last executing test programs: 17.565199215s ago: executing program 0 (id=195): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) 12.954283964s ago: executing program 0 (id=209): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x2, 0x300) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) io_submit(r3, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000bc0)=@bridge_getlink={0x28, 0x12, 0x201, 0x70bd23, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x8900, 0x1000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x80) r5 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c", 0xf}], 0x3}, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d0034c386717e443a4a0e88f1eb7056e68e7664431f6f6ee922c2fc0a37dcf4172880537bda0accdc4e8ec6f4f984ead7d70fc1ae16674448f6c2f21d78d79f8139abcc4634e6347701e6bbae84d5013d8cbb65fa5e64703d40bc6e5878f3a2b1e35d96f4ba5b1bc43a5e02"], 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 12.406975998s ago: executing program 2 (id=210): sysinfo(&(0x7f0000000000)=""/196) bpf$BPF_TASK_FD_QUERY(0x24, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 12.134900245s ago: executing program 2 (id=211): io_uring_setup(0x2280, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x36, &(0x7f0000000040)=ANY=[], 0x0) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 10.293911913s ago: executing program 5 (id=218): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2b, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r1, 0x54, 0x4, 0xf, 0x0, 0x18) 9.909462022s ago: executing program 5 (id=220): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 9.136411894s ago: executing program 0 (id=223): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 8.935379486s ago: executing program 2 (id=224): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) 8.794864121s ago: executing program 0 (id=225): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) r5 = syz_clone3(0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001680)="4c883c2bbc7d8e86c13eaa9b9bb587711eb44a85670c951757bbf9a9816af9580f86e97e4b0db41a8a5a14f6db92ec8ddac5f0d46c7fc59d8dfe03fb7d91448b87c1b75f7c9cc8f0cb03d2ec3c8e39b102c2d056cd1381116082b35784b59148aefaa5716e4c5120675ecb5275b3b931a1be804e0b40f210f23b2d00e332a8e0e0aa98586753602fbd9712a55d35943ba0bdd4423dcf260984c1c2a17ba3f1cbd31aed41d227985e7f40e72d4d9e44bdab10c64e24e3ac46af63985c9ec55a935753427f71dadf792cc35fc6f244ba7aae12a4685d2646befc83aee3c69aae7412758c3ef75b9502e728b3f8cbe5a3cd878284d8179a617f241c6398a2a4cfa771d3e56fee8358e3ee0653af90a9b14403ccdde9eee9fea2a9d84b1d8ed9a1ddc566a1aaf9fd86def28ba8096c5cb5a477d5374f29dbb1452c5125367604562a8149671ec973d54520e43b0b2b0371c4a85bac6534961e5c664c206612d77f712b9bcb5dd885ef15705ca83822ec05efe75e8466328a11b68670daa520f8b08a108f303680f48dc0ffca3ca6f681aba91a4b93d32b3f184ad6934a6d2e3dc2241ec58a415d815cc7f59c02173982008c6af9d18bbad966f7f664f9c428ca480e61a8d7ab755d692247f55cc0d6bf518df2a5ee025d4586e6d951751577878e01df884a525a1f871d3889ee598f9f66261101f198caecaa9d975e8d8402f0e89039cb8f6db3fb2533f9f155f1abf3705a09f056ddf5149665ce4e9f99d4808cfdefd20aa8b0c05f927b9ad7f0bd3b5f40f6f4a4bbf8cbd29d45d65ca3e9c3e187681d3891e625af9ed4c81a77f1812451cb6955eb9e5f011effe49528112a67bd4de58669e3c21cdf9a10e7bc1c99489e257521336a6d9d46d169052aa31c441576d0dcd073e6a49b119a66b5370c868b5000649db546921abe02c6ba373a0d326bd1ab106ff32fe34ea87f87fc68efc5e7ef1b5854de92bd49a8f487cccbcaaf87106b3fd70bf9ce55c1b76f78e2fce9cde2f6e3ec686e5b5d75f63ff37fa031378bfd5656bd74447decf7d34b0bc22fbeb4ca872280290bdefa2b69fc816b3a41ff43c3c0634b2ade7f8bdb2246ae93a1001ab3516041d597924ef3b70686c8ae4b6fc8b8d58dc3292d1491dd8efa3b0f933a67cef67f5b15297d9d8a6baf72b582339b178dcebac6f8cf27898c91680aedf64f2c47a4d4bb3760bd1cc1289525b1d9446ff743ef25529425d2c36f6b892ace7453e165c6b7e62e7696be760e04c71f1a31f14b90d27973728658c1bbebae1f06ac252cd1ec36d1ddb98e3708d5b71e2e108b8bb2fffa0ef1bea9feb58d1837dfa68d5096306f0f925f7cd91a60b34df3de44f3031af2e11773d2bab10d0b779ecae8c27f3e2f67d768296c0c79fe1977d87a286d269a1becc19e29ba7dcb5e28956e084bd7c85925110e30e1f448f528087f481ea8e11264ebfd0ed634128afd9d275a418fd843b4a56b55103c78ac8f11ba8289caf45325b30893786d9c4ecc0d3ebb66159e438c196c8fdac35ae694875514b7e503820d3cf192c174a61bfe88c12b6518537cd118711ccb34995aa94a527b9ec611290bb08c1c32867b8ecf58065c113ec4eb69a65ec05e3d94d27f35b274e1608ed6ebb1f6fe6c03a88217e5038f91662f1d5c3667e029d92340062b5bc4019906aec35edee003712ba3bd8d12a98a979523201c26664b9b14811aa2c36ceba6172b2b2ba71aff8f81e6b8617b8ac56d1f1c8434b7e83082eadbea846f84d31aa5e59fe4efb4bc0dde9ccfbd6a95e770ec555327ced1948c28dcce1cc55156f3574f568d00d318d110a04a069b3d92c79c68df30b5ac95e69f52610897f5b0034647bc96a15422f3325c98f87f16e0fec03346a5533acb046af3a48a828239520c728e97db9b4d8e8ee10915b061f3b2116c7f8fa82cd3c0b76adb61d3ec09e4a32e9f17c705bdcc4e4dac098c2713301404e0113655ca7df54447a4e5ca853e5356c9f8a099d0f278fca076b50e890ade2b61576168b3ef364499a5b4bd55893557a6e9c7d0ea16cf736c4dd0308039fac3cb85877305b44b6f13b4d002cfdd2cbbf5e48b91f0766a89d4fc088924d1d58dc1e9a1b61fc7ae9b17aaad0b5d3ee091a2ddf572d3dfa2f08710b140700aec829f2d1cf78a742b0cac5a481c95e17ede14fc25845facc308825c6c5b82c602e9aed2671a34cb1e037e8efa9e5784a8b3dcb1ea67baa05d3d1d4acb1633e06a1eafe502aece210caa341320ec3d7b1aadf4e5ce0eb7976293881293cd5a01ac31849cc8bd909683b6ea885dcf09d4c475587d9d7e60e64bb40702bc147be22858d40a6cd7413678de5e678c16f2078339b8e8a5afc267cbc25186604cdf2481df6f35877a5d2ad80c83f68a6df48d8dec6852ea23dc5a0a35cc5bd01ad5a806066f18069305847179bebec96ef79162057458a1b9f981431ac71911e24193c8956154a4eacf8549e9be8770e9e9b2a8c13fb7e80eb9c849c6811b393e728c5c3dc70abd1e4bf71fa81ce3d4b2da77b9afe17d0d1f68b618e99abe04d3b42a059ffa3a62711f732eddaa45c9570299f12e1556ed66aab6b1d765fa19bf0b77a12de7939a1be9a57c48c28cce9e31d8c609039e9abfbbacbddb679fa8085c2ad16dd4c3b6629ae07331af4e64eac1b25003bf8470e08ea036cdbd86c5f096a53da3a60d2a32640038adbd9ef76d17c129e5ee765f8eca749211d7dd7d6c14b23acade0c2371b32d5a6f4dd408999eeb970f774ad1d508ec0ce12233577e1f05fa0d7b107fbde493c5e697a047daff79d7a61d361ec45f53d11e834ae6dc9f0b964317aaad6c37efc58abeade3972094e9928d02ee75dc4881ea5f7496faf4c7de0919a11f9cfef00ce36b35d88ec8a7e302268fdba8351b6a8bf5ec1454ecd43b843468f113d3b3252b9d6bc0d3b0e0e6fa8386cc53e88afc02dab3ceed29d727b318b70c0c2d5852c981120576feec08440adc066dfa8b95045874cd3fa91d5b65371f962534e7b96936b0bb3ee9db08e569fa47150e5de8f68d1ba9e6b0c49cffd6269fa4acada3b55cb8251d743f5919559074e4d3c23e55f788b52b4d82e0d9cbf1242eb0d71ec724f7cabae82e602fafac1ada0816c0e382e0a2639a4b1d1bac4008616b8ca2f76a80026053e47b528a188fdfa32f47cce953b5c2bc27d1abb0890e5ffad8322f850f60d8e322454e2cbc5a70d403b217101ff9c3bca27458c7157c4ca0b55504e0eae18a8782b3465c03c4fcf60925d93e3c50ae37ceae531b2c23e02ca694284abf5b0be54fdaafddd622ea9416ceed45ae4d01667975474f28709cd83173bb8a4b9cb8a0d199676a00c5c6d4771fd3e5ba5178025a29d04ec8fb52641a33b2e82d27a7b663cd3ce3453efedb4cd053283a837068ef7a031fcc6c67893d3b933c5773ac7fa1f2b156c38d495a5e8409af75783194166c41adefac5d89500b01e2c627e704148ce37865b0e0db6db38666cd0026e4b99c34f2660fb4bb7c486f31e6ca6315eb4edca01c219601a25a607e307099069088215fb44bf4e0dcdc056be1c1cd84e60dc0221018d9d48de9090d037c758b1ded245b4f2e0d9d2e73ffeb19b898af53b2eca398eb8538ad9677383869018f818f2f57dcc0a98fbbefbd7a86174f280f74cb8a39f18334fdc41872309bfa177b92f2598a425ada5aa18c9a29466e96500b03493d9d4de4591cd32f214590807edbb2088a9cc3b6e15a8b09bd49191fe65d50602970306dcea5299ffc82137cf1e701a5d45812b200786ebee90d34504fe9fe89ec1f54f1854015460b449c84a7540b6863d0bba2ac27051bb5ec761d9d5a771eb35da7e91f546375af05d0055f79c3020e8be5c794d7e936220bea02ed9e052e3a7c1e12a472d68bdbcc7a27b2eb24023fc1cd43a558b618a34de5d960aadeb2d4991fb61e31d48d210c0f4f64c0d8b1463ec9b0f2550e01d7be64a4eb4d9cd1752a36245d12f5df8d7d53e3cc6f5e2cabf95712dba401f73b99bce60bd41a47e7bb64d8d788d8112f49d476fabb25559899eb5b672d4a27d3087e1d5ccabeafb4fa165d8c71b2ab93ec02100ba8d219c6893d02395efdbe11abcd1334c538b5cd8693ccdcbb99c8596c81e7cd39787d840a9cd702f6efe8fa08676257a0c5d7c7beed2981edbd1d0ceb74adc6963826fa88f7866541ca61e3c3e46d1d0ebf0c2e29a532c1800cc06c2deed1476ea83f1a05c1c11cd13c919c56bb33d29b5c08410d663198e70023ba9274d97df0bed29ba1055b4d37ae2dfe874c1c1a6341e890881c2bc7ae082c91d4e1fb45a257cd5e32226fc11f139ab4081023dc47383e622619366379bbdb01fea31d40203f03e02ae5b36ccd43dbaaf1933e32a90f7b4e42fbfa6c3b233168d59f4c6f2c34cf93db9b40b5dcf3b9d2fdcebb84badd356e716d7944703b4da349949c0a80250eddc19845d08b5ccc642b9b55c2f74c6b054cc1ea99b1973527133b4fa2631d147676164ebc993520e0a895915c99c3b26e073e9a9c1a692084f51fe3f549fa501a219947ca0e87e7637a82c4b8c9e076c3476d51a23870eba674436349cf174aa8f2df868d4d8aca0a864dd52e97ced2b04b73906746713913b0d3ad1bd440306153c067a906a6e930eee2c3c27b7aaaf1ef928b9b637eb9729b0bf47026cca4b84b2bc853cdc9bd1807f27e55bdc10a2b061b42c42595c29f850d6f9c9f4a46c947eead0e4cafdee7eb0090bc464f797ffe3d892542581ea82518452a57ac4e3d1b85a0522254c67e4dae00f74dde0868b391ba72896a15c6e14c327b5c6c2473372260ce5272130b08ee7feaa7519b3814e6f557c56bea49b70e68c42124f8655c5f9c8f9aa9d2cee4f94623bdaa04d0db4eeed795aa6469b41f8f4c81ee5b4b5a62a5c8e6423d2902137baeb3f8ae4b307f25b87db91bd4658a8d6d8be3a7ff0149a7af9ff78297738777288185e4d13cbebb412715e4378c6e1a0ea71553dc4d227687572e6b417b132a4ee0ab07ef4e7d41546723b2d4a49ba95afba17533e975f7cc66c4617d560928033032face5e7dec49608d36eb07d939ecfefddb10edc8381301b732195bb8df0af9a88b542f7986950e706a715cc57e817a18ea1b855a8bc1d47057a6f44133a96c3f3cd759474d4e5a4fe59b5f49f4a24e1b3d3a8b2353da86231e1dd604297ab39ace4b8d6e85da8a2e7412ae262fa029ab32c61ec753c29ba115dbddf64112d39d723a6056cbd8b3cb11a86e316973578c3edf6c1b03cbcb4f7c613770a44929b65ccdb9d3a6160433e687bd9f1dfcd4c2d670e3754fb015491e4670bb4d85b9f6e8f3c1ece25847d51f95d2c229da4595fb5be78b7b557747f58dcc1dcab4d159835a1be7be91f177b261615f08744831c6298995474fdc4f872c566954723a7165bca03a18303d516bd6c0ba52f81a7adbecade40b3ad32b98bc38dc07d0bbd1ad26847d2f7e843bcae2ed09d4b34a2a09df1496238c3bf8a158541f87f9fc240ad9ad11f6ee408ee2f2b1e9b2597511f88702219a1a181867ed8dde9fb16358464356cde7786f49c3a32b46a1c8c5fa6316393a7cd289681560133fe275efa32b3103a8ed951bba493af4222098be22da8ec000a9ee2c79495f566e28b6515ff5f171268e8d35e0165eae6aeb00b54d2a94ef1aa1f988173eee753d89c54e6ffbea56d8cd151c0093d655d8806ea9b25c44525d7c7d0219a3038f19e6e7854a66d6aad66211ffdbb0aaac5b694ba22da5ddbcc0b0a4d32fa0b574dc0dbc6df77cf6a9ae4dc409f723ecb7e4d6df56e271670648eab827c0e9de5d38e2d37dff4b17ab6926324fb762242a53eaafe60eaefa48fa0486adf07d46f51857b55f521a575c56eb8ab0eecc46f3fd7a839b7158f34fa5de5cb3a10b38fbd9ece28b70df5605ef6afba84e036ec7c6ca9eaf3f68330b8ee1e92fa1631f5c0a519b71504f938fbfd08b42f3d9712591c05c8ed9bfb18b8f6ac10573603e7c28cc8cd7fbf933d50d4f033d1214a9a94b1176d28e9a8014c40014b053fded63d7e59f9b8499b70275f42b27fc29ed14a