last executing test programs: 44.137237284s ago: executing program 4 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x14b042, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) getrlimit(0x5, &(0x7f0000000080)) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098f", 0xc1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 41.897464919s ago: executing program 4 (id=54): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(0xffffffffffffffff, 0x3) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e130100c900061cd5fcdff368c28a9630751b7e57db7a5ac861e176663ed1a753a39d9449dcf03faafbb593e65a9ed2ebbf52f3ce311a8592a932993a5ca8", @ANYRES16=r0], 0x16) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setgroups(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setregid(0x0, 0xee01) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) semget$private(0x0, 0x207, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x7, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) 39.580849783s ago: executing program 4 (id=57): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c94714"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 39.418514748s ago: executing program 4 (id=59): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f00000014c0)={0x6361100, &(0x7f00000002c0), 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000580)=0x400030, 0x4) 36.261990883s ago: executing program 4 (id=64): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r5, 0x3b8c, &(0x7f0000000100)={0x30, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1000, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 35.497681879s ago: executing program 4 (id=68): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x668, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)='Z;', 0x2}], 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000002300), 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 34.296369919s ago: executing program 32 (id=68): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x668, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)='Z;', 0x2}], 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000002300), 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 14.718165941s ago: executing program 2 (id=110): socket(0x1d, 0x2, 0x6) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 13.105007709s ago: executing program 2 (id=117): r0 = socket$inet6(0xa, 0x3, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000480)=ANY=[@ANYBLOB="2373797a310373797a302e"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101100) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000240)=0xffe) fcntl$setstatus(r6, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000000009040000"], 0x0) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r8, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 12.805669267s ago: executing program 3 (id=118): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 10.44393097s ago: executing program 3 (id=120): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000019300)={{{@in6=@remote, @in6=@private1, 0x4e22, 0x9, 0x4e23, 0x140, 0xa, 0x20, 0x0, 0x87, 0x0, 0xee00}, {0x9, 0x7, 0x0, 0x8, 0x1, 0x6, 0xfffffffffffffff9, 0x8000000000000000}, {0xfffffffffffffffe, 0x5, 0x6, 0x40008}, 0x9, 0x6e6bbc, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4d5, 0xff}, 0x2, @in6=@rand_addr=' \x01\x00', 0x101, 0x3, 0x0, 0x0, 0x2, 0x8, 0xffffff00}}, 0xe8) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102376, 0x18fe8) sendfile(r2, r3, 0x0, 0x80006) 10.379380682s ago: executing program 1 (id=121): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa65a245d5cde008004500001c01000000f4ff07908400000008"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x501083, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 10.349020897s ago: executing program 0 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) 8.58255297s ago: executing program 0 (id=123): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000019300)={{{@in6=@remote, @in6=@private1, 0x4e22, 0x9, 0x4e23, 0x140, 0xa, 0x20, 0x0, 0x87, 0x0, 0xee00}, {0x9, 0x7, 0x0, 0x8, 0x1, 0x6, 0xfffffffffffffff9, 0x8000000000000000}, {0xfffffffffffffffe, 0x5, 0x6, 0x40008}, 0x9, 0x6e6bbc, 0x2, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4d5, 0xff}, 0x2, @in6=@rand_addr=' \x01\x00', 0x101, 0x3, 0x0, 0x0, 0x2, 0x8, 0xffffff00}}, 0xe8) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102376, 0x18fe8) sendfile(r2, r3, 0x0, 0x80006) 8.213848511s ago: executing program 2 (id=124): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x1, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x801004}, 0xc, &(0x7f0000002800)={0x0, 0x3d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004840) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') listxattr(&(0x7f0000000380)='./cgroup\x00', 0x0, 0x0) 8.025034312s ago: executing program 3 (id=125): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x44}}, 0x0) 7.025395897s ago: executing program 2 (id=126): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ppoll(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) r2 = io_uring_setup(0x668, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)='Z;', 0x2}], 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000002300), 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) writev(r0, 0x0, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) close(0xffffffffffffffff) 6.376136754s ago: executing program 1 (id=127): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)="88", 0x1}], 0x1}}], 0x1, 0x30008870) shutdown(r0, 0x1) 5.737348908s ago: executing program 0 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x82ce485}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x9, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000180)=@v2={0x2000000, [{0x401, 0x7}, {0x0, 0x6df6}]}, 0x14, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r5 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) 5.708420775s ago: executing program 3 (id=129): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x76}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59", 0x73}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 5.628768201s ago: executing program 2 (id=130): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB='\x00'/22], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) r3 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x75, 0x301601) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x2}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x5, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 5.441586578s ago: executing program 1 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff3e, 0x20000840, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x80000001, 0xc, &(0x7f00000003c0)) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 4.335152134s ago: executing program 0 (id=132): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r1, 0x0, 0x1}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3.57811444s ago: executing program 3 (id=133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$inet(0x2, 0x6, 0x2) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x10) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_emit_vhci(0x0, 0x8) 2.533702221s ago: executing program 1 (id=134): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x6, 0x7, 0x2, "a1757bfbb8187f00002fd0af5bff412142a07a41cbf3fbaca7161375cd1d0cd51409b701000e27a80e1a7d55466a268a57f47144d394b9748d53be49fe3600", 