x87) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x51}, @l2cap_cid_signaling={{0x4d}, [@l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x5, 0x5}}, @l2cap_conf_req={{0x4, 0x7, 0x3b}, {0x8, 0x4be, [@l2cap_conf_efs={0x6, 0x10, {0x14, 0x1, 0x8000, 0x81, 0xfff, 0xce}}, @l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_flushto={0x2, 0x2, 0x39f}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0xc, 0x0, 0x9, 0x5, 0x6}}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0x6, 0x80, 0xb, 0x7ff}}]}}, @l2cap_info_req={{0xa, 0x7, 0x2}, {0xfff8}}]}}, 0x56) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x27}, {0x6, "72d55da42b5e6fe0456b553c58d0342ab4dd0a5619f4e5053e6f121dfaabe8557a73cb4ff9"}}}, 0x2a) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x18f) getsockopt(r0, 0xfffffff9, 0x4, &(0x7f0000000480)=""/56, &(0x7f00000004c0)=0x38) syslog(0x0, &(0x7f0000000500)=""/244, 0xf4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/uevent_seqnum', 0x201, 0x134) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x3, 0x2}, {0x6}}}}, 0xf) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000680)={0x8, {0xffff, 0x4, 0x1ff, 0x14a, 0x8, 0x618}}) syz_emit_vhci(&(0x7f00000006c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x11}, {0x4, [{0xac, 0x4ee}, {0xc8, 0xffea}, {0xc9, 0x8}, {0xc9, 0x2}]}}}, 0x14) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x16) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1) syz_emit_vhci(&(0x7f0000000700)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000740)='/dev/comedi4\x00', 0x22000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) syslog(0xa, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001840)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x51}, @l2cap_cid_signaling={{0x4d}, [@l2cap_move_chan_rsp={{0xf, 0x4, 0x4}, {0x9, 0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x5}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x9, 0x847}}, @l2cap_conf_rsp={{0x5, 0x6, 0x27}, {0x7, 0x5, 0x3, [@l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_efs={0x6, 0x10, {0x1, 0x2, 0x3, 0x0, 0xe02, 0x80}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x9, 0x5, 0x8, 0x80, 0x1}}]}}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}, {0x1}}]}}, 0x56) syslog(0x4, &(0x7f00000018c0)=""/116, 0x74) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000001940)={'c6xdigio\x00', [0x8a2, 0x5, 0x80, 0x4, 0x8, 0x9, 0x253, 0x0, 0x2, 0x7, 0x30257386, 0x18e, 0x7, 0x5, 0x1, 0x4, 0x6, 0xfff, 0x9, 0xffffffff, 0x5, 0xb2, 0x8, 0xf, 0xffffffff, 0x1a000, 0x1, 0xc1c, 0x1, 0xcdbd, 0x9, 0x3]}) syz_emit_vhci(&(0x7f0000001a00)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc8}, "64a4d393dd347335a4c03b18c97370e8eea7374be3db458c1c178b318a852212f50e5761b6655a956a4e45d0b3b3160aae6d0c3f8bdb89f5c217c7c3b2730dde7701d6d3c6e98ad0492fa7850b05cad3bfe4512f1eede74afc54486366d9709119a1267f33ba2bac59a10f950706eaa0b4bdba3bee59520dbacf5886de773d755f821e495a501af723346b87a3aafc4f2dc2f29433f14217f833f69b03ec32859421d2b22851ebe7ff9cda46e25382f6123ddd28cacc91a8813b8724cae969794595afe51b7a2681"}, 0xcc) 10.094490659s ago: executing program 3 (id=8): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) 8.028792838s ago: executing program 3 (id=9): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x844) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c"], 0x10b8}, 0xff4c) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) r5 = socket$inet6(0xa, 0x80001, 0x3) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 7.515789289s ago: executing program 4 (id=10): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000100), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x6) 6.994408765s ago: executing program 1 (id=11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x80000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 6.97250839s ago: executing program 0 (id=1): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close(r6) 6.771560016s ago: executing program 4 (id=12): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x28a400) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 6.658264284s ago: executing program 1 (id=13): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x5, 0x60, 0x72, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x5, 0x1, {0x7, 0x25, 0x1, 0x83, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0xc, 0x9, {0x7, 0x25, 0x1, 0x80, 0x7, 0x30}}}}}}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 6.166801439s ago: executing program 2 (id=3): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r7}) 5.150021971s ago: executing program 2 (id=14): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="9803", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) 5.149510696s ago: executing program 5 (id=6): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 3.948706514s ago: executing program 2 (id=15): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000849}, 0x20004085) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) inotify_init() r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x1000000400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)) 3.195545999s ago: executing program 4 (id=16): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) 2.995559971s ago: executing program 1 (id=17): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r7}) 2.853650972s ago: executing program 3 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) write$dsp(r0, &(0x7f0000000100)='n', 0x1) sendfile(r0, r1, 0x0, 0x1000000201005) 656.32597ms ago: executing program 4 (id=19): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=20): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) socket$inet(0x2, 0x800, 0x5ab4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000140)={0x932, 0x6}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x6, 0xbce, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x70, 0xe9, 0x75, 0xff, 0x3eb, 0x7606, 0x4014, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbbc, 0x4, 0x3, 0x6, 0x118, 0xf, [{{0x9, 0x4, 0x9f, 0xe, 0x0, 0x18, 0x6d, 0x23, 0x80, [@generic={0xf5, 0x24, "e0b89ce0c95d3fe8f36333f920991dc3ac05f367cf826cae8f87cb8d81793aae42b170feb7b38f49c9c6b11af6ff2c79535cbae1205ec517309e26c4a9ecd1aa073b8be6f4ec0f01e384d3ba449b59d61a8083d46602d0492af9c476cd96255fdd4b378b6a75c87629c5f5490c7bba9b4c9cb0d67326c81264458bbe3cd02a157eae40edd75197c27b9bcf93780966fb94beb055867e11ef6d706dcaec2526f64c48d8ca7c6ff463f2c82b4d786cc21ed6eac25551716361071e9c25864e08bfc6a49d7c9446cca96bd905863fdda52d8d845e4f1156bef5624c4ad0ee975218697891ac3aa04bda775fb4e59f954a9c69ad29"}]}}, {{0x9, 0x4, 0x5a, 0xfb, 0xb, 0x2a, 0xfb, 0x6a, 0x8, [], [{{0x9, 0x5, 0x5, 0xc, 0x400, 0x9, 0x2, 0x23}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xf7, 0x40, 0x6, [@generic={0xc3, 