5ddb37080361ab1a99b68b632dc70cc96eb530c1cedbc9b1e362f4814c21134f88c3d73c429d2f2aea12d607c3de81a50a59302fffb5fb163d6b4d7bab65d5592d9e17e43675f6cf85f620e273e93a8046990d63ed53254e9a1318d4656bca187132869795a33a227be9e7a45442f41f508bc096968c9e2078bf6fd6052dea5fd8ca0e6257ca3eca4a5c8d9371b23af4770b5f5012ef82e68d61cae1f78ccf24ed2065d665c8c3b11293e26400b3c4acf97866f5c65ecb13b0d6625fa83502831be9cc57a306329b24c0c83e44c2e91ac8abd8198b36cc2817daa4fe86611272e82419dcf82fc557028671ba400a28748fd75ce18d2f14efc3d6f5d74f7293304a0aa9afe9ad2f27e477e943c5c3c2cf71bcc579cb13ac29f3fb722ff6dd092ed2ea976e6aaadbd440c63a9927418805cafde9d69b69af8803bd60d76daec5206515ae12c93ea7a525c5fcc16a82c9adf582751792dbe38390d7b63a1fd936c2873134232832890d066a34b304ae5d5876e9972cf5004090538be7a2bf0f18aab40aae9af47258a92ab5f259e16c6bab3b9f997631c25523a69aec0fd24d2088527c697666834411920fedc97fed505d5214f05a97e08f6624479f689643690357e7d941e56aee7b6c1bb56a240796980e71eefe0d28cb9153dfcfa4f2a402b0c30252ed98c0312a0dd314c5b2062eb13110db27d2688ebc06bd0b51f13c76852e6acb4374cde802fe66d10c193543384a011fbe9912a91c3098a726eae81cded53a9a6164d3dc92d60452b823de9f95f7a06a4701980bb0c484a76bd3b1d6391d2816d37e9ca5ff895ec2a0b633ec438a5ecdf7ae496606f7e845cf504bdd17793c9a78894df67d4a1c3ae3f11ca2a577c7f3030ef1f46c6ffafb80d427ede62c5e25d9ba142b2aa32993ab7130b42303e43aae50ff88861478319dbfb6b599494383cfec2881eb19d77d6fe90ccd77216fd046d98bc1ee24bae4532539f5d18fd8bc960dc202fb500bebf3ab8a62b98f187e7fde739b673acbf1ba980e677f620cd446b84bf305fdd17341673da879bc125275dd2bb6ce9bd8c50c42713b0bd196e740f0a619915fe9210c15c5d9600d856081a24fd198d960b679412bc85f221668c2b4dbbdcddcf8c6ebe9c3f2e58aad4425a830fbe47d7b02d919464187ba118d6276c6ef0e37364ef7660c3666107a19a3f2938c79c68f3602234974264e240eb7a4cd714a7ee13c1b93230b4ec44ea6559c2577ea78bc4c31b0fa4b75801f265daddac635329a8412c26c2da8d40624b13369ac3ee81400f15a46611948b20703ecf894be5c0139ac208964ab1bbe6b26abcfbc22c2d0018d492fcf44a85592f8896288d858697de8f182927cbb2705b1965e62567737aeaaf2c43516c43db372e2272cc62d3d15d316f3b9931f0b7306191d6f9990e9d1458e87c60af61598b8f9113d48ce799234e9a2ce9d20d1f18f21700c3dd8ff41b75f8ec93157d6d755fc90cb4db49edada80e7b3c6c1110465eb707d01adacadc98fec84b5f7dd9adce5e96b09c79240c4ef37f7729895395fcaf582f5cb42983023ec8154c0dbcd8e71ea968ae0979b4f476681ce376dd297ca4de9a1e3260816f3aff1e0896eb01b2968b84dfedb74700040903325ea6627f5b99b9ac9e9f667c498a54ad0fad9a35de959258daac4c7353689eb7806a9a54d430f9ca6a1d099e80da0edd7a636e464924cf64f0db3f2a9fbc5470c9b5891ea7ddef8c343ea4210df68becad0f0cfd5b18915800ad32feba6f7390b0eec04627abd313e5ecad599dc9cf2e692db5f3e9b0879711e59ca424bfee76ac66c6244cb0f5203a2ccc77eef745e75ed680f51347b5c49c4e2fd41b2484849d646a5d987f7f609a64962d8e85715d3a557cca1ee766ae310ee0507386630d84a536808aca7f6d29cae83462a43d9198fd629f5d496e2defc5ebe060d5c8eea315d7fde53737feb9710ec6b0fc5b3d490208763881bc6aaba01f1eaf6958c8ddd84685c255d35c901a48db651d84a44a35cdcfee4b7d2d108d16c63fafeb5c4ea9edc36da632fb4c3ace800b96cc81f76be4e72ce9d8e7dd2bd63bcf35c753c8e0bc319dc8cc5b28b3f64fce561555632f9067cb0b301935756acbe4e884cc4ef82342971f06129810c2d664cc03feb0202c90d07291942780afb5efe87a8b141b9772eeacddb59829b92fa1190a73cfdcee5c4dd9357bb719bbe5a015c2f757b9f0e5db39af283e86fe5c176d91c860d4938dcf65e25231f896066927b661146bb60ea01781744c4566c9ccd336c5661034c8935e5766074d1982604b764ab1b0f0799f2127fd220a3ae4ccf3ea465b1875a109991280eb671a1c42ed696c4d8f60bf7d089b973488391ee6fbc8d6a28ba7a41b73f24c809c693c5add460df7df317d271da832579490558f55fcf81827900b6cd5543c74002f45e92779425e20e889c5c7080a485f9b113bed3d5d3eca9353bc21a8b9126fb4fb58d28873fbc5afeb0085b7cfb99cf1b4553895937ae82e01d82a77e0bfe484153e038384694b7501c0c93cfbb1301f308ffdc6f5ee8362e197bd10cd90d75458ebf58ad42958fa96393c6669ba5c3bc9db2c01700763b64bfd6c91afd67084b9cb8bfe41b6201bba38a379c83fdf5133cf3855208eca5fa0be28af9259e8ea8b88bb49e22b2d348178897f9193d4c40779a632d42131a503c155e5c34c52df5608517888abc5750e2188f9ade58195a8a2b34aa4c2c95a7ea7e4b6cca514d9aca54a084d7bd80b326f9be01b1668d0cbe0976edf0b5a7e8fc7954b97f74274f12a5843a00ef0247543a4d40dae82c7e0424464c2456697210a8231b3ab687d4a7a93b61a36854f55a98f7d38d45a4a1a19dd76d2a9c8959d377eb2c75dcf6331644195e33d67ac9ba80b25c31b8d658fab0b847aef4d32a1eb98b11a27886cee6557508ed6abb4ffa963183981872722af004bed03babfc6a16a569cde25271fb160f950692aa64e6a037f2ac09846e985cf89af61e2b1eb2dca37a048ef94401b4ac36a3c263d4d4c9cdd47bc13178ca5932f18be1a89825bae0536ab4eb9651d3c9d8a8e1116813c707d234a4baff6c49919d95c3e52457303db2ba57b87fed058155f1078d8fb96285902120cdda67fdb106f5dafa19e91c601e8682feb311757e2208ffbd41eb0ee936ea2322741e5159e9eb983912d0f5624bf75c89f09cdabb0b252a6261429a519653ce5866446436959a5de296bc89bdcfdd53d97a5f75feb6eb2da46bdbbdfb00a5ced25f286613aad0ace731971fc479ac44ad34eb6254ee39bd8d6f868f3a3fa79c299a7dca3b48f5969fe7121511d2ba9368380f5387446b3b3a5c04c58390f39d0d97d5846f37338972c7f78e2e43e0e45ae85ed0953f3fad6e471b56ac6e9d1671f243ee23fb2ed9e07d40b5d6a6e1f106c03812f675871b9b1c3bfc118bf92e71795921fada4ee455d14edce205494cf047b81c3dbd0f978f98be8eccb1b0af6af56362679a4296f19972446bbb2ebfd986661c9bd3b9c92311a27105894bd2d3765d74a2c035135ff957396b2e0c081892f925d9d49642e91b2b6080309410a7041bd1850727cad25cdf9e072bf7a15912baf4f91e431b0109806a9b7f266a609773c663ef6c830690d530677a74dd0df4f4aca01489e2f43b7bd450af51d8b2a15931be7934a32f9e17a9aa74e62f70d143b92beeb14a9bfa7019f8af185f4509c5d6b0b1d0f4850dd3ffe2097df9c023ebeed2a31dbe532d48a9ea6ffcc74d45a90728343402c78cf0a6784ed723d56847b8f71165da29eb1382497ebf546331b03cc1d6b123180522d155ef7e4ba06c9f68b6f16cf9493c8186df8e0ecdab88a4a0b723cb3aa632656208c130a9f37cba1fa90b5ca67bd6633028d77c603893df990e17c5626148cc82c4603e3779354a275d4ba1568b63c05f1b9fd2b70784ec9ac36fa88b77405b59234a985c808419ad37860eb54a8bcf652e385cb58bb1107bfbeee94d34fa15f0892202252d720cf1f86cef29c4e1afce67519da7412c465e968bacc2f5c530de1047fbdbc95f8c144cd3a397047238694ffe333e85c5358a4eb64ca3e148743dd9d5f2f1d9947fc49dabdf755050cbdef097d85048f899ff89b35ff4efea4d0d2396a4a9fc38b7fde551f1b1725e1c2ad61feb00be53227301eca7f5c13bf03554f402279c628537813d01eb8f2ccab672597c7be375e10e9fea8adfb130cabfcac07269a5fa6939dfe6c13971c19901c0a5e7b29c475ade1ac7e54d23bc8c39d70ac8832060b6d61e9533507e9d34ee1ebd9eafb0d25734f1ac200737ca40b25454ecc30ebf911a47d307381425cf181ad3e9f341f3f671377a2cf04ebcd02b205cf8263bf1cdac4fb5b81c6ed76b1b79d4f4d59b7af6bfb22d704f231c1b0aec6359b64a3a5220333cce95de1135b11eb45892efe531111b649e75e3e4004f9537af9c5140ba2e9891d15dad71b31fad003053895d6ad3b40a2ed616358123497564d6454da53a14139644305bbe9dac756f674b456a666729f5115f89f7b69fbc3f5be2020c5e61c33733e04145f8d47d534731524945e9522196f9531cbccff0433cafcf64c3a1ad98de0d09eab51fc787cfbf4f01817e03f998b662680150a7c9bd1ae40041ef70920f28374ed5a8966f3bb4d0ad88accfc85b65a17e8acd8d093f1c403b0e365e957943b94120306322885ba350583e130dbd6a8997d7e94b7ded700c039f8c942098c6a1ecf9029cbd20ba1b8adbc4152819552b6a3f8bb81c7e0ae59253fb6383fbb2e36b36aabf2a613b26d5259febb835e6297a58fbb700e927098278971a29d901a3592e77e1ed2b4d61bcb61d71df1647c3624c41bf256dd5964f53409323e3c7b5f3f874e72ca6028bac3bc5c0d69c196139ced5a85138c6d769a74a0ab1099397f347b4d2fac511178c4b14ae67288c647f1fced76f2cdbb116d6e1c8d781f7b5220d4498409c2539cefe86f1a288b84a070e5bb46173f8673ce6e36fc57bf6c29d4e213bb888004d67023e9776634b287c93d9babdfb9e4a183eb5bebb47782057f0d43a08eca50d4edae8b13e56ba1e691be0b2ccc882b4ed304f0f4c7f7f039b587dc10e1a34cada1e5771d1445552ebb403cb1fdd9170f1a961077596b68a0978fd1a67cd40622a83f02b7abbc5f395cf8b87822910cc312cf89713dc6ba541852ce5ba52dd1d8ac9f2c41a7885d1de797b7018291d1b1e0c6bc59e3dfdb2eedc113694c0d8cc460180b0e2570fe2c0e06bde9d66d054abdf688466b4bd4f1258733e3b411e07e8751bd880a4ed93d7987f546f4c15db4614ecf5fc049a3f842c200f3af88a4694cae1009efdb788e87b82a97e85e9ca63d3021d45d2e476e7b383bb2bbcc952dda410d8812505fe893d0a50879a8a0c9bc8c565cb66a4811151013cf1ff4de7800190d755a4aa84ed27e12776a", 0x2000, &(0x7f0000003f40)={&(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0xc36, {0x7, 0x2b, 0x10001, 0xffffffffc0010425, 0x1, 0x1ff, 0xae, 0xf38b68, 0x0, 0x0, 0x10, 0x2}}, &(0x7f0000000340)={0x18, 0x0, 0x100, {0x1}}, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x8f}}, &(0x7f00000003c0)={0x18, 0x4df60775bc85ec92, 0x2, {0x400}}, &(0x7f00000014c0)={0x18, 0xffffffffffffffda, 0x7fffffff, {0x40000000}}, &(0x7f0000001500)={0x28, 0x0, 0x400, {{0xff, 0x3, 0x1, r5}}}, &(0x7f0000001540)={0x60, 0xfffffffffffffff5, 0x8, {{0x1, 0xbcb0, 0x1, 0x80000000, 0x8, 0x8, 0x6, 0x2}}}, &(0x7f00000015c0)={0x18, 0x0, 0x102, {0x6}}, &(0x7f0000001600)={0x1b, 0x0, 0x5, {'/dev/iommu\x00'}}, &(0x7f0000003680)={0x20, 0x0, 0x3, {0x0, 0x8}}, &(0x7f00000038c0)={0x78, 0x0, 0xffffffffffffffff, {0x4, 0x3e2, 0x0, {0x2, 0xfffffffffffffff7, 0x1, 0xd, 0x4, 0x4, 0x1, 0xe80c, 0x1, 0x4000, 0x1ff, 0x0, 0x0, 0x6, 0x5}}}, &(0x7f0000003940)={0x90, 0x0, 0x2b0, {0x5, 0x0, 0x101, 0x2, 0x2, 0xe5f, {0x0, 0x7, 0x8, 0x5, 0x75b, 0x10, 0x9, 0x5, 0x15d87b66, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x1}}}, &(0x7f0000003a00)={0xe0, 0xffffffffffffffda, 0x3ff, [{0x4, 0x1, 0xb, 0x6, '/dev/iommu\x00'}, {0x9, 0x9, 0xf, 0x0, '/dev/dri/card#\x00'}, {0x4, 0x7fff, 0x13, 0x4, './binderfs/binder1\x00'}, {0x4, 0x7, 0xf, 0x8, '/dev/dri/card#\x00'}, {0x6, 0xffff, 0xa, 0x8, '#\x1b-{@/:3&]'}]}, &(0x7f00000036c0)=ANY=[], &(0x7f0000003cc0)={0xa0, 0x0, 0x401, {{0x1, 0x1, 0xa, 0x6, 0x8, 0xffffffff, {0x0, 0x1, 0x401, 0x4, 0xc, 0xf095, 0x1, 0x6, 0xe33f, 0x6000, 0x8, 0x0, 0xee01, 0xffffffff}}, {0x0, 0x1}}}, &(0x7f0000003d80)={0x20, 0x0, 0x6, {0x0, 0x0, 0x200, 0xb}}, &(0x7f0000003e00)={0x130, 0x0, 0x1, {0x2, 0x3da7, 0x0, '\x00', {0x10, 0x8, 0x2, 0x3, 0x0, 0x0, 0xa000, '\x00', 0x9, 0x0, 0x6, 0x7, {0xc, 0x3}, {0x9, 0xa}, {0x3, 0x9}, {0x5, 0x1}, 0xbb9, 0x8, 0x4, 0x8}}}}) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) read(r0, 0x0, 0x0) 8.12349418s ago: executing program 3 (id=227): unshare(0x20000400) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r1}, 0x38) 8.05067007s ago: executing program 2 (id=228): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x1210048, &(0x7f0000000000)=ANY=[], 0x0, 0x209, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x191) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x3ff, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffe, r1, 0x0, 0xfe, 0x0, 0x0, 0x0, r1}]) 7.687141641s ago: executing program 3 (id=230): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000640)=""/4096, 0x19fb8}], 0x1) 7.429664709s ago: executing program 2 (id=231): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.262988387s ago: executing program 4 (id=232): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2b, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r1, 0x54, 0x4, 0xf, 0x0, 0x18) 7.044438497s ago: executing