last executing test programs: 39.090370995s ago: executing program 3 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f00000001c0)='./cgroup\x00', 0x8000, 0xb0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) 36.820188169s ago: executing program 3 (id=278): ioprio_set$pid(0x2, 0x0, 0x0) pipe2(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a000000050001000700ff01000000000000ac75d749b3a47836a7edce6f7a3f6ed82c38a1"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) 30.023270262s ago: executing program 3 (id=285): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) getpgrp(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getitimer(0x0, &(0x7f00000000c0)) 28.660851384s ago: executing program 3 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f00000001c0)='./cgroup\x00', 0x8000, 0xb0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) 24.145744802s ago: executing program 2 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x8, 0x0) 22.501808992s ago: executing program 1 (id=291): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001080), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x21, 0x21, 0x0, 0xfffffffc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000140}, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x41) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) write(r3, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) r5 = openat(r2, 0x0, 0x0, 0x83) write(r5, 0x0, 0x0) 21.260190672s ago: executing program 3 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') read$eventfd(r4, &(0x7f0000000280), 0x8) 21.114967975s ago: executing program 0 (id=293): ioprio_set$pid(0x2, 0x0, 0x0) pipe2(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a000000050001000700ff01000000000000ac75d749b3a47836a7edce6f7a3f6ed82c38a1"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) 19.431385696s ago: executing program 3 (id=294): syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a6201000102030109022400010000000009040000020338b20009050e0000000000000905b3"], 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x1, 0x10000051}, 0x0, &(0x7f0000000000), &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000f77000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) 19.385170066s ago: executing program 0 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') read$FUSE(r4, &(0x7f0000002c00)={0x2020}, 0x2020) 17.939687641s ago: executing program 0 (id=296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000c00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x40055}, 0x40000) 15.03847015s ago: executing program 2 (id=297): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="440100001a0013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000020000200000000000000000000000000000000c55d4df52efff7ebb77443def940d903c62c79a2f9f2e8b8b40d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b4}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r5, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) 14.289341858s ago: executing program 1 (id=298): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c850) r1 = getpgid(0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='12', 0x2) 13.038094068s ago: executing program 1 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r2, 0x30b, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xdc}}, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x3c, 0x3e9, 0x100, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x1, r4, 0x100, 0x346b81ce, 0x6, 0x0, 0x0, 0x2, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x4000000) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) 12.810924363s ago: executing program 0 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f00000001c0)='./cgroup\x00', 0x8000, 0xb0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) 10.569275657s ago: executing program 2 (id=301): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x20, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000000a00), 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) 10.360921482s ago: executing program 0 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') read$eventfd(r4, &(0x7f0000000280), 0x8) 10.284758784s ago: executing program 2 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r2, 0x30b, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xdc}}, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x3c, 0x3e9, 0x100, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x1, r4, 0x100, 0x346b81ce, 0x6, 0x0, 0x0, 0x2, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x4000000) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) 8.480499027s ago: executing program 2 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') read$FUSE(r3, &(0x7f0000002c00)={0x2020}, 0x2020) 5.83044016s ago: executing program 1 (id=305): syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) 3.473242806s ago: executing program 32 (id=294): syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a6201000102030109022400010000000009040000020338b20009050e0000000000000905b3"], 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x1, 0x10000051}, 0x0, &(0x7f0000000000), &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000f77000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) 3.465819557s ago: executing program 0 (id=307): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) clock_nanosleep(0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) landlock_restrict_self(0xffffffffffffffff, 0xc) 383.311511ms ago: executing program 1 (id=308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000c00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x40055}, 