0xd, "59c0f0fc1276c63f280de60bd95410c2953bdd7ea185514601a4687dffe8f1dfff16ebf603d0621dc84674d9bd162244202f66f472acfc8e00d207887efcaff3f7ba00c20dbcdeb01339ccc7d4d467b285590557f2b458dc59c1fac899b7fd2e0f2537424580dbd41ba45522d8adbd4de8bede4574ea2b92475eb8ff9583cd89d7b047e17115b55c95fba53b9a97015d380364d774880a781143cfe284f1331ed33a10a00331b4ba6a29e3b89018a4ac5d897c8b5396d55065a1a8c4d25fb384aa"}, @generic={0x22, 0x6, "3f9088f38a874c119d2e2a1a9fcfb13fb1fa8fe3dbfdb2ffd23ef33856108227"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x6, 0x2, 0x9, [@generic={0xc8, 0x10, "f8d0c720fbd8ddcb12a709854dceff3c880ae32f58a12aa779b9168310170c86b37e6179509a38b44160d57cd5bda383c83d3a205cdf47ce67ddaf5f981eb81d22749de38caaca4848c4a40049ceaa59a821f721b2db7273372d425b9144f3937c74fca54b971f91b8673e916ccc4b9da2065963787991119a02066e27ca63db0f8cc5a8db5c602056a234e79267b7356794d6426a606c323860fe8f54be50f55ffd0bf86107ec4c0a7f37da1d47aa5844f224c94b9a613d582aa1d60409ccf1fbd90af8172a"}, @generic={0x86, 0x21, "f4cc900e8bef435cb89ffe1ec3966ff0f12f26cda09725565cb0e8bcbdc7d0b243cc5ad1d5d563ff11cd5cb4542d7f989bb88947c11ad0c6f972ad88127653bb51de84d5071072179a9632850f99453dd7549eea6e7c6e0504924f6a7d469fb6370e6d3ce27e0e37a3e1fbf1df0e4b7f550b23baeaddb222fc007e0ea5d0eab71985137c"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x1, 0xe, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x8}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x7, 0x6, 0x6}}, {{0x9, 0x5, 0xd, 0x13, 0x58, 0x2, 0x7, 0x6, [@generic={0x77, 0x30, "88116b52e6a07f60cbe879b75b5160b795e61ec155fcf252f84e3c34562cd73c700c17d3c7a2fe4646d82a9673353b8cb76a47713709282818d5069ebcac6fa75c151476ef55120c5c2344ad5544262e6a06c32615fa13a0a043ed8c21711dade88c76cd687c2a0c171255da9c3165bd69333891f6"}, @generic={0x7, 0x23, "b676c9fbdb"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6, 0x5, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x1286}]}}, {{0x9, 0x5, 0xb, 0x3, 0x20, 0xd, 0x9, 0x9, [@generic={0xc1, 0x8, "594894976efe8f297da0d21f8fd60eb0243a769c263f7b65ae3ba896daa2c41e455fdb388a000b7c5033ea1d23169fb650cae9422259f26ab824759290a22d04e72ab80fda9e80a7ecc2f5ee11bf985a06be43f328472d6d565a4db79c513fd3ddf313d7e6b585b692f32bb6880a08a6f91a583fa2a736e103cc5845d1d13dbf0855d9b6f41a82b94437fcc6ba17549593af582a8bafa7f238162095158844bb387bea9be75ceb0e4800539bb9472b3c5d3160fe95347cdcbc7b5b4a45fb16"}, @generic={0xca, 0x22, "031225b5fe9bc1924902c519d06596fa96b59ba0389b1120e4244534d766befaca7191c6b9d2d6ff7647f214dc239eb5adf518d18985c6fcc6436a2ff36f4e07b1bb42dbe8c1dc1222bb3cb6765ba5bee714a32e72b965e30556ec4d45a36c05e64ec87a7900b6a37385827ec32578dba5d965f9f8af440ff6a3c7180db1449c2d1140ec95b7b42f29fbdc925e3c8aa18f68704fc58e9a186ef59358bdc7b29a08f59692ba94272fe779aee93da0f8a64c6e77b643c6ea9c819bdc3fa639ab586d0a8bddc398b872"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xbe, 0x3, 0xd5, [@generic={0x95, 0x22, "f05154657506669c52e1ec83189070c135512869f51c3832728b79327c2c7925b0bca6e9a309075d870717449d281606048e4bf03c5789b103ef6087dbc5ff4bc9f65982a79ddadb90542b76f0f44f5942a9beab5b4b93c8642a8a86beecbd6cbe5f833068e761933f375e86ce319ac2b3d20fb41ad6d6b18d3f761c7f2a7eee6adb72cc4667bfa3331a92b2a9b2ed4a9cf74d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x3, 0x7f, 0x5, [@generic={0x76, 0xe, "7f1d6d66c5bc59e7d8e418f0eff758a566c82fd9206b1a042a7f25dd8b4e32d87b5fbf88a8af093615563bcab711241ac7b6f4a516974b6fbdb5a90ed234e4b8db5e6142fff55a7e42ac1152b52bcfb12f43e79079454f5542cd94b60479402e64333d9f4abfc6c7dbd73fe59c123760db777e46"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x81}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x5, 0x7, 0x2d, [@generic={0x16, 0x8, "37b347633bb87118292b35786eb9633241f90791"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x4}]}}]}}, {{0x9, 0x4, 0x78, 0x36, 0x10, 0xce, 0x86, 0xa4, 0x8, [@hid_hid={0x9, 0x21, 0x81, 0x4, 0x1, {0x22, 0x866}}], [{{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x0, 0x81, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x50}]}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x9, 0x6, 0x5, [@generic={0x32, 0x4, "76856f97cb6bc991494285ef44ef293643fc6f9c980738d4d713da64959ab9dcb5e2373ba6f105525197d3ffa51a8a22"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x8, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x9, 0xa}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x23, 0xe, 0x5}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x4, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xca7c}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x8}]}}, {{0x9, 0x5, 0x1, 0x15, 0x400, 0x81, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0xfff9}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x1, 0x6, 0x6, [@generic={0xfc, 0x1, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0xbc, 0x5a1c}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x8, 0xd, 0x5}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x0, 0x2, 0x2, [@generic={0xa, 0x5, "b6c077e853e87314"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x5, 0x0, 0x6, [@generic={0xaf, 0x6, "63f93c0dd201b9fc07af0a851f52ec8754f8eed464c454e186db2c548808ac121256019ceddda98fba0dd5ed98b91fd0c837533a08f8bcde46b4914cfe272941ef24ec839fee87260ca96f2c76ba3633944802675be54c1d8f15f24ffbf287f7372ab6d2966f3a88495d6937a76409a000a2a54e1437b420a9e002bfc8c3b8225f7b187037409e427da72be46810d6306ce177e2f84d23c2a30261e99de9ca738d974272faf235aeb3ab6abe76"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x7f, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}]}}, {{0x9, 0x5, 0x0, 0xd, 0x8, 0x9, 0x4, 0x9}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0xad}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x7f, 0xbc, 0x80}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0xf, 0x6, 0xac, [@generic={0xb3, 0x9, "f6632a2a5a452bdb26b489e1745c3b65b4f2fb87017c8a36bc0be5178d7b8f6a207c915ae1d7d417dd4d30e51702435f1af1052cec4373ac2f1e72340a8a5578f23c9b5aa391f84d96ac56fdaeecef562ba8216bd229acf0ad2dee2ad97e4abebd97b6ed55ee6e10cd23438dcc8f3b956b01f50eeac7986e6d25e7792988d66300db96d595be85f553f56704e872b516cbb7230340260f8c1a3a48faf03786ea2536eeac9f6f3dac03e527176a9403b156"}, @generic={0x7, 0x31, "8f8953804c"}]}}]}}, {{0x9, 0x4, 0x0, 0x8, 0x8, 0xd9, 0x2b, 0x34, 0xd0, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "a4decf"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xeeb, 0x6, 0x1, 0xfe}, [@mdlm_detail={0x3a, 0x24, 0x13, 0xc, "fce1ef14b774d6d4ce8ce95f99894e29b76457c67eb822192eaaef30073a640ec8e44411c70551889d6967df4bc6f2ec7b14498af045"}, @dmm={0x7, 0x24, 0x14, 0xfffd, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x7}, @country_functional={0xe, 0x24, 0x7, 0x7, 0x5, [0xfff, 0x7fff, 0x5, 0x58]}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xba5, 0x4, 0xec, 0x9, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0x9, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x60, 0x3, 0x5, 0x2, "ae"}]}], [{{0x9, 0x5, 0x0, 0x1, 0x40, 0xeb, 0x6, 0xa}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x33, 0x6b, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x230, 0x6, 0x3, 0x16}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0xd, 0xcb, 