program 4 (id=233): r0 = socket$isdn(0x22, 0x2, 0x25) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$isdn(r0, 0x0, 0x0) 6.964718707s ago: executing program 1 (id=234): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000002200)={0x2e, 0x6, 0x0, {0x1, 0x6, 0x5, 0x0, 'wsync'}}, 0x2e) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x5, {0x6, 0x0, 0x6, 0x10000000, 0x0, 0x0, {0x3, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x400000, 0x0, 0xa000, 0x3, 0x0, r1, 0x200000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.381640492s ago: executing program 3 (id=235): syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, 0x0, 0x0) r0 = io_uring_setup(0x491, &(0x7f0000000300)={0x0, 0x3a2b, 0x800, 0x2, 0x4000157}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socket$alg(0x26, 0x5, 0x0) 6.271532289s ago: executing program 4 (id=236): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000180)={0x20, 0x3, 0x1, 0xffff, 0x0, 0x7, 0x0}) 6.25837448s ago: executing program 5 (id=237): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 6.014191154s ago: executing program 5 (id=238): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) getrlimit(0xc, 0x0) times(&(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xfffffffffffffffa, 0x101000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x40, 0x5, 'syz0\x00', 0x10000003}, 0x0, [0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffff52, 0x5, 0x1, 0x8000000000000000, 0x8, 0x0, 0x4000000000000, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x3, 0x0, 0x9, 0x9, 0x2, 0x0, 0x7fffffff, 0x85, 0x3, 0x0, 0xb9e4, 0x0, 0x100000000000000, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x6, 0x6, 0x0, 0x3, 0x61, 0x9, 0xfffffffffffffc, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x200000000000, 0x1, 0xfffffffffffffff8, 0x0, 0x0, 0x4, 0xc000000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0xcb, 0xfffffffffffffffc, 0x0, 0x200, 0x9, 0x5, 0xffff, 0xfffffffffffffff8, 0x5, 0x0, 0x0, 0x10001, 0xebc, 0x0, 0x4000000000000, 0x74c, 0x6, 0x6, 0x400000000067, 0x7, 0x10000000, 0x7fffffff, 0x401, 0x0, 0x1, 0x76e, 0x0, 0x4, 0x5, 0x4, 0x0, 0x1, 0x1, 0xf32, 0x9, 0x2001, 0x0, 0x0, 0x0, 0xa562, 0x0, 0x80000005, 0xffffffffffffffff, 0x0, 0x5, 0x8, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x6, 0xfffffffffffffffb, 0x0, 0x0, 0x8, 0x0, 0x7, 0x4, 0x1553, 0x40, 0x0, 0x1, 0x0, 0xf65]}) unlink(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 5.907647292s ago: executing program 4 (id=239): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x48, 0x0, 0x0, 0x65be2dcb, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 5.834947976s ago: executing program 3 (id=240): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) 4.789815788s ago: executing program 5 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.702933133s ago: executing program 1 (id=242): unshare(0x20000400) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r1}, 0x38) 4.587875175s ago: executing program 0 (id=243): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x1210048, &(0x7f0000000000)=ANY=[], 0x0, 0x209, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x191) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x3ff, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffe, r1, 0x0, 0xfe, 0x0, 0x0, 0x0, r1}]) 4.447219549s ago: executing program 4 (id=244): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff}}, 0x18, &(0x7f0000000200)={&(0x7f0000000540)="629ddebc253b499178ced195af48d91385fae801b50355425dd90d8cc50fa3a64df4a0931cb4098a11c0ea708f769b012b842f3ccb9d5d07472570d7ad86ae8b8fb094da22148047315fc69877e6defbbfa56533bd263460010d300bb61a93562bdb78c449e759998fcbcf83b3ef1e2bb3708206704cb4232073a71f9690db196a0e7c24b84e8ed878a3ba7a903675afd7f2ebcac48815ab54d614cbd4cea592d5f64e5d3963de04a50fbcbb0b4242c3639ae42c712adb31f8bb43595cf5e62a510ad5519851b6d172fae6aa73497ba1fb", 0xd1}, 0x1, 0x0, 0x0, 0x4000000}, 0xee) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 4.402241512s ago: executing program 1 (id=245): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2b, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r1, 0x54, 0x4, 0xf, 0x0, 0x18) 4.354390223s ago: executing program 3 (id=246): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0) 4.2914982s ago: executing program 5 (id=247): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000640)=""/4096, 0x19fb8}], 0x1) 4.153278089s ago: executing program 1 (id=248): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4040094) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0xaa8e, 0x80000001, 0x3, 0xfffffffd}, 0x10) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x10}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$cont(0x7, r3, 0x74e380000000, 0xfff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f00000003c0)={'\x00', 0x2, 0x0, 0xe}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 4.070516439s ago: executing program 0 (id=249): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$can_raw(r3, 0x0, 0x1021) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x6}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3.745313944s ago: executing program 3 (id=250): socket(0x2, 0x3, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x18, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x10, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="238d7acf0800", 0x0, 0x0, 0x1b, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x40d0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) syz_emit_ethernet(0x3e, 0x0, &(0x7f00000001c0)={0x1, 0x93, [0xb33, 0x9aa, 0x80000000, 0xc0f]}) 3.038866204s ago: executing program 1 (id=251): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 2.827051799s ago: executing program 4 (id=252): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000340)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000019300)=""/97, &(0x7f0000000480)=""/74, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.880713428s ago: executing program 2 (id=253): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0xf4, 0xfffff010}, {0x20, 0x0, 0x0, 0xfbbff00c}, {0x6}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0) write$vhost_msg_v2(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$vhost_msg_v2(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc0, 0x6, 0x77, 0x10, 0x65a, 0x9, 0x1f2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x46, 0x6d, 0xae, 0x0, [], [{{0x9, 0x5, 0x87, 0x2}}]}}]}}]}}, 0x0) 0s ago: executing program 1 (id=254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010021bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="858804000300000008001b000000000008000d00080000004469db"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 81.303105][ T5812] cgroup: Unknown subsys name 'net' [ 81.496723][ T5812] cgroup: Unknown subsys name 'cpuset' [ 81.506165][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.987620][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.047908][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.063166][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.071001][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.088464][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.091108][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.096859][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.103196][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.110533][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.125350][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.133164][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.140197][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.147913][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.153058][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.162911][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.163570][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.170008][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.184206][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.191534][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.191737][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.206942][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.207988][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.214502][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.222675][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.228296][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.236972][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.244553][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.249778][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.268132][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.276609][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.285877][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.288616][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 87.351713][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 87.396462][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 87.474973][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 87.520649][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 87.569847][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 87.844237][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.851447][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.859110][ T5825] bridge_slave_0: entered allmulticast mode [ 87.866643][ T5825] bridge_slave_0: entered promiscuous mode [ 87.913914][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.921074][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.928767][ T5827] bridge_slave_0: entered allmulticast mode [ 87.936820][ T5827] bridge_slave_0: entered promiscuous mode [ 87.945147][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.952321][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.959463][ T5827] bridge_slave_1: entered allmulticast mode [ 87.967329][ T5827] bridge_slave_1: entered promiscuous mode [ 87.974720][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.981870][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.989047][ T5825] bridge_slave_1: entered allmulticast mode [ 87.996600][ T5825] bridge_slave_1: entered promiscuous mode [ 88.009741][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.017159][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.024427][ T5823] bridge_slave_0: entered allmulticast mode [ 88.031803][ T5823] bridge_slave_0: entered promiscuous mode [ 88.040018][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.047601][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.054898][ T5824] bridge_slave_0: entered