0x40000) 105.453077ms ago: executing program 2 (id=309): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="440100001a0013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000020000200000000000000000000000000000000c55d4df52efff7ebb77443def940d903c62c79a2f9f2e8b8b40d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b4}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r4, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) 0s ago: executing program 1 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f00000001c0)='./cgroup\x00', 0x8000, 0xb0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. syzkaller login: [ 82.665193][ T5763] cgroup: Unknown subsys name 'net' [ 82.799331][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.481342][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.202922][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.211566][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.221384][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.229200][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.241318][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.254593][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.261963][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.272591][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.291356][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.312558][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.320611][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.321818][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.338596][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.346519][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.351127][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.357026][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.367658][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.376472][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.382893][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.388397][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.391461][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.405947][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.413099][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.423990][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.902520][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 86.967667][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 87.010021][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.059551][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 87.237115][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.245609][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.253371][ T5785] bridge_slave_0: entered allmulticast mode [ 87.260936][ T5785] bridge_slave_0: entered promiscuous mode [ 87.307661][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.319620][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.326913][ T5785] bridge_slave_1: entered allmulticast mode [ 87.338858][ T5785] bridge_slave_1: entered promiscuous mode [ 87.387213][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.394524][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.411202][ T5774] bridge_slave_0: entered allmulticast mode [ 87.418708][ T5774] bridge_slave_0: entered promiscuous mode [ 87.428460][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.435698][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.443223][ T5774] bridge_slave_1: entered allmulticast mode [ 87.450615][ T5774] bridge_slave_1: entered promiscuous mode [ 87.484443][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.491711][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.498913][ T5775] bridge_slave_0: entered allmulticast mode [ 87.506416][ T5775] bridge_slave_0: entered promiscuous mode [ 87.558048][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.567626][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.575076][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.582424][ T5775] bridge_slave_1: entered allmulticast mode [ 87.589868][ T5775] bridge_slave_1: entered promiscuous mode [ 87.597013][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.604494][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.611732][ T5777] bridge_slave_0: entered allmulticast mode [ 87.619116][ T5777] bridge_slave_0: entered promiscuous mode [ 87.642103][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.676298][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.684818][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.692568][ T5777] bridge_slave_1: entered allmulticast mode [ 87.700059][ T5777] bridge_slave_1: entered promiscuous mode [ 87.722852][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.753433][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.765127][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.814882][ T5785] team0: Port device team_slave_0 added [ 87.852251][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.864175][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.882286][ T5785] team0: Port device team_slave_1 added [ 87.890693][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.950660][ T5774] team0: Port device team_slave_0 added [ 87.982544][ T5775] team0: Port device team_slave_0 added [ 88.000658][ T5774] team0: Port device team_slave_1 added [ 88.017750][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.027401][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.054141][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.067984][ T5775] team0: Port device team_slave_1 added [ 88.088850][ T5777] team0: Port device team_slave_0 added [ 88.098404][ T5777] team0: Port device team_slave_1 added [ 88.121709][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.128715][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.158031][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.191717][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.198722][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.227842][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.239771][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.247324][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.273696][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.286832][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.294134][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.321263][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.370062][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.377079][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.403458][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.422207][ T51] Bluetooth: hci1: command tx timeout [ 88.450534][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.459104][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.488263][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.501367][ T51] Bluetooth: hci0: command tx timeout [ 88.501396][ T5086] Bluetooth: hci3: command tx timeout [ 88.501699][ T5086] Bluetooth: hci2: command tx timeout [ 88.534131][ T5774] hsr_slave_0: entered promiscuous mode [ 88.540867][ T5774] hsr_slave_1: entered promiscuous mode [ 88.557612][ T5775] hsr_slave_0: entered promiscuous mode [ 88.564575][ T5775] hsr_slave_1: entered promiscuous mode [ 88.571037][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.578903][ T5775] Cannot create hsr debugfs directory [ 88.586672][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.594150][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.620424][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.677165][ T5785] hsr_slave_0: entered promiscuous mode [ 88.684066][ T5785] hsr_slave_1: entered promiscuous mode [ 88.690313][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.698024][ T5785] Cannot create hsr debugfs directory [ 88.846620][ T5777] hsr_slave_0: entered promiscuous mode [ 88.853369][ T5777] hsr_slave_1: entered promiscuous mode [ 88.859927][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.868016][ T5777] Cannot create hsr debugfs directory [ 89.221430][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.234330][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.247367][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.258413][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.331547][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.342635][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.360132][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.370231][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.484976][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.499307][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.513000][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.537252][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.615323][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.633195][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.647001][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.659005][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.671130][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.745123][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.772461][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.779843][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.798336][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.805534][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.824182][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.889073][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.913989][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.921218][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.969848][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.977063][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.018590][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.037957][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.119407][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.184661][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.195157][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.202754][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.269495][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.276719][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.349620][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.409070][ T4475] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.416346][ T4475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.478674][ T4475] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.485926][ T4475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.502887][ T5086] Bluetooth: hci1: command tx timeout [ 90.518771][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.583810][ T5782] Bluetooth: hci3: command tx timeout [ 90.583819][ T51] Bluetooth: hci2: command tx timeout [ 90.596223][ T5086] Bluetooth: hci0: command tx timeout [ 90.704664][ T5774] veth0_vlan: entered promiscuous mode [ 90.771276][ T5774] veth1_vlan: entered promiscuous mode [ 90.780828][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.935379][ T5785] veth0_vlan: entered promiscuous