0x31}, 0x60) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) fdatasync(0xffffffffffffffff) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000001440)={@local, @empty, 0x0, "513cd4cc40ac7f23c0709a177674ed0af53959b350f13ba74439c35a52e4b81c", 0x4, 0x3, 0x100, 0x5}, 0x3c) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/253, 0xfd, 0x36) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 2.059023045s ago: executing program 2 (id=135): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) 1.97010569s ago: executing program 0 (id=136): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x2, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0) 848.7189ms ago: executing program 1 (id=137): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB='\x00'/22], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) r3 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x75, 0x301601) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x2}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 657.923838ms ago: executing program 0 (id=138): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa65a245d5cde008004500001c01000000f4ff07908400000008"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x501083, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 130.081907ms ago: executing program 3 (id=139): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048084}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0xff, @loopback, @loopback, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 0s ago: executing program 1 (id=140): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_vhci(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x4, 0xfe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000004c0)={0x1, @sliced={0x6, [0x101, 0x7, 0x6, 0x8, 0x7, 0xb, 0xfffb, 0xd89, 0x4d26, 0x5, 0x6, 0x0, 0xfffe, 0x3, 0x180, 0xfe00, 0x1000, 0x2, 0x401, 0x8, 0x5, 0x4, 0x8, 0x3d2, 0x3, 0xfff, 0x9273, 0x2, 0xd5f, 0xffdf, 0x3, 0xa, 0x86a, 0x0, 0xcc92, 0x667, 0x3, 0xff36, 0x0, 0x1, 0x1, 0xffff, 0xfffc, 0x1, 0x38, 0x5, 0x80, 0x2], 0x9}}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. [ 82.674612][ T5810] cgroup: Unknown subsys name 'net' [ 82.849365][ T5810] cgroup: Unknown subsys name 'cpuset' [ 82.858991][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.533306][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.202520][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.213034][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.225643][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.255400][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.265819][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.345960][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.354018][ T5141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.362263][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.381121][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.395659][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.403419][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.411503][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.420375][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.428539][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.475957][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.545615][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.553754][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.563600][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.571817][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.576250][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.579774][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.588172][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.601218][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.620768][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.635742][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.945884][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 88.200792][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.208878][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.216696][ T5821] bridge_slave_0: entered allmulticast mode [ 88.224128][ T5821] bridge_slave_0: entered promiscuous mode [ 88.292525][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.299870][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.307633][ T5821] bridge_slave_1: entered allmulticast mode [ 88.314971][ T5821] bridge_slave_1: entered promiscuous mode [ 88.474898][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.507585][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 88.521605][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.532545][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 88.649287][ T5821] team0: Port device team_slave_0 added [ 88.669135][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 88.698907][ T5821] team0: Port device team_slave_1 added [ 88.796302][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 88.842139][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.849737][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.876475][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.949043][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.956773][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.983170][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.002142][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.009904][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.018199][ T5826] bridge_slave_0: entered allmulticast mode [ 89.026096][ T5826] bridge_slave_0: entered promiscuous mode [ 89.033848][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.041068][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.048583][ T5827] bridge_slave_0: entered allmulticast mode [ 89.056048][ T5827] bridge_slave_0: entered promiscuous mode [ 89.091537][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.104221][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.111967][ T5826] bridge_slave_1: entered allmulticast mode [ 89.119642][ T5826] bridge_slave_1: entered promiscuous mode [ 89.142612][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.149988][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.157640][ T5827] bridge_slave_1: entered allmulticast mode [ 89.164993][ T5827] bridge_slave_1: entered promiscuous mode [ 89.269310][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.281647][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.308166][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.317544][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.324751][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.332434][ T5836] bridge_slave_0: entered allmulticast mode [ 89.335875][ T5141] Bluetooth: hci0: command tx timeout [ 89.341342][ T5836] bridge_slave_0: entered promiscuous mode [ 89.393255][ T5821] hsr_slave_0: entered promiscuous mode [ 89.400529][ T5821] hsr_slave_1: entered promiscuous mode [ 89.410958][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.420682][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.428410][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.435825][ T5836] bridge_slave_1: entered allmulticast mode [ 89.443200][ T5836] bridge_slave_1: entered promiscuous mode [ 89.495459][ T5141] Bluetooth: hci2: command tx timeout [ 89.497453][ T5826] team0: Port device team_slave_0 added [ 89.570978][ T5826] team0: Port device team_slave_1 added [ 89.576892][ T5141] Bluetooth: hci1: command tx timeout [ 89.596341][ T5827] team0: Port device team_slave_0 added [ 89.605024][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.619621][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.629499][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.637700][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.644948][ T5834] bridge_slave_0: entered allmulticast mode [ 89.652482][ T5834] bridge_slave_0: entered promiscuous mode [ 89.698819][ T5827] team0: Port device team_slave_1 added [ 89.733996][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.735353][ T5141] Bluetooth: hci3: command tx timeout [ 89.741407][ T5829] Bluetooth: hci4: command tx timeout [ 89.755628][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.762845][ T5834] bridge_slave_1: entered allmulticast mode [ 89.771186][ T5834] bridge_slave_1: entered promiscuous mode [ 89.778728][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.786134][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.813258][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.826820][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.833984][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.860239][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.973411][ T5836] team0: Port device team_slave_0 added [ 89.982753][ T5836] team0: Port device team_slave_1 added [ 89.992668][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.006311][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.018536][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.025666][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.052169][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.113372][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.120430][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.150968][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.224119][ T5834] team0: Port device team_slave_0 added [ 90.254076][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.262107][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.289447][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.305362][ T5834] team0: Port device team_slave_1 added [ 90.327067][ T5826] hsr_slave_0: entered promiscuous mode [ 90.333703][ T5826] hsr_slave_1: entered promiscuous mode [ 90.340219][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.348381][ T5826] Cannot create hsr debugfs directory [ 90.373765][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.381259][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.408208][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.511572][ T5827] hsr_slave_0: entered promiscuous mode [ 90.519328][ T5827] hsr_slave_1: entered promiscuous mode [ 90.527004][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.534877][ T5827] Cannot create hsr debugfs directory [ 90.605719][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.612716][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.639778][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.687696][ T5836] hsr_slave_0: entered promiscuous mode [ 90.694248][ T5836] hsr_slave_1: entered promiscuous mode [ 90.700642][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.708278][ T5836] Cannot create hsr debugfs directory [ 90.714666][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.722000][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.748501][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.951864][ T5834] hsr_slave_0: entered promiscuous mode [ 90.958412][ T5834] hsr_slave_1: entered promiscuous mode [ 90.964612][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.972294][ T5834] Cannot create hsr debugfs directory [ 91.169368][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.184875][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.229948][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.240689][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.415190][ T5829] Bluetooth: hci0: command tx timeout [ 91.489857][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.501446][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.512054][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.527981][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.575822][ T5829] Bluetooth: hci2: command tx timeout [ 91.655545][ T5829] Bluetooth: hci1: command tx timeout [ 91.673699][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.690837][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.701730][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.717527][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.728788][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.786907][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.815426][ T5829] Bluetooth: hci4: command tx timeout [ 91.816076][ T5141] Bluetooth: hci3: command tx timeout [ 91.834585][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.841947][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.878578][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.885817][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.902336][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.938958][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.952125][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.963721][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.047794][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.119278][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.144378][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.156933][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.173207][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.188346][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.216937][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.224117][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.300074][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.307340][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.412797][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.524315][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.549139][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.594889][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.602179][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.688887][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.696126][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.742505][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.829922][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.837155][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.864563][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.880263][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.919083][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.926458][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.033538][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.093936][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.101678][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.154557][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.161780][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.183347][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.250865][ T5821] veth0_vlan: entered promiscuous mode [ 93.308626][ T5821] veth1_vlan: entered promiscuous mode [ 93.461406][ T5826] veth0_vlan: entered promiscuous mode [ 93.496