allmulticast mode [ 88.062388][ T5824] bridge_slave_0: entered promiscuous mode [ 88.136611][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.144298][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.151423][ T5823] bridge_slave_1: entered allmulticast mode [ 88.158989][ T5823] bridge_slave_1: entered promiscuous mode [ 88.180973][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.188511][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.195733][ T5824] bridge_slave_1: entered allmulticast mode [ 88.203546][ T5824] bridge_slave_1: entered promiscuous mode [ 88.211211][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.218476][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.225778][ T5831] bridge_slave_0: entered allmulticast mode [ 88.233459][ T5831] bridge_slave_0: entered promiscuous mode [ 88.282899][ T5842] Bluetooth: hci4: command tx timeout [ 88.282903][ T5143] Bluetooth: hci0: command tx timeout [ 88.283109][ T5840] Bluetooth: hci3: command tx timeout [ 88.335012][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.342517][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.349643][ T5831] bridge_slave_1: entered allmulticast mode [ 88.357397][ T5831] bridge_slave_1: entered promiscuous mode [ 88.363332][ T5840] Bluetooth: hci5: command tx timeout [ 88.363344][ T5842] Bluetooth: hci2: command tx timeout [ 88.363710][ T5143] Bluetooth: hci1: command tx timeout [ 88.375568][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.391720][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.401445][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.408754][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.415988][ T5826] bridge_slave_0: entered allmulticast mode [ 88.423640][ T5826] bridge_slave_0: entered promiscuous mode [ 88.434120][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.446554][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.473319][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.499443][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.508705][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.515958][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.523902][ T5826] bridge_slave_1: entered allmulticast mode [ 88.531327][ T5826] bridge_slave_1: entered promiscuous mode [ 88.540905][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.552648][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.655365][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.666809][ T5827] team0: Port device team_slave_0 added [ 88.730760][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.742809][ T5827] team0: Port device team_slave_1 added [ 88.750361][ T5825] team0: Port device team_slave_0 added [ 88.759335][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.770854][ T5823] team0: Port device team_slave_0 added [ 88.779764][ T5824] team0: Port device team_slave_0 added [ 88.819693][ T5825] team0: Port device team_slave_1 added [ 88.829086][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.840235][ T5823] team0: Port device team_slave_1 added [ 88.848928][ T5824] team0: Port device team_slave_1 added [ 88.936529][ T5831] team0: Port device team_slave_0 added [ 88.943887][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.950827][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.976955][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.046578][ T5831] team0: Port device team_slave_1 added [ 89.053055][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.059982][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.086756][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.098815][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.106056][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.132389][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.146452][ T5826] team0: Port device team_slave_0 added [ 89.153028][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.159958][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.187300][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.199228][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.206361][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.232603][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.276567][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.283794][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.309975][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.324230][ T5826] team0: Port device team_slave_1 added [ 89.332944][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.339880][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.366553][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.378314][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.385864][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.411835][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.437779][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.445018][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.504665][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.560003][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.567174][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.593388][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.620841][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.627881][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.654109][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.688346][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.695840][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.722813][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.788822][ T5827] hsr_slave_0: entered promiscuous mode [ 89.795377][ T5827] hsr_slave_1: entered promiscuous mode [ 89.834405][ T5823] hsr_slave_0: entered promiscuous mode [ 89.840871][ T5823] hsr_slave_1: entered promiscuous mode [ 89.847529][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 89.853363][ T5823] Cannot create hsr debugfs directory [ 89.879313][ T5825] hsr_slave_0: entered promiscuous mode [ 89.886059][ T5825] hsr_slave_1: entered promiscuous mode [ 89.892391][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 89.898117][ T5825] Cannot create hsr debugfs directory [ 89.958546][ T5824] hsr_slave_0: entered promiscuous mode [ 89.965915][ T5824] hsr_slave_1: entered promiscuous mode [ 89.972118][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 89.977915][ T5824] Cannot create hsr debugfs directory [ 90.046762][ T5831] hsr_slave_0: entered promiscuous mode [ 90.053877][ T5831] hsr_slave_1: entered promiscuous mode [ 90.060044][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 90.066044][ T5831] Cannot create hsr debugfs directory [ 90.104442][ T5826] hsr_slave_0: entered promiscuous mode [ 90.111807][ T5826] hsr_slave_1: entered promiscuous mode [ 90.118407][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 90.124477][ T5826] Cannot create hsr debugfs directory [ 90.362548][ T5143] Bluetooth: hci0: command tx timeout [ 90.362592][ T5842] Bluetooth: hci4: command tx timeout [ 90.368103][ T5840] Bluetooth: hci3: command tx timeout [ 90.442454][ T5840] Bluetooth: hci2: command tx timeout [ 90.443134][ T5842] Bluetooth: hci5: command tx timeout [ 90.448258][ T5143] Bluetooth: hci1: command tx timeout [ 90.831792][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.849354][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.863224][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.875266][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.937113][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.953978][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.979431][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.990855][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.070167][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.085384][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.105577][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.116845][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.168361][ T974] cfg80211: failed to load regulatory.db [ 91.237769][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.263292][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.279566][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.290872][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.324616][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.400770][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.434762][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.456352][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.463576][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.472147][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.486469][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.497222][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.545202][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.552375][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.601898][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.665079][ T5831] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.676605][ T5831] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.704631][ T5831] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.729631][ T5831] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.759765][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.773966][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.819952][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.827084][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.905262][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.912537][ T5077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.936031][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.999066][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.006262][ T5077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.025428][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.064988][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.072117][ T5077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.162834][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.181309][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.226028][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.233270][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.257643][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.287022][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.294207][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.327684][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.357422][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.364607][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.414663][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.421813][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.442924][ T5840] Bluetooth: hci0: command tx timeout [ 92.443011][ T5842] Bluetooth: hci4: command tx timeout [ 92.448380][ T5143] Bluetooth: hci3: command tx timeout [ 92.510960][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.524327][ T5143] Bluetooth: hci1: command tx timeout [ 92.524359][ T5842] Bluetooth: hci2: command tx timeout [ 92.529736][ T5840] Bluetooth: hci5: command tx timeout [ 92.664196][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.746826][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.754011][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.805025][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.812173][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.902795][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.018315][ T5827] veth0_vlan: entered promiscuous mode [ 93.086210][ T5827] veth1_vlan: entered promiscuous mode [ 93.166545][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.249446][ T5825] veth0_vlan: entered promiscuous mode [ 93.310292][ T5827] veth0_macvtap: entered promiscuous mode [ 93.326629][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.335496][ T5825] veth1_vlan: entered promiscuous mode [ 93.347920][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.394897][ T5827] veth1_macvtap: entered promiscuous mode [ 93.439069][ T5824] veth0_vlan: entered promiscuous mode [ 93.467856][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.493411][ T5824] veth1_vlan: entered promiscuous mode [ 93.509816][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.546069][ T2933] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.556730][ T2933] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.576352][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.583944][ T5825] veth0_macvtap: entered promiscuous mode [ 93.592162][ T2933] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.603816][ T2933] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.641686][ T5825] veth1_macvtap: entered promiscuous mode [ 93.684002][ T5826] veth0_vlan: entered promiscuous mode [ 93.748675][ T5823] veth0_vlan: entered promiscuous mode [ 93.773689][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.785466][ T5826] veth1_vlan: entered promiscuous mode [ 93.840270][ T5823] veth1_vlan: entered promiscuous mode [ 93.851566][ T5824] veth0_macvtap: entered promiscuous mode [ 93.861271][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.915366][ T5824] veth1_macvtap: entered promiscuous mode [ 93.934540][ T1971] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.947373][ T1971] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.963821][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.976250][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.983990][ T1971] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.006023][ T1971] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.093509][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.110793][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.128445][ T5826] veth0_macvtap: entered promiscuous mode [ 94.144094][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.170751][ T5831] veth0_vlan: entered promiscuous mode [ 94.181580][ T5826] veth1_macvtap: entered promiscuous mode [ 94.196878][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.216566][ T5823] veth0_macvtap: entered promiscuous mode [ 94.224842][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.229795][ T5823] veth1_macvtap: entered promiscuous mode [ 94.241577][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.260649][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.271104][ T5831] veth1_vlan: entered promiscuous mode [ 94.333429][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.342038][ T1131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.351093][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.361592][ T1131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.385349][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.413643][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.426590][ T1131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.437361][ T1131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.485130][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.498095][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 94.499602][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.522519][ T5143] Bluetooth: hci0: command tx timeout [ 94.528077][ T5840] Bluetooth: hci3: command tx timeout [ 94.533876][ T5143] Bluetooth: hci4: command tx timeout [ 94.546123][ T5975] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 94.584802][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.603981][ T5143] Bluetooth: hci5: command tx timeout [ 94.603996][ T5842] Bluetooth: hci1: command tx timeout [ 94.614791][ T5840] Bluetooth: hci2: command tx timeout [ 94.626720][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.694089][ T5831] veth0_macvtap: entered promiscuous mode [ 94.721296][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.799440][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.811511][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.824555][ T5831] veth1_macvtap: entered promiscuous mode [ 94.832856][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.841658][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.866924][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.929341][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.943833][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.956920][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.998362][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.031313][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.047087][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.048297][ T1131] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.063542][ T1131] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.078801][ T1131] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.088543][ T1131] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.107644][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.116066][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.185052][ T1515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.215300][ T1515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.224332][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.232190][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.358072][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.384784][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.460231][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.496417][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.556471][ T31] audit: type=1326 audit(1766276264.095:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec8b8f749 code=0x7fc00000 [ 95.601454][ T5077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.628771][ T5077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.963542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.972098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.980709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.141334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.150461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.159314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.168748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.177597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.186199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.194869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.518056][ T6001] syzkaller1: entered promiscuous mode [ 96.531290][ T6001] syzkaller1: entered allmulticast mode [ 96.681181][ T5973] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.887016][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.042312][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.052505][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.134497][ T5973] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.206344][ T5973] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.236832][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.278578][ T5973] usb 1-1: config 0 descriptor?? [ 97.292459][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 97.314595][ T10] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 97.365159][ T10] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 97.384044][ T10] usb 2-1: config 0 has no interface number 0 [ 97.413194][ T10] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 97.464555][ T10] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 97.488877][ T10] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.502510][ T10] usb 2-1: config 0 interface 52 has no altsetting 0 [ 97.564531][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 97.583698][ T6036] : entered promiscuous mode [ 97.692901][ T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 97.752954][ T6042] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.20'. [ 97.772369][ T10] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 97.845808][ T6042] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20'. [ 97.906313][ T10] usb 2-1: Product: syz [ 97.931688][ T10] usb 2-1: SerialNumber: syz [ 97.962500][ T10] usb 2-1: config 0 descriptor?? [ 98.375598][ T10] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input5 [ 98.643303][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 98.689648][ T10] usb 2-1: USB disconnect, device number 2 [ 99.319452][ T6055] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 99.333863][ T6055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24'. [ 99.801343][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 102.064638][ T5973] usbhid 1-1:0.0: can't add hid device: -71 [ 102.070638][ T5973] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 102.137077][ T5973] usb 1-1: USB disconnect, device number 2 [ 102.560040][ T6088] Zero length message leads to an empty skb [ 104.122930][ T31] audit: type=1326 audit(1766276272.675:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.3.37" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0df6d8f749 code=0x0 [ 105.622550][ T5915] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.673112][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ae1a400: rx timeout, send abort [ 105.682324][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806ae1a400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 