mode [ 90.999490][ T5774] veth0_macvtap: entered promiscuous mode [ 91.010220][ T5785] veth1_vlan: entered promiscuous mode [ 91.035998][ T5774] veth1_macvtap: entered promiscuous mode [ 91.103786][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.127870][ T5785] veth0_macvtap: entered promiscuous mode [ 91.139118][ T5785] veth1_macvtap: entered promiscuous mode [ 91.153397][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.184304][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.237565][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.251417][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.260210][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.273199][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.308280][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.320417][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.333115][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.404784][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.414354][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.425389][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.440338][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.494009][ T5775] veth0_vlan: entered promiscuous mode [ 91.514745][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.527501][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.536929][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.548321][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.579585][ T5775] veth1_vlan: entered promiscuous mode [ 91.626286][ T4475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.641573][ T4475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.733564][ T5777] veth0_vlan: entered promiscuous mode [ 91.749288][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.757902][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.817727][ T5777] veth1_vlan: entered promiscuous mode [ 91.825499][ T5775] veth0_macvtap: entered promiscuous mode [ 91.838240][ T4425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.855630][ T4425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.865211][ T5775] veth1_macvtap: entered promiscuous mode [ 91.943123][ T4425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.958936][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.969587][ T4425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.978574][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.989271][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.000662][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.017511][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.084743][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.106471][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.116930][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.127771][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.090995][ C0] sched: RT throttling activated [ 94.095713][ T5086] Bluetooth: hci1: command tx timeout [ 94.095740][ T5782] Bluetooth: hci2: command tx timeout [ 94.100736][ T5086] Bluetooth: hci0: command tx timeout [ 94.106284][ T5782] Bluetooth: hci3: command tx timeout [ 94.613787][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.644381][ T5777] veth0_macvtap: entered promiscuous mode [ 94.663375][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.672877][ T789] cfg80211: failed to load regulatory.db [ 94.690327][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.705051][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.713994][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.738866][ T5777] veth1_macvtap: entered promiscuous mode [ 95.684761][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.695422][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.711702][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.731070][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.741091][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.759929][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.772183][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.784074][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.794652][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.805017][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.817177][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.827420][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.840741][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.853913][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.890080][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.911379][ T5757] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 95.922090][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.940817][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.950380][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.023817][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.035830][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.131283][ T5757] usb 2-1: not running at top speed; connect to a high speed hub [ 96.153201][ T5757] usb 2-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 96.184399][ T5757] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 96.189723][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.201715][ T51] Bluetooth: hci3: command tx timeout [ 96.207468][ T51] Bluetooth: hci2: command tx timeout [ 96.213455][ T5086] Bluetooth: hci1: command tx timeout [ 96.225531][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.227527][ T5757] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.260619][ T5757] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.271533][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.279594][ T5757] usb 2-1: Product: syz [ 96.284327][ T5757] usb 2-1: Manufacturer: syz [ 96.289809][ T5757] usb 2-1: SerialNumber: syz [ 96.403394][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.437228][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.554324][ T5757] cdc_ncm 2-1:1.0: skipping garbage [ 96.574938][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.588521][ T5757] cdc_ncm 2-1:1.0: skipping garbage [ 96.596643][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.616868][ T5757] cdc_ncm 2-1:1.0: skipping garbage [ 96.638958][ T5757] cdc_ncm 2-1:1.0: skipping garbage [ 96.654576][ T5757] cdc_ncm 2-1:1.0: skipping garbage [ 96.671459][ T5757] cdc_ncm 2-1:1.0: skipping garbage [ 96.676272][ T5782] Bluetooth: hci0: command tx timeout [ 96.681465][ T5757] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 96.706081][ T5757] cdc_ncm 2-1:1.0: bind() failure [ 96.800309][ T5757] usb 2-1: USB disconnect, device number 2 [ 98.231530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.038532][ T5886] capability: warning: `syz.1.14' uses 32-bit capabilities (legacy support in use) [ 100.352327][ T5891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 106.321086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 108.471517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.441040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 112.471214][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.634910][ T5943] Zero length message leads to an empty skb [ 112.672337][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 112.693152][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.923476][ T27] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 114.001078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 114.275037][ T5818] usb 1-1: USB disconnect, device number 2 [ 114.416502][ T5958] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.561098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 116.713330][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 117.610620][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.883282][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 117.893941][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 117.915432][ T27] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB3, skipping [ 117.944872][ T27] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 117.961364][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.969525][ T27] usb 2-1: Product: syz [ 117.992570][ T27] usb 2-1: Manufacturer: syz [ 117.998168][ T27] usb 2-1: SerialNumber: syz [ 118.014980][ T27] usb 2-1: config 0 descriptor?? [ 118.026546][ T27] radioshark 2-1:0.0: Invalid radioSHARK device [ 118.046014][ T27] radioshark: probe of 2-1:0.0 failed with error -22 [ 118.053328][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 119.673215][ T5874] usb 2-1: USB disconnect, device number 3 [ 122.320464][ T6006] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 122.357733][ T6006] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.263323][ T6006] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.350697][ T6006] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.361200][ T6006] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.482495][ T6006] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.564160][ T6006] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.241117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 124.684052][ T6006] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.691318][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.847360][ T6006] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.866651][ T6006] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.906829][ T6006] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.980023][ T6006] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.391494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 126.571278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.690434][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.697199][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.744912][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.851066][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.911924][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.131758][ T6035] Bluetooth: MGMT ver 1.22 [ 128.742754][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.755521][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.821353][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.981306][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.921101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 132.333080][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.339410][ T5782] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.345842][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.146757][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.154363][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.161188][ T5817] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.361282][ T5817] usb 2-1: Using ep0 maxpacket: 8 [ 135.374706][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 135.399011][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB3, skipping [ 135.433236][ T5817] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 135.464377][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.479628][ T5817] usb 2-1: Product: syz [ 135.494082][ T5817] usb 2-1: Manufacturer: syz [ 135.498778][ T5817] usb 2-1: SerialNumber: syz [ 135.539459][ T5817] usb 2-1: config 0 descriptor?? [ 135.569871][ T5817] radioshark 2-1:0.0: Invalid radioSHARK device [ 135.588993][ T5817] radioshark: probe of 2-1:0.0 failed with error -22 [ 135.609434][ T5817] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 136.368601][ T23] usb 2-1: USB disconnect, device number 4 [ 138.234461][ T6125] Mass Storage Function, version: 2009/09/11 [ 138.266433][ T6125] LUN: removable file: (no medium) [ 140.466680][ T6150] IPv6: addrconf: prefix option has invalid lifetime [ 141.048640][ T6151] ======================================================= [ 141.048640][ T6151] WARNING: The mand mount option has been deprecated and [ 141.048640][ T6151] and is ignored by this kernel. Remove the mand [ 141.048640][ T6151] option from the mount to silence this warning. [ 141.048640][ T6151] ======================================================= [ 144.849201][ T28] audit: type=1800 audit(1788969116.380:2): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.112" name="syzkaller0" dev="sda1" ino=2043 res=0 errno=0 [ 156.056650][ T6262] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 156.091882][ T6262] netlink: 'syz.3.139': attribute type 2 has an invalid length. [ 194.713159][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.719566][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.778788][ T6493] netlink: 84 bytes leftover after parsing attributes in process `syz.0.211'. [ 209.127710][ T6520] netlink: 84 bytes leftover after parsing attributes in process `syz.1.224'. [ 217.052734][ T6553] netlink: 84 bytes leftover after parsing attributes in process `syz.2.233'. [ 226.863356][ T6594] netlink: 84 bytes leftover after parsing attributes in process `syz.0.242'. [ 233.837069][ T6636] netlink: 84 bytes leftover after parsing attributes in process `syz.2.255'. [ 235.251843][ T6641] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 239.378972][ T6667] netlink: 84 bytes leftover after parsing attributes in process `syz.3.268'. [ 247.362633][ T789] IPVS: starting estimator thread 0... [ 247.372356][ T6696] netlink: 84 bytes leftover after parsing attributes in process `syz.2.279'. [ 247.522171][ T6697] IPVS: using max 17 ests per chain, 40800 per kthread [ 256.559285][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.570171][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.311452][ T6736] netlink: 84 bytes leftover after parsing attributes in process `syz.2.288'. [ 271.149911][ T6783] netlink: 84 bytes leftover after parsing attributes in process `syz.2.297'. [ 275.851182][ T5757] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 276.124842][ T5757] usb 4-1: Using ep0 maxpacket: 8 [ 276.154955][ T5757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 276.185139][ T5757] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB3, skipping [ 276.243513][ T5757] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 276.291191][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.329881][ T5757] usb 4-1: Product: syz [ 276.340017][ T5757] usb 4-1: Manufacturer: syz [ 276.360988][ T5757] usb 4-1: SerialNumber: syz [ 276.383149][ T5757] usb 4-1: config 0 descriptor?? [ 276.403676][ T5757] radioshark 4-1:0.0: Invalid radioSHARK device [ 276.410739][ T5757] radioshark: probe of 4-1:0.0 failed with error -22 [ 278.072265][ T5757] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 278.368249][ T5757] usb 4-1: USB disconnect, device number 3 [ 282.165148][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.187654][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.221445][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.236621][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.246002][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.261191][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.050865][ T5782] Bluetooth: hci4: command tx timeout [ 285.133096][ T6822] netlink: 84 bytes leftover after parsing attributes in process `syz.2.309'. [ 286.716659][ T6826] ------------[ cut here ]------------ [ 286.722469][ T6826] failed to allocate ring buffer on CPU 1 [ 286.728349][ T6826] WARNING: CPU: 0 PID: 6826 at kernel/trace/ring_buffer.c:5861 trace_rb_cpu_prepare+0x2fa/0x330 [ 286.738872][ T6826] Modules linked in: [ 286.742848][ T6826] CPU: 0 PID: 6826 Comm: syz.0.307 Not tainted syzkaller #0 [ 286.751009][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.761232][ T6826] RIP: 0010:trace_rb_cpu_prepare+0x2fa/0x330 [ 286.767265][ T6826] Code: 00 f0 48 0f ab 2b 31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e4 00 fd ff 48 c7 c7 c0 ef ce 8a 89 de e8 96 cd c6 ff <0f> 0b b8 f4 ff ff ff eb d5 e8 c8 00 fd ff e9 32 ff ff ff e8 be 00 [ 286.786962][ T6826] RSP: 0018:ffffc90003247ab8 EFLAGS: 00010246 [ 286.793136][ T6826] RAX: e2c4016e059dca00 RBX: 0000000000000001 RCX: 0000000000080000 [ 286.801234][ T6826] RDX: ffffc9000e14f000 RSI: 000000000007ffff RDI: 0000000000080000 [ 286.809279][ T6826] RBP: 0000000000000001 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 286.817316][ T6826] R10: dffffc0000000000 R11: ffffed10171c518b R12: 0000000000000000 [ 286.825405][ T6826] R13: ffff8880239f9c88 R14: ffff88805d79ec10 R15: ffff88805d79ecb0 [ 286.833453][ T6826] FS: 00007fd3f2a306c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 286.842432][ T6826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.849041][ T6826] CR2: 0000001b2da22ff8 CR3: 000000002e492000 CR4: 00000000003506f0 [ 286.857706][ T6826] Call Trace: [ 286.861152][ T6826] [ 286.864111][ T6826] ? rb_get_reader_page+0xd90/0xd90 [ 286.869332][ T6826] cpuhp_invoke_callback+0x481/0x7e0 [ 286.874693][ T6826] ? __cpuhp_state_add_instance_cpuslocked+0x124/0x570 [ 286.881615][ T6826] ? rb_get_reader_page+0xd90/0xd90 [ 286.886847][ T6826] ? mutex_lock_nested+0x20/0x20 [ 286.891862][ T6826] cpuhp_issue_call+0x3ed/0x740 [ 286.896746][ T6826] __cpuhp_state_add_instance_cpuslocked+0x22a/0x570 [ 286.903481][ T6826] __cpuhp_state_add_instance+0x25/0x40 [ 286.909053][ T6826] __ring_buffer_alloc+0x30e/0x550 [ 286.914220][ T6826] allocate_trace_buffers+0x70/0x290 [ 286.919524][ T6826] ? __raw_spin_lock_init+0x45/0x100 [ 286.924884][ T6826] trace_array_create_systems+0x311/0xc70 [ 286.930627][ T6826] instance_mkdir+0xd1/0x130 [ 286.935298][ T6826] tracefs_syscall_mkdir+0x128/0x1a0 [ 286.940631][ T6826] vfs_mkdir+0x2a5/0x470 [ 286.944948][ T6826] do_mkdirat+0x1dc/0x450 [ 286.949335][ T6826] ? vfs_mkdir+0x470/0x470 [ 286.953806][ T6826] __x64_sys_mkdirat+0x89/0xa0 [ 286.959240][ T6826] do_syscall_64+0x55/0xb0 [ 286.963813][ T6826] ? clear_bhb_loop+0x40/0x90 [ 286.968512][ T6826] ? clear_bhb_loop+0x40/0x90 [ 286.973254][ T6826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.979345][ T6826] RIP: 0033:0x7fd3f1b9e159 [ 286.983821][ T6826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.003541][ T6826] RSP: 002b:00007fd3f2a30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 287.012019][ T6826] RAX: ffffffffffffffda RBX: 00007fd3f1e26090 RCX: 00007fd3f1b9e159 [ 287.020099][ T6826] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 287.028124][ T6826] RBP: 00007fd3f1c3503b R08: 0000000000000000 R09: 0000000000000000 [ 287.036190][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.044714][ T6826] R13: 00007fd3f1e26128 R14: 00007fd3f1e26090 R15: 00007ffddc14a398 [ 287.052755][ T6826] [ 287.055790][ T6826] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 287.063091][ T6826] CPU: 0 PID: 6826 Comm: syz.0.307 Not tainted syzkaller #0 [ 287.070381][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.080455][ T6826] Call Trace: [ 287.083742][ T6826] [ 287.086680][ T6826] dump_stack_lvl+0x18c/0x250 [ 287.091379][ T6826] ? show_regs_print_info+0x20/0x20 [ 287.096609][ T6826] ? load_image+0x420/0x420 [ 287.101134][ T6826] panic+0x2ca/0x720 [ 287.105053][ T6826] ? bpf_jit_dump+0xd0/0xd0 [ 287.109605][ T6826] __warn+0x2e0/0x470 [ 287.113606][ T6826] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 287.118995][ T6826] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 287.124379][ T6826] report_bug+0x2be/0x4f0 [ 287.128727][ T6826] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 287.134115][ T6826] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 287.139501][ T6826] ? trace_rb_cpu_prepare+0x2fc/0x330 [ 287.144896][ T6826] handle_bug+0xcf/0x120 [ 287.149164][ T6826] exc_invalid_op+0x1a/0x50 [ 287.153680][ T6826] asm_exc_invalid_op+0x1a/0x20 [ 287.158567][ T6826] RIP: 0010:trace_rb_cpu_prepare+0x2fa/0x330 [ 287.164571][ T6826] Code: 00 f0 48 0f ab 2b 31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e4 00 fd ff 48 c7 c7 c0 ef ce 8a 89 de e8 96 cd c6 ff <0f> 0b b8 f4 ff ff ff eb d5 e8 c8 00 fd ff e9 32 ff ff ff e8 be 00 [ 287.184201][ T6826] RSP: 0018:ffffc90003247ab8 EFLAGS: 00010246 [ 287.190283][ T6826] RAX: e2c4016e059dca00 RBX: 0000000000000001 RCX: 0000000000080000 [ 287.198299][ T6826] RDX: ffffc9000e14f000 RSI: 000000000007ffff RDI: 0000000000080000 [ 287.206300][ T6826] RBP: 0000000000000001 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 287.214297][ T6826] R10: dffffc0000000000 R11: ffffed10171c518b R12: 0000000000000000 [ 287.222307][ T6826] R13: ffff8880239f9c88 R14: ffff88805d79ec10 R15: ffff88805d79ecb0 [ 287.230319][ T6826] ? trace_rb_cpu_prepare+0x2fa/0x330 [ 287.235732][ T6826] ? rb_get_reader_page+0xd90/0xd90 [ 287.240988][ T6826] cpuhp_invoke_callback+0x481/0x7e0 [ 287.246316][ T6826] ? __cpuhp_state_add_instance_cpuslocked+0x124/0x570 [ 287.253211][ T6826] ? rb_get_reader_page+0xd90/0xd90 [ 287.258424][ T6826] ? mutex_lock_nested+0x20/0x20 [ 287.263385][ T6826] cpuhp_issue_call+0x3ed/0x740 [ 287.268356][ T6826] __cpuhp_state_add_instance_cpuslocked+0x22a/0x570 [ 287.275061][ T6826] __cpuhp_state_add_instance+0x25/0x40 [ 287.280643][ T6826] __ring_buffer_alloc+0x30e/0x550 [ 287.285777][ T6826] allocate_trace_buffers+0x70/0x290 [ 287.291074][ T6826] ? __raw_spin_lock_init+0x45/0x100 [ 287.296380][ T6826] trace_array_create_systems+0x311/0xc70 [ 287.302124][ T6826] instance_mkdir+0xd1/0x130 [ 287.306728][ T6826] tracefs_syscall_mkdir+0x128/0x1a0 [ 287.312031][ T6826] vfs_mkdir+0x2a5/0x470 [ 287.316294][ T6826] do_mkdirat+0x1dc/0x450 [ 287.320640][ T6826] ? vfs_mkdir+0x470/0x470 [ 287.325075][ T6826] __x64_sys_mkdirat+0x89/0xa0 [ 287.329865][ T6826] do_syscall_64+0x55/0xb0 [ 287.334301][ T6826] ? clear_bhb_loop+0x40/0x90 [ 287.338991][ T6826] ? clear_bhb_loop+0x40/0x90 [ 287.343681][ T6826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.349585][ T6826] RIP: 0033:0x7fd3f1b9e159 [ 287.354013][ T6826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.373659][ T6826] RSP: 002b:00007fd3f2a30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 287.382100][ T6826] RAX: ffffffffffffffda RBX: 00007fd3f1e26090 RCX: 00007fd3f1b9e159 [ 287.390099][ T6826] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 287.398095][ T6826] RBP: 00007fd3f1c3503b R08: 0000000000000000 R09: 0000000000000000 [ 287.406088][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.414171][ T6826] R13: 00007fd3f1e26128 R14: 00007fd3f1e26090 R15: 00007ffddc14a398 [ 287.422187][ T6826] [ 287.425806][ T6826] Kernel Offset: disabled [ 287.430227][ T6826] Rebooting in 86400 seconds..