0xe}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xba, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x3}]}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0x3, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xc, 0x1, 0x9, [@generic={0x24, 0x2e, "5af4c09f60b306878be1080d214ea2af86e64abd892830573413a2cb22d4db99fabf"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x3, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x1, 0x7}]}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x80, 0xc, 0x8, 0x74, 0x4}, 0x47, &(0x7f0000000200)={0x5, 0xf, 0x47, 0x6, [@wireless={0xb, 0x10, 0x1, 0x0, 0x2, 0x1, 0xfc, 0x2, 0xa1}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x9, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x8, 0x1, 0x5, 0xc6}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0xd454, 0xf000, 0x4000, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x41, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x48, 0xe, 0x41, 0xc, 0x7}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0xf7, &(0x7f0000000400)=@string={0xf7, 0x3, "06bd1962cd1d6a1b0c538c4961a91f4f19f132ae901042b6edbca2d0aaeebbddc37360d3d217e011fa7efb33f5117c0d5b1fe471dc0ab780986da32ca8db0be00b091779981f35de51a9c3ac54de898e82de7e5963980db30f4a64d791c371375619a43f2a734e2c2ad096fa2e5db64384f81f53bb5196234438c7cfa302d06e7e6fbd3981dc69084e4b2fc51c8677983fdad6558b12644b4c5751c2163b96fbfdfbb824731b8bfac4966a8a0db1ff475cebc248fc6fe4d87ba00ac0c78141f59b0e70ba710f754e8e30c61938506790cf430a088217efd4f1f462f44b5dd126e6a4d36f9475e4d036ea1e262b767139a4c1d16029"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x440a}}, {0xa1, &(0x7f0000000500)=@string={0xa1, 0x3, "056598239dcb1f3396ad982329f415a2dd79f30b79e07849921ee8c1622f2e6333a5148f450a60691e49ee4d46206bab1b8be3d1bd47304e359993c135cc87a709c57ab8e9f32585073de6509a1c3fe40c3f88498d54e724e18b299f195a15fab1e8748e8ef235948d59918c16079243b429d63c3b67f870c7b3b5af046267abfd6def1578195452ff467d0606a962f8be4b2c614850e00f04d623c7235150"}}]}) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read(r2, &(0x7f0000000040)=""/44, 0x2c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 87.937719][ T5822] cgroup: Unknown subsys name 'net' [ 88.057154][ T5822] cgroup: Unknown subsys name 'cpuset' [ 88.066413][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.610764][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.679210][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.682848][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.694174][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.695154][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.708238][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.708914][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.716576][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.723732][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.730787][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.737000][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.797218][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.805004][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.814678][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.814684][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.815484][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.838024][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.845713][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.846980][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.861179][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.869050][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.876399][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.876525][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.891593][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.899728][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.910662][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.912078][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.919070][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.933836][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.941805][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.956668][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.611368][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 95.656928][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 95.919863][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.927723][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.935543][ T5841] bridge_slave_0: entered allmulticast mode [ 95.943883][ T5841] bridge_slave_0: entered promiscuous mode [ 95.965470][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.972752][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.979943][ T5841] bridge_slave_1: entered allmulticast mode [ 95.987945][ T5841] bridge_slave_1: entered promiscuous mode [ 96.203339][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 96.279294][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.306742][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 96.320275][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.329103][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.338481][ T110] cfg80211: failed to load regulatory.db [ 96.340641][ T5840] bridge_slave_0: entered allmulticast mode [ 96.352056][ T5840] bridge_slave_0: entered promiscuous mode [ 96.363159][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.414804][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.421996][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.429237][ T5840] bridge_slave_1: entered allmulticast mode [ 96.436988][ T5840] bridge_slave_1: entered promiscuous mode [ 96.537835][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 96.550006][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 96.564408][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.626425][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.637732][ T5841] team0: Port device team_slave_0 added [ 96.701519][ T5841] team0: Port device team_slave_1 added [ 96.796843][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.804348][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.811702][ T5846] bridge_slave_0: entered allmulticast mode [ 96.818192][ T5848] Bluetooth: hci0: command tx timeout [ 96.822865][ T5848] Bluetooth: hci1: command tx timeout [ 96.832945][ T5846] bridge_slave_0: entered promiscuous mode [ 96.855615][ T5840] team0: Port device team_slave_0 added [ 96.888414][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.895845][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.903381][ T5846] bridge_slave_1: entered allmulticast mode [ 96.910866][ T5846] bridge_slave_1: entered promiscuous mode [ 96.932456][ T5840] team0: Port device team_slave_1 added [ 96.939859][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.947022][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.973329][ T5848] Bluetooth: hci3: command tx timeout [ 96.979758][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.982967][ T5848] Bluetooth: hci5: command tx timeout [ 96.992100][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.003651][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.010835][ T5850] bridge_slave_0: entered allmulticast mode [ 97.018705][ T5850] bridge_slave_0: entered promiscuous mode [ 97.052833][ T5848] Bluetooth: hci4: command tx timeout [ 97.052840][ T5152] Bluetooth: hci2: command tx timeout [ 97.081375][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.088734][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.116065][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.127406][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.134623][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.141770][ T5850] bridge_slave_1: entered allmulticast mode [ 97.149403][ T5850] bridge_slave_1: entered promiscuous mode [ 97.236642][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.274239][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.281207][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.307533][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.337793][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.347492][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.354991][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.362162][ T5851] bridge_slave_0: entered allmulticast mode [ 97.370582][ T5851] bridge_slave_0: entered promiscuous mode [ 97.378436][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.386286][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.393568][ T5849] bridge_slave_0: entered allmulticast mode [ 97.400981][ T5849] bridge_slave_0: entered promiscuous mode [ 97.409758][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.416731][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.443214][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.458016][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.494919][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.502095][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.509591][ T5851] bridge_slave_1: entered allmulticast mode [ 97.517593][ T5851] bridge_slave_1: entered promiscuous mode [ 97.525992][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.533651][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.540802][ T5849] bridge_slave_1: entered allmulticast mode [ 97.548451][ T5849] bridge_slave_1: entered promiscuous mode [ 97.581835][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.608286][ T5846] team0: Port device team_slave_0 added [ 97.703281][ T5846] team0: Port device team_slave_1 added [ 97.728459][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.745662][ T5841] hsr_slave_0: entered promiscuous mode [ 97.753730][ T5841] hsr_slave_1: entered promiscuous mode [ 97.762400][ T5850] team0: Port device team_slave_0 added [ 97.785575][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.798130][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.826381][ T5850] team0: Port device team_slave_1 added [ 97.850111][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.907659][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.914666][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.941359][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.987431][ T5840] hsr_slave_0: entered promiscuous mode [ 97.994239][ T5840] hsr_slave_1: entered promiscuous mode [ 98.000372][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 98.006267][ T5840] Cannot create hsr debugfs directory [ 98.040485][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.047481][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.073716][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.101351][ T5849] team0: Port device team_slave_0 added [ 98.117247][ T5849] team0: Port device team_slave_1 added [ 98.124218][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.131144][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.157458][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.180544][ T5851] team0: Port device team_slave_0 added [ 98.217426][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.224527][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.250968][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.281279][ T5851] team0: Port device team_slave_1 added [ 98.348193][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.355258][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.382028][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.446062][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.454640][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.482079][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.517044][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.524208][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.550167][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.594089][ T5846] hsr_slave_0: entered promiscuous mode [ 98.600624][ T5846] hsr_slave_1: entered promiscuous mode [ 98.607386][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 98.613326][ T5846] Cannot create hsr debugfs directory [ 98.626638][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.633712][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.659909][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.740826][ T5850] hsr_slave_0: entered promiscuous mode [ 98.747943][ T5850] hsr_slave_1: entered promiscuous mode [ 98.754381][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 98.760096][ T5850] Cannot create hsr debugfs directory [ 98.892590][ T5152] Bluetooth: hci1: command tx timeout [ 98.892824][ T5848] Bluetooth: hci0: command tx timeout [ 98.924047][ T5849] hsr_slave_0: entered promiscuous mode [ 98.930643][ T5849] hsr_slave_1: entered promiscuous mode [ 98.937700][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 98.944278][ T5849] Cannot create hsr debugfs directory [ 99.049834][ T5851] hsr_slave_0: entered promiscuous mode [ 99.053078][ T5848] Bluetooth: hci5: command tx timeout [ 99.055582][ T5152] Bluetooth: hci3: command tx timeout [ 99.067601][ T5851] hsr_slave_1: entered promiscuous mode [ 99.074466][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 99.080200][ T5851] Cannot create hsr debugfs directory [ 99.133175][ T5152] Bluetooth: hci4: command tx timeout [ 99.133189][ T5848] Bluetooth: hci2: command tx timeout [ 99.446743][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.490721][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.527526][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.566896][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.664261][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.686975][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.701745][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.725010][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.808634][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.822457][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.849771][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.864932][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.967154][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.005379][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.019256][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.034102][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.125313][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.138985][ T5849] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.151584][ T5849] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.174361][ T5849] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 100.190146][ T5849] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.259805][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.312221][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.319483][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.363557][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.378083][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.385399][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.400124][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.417322][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.436246][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.448123][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.515501][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.548533][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.580321][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.587561][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.628148][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.635389][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.650964][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.689923][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.697138][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.738421][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.745647][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.839497][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.965472][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.973491][ T5152] Bluetooth: hci0: command tx timeout [ 100.973507][ T5848] Bluetooth: hci1: command tx timeout [ 101.018800][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.026028][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.074910][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.108204][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.115768][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.132824][ T5848] Bluetooth: hci5: command tx timeout [ 101.138316][ T5152] Bluetooth: hci3: command tx timeout [ 101.200629][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.214802][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.215314][ T5848] Bluetooth: hci4: command tx timeout [ 101.226917][ T5152] Bluetooth: hci2: command tx timeout [ 101.258518][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.265746][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.299451][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.340913][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.348110][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.378195][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.417028][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.424234][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.459981][ T3693] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.467373][ T3693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.609112][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.664822][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.870731][ T5840] veth0_vlan: entered promiscuous mode [ 101.977164][ T5850] veth0_vlan: entered promiscuous mode [ 101.988590][ T5840] veth1_vlan: entered promiscuous mode [ 102.040778][ T5850] veth1_vlan: entered promiscuous mode [ 102.151208][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.185335][ T5841] veth0_vlan: entered promiscuous mode [ 102.259557][ T5850] veth0_macvtap: entered promiscuous mode [ 102.287735][ T5840] veth0_macvtap: entered promiscuous mode [ 102.308179][ T5840] veth1_macvtap: entered promiscuous mode [ 102.329367][ T5841] veth1_vlan: entered promiscuous mode [ 102.339057][ T5850] veth1_macvtap: entered promiscuous mode [ 102.383697][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.459188][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.478019][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.512855][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.555557][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.565043][ T1096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.581042][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.601477][ T1096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.623757][ T1096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.649384][ T1096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.660327][ T1096] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.678767][ T1096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.688633][ T1096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.698144][ T1096] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.721190][ T5841] veth0_macvtap: entered promiscuous mode [ 102.775402][ T5841] veth1_macvtap: entered promiscuous mode [ 102.785188][ T5846] veth0_vlan: entered promiscuous mode [ 102.835909][ T5846] veth1_vlan: entered promiscuous mode [ 102.876242][ T3693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.894541][ T3693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.899656][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.972439][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.983495][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.991293][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.053236][ T5848] Bluetooth: hci0: command tx timeout [ 103.053248][ T5152] Bluetooth: hci1: command tx timeout [ 103.062879][ T5849] veth0_vlan: entered promiscuous mode [ 103.090575][ T2973] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.102354][ T2973] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.111400][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.119735][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.125962][ T5851] veth0_vlan: entered promiscuous mode [ 103.136321][ T2973] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.157672][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.167317][ T2973] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.213786][ T5848] Bluetooth: hci3: command tx timeout [ 103.213805][ T5152] Bluetooth: hci5: command tx timeout [ 103.219334][ T5849] veth1_vlan: entered promiscuous mode [ 103.263675][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.271531][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.292705][ T5848] Bluetooth: hci4: command tx timeout [ 103.293071][ T5152] Bluetooth: hci2: command tx timeout [ 103.311051][ T5851] veth1_vlan: entered promiscuous mode [ 103.344914][ T5846] veth0_macvtap: entered promiscuous mode [ 103.382685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 104.099305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.099490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.307223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.535329][ T5846] veth1_macvtap: entered promiscuous mode [ 105.612481][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.621170][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.674713][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.725771][ T5980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.752318][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.766695][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.787427][ T5851] veth0_macvtap: entered promiscuous mode [ 105.898341][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.966613][ T5851] veth1_macvtap: entered promiscuous mode [ 105.991944][ T5849] veth0_macvtap: entered promiscuous mode [ 106.071124][ T5849] veth1_macvtap: entered promiscuous mode [ 106.781970][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.802644][ T1105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.941149][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.993849][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.001552][ T1105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.015275][ T5152] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 107.015687][ T1105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.022855][ T5152] Bluetooth: Wrong link type (-22) [ 107.035956][ T5152] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 107.042474][ T5152] Bluetooth: Wrong link type (-22) [ 107.047826][ T5152] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 107.055289][ T5152] Bluetooth: Wrong link type (-22) [ 107.060434][ T5152] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 107.067601][ T5152] Bluetooth: Wrong link type (-22) [ 107.075044][ T5152] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 107.081557][ T5152] Bluetooth: Wrong link type (-22) [ 107.087894][ T5152] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 107.088009][ T5848] Bluetooth: hci1: hardware error 0x06 [ 107.095619][ T5152] Bluetooth: hci1: hcon ffff888032388000 sent 1 < count 65514 [ 107.171600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.684123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.692373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.785981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.786097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.092562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 108.968518][ T5152] Bluetooth: hci1: hcon ffff88803299c000 sent 1 < count 8 [ 108.975815][ T5152] Bluetooth: hci1: hcon ffff88803299c000 sent 0 < count 2 [ 109.037274][ T1105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.086446][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.156361][ T1096] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.182684][ T1096] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.205350][ T1096] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.237746][ T1096] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.294986][ T1096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.357658][ T1096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.394057][ T1096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.447123][ T1105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.485563][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.523331][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.723700][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.762705][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.850328][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.900364][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.960307][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.992694][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.200087][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.236042][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.852666][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.873079][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.983459][ T5824] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.055413][ T5848] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 111.787553][ T5990] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.851836][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 111.861361][ T5824] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.872685][ T5824] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.902113][ T5824] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.932877][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.940932][ T5824] usb 5-1: Product: syz [ 111.966535][ T5824] usb 5-1: Manufacturer: syz [ 111.978538][ T5824] usb 5-1: SerialNumber: syz [ 112.033924][ T5990] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 112.067715][ T5990] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 112.116459][ T5990] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 112.128747][ T6023] Zero length message leads to an empty skb [ 112.162982][ T5990] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 112.463553][ T5824] usb 5-1: 0:2 : does not exist [ 112.476861][ T5824] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 112.693979][ T5990] usb 2-1: config 220 has no interface number 2 [ 112.700338][ T5990] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 112.733138][ T6019] bond0: entered promiscuous mode [ 112.751695][ T5990] usb 2-1: config 220 interface 0 has no altsetting 0 [ 112.778824][ T6019] bond_slave_0: entered promiscuous mode [ 112.780743][ T5824] usb 5-1: USB disconnect, device number 2 [ 112.787399][ T5990] usb 2-1: config 220 interface 76 has no altsetting 0 [ 112.837071][ T6019] bond_slave_1: entered promiscuous mode [ 112.855161][ T5990] usb 2-1: config 220 interface 1 has no altsetting 0 [ 112.874785][ T5990] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 112.889685][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.936789][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.963941][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.009739][ T5990] usb 2-1: Product: syz [ 113.032734][ T5990] usb 2-1: Manufacturer: syz [ 113.045907][ T5990] usb 2-1: SerialNumber: syz [ 113.162685][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 113.186462][ T43] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 113.233418][ T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.304388][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.763944][ T5990] usb 2-1: selecting invalid altsetting 0 [ 113.772818][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.809565][ T5990] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 113.829256][ T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.859199][ T5990] uvcvideo 2-1:220.0: No valid video chain found. [ 113.907196][ T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.925751][ T5990] usb 2-1: selecting invalid altsetting 0 [ 113.948703][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.958506][ T5990] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 114.020356][ T5990] usb 2-1: USB disconnect, device number 2 [ 117.209027][ T43] usb 6-1: usb_control_msg returned -71 [ 221.373842][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 221.379950][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 222.232527][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 222.239600][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5842/1:b..l P6003/1:b..l [ 222.248982][ C1] rcu: (detected by 1, t=10502 jiffies, g=12029, q=1668 ncpus=2) [ 222.256926][ C1] task:syz.0.1 state:R running task stack:24776 pid:6003 tgid:6000 ppid:5846 task_flags:0x40044c flags:0x00080001 [ 222.271147][ C1] Call Trace: [ 222.274507][ C1] [ 222.277432][ C1] __schedule+0x14bc/0x5000 [ 222.281953][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 222.286975][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 222.291903][ C1] ? __pfx___schedule+0x10/0x10 [ 222.296744][ C1] ? irqentry_exit+0x5dd/0x660 [ 222.301511][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.307142][ C1] ? irqentry_exit+0x5dd/0x660 [ 222.312000][ C1] ? preempt_schedule+0xae/0xc0 [ 222.316941][ C1] preempt_schedule_common+0x83/0xd0 [ 222.322225][ C1] preempt_schedule+0xae/0xc0 [ 222.326901][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 222.332265][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 222.338178][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.343835][ C1] preempt_schedule_thunk+0x16/0x30 [ 222.349048][ C1] _raw_spin_unlock+0x3f/0x50 [ 222.354071][ C1] unmap_page_range+0x3a7f/0x4370 [ 222.359113][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.364754][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 222.370120][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.376012][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.381641][ C1] ? unmap_vmas+0x144/0x580 [ 222.386141][ C1] unmap_vmas+0x399/0x580 [ 222.390461][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.396095][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 222.400956][ C1] exit_mmap+0x23b/0xb20 [ 222.405288][ C1] ? uprobe_clear_state+0x20f/0x290 [ 222.410482][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 222.415242][ C1] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 222.420897][ C1] ? __pfx_exit_aio+0x10/0x10 [ 222.425574][ C1] ? uprobe_clear_state+0x27c/0x290 [ 222.430764][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.436403][ C1] __mmput+0x118/0x430 [ 222.440473][ C1] exit_mm+0x1da/0x2c0 [ 222.444620][ C1] ? __pfx_exit_mm+0x10/0x10 [ 222.449217][ C1] do_exit+0x658/0x2310 [ 222.453377][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.459003][ C1] ? do_raw_spin_lock+0x121/0x290 [ 222.464027][ C1] ? __pfx_do_exit+0x10/0x10 [ 222.468628][ C1] do_group_exit+0x21c/0x2d0 [ 222.473222][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.478864][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 222.484065][ C1] get_signal+0x1285/0x1340 [ 222.488582][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 222.494133][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 222.500470][ C1] ? exit_to_user_mode_loop+0x55/0x4f0 [ 222.505922][ C1] exit_to_user_mode_loop+0x87/0x4f0 [ 222.511196][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.516816][ C1] ? rcu_is_watching+0x15/0xb0 [ 222.521575][ C1] do_syscall_64+0x2e3/0xf80 [ 222.526164][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.532215][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.537837][ C1] ? exc_page_fault+0xab/0x100 [ 222.542600][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.548566][ C1] RIP: 0033:0x7f835e98f749 [ 222.552966][ C1] RSP: 002b:00007f835cbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 222.561376][ C1] RAX: 0000000000010106 RBX: 00007f835ebe6090 RCX: 00007f835e98f749 [ 222.569344][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 222.577311][ C1] RBP: 00007f835ea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 222.585280][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 222.593279][ C1] R13: 00007f835ebe6128 R14: 00007f835ebe6090 R15: 00007ffd48ac8d18 [ 222.601253][ C1] [ 222.604348][ C1] task:udevd state:R running task stack:25400 pid:5842 tgid:5842 ppid:5202 task_flags:0x400140 flags:0x00080000 [ 222.617888][ C1] Call Trace: [ 222.621160][ C1] [ 222.624083][ C1] __schedule+0x14bc/0x5000 [ 222.628616][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.634246][ C1] ? __pfx___schedule+0x10/0x10 [ 222.639099][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 222.644387][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.650014][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 222.655210][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 222.660489][ C1] preempt_schedule_irq+0xb5/0x150 [ 222.665601][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 222.671313][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.676951][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.682585][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 222.688406][ C1] irqentry_exit+0x5d8/0x660 [ 222.693010][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.698980][ C1] RIP: 0010:lock_is_held_type+0x68/0x190 [ 222.704616][ C1] Code: 00 00 65 4c 8b 2c 25 08 b0 78 92 41 83 bd 2c 0b 00 00 00 0f 85 d8 00 00 00 89 f5 49 89 fe 48 c7 04 24 00 00 00 00 9c 8f 04 24 <4c> 8b 24 24 fa 48 c7 c7 d2 6a 79 8d e8 67 1a 00 00 65 ff 05 b0 bf [ 222.724298][ C1] RSP: 0018:ffffc90002e473a0 EFLAGS: 00000246 [ 222.730357][ C1] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000000000000 [ 222.738316][ C1] RDX: ffff888032585b80 RSI: 00000000ffffffff RDI: ffff888055ff71b8 [ 222.746276][ C1] RBP: 00000000ffffffff R08: ffff888032585b80 R09: 0000000000000002 [ 222.754282][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888055ff71b8 [ 222.762246][ C1] R13: ffff888032585b80 R14: ffff888055ff71b8 R15: 1ffff920005c8eb7 [ 222.770232][ C1] xas_start+0x1e8/0x770 [ 222.774480][ C1] xas_load+0x2c/0x5b0 [ 222.778553][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.784267][ C1] xas_find+0x157/0x990 [ 222.788435][ C1] find_get_entries+0x1cf/0x7f0 [ 222.793293][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.798918][ C1] ? find_get_entries+0xfe/0x7f0 [ 222.803860][ C1] ? __pfx_find_get_entries+0x10/0x10 [ 222.809339][ C1] ? shmem_get_partial_folio+0x10d/0x2f0 [ 222.814977][ C1] shmem_undo_range+0xa73/0x1490 [ 222.819906][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.825533][ C1] ? mas_wr_store_type+0xcc2/0x19d0 [ 222.830728][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 222.836113][ C1] ? look_up_lock_class+0x74/0x150 [ 222.841227][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.846850][ C1] ? register_lock_class+0x51/0x320 [ 222.852058][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.857683][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 222.862629][ C1] shmem_evict_inode+0x272/0xa70 [ 222.867580][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.873209][ C1] ? inode_wait_for_writeback+0x14d/0x370 [ 222.878921][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 222.884382][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 222.890467][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.896094][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.901722][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 222.906922][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 222.912435][ C1] evict+0x5f4/0xae0 [ 222.916359][ C1] ? __pfx_evict+0x10/0x10 [ 222.920820][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.926447][ C1] ? _raw_spin_unlock+0x28/0x50 [ 222.931292][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.936915][ C1] ? iput+0xcc6/0x1030 [ 222.940984][ C1] __dentry_kill+0x209/0x660 [ 222.945578][ C1] ? dput+0x37/0x2b0 [ 222.949546][ C1] dput+0x19f/0x2b0 [ 222.953388][ C1] do_renameat2+0x604/0x8e0 [ 222.957903][ C1] ? __pfx_do_renameat2+0x10/0x10 [ 222.962909][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.968550][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.974267][ C1] ? getname_flags+0x1e5/0x540 [ 222.979045][ C1] __x64_sys_rename+0x82/0x90 [ 222.983721][ C1] do_syscall_64+0xfa/0xf80 [ 222.988324][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.993951][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.000011][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.005892][ C1] RIP: 0033:0x7feb5227acc7 [ 223.010293][ C1] RSP: 002b:00007ffcede4a548 EFLAGS: 00000202 ORIG_RAX: 0000000000000052 [ 223.018694][ C1] RAX: ffffffffffffffda RBX: 000055a3c50ec8a0 RCX: 00007feb5227acc7 [ 223.026653][ C1] RDX: 000055a3c50c5010 RSI: 00007ffcede4a560 RDI: 00007ffcede4a960 [ 223.034611][ C1] RBP: 000055a3c50d8e20 R08: 00000000000001e0 R09: 0000000000000000 [ 223.042580][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcede4a560 [ 223.050533][ C1] R13: 00007ffcede4a960 R14: 0000000000000000 R15: 000055a39adbc9dd [ 223.058505][ C1] [ 223.061507][ C1] rcu: rcu_preempt kthread starved for 10551 jiffies! g12029 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 223.072684][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 223.082641][ C1] rcu: RCU grace-period kthread stack dump: [ 223.088526][ C1] task:rcu_preempt state:R running task stack:27208 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 223.102072][ C1] Call Trace: [ 223.105339][ C1] [ 223.108258][ C1] __schedule+0x14bc/0x5000 [ 223.112783][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.118407][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 223.124297][ C1] ? __pfx___schedule+0x10/0x10 [ 223.129148][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.134774][ C1] ? schedule+0x91/0x360 [ 223.139010][ C1] schedule+0x165/0x360 [ 223.143157][ C1] schedule_timeout+0x12b/0x270 [ 223.147995][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 223.153348][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 223.159230][ C1] ? __pfx_process_timeout+0x10/0x10 [ 223.164516][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.170140][ C1] ? prepare_to_swait_event+0x341/0x380 [ 223.175719][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 223.180600][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 223.185794][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 223.191945][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 223.197233][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 223.202522][ C1] ? finish_swait+0xcd/0x1f0 [ 223.207122][ C1] rcu_gp_kthread+0x99/0x390 [ 223.211706][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 223.216893][ C1] ? __kthread_parkme+0x7b/0x200 [ 223.221909][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.227532][ C1] ? __kthread_parkme+0x1a1/0x200 [ 223.232728][ C1] kthread+0x711/0x8a0 [ 223.236794][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 223.241998][ C1] ? __pfx_kthread+0x10/0x10 [ 223.246580][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.252204][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 223.257490][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.263285][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 223.268486][ C1] ? __pfx_kthread+0x10/0x10 [ 223.273178][ C1] ret_from_fork+0x599/0xb30 [ 223.277759][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 223.282869][ C1] ? __switch_to_asm+0x39/0x70 [ 223.287626][ C1] ? __switch_to_asm+0x33/0x70 [ 223.292384][ C1] ? __pfx_kthread+0x10/0x10 [ 223.296988][ C1] ret_from_fork_asm+0x1a/0x30 [ 223.301847][ C1] [ 223.304856][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 223.311157][ C1] Sending NMI from CPU 1 to CPUs 0: [ 223.316361][ C0] NMI backtrace for cpu 0 [ 223.316381][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.316410][ C0] Tainted: [L]=SOFTLOCKUP [ 223.316418][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.316432][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 223.316471][ C0] Code: be 13 c4 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 1d 1c 00 f3 0f 1e fa fb f4 93 13 c4 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 223.316489][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 223.316509][ C0] RAX: 83b8ff85e4a4e900 RBX: ffffffff8197438a RCX: 83b8ff85e4a4e900 [ 223.316526][ C0] RDX: 0000000000000001 RSI: ffffffff8d781d94 RDI: ffffffff8bbffbe0 [ 223.316541][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b883359b R09: 1ffff110171066b3 [ 223.316558][ C0] R10: dffffc0000000000 R11: ffffed10171066b4 R12: ffffffff8f811170 [ 223.316575][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 223.316592][ C0] FS: 0000000000000000(0000) GS:ffff888126095000(0000) knlGS:0000000000000000 [ 223.316610][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.316626][ C0] CR2: 00007fa4d33b9358 CR3: 000000007847a000 CR4: 0000000000350ef0 [ 223.316644][ C0] Call Trace: [ 223.316653][ C0] [ 223.316661][ C0] default_idle+0x13/0x20 [ 223.316694][ C0] default_idle_call+0x73/0xb0 [ 223.316714][ C0] do_idle+0x1ea/0x520 [ 223.316741][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.316769][ C0] ? irqentry_exit+0x5ba/0x660 [ 223.316804][ C0] ? __pfx_do_idle+0x10/0x10 [ 223.316839][ C0] cpu_startup_entry+0x44/0x60 [ 223.316865][ C0] rest_init+0x2de/0x300 [ 223.316889][ C0] start_kernel+0x3ae/0x410 [ 223.316926][ C0] x86_64_start_reservations+0x24/0x30 [ 223.316951][ C0] x86_64_start_kernel+0x143/0x1c0 [ 223.316975][ C0] common_startup_64+0x13e/0x147 [ 223.317017][ C0]