105.792805][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 105.800157][ T5915] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 105.863078][ T5915] usb 3-1: config 179 has no interface number 0 [ 105.869405][ T5915] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 105.940784][ T5915] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 106.008784][ T5915] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 106.022178][ T5915] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 106.037622][ T5915] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 106.079628][ T5915] usb 3-1: config 179 interface 65 has no altsetting 0 [ 106.117096][ T5915] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 106.192335][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.275449][ T5915] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 106.383544][ T5178] input input6: unable to receive magic message: -110 [ 106.455258][ T5178] input input6: unable to receive magic message: -32 [ 106.550559][ T5914] usb 3-1: USB disconnect, device number 2 [ 106.550572][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 106.550722][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 107.060901][ T6162] program syz.5.59 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.182014][ T6177] ALSA: mixer_oss: invalid OSS volume '' [ 108.301002][ T6177] ALSA: mixer_oss: invalid OSS volume '1' [ 108.325421][ T6177] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 108.606067][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 108.794099][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c0c4400: rx timeout, send abort [ 108.802480][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c0c4400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 109.313591][ T6201] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.346541][ T6202] fuse: Bad value for 'user_id' [ 109.363655][ T6202] fuse: Bad value for 'user_id' [ 109.386869][ T6197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.744610][ T31] audit: type=1326 audit(1766276278.285:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.2.76" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ec8b8f749 code=0x0 [ 111.620064][ T6220] netlink: 'syz.5.80': attribute type 1 has an invalid length. [ 112.645775][ T6242] program syz.3.87 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.359955][ T6247] fuse: Bad value for 'fd' [ 116.252350][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.413945][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.432340][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.468195][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.487972][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.506048][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.524860][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.100'. [ 116.704882][ T24] usb 5-1: config 0 descriptor?? [ 117.050244][ T6287] netlink: 'syz.3.101': attribute type 1 has an invalid length. [ 117.224474][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 117.474263][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034b78800: rx timeout, send abort [ 117.482935][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888034b78800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 117.705195][ T6299] fuse: Bad value for 'fd' [ 117.785949][ C1] plantronics 0003:047F:FFFF.0001: hid_field_extract() called with n (132) > 32! (syz.4.96) [ 117.943297][ T6303] delete_channel: no stack [ 118.074413][ T6011] usb 5-1: USB disconnect, device number 2 [ 118.971204][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 120.035578][ T6337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.330585][ T6342] netlink: 'syz.1.117': attribute type 1 has an invalid length. [ 120.615739][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'. [ 120.936804][ T6350] delete_channel: no stack [ 121.370347][ T6357] fuse: Bad value for 'fd' [ 121.972378][ T5907] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.009247][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'. [ 122.162441][ T6011] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.170541][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.181497][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806bc73400: rx timeout, send abort [ 122.189977][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806bc73400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 122.299701][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.345422][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.450262][ T5907] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.505162][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.532337][ T5907] usb 5-1: config 0 descriptor?? [ 122.633806][ T6011] usb 4-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice=1e.a0 [ 122.672333][ T6011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.717387][ T6011] usb 4-1: config 0 descriptor?? [ 122.810934][ T6011] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 122.977480][ T5178] bcm5974 4-1:0.0: could not read from device [ 123.398198][ T5907] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 123.451780][ T5178] bcm5974 4-1:0.0: could not read from device [ 123.508234][ T6011] usb 4-1: USB disconnect, device number 2 [ 123.796018][ T6386] netlink: 'syz.2.133': attribute type 1 has an invalid length. [ 124.042683][ T6390] delete_channel: no stack [ 124.083855][ T5907] usb 5-1: USB disconnect, device number 3 [ 125.874618][ T6412] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 126.443843][ T6416] fuse: Bad value for 'fd' [ 126.492619][ T6412] libceph: resolve '400' (ret=-3): failed [ 126.750936][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 126.770194][ T6419] bond1: entered allmulticast mode [ 126.791486][ T6421] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 127.418999][ T6431] netlink: 'syz.4.148': attribute type 1 has an invalid length. [ 127.681531][ T6431] macvlan2: entered promiscuous mode [ 127.699230][ T6431] macvlan2: entered allmulticast mode [ 129.835069][ T6450] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 129.852491][ T6450] cramfs: wrong magic [ 132.882375][ T6467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.158'. [ 133.847918][ T6477] netlink: 'syz.4.161': attribute type 1 has an invalid length. [ 133.946931][ T6477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.960760][ T6479] macvlan2: entered promiscuous mode [ 134.072327][ T6479] macvlan2: entered allmulticast mode [ 134.083719][ T6479] bond1: entered promiscuous mode [ 134.091722][ T6479] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.197846][ T6479] bond1: left promiscuous mode [ 134.462087][ T6482] delete_channel: no stack [ 134.784161][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 135.029245][ T6494] fuse: Bad value for 'fd' [ 135.296204][ T6499] netlink: 'syz.4.168': attribute type 1 has an invalid length. [ 136.055934][ T6508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.171'. [ 136.398023][ T6518] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 136.533795][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 136.792455][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.176'. [ 136.919337][ T6521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.962968][ T6509] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.172854][ T6527] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 137.182582][ T6509] usb 5-1: Using ep0 maxpacket: 32 [ 137.203847][ T6509] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 137.236137][ T6509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.250378][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.256997][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.277954][ T6509] usb 5-1: config 0 descriptor?? [ 137.304816][ T6529] delete_channel: no stack [ 137.331634][ T6527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.438101][ T6531] macvlan2: entered promiscuous mode [ 137.448381][ T6531] macvlan2: entered allmulticast mode [ 137.497385][ T6531] bond1: entered promiscuous mode [ 137.517128][ T6509] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 137.533114][ T6531] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.560859][ T6509] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.598507][ T6509] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 137.611077][ T6531] bond1: left promiscuous mode [ 137.613907][ T6509] usb 5-1: media controller created [ 137.727325][ T6509] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.575416][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 138.635307][ T6509] az6027: usb out operation failed. (-71) [ 138.661931][ T6509] stb0899_attach: Driver disabled by Kconfig [ 138.697447][ T6509] az6027: no front-end attached [ 138.697447][ T6509] [ 138.714493][ T6547] fuse: Invalid rootmode [ 138.720270][ T6509] az6027: usb out operation failed. (-71) [ 138.737113][ T6509] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 138.760787][ T6509] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 138.814467][ T6509] dvb-usb: schedule remote query interval to 400 msecs. [ 138.877654][ T6509] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 138.908141][ T6549] netlink: 36 bytes leftover after parsing attributes in process `syz.1.186'. [ 138.912764][ T6509] usb 5-1: USB disconnect, device number 4 [ 139.163519][ T6509] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 139.353825][ T6553] bond2: entered allmulticast mode [ 139.376447][ T6558] mmap: syz.1.188 (6558) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.929217][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.192'. [ 140.002380][ T5939] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.602545][ T5939] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 140.644044][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.672309][ T5939] usb 5-1: Product: syz [ 140.701534][ T5939] usb 5-1: Manufacturer: syz [ 140.717265][ T5939] usb 5-1: SerialNumber: syz [ 141.006379][ T5939] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 141.067839][ T5915] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 141.273441][ T6578] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 141.387133][ T6578] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.422182][ T6582] macvlan2: entered promiscuous mode [ 141.440160][ T6582] macvlan2: entered allmulticast mode [ 141.461327][ T6582] bond3: entered promiscuous mode [ 141.494741][ T6582] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.545129][ T6582] bond3: left promiscuous mode [ 142.154004][ T24] usb 5-1: USB disconnect, device number 5 [ 142.163175][ T5915] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 142.176393][ T5915] ath9k_htc: Failed to initialize the device [ 142.195190][ T6585] loop3: detected capacity change from 0 to 16 [ 142.213353][ T6585] ======================================================= [ 142.213353][ T6585] WARNING: The mand mount option has been deprecated and [ 142.213353][ T6585] and is ignored by this kernel. Remove the mand [ 142.213353][ T6585] option from the mount to silence this warning. [ 142.213353][ T6585] ======================================================= [ 142.225302][ T24] usb 5-1: ath9k_htc: USB layer deinitialized [ 142.374126][ T6585] erofs (device loop3): mounted with root inode @ nid 36. [ 142.447058][ T6585] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 142.506348][ T6585] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 142.751747][ T6592] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.139187][ T6596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.200'. [ 144.497613][ T6608] fuse: Invalid rootmode [ 144.865123][ T6615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.205'. [ 146.943173][ T6643] loop3: detected capacity change from 0 to 16 [ 146.964367][ T6643] erofs (device loop3): mounted with root inode @ nid 36. [ 146.994792][ T6643] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 147.027715][ T6643] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 147.357522][ T6648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.216'. [ 148.899271][ T6664] netdevsim netdevsim1: Direct firmware load for / [ 148.899271][ T6664] failed with error -2 [ 148.910239][ T6664] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 148.910239][ T6664] [ 149.206942][ T6667] fuse: Invalid rootmode [ 149.332775][ T6669] libceph: resolve '400' (ret=-3): failed [ 149.545290][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 150.306127][ T6684] loop2: detected capacity change from 0 to 16 [ 150.339270][ T6684] erofs (device loop2): mounted with root inode @ nid 36. [ 150.401772][ T6684] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 150.462420][ T6684] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 150.602937][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'. [ 150.615957][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 151.453089][ T6700] delete_channel: no stack [ 152.124590][ T6709] libceph: resolve '400' (ret=-3): failed [ 153.520386][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 153.759404][ T6730] loop0: detected capacity change from 0 to 16 [ 153.834255][ T6730] erofs (device loop0): mounted with root inode @ nid 36. [ 154.005417][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 154.122007][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 154.548738][ T6744] Bluetooth: MGMT ver 1.23 [ 155.203739][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880530f2000: rx timeout, send abort [ 155.212140][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880530f2000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 155.359003][ T6751] libceph: resolve '400' (ret=-3): failed [ 263.192266][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 263.199314][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P37/1:b..l P5825/1:b..l P6737/1:b..l [ 263.209671][ C0] rcu: (detected by 0, t=10502 jiffies, g=17261, q=1129 ncpus=2) [ 263.217483][ C0] task:syz.5.247 state:R running task stack:25400 pid:6737 tgid:6737 ppid:5831 task_flags:0x40004c flags:0x00080000 [ 263.231767][ C0] Call Trace: [ 263.235039][ C0] [ 263.237987][ C0] __schedule+0x14bc/0x5000 [ 263.242538][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.248166][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 263.253140][ C0] ? __pfx___schedule+0x10/0x10 [ 263.258011][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 263.262943][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 263.268215][ C0] preempt_schedule_irq+0xb5/0x150 [ 263.273320][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 263.279032][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.284649][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 263.290452][ C0] irqentry_exit+0x5d8/0x660 [ 263.295041][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 263.301006][ C0] RIP: 0010:memset+0xf/0x20 [ 263.305496][ C0] Code: 44 88 1f e9 ce 57 b4 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 e9 a2 57 b4 f5 90 90 90 90 90 90 90 90 90 90 90 90 [ 263.325378][ C0] RSP: 0018:ffffc900032d7370 EFLAGS: 00000202 [ 263.331432][ C0] RAX: ffffc900032d7a00 RBX: ffffc900032d7480 RCX: 000000000000000f [ 263.339382][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900032d7499 [ 263.347335][ C0] RBP: dffffc0000000000 R08: ffffc900032d74a7 R09: ffffc900032d7498 [ 263.355290][ C0] R10: dffffc0000000000 R11: fffff5200065ae95 R12: ffffc900032d7498 [ 263.363246][ C0] R13: 1ffff9200065ae8b R14: ffffc900032d7448 R15: ffffc900032d7490 [ 263.371216][ C0] unwind_next_frame+0xeae/0x23d0 [ 263.376239][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 263.381337][ C0] ? free_pgtables+0x57f/0x9d0 [ 263.386091][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 263.392242][ C0] arch_stack_walk+0x11c/0x150 [ 263.397007][ C0] ? exit_mmap+0x431/0xb10 [ 263.401410][ C0] stack_trace_save+0x9c/0xe0 [ 263.406078][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 263.411442][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 263.416191][ C0] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 263.421719][ C0] ? kmem_cache_free+0x16b/0x620 [ 263.426638][ C0] ? __put_anon_vma+0x12b/0x2d0 [ 263.431556][ C0] ? unlink_anon_vmas+0x503/0x670 [ 263.436560][ C0] ? free_pgtables+0x57f/0x9d0 [ 263.441309][ C0] ? exit_mmap+0x431/0xb10 [ 263.445704][ C0] ? __mmput+0x118/0x430 [ 263.449946][ C0] kasan_save_stack+0x3e/0x60 [ 263.454609][ C0] ? kasan_save_stack+0x3e/0x60 [ 263.459463][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 263.464823][ C0] ? kmem_cache_free+0x475/0x620 [ 263.469741][ C0] ? __put_anon_vma+0x12b/0x2d0 [ 263.474591][ C0] ? unlink_anon_vmas+0x503/0x670 [ 263.479614][ C0] ? free_pgtables+0x57f/0x9d0 [ 263.484404][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 263.489598][ C0] kmem_cache_free+0x475/0x620 [ 263.494362][ C0] ? __put_anon_vma+0x12b/0x2d0 [ 263.499205][ C0] __put_anon_vma+0x12b/0x2d0 [ 263.503866][ C0] unlink_anon_vmas+0x503/0x670 [ 263.508704][ C0] free_pgtables+0x57f/0x9d0 [ 263.513285][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 263.518394][ C0] ? __pfx_down_write+0x10/0x10 [ 263.523241][ C0] ? __mas_set_range+0x12f/0x3c0 [ 263.528171][ C0] exit_mmap+0x431/0xb10 [ 263.532393][ C0] ? uprobe_clear_state+0x20f/0x290 [ 263.537576][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 263.542320][ C0] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 263.547964][ C0] ? __pfx_exit_aio+0x10/0x10 [ 263.552640][ C0] ? uprobe_clear_state+0x27c/0x290 [ 263.557909][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.563531][ C0] __mmput+0x118/0x430 [ 263.567586][ C0] exit_mm+0x1da/0x2c0 [ 263.571645][ C0] ? __pfx_exit_mm+0x10/0x10 [ 263.576232][ C0] do_exit+0x658/0x2310 [ 263.580380][ C0] ? preempt_schedule+0xae/0xc0 [ 263.585214][ C0] ? preempt_schedule_common+0x83/0xd0 [ 263.590660][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.596282][ C0] ? preempt_schedule+0xae/0xc0 [ 263.601121][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 263.606478][ C0] ? __pfx_do_exit+0x10/0x10 [ 263.611060][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.616762][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 263.622123][ C0] do_group_exit+0x21c/0x2d0 [ 263.626710][ C0] __x64_sys_exit_group+0x3f/0x40 [ 263.631755][ C0] x64_sys_call+0x2210/0x2210 [ 263.636420][ C0] do_syscall_64+0xfa/0xf80 [ 263.640909][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.646955][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.652572][ C0] ? exc_page_fault+0xab/0x100 [ 263.657323][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.663216][ C0] RIP: 0033:0x7fb2c678f749 [ 263.667612][ C0] RSP: 002b:00007fff80bf2128 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 263.676009][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb2c678f749 [ 263.683962][ C0] RDX: 00007fb2c59f9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.692112][ C0] RBP: 00007fff80bf218c R08: 0000000580bf221f R09: 00000000000927c0 [ 263.700169][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 263.708207][ C0] R13: 00000000000927c0 R14: 000000000002589a R15: 00007fff80bf21e0 [ 263.716175][ C0] [ 263.719183][ C0] task:syz-executor state:R running task stack:21368 pid:5825 tgid:5825 ppid:5819 task_flags:0x400140 flags:0x00080000 [ 263.732651][ C0] Call Trace: [ 263.735911][ C0] [ 263.738829][ C0] __schedule+0x14bc/0x5000 [ 263.743346][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.748966][ C0] ? __pfx___schedule+0x10/0x10 [ 263.753802][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 263.758730][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 263.764003][ C0] preempt_schedule_irq+0xb5/0x150 [ 263.769098][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 263.774835][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.780454][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 263.786249][ C0] irqentry_exit+0x5d8/0x660 [ 263.790836][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 263.796799][ C0] RIP: 0010:unwind_next_frame+0xc6/0x23d0 [ 263.802506][ C0] Code: 34 00 4c 8d 3d 00 00 00 00 48 c7 c7 20 1a f4 8d 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 57 e8 3e 36 2a 00 48 83 c4 08 b5 88 e7 09 85 c0 74 3a e8 ac 5b 33 00 84 c0 75 31 e8 a3 88 e7 [ 263.822097][ C0] RSP: 0018:ffffc90003f87698 EFLAGS: 00000282 [ 263.828160][ C0] RAX: 5d71ec683e1be800 RBX: ffffffff8981e29f RCX: 5d71ec683e1be800 [ 263.836120][ C0] RDX: 000000005a44979c RSI: ffffffff8d9791a8 RDI: ffffffff8bc08360 [ 263.844076][ C0] RBP: dffffc0000000000 R08: ffffffff81743f85 R09: ffffffff8df41a20 [ 263.852031][ C0] R10: dffffc0000000000 R11: ffffffff81ada120 R12: 1ffff920007f0eed [ 263.859986][ C0] R13: ffffc90003f877a0 R14: ffffc90003f87768 R15: ffffffff81743f85 [ 263.867942][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 263.873049][ C0] ? nf_setsockopt+0x26f/0x290 [ 263.877796][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 263.883951][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 263.889057][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 263.894161][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 263.899262][ C0] ? do_ipt_set_ctl+0x881/0xcd0 [ 263.904098][ C0] ? nf_setsockopt+0x26f/0x290 [ 263.908879][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 263.915029][ C0] arch_stack_walk+0x11c/0x150 [ 263.919788][ C0] ? nf_setsockopt+0x26f/0x290 [ 263.924626][ C0] stack_trace_save+0x9c/0xe0 [ 263.929298][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 263.934701][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 263.939627][ C0] ? do_ipt_get_ctl+0xebc/0x1180 [ 263.944547][ C0] kasan_save_track+0x3e/0x80 [ 263.949209][ C0] ? kasan_save_track+0x3e/0x80 [ 263.954039][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 263.958785][ C0] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 263.964346][ C0] ? xt_alloc_table_info+0x40/0xb0 [ 263.969441][ C0] ? do_ipt_set_ctl+0x881/0xcd0 [ 263.974271][ C0] ? nf_setsockopt+0x26f/0x290 [ 263.979061][ C0] __kasan_kmalloc+0x93/0xb0 [ 263.983639][ C0] __kvmalloc_node_noprof+0x5d5/0x920 [ 263.988993][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.994612][ C0] ? xt_alloc_table_info+0x40/0xb0 [ 263.999736][ C0] xt_alloc_table_info+0x40/0xb0 [ 264.004659][ C0] do_ipt_set_ctl+0x881/0xcd0 [ 264.009408][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.015114][ C0] ? rcu_is_watching+0x15/0xb0 [ 264.019895][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.025508][ C0] ? trace_contention_end+0x39/0x100 [ 264.030783][ C0] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 264.035970][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.041602][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 264.047579][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 264.052515][ C0] nf_setsockopt+0x26f/0x290 [ 264.057090][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 264.063014][ C0] do_sock_setsockopt+0x17c/0x1b0 [ 264.068029][ C0] __x64_sys_setsockopt+0x13f/0x1b0 [ 264.073218][ C0] do_syscall_64+0xfa/0xf80 [ 264.077816][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.083958][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.089577][ C0] ? exc_page_fault+0xab/0x100 [ 264.094351][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.100229][ C0] RIP: 0033:0x7f9ec8b9163a [ 264.104655][ C0] RSP: 002b:00007fffd9526008 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 264.113065][ C0] RAX: ffffffffffffffda RBX: 00007fffd9526090 RCX: 00007f9ec8b9163a [ 264.121045][ C0] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 264.129000][ C0] RBP: 0000000000000003 R08: 0000000000000240 R09: 00007fffd9526447 [ 264.136957][ C0] R10: 00007f9ec8db9300 R11: 0000000000000206 R12: 00007f9ec8db92a0 [ 264.144919][ C0] R13: 00007fffd952602c R14: 0000000000000000 R15: 00007f9ec8dba020 [ 264.152893][ C0] [ 264.155894][ C0] task:kworker/u8:2 state:R running task stack:21688 pid:37 tgid:37 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 264.169452][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 264.177248][ C0] Call Trace: [ 264.180512][ C0] [ 264.183431][ C0] __schedule+0x14bc/0x5000 [ 264.187926][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.193556][ C0] ? __kasan_slab_free+0x5c/0x80 [ 264.198500][ C0] ? batadv_tvlv_container_ogm_append+0x1d4/0x4f0 [ 264.204905][ C0] ? batadv_iv_ogm_schedule+0x28b/0xf00 [ 264.210438][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 264.217616][ C0] ? process_scheduled_works+0xad1/0x1770 [ 264.223344][ C0] ? __pfx___schedule+0x10/0x10 [ 264.228182][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 264.233123][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 264.238396][ C0] preempt_schedule_irq+0xb5/0x150 [ 264.243495][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 264.249198][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.254811][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 264.259996][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.265872][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 264.271668][ C0] irqentry_exit+0x5d8/0x660 [ 264.276249][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 264.282216][ C0] RIP: 0010:netdev_lower_get_next_private_rcu+0x81/0x100 [ 264.289237][ C0] Code: 00 fc ff df 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 8e 97 ed f8 4c 8b 3b 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 ff e8 75 97 ed f8 4d 8b 3f 49 81 c6 b8 01 00 00 4d 39 [ 264.308832][ C0] RSP: 0018:ffffc90000ad7808 EFLAGS: 00000246 [ 264.314887][ C0] RAX: 1ffff11006801837 RBX: ffffc90000ad7910 RCX: ffff888141e81e80 [ 264.322927][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 264.330875][ C0] RBP: 0000000000000001 R08: ffffffff8b249a96 R09: ffffffff8df41a20 [ 264.338826][ C0] R10: dffffc0000000000 R11: fffffbfff1f0440f R12: dffffc0000000000 [ 264.346957][ C0] R13: 1ffff9200015af22 R14: ffff88803400c000 R15: ffff88803400c1b8 [ 264.354918][ C0] ? batadv_iv_ogm_schedule+0x8c6/0xf00 [ 264.360455][ C0] ? netdev_lower_get_next_private_rcu+0x32/0x100 [ 264.366859][ C0] batadv_iv_ogm_schedule+0x9f6/0xf00 [ 264.372220][ C0] ? batadv_iv_ogm_schedule+0x8c6/0xf00 [ 264.377767][ C0] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 264.383295][ C0] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 264.389172][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.394788][ C0] ? batadv_send_skb_packet+0x426/0x690 [ 264.400328][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 264.407344][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 264.413059][ C0] process_scheduled_works+0xad1/0x1770 [ 264.418619][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 264.424614][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.430249][ C0] worker_thread+0x8a0/0xda0 [ 264.434856][ C0] kthread+0x711/0x8a0 [ 264.438919][ C0] ? __pfx_worker_thread+0x10/0x10 [ 264.444014][ C0] ? __pfx_kthread+0x10/0x10 [ 264.448600][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.454236][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 264.459452][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.465077][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 264.470261][ C0] ? __pfx_kthread+0x10/0x10 [ 264.474847][ C0] ret_from_fork+0x599/0xb30 [ 264.479514][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 264.484705][ C0] ? __switch_to_asm+0x39/0x70 [ 264.489457][ C0] ? __switch_to_asm+0x33/0x70 [ 264.494228][ C0] ? __pfx_kthread+0x10/0x10 [ 264.498810][ C0] ret_from_fork_asm+0x1a/0x30 [ 264.503578][ C0] [ 264.506604][ C0] rcu: rcu_preempt kthread starved for 10622 jiffies! g17261 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 264.517775][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 264.527720][ C0] rcu: RCU grace-period kthread stack dump: [ 264.533584][ C0] task:rcu_preempt state:R running task stack:27736 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 264.547075][ C0] Call Trace: [ 264.550343][ C0] [ 264.553265][ C0] __schedule+0x14bc/0x5000 [ 264.557783][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.563491][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 264.569389][ C0] ? __pfx___schedule+0x10/0x10 [ 264.574232][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.579854][ C0] ? schedule+0x91/0x360 [ 264.584082][ C0] schedule+0x165/0x360 [ 264.588222][ C0] schedule_timeout+0x12b/0x270 [ 264.593071][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 264.598432][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 264.604321][ C0] ? __pfx_process_timeout+0x10/0x10 [ 264.609631][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.615260][ C0] ? prepare_to_swait_event+0x341/0x380 [ 264.620813][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 264.625664][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 264.630849][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 264.636990][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 264.642269][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 264.647498][ C0] rcu_gp_kthread+0x99/0x390 [ 264.652080][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 264.657266][ C0] ? __kthread_parkme+0x7b/0x200 [ 264.662202][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.667821][ C0] ? __kthread_parkme+0x1a1/0x200 [ 264.672838][ C0] kthread+0x711/0x8a0 [ 264.676902][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 264.682078][ C0] ? __pfx_kthread+0x10/0x10 [ 264.686737][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.692361][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 264.697728][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.703344][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 264.708523][ C0] ? __pfx_kthread+0x10/0x10 [ 264.713102][ C0] ret_from_fork+0x599/0xb30 [ 264.717764][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 264.722867][ C0] ? __switch_to_asm+0x39/0x70 [ 264.727657][ C0] ? __switch_to_asm+0x33/0x70 [ 264.732408][ C0] ? __pfx_kthread+0x10/0x10 [ 264.737013][ C0] ret_from_fork_asm+0x1a/0x30 [ 264.741783][ C0] [ 264.744782][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 264.751079][ C0] Sending NMI from CPU 0 to CPUs 1: [ 264.756287][ C1] NMI backtrace for cpu 1 [ 264.756303][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 264.756326][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.756339][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 264.756365][ C1] Code: 5e 83 b4 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 33 83 b4 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 264.756381][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 264.756400][ C1] RAX: 2937f734a4f53c00 RBX: ffffffff81978fda RCX: 2937f734a4f53c00 [ 264.756416][ C1] RDX: 0000000000000001 RSI: ffffffff8d79261c RDI: ffffffff8bc08360 [ 264.756431][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 264.756447][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822070 [ 264.756462][ C1] R13: 1ffff1100385fb70 R14: 0000000000000001 R15: 0000000000000001 [ 264.756479][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 264.756496][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.756510][ C1] CR2: 0000200000288000 CR3: 0000000059bbe000 CR4: 0000000000350ef0 [ 264.756527][ C1] Call Trace: [ 264.756535][ C1] [ 264.756543][ C1] default_idle+0x13/0x20 [ 264.756573][ C1] default_idle_call+0x73/0xb0 [ 264.756600][ C1] do_idle+0x1ea/0x520 [ 264.756622][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 264.756647][ C1] ? irqentry_exit+0x5ba/0x660 [ 264.756672][ C1] ? __pfx_do_idle+0x10/0x10 [ 264.756707][ C1] cpu_startup_entry+0x44/0x60 [ 264.756731][ C1] start_secondary+0x101/0x110 [ 264.756764][ C1] common_startup_64+0x13e/0x147 [ 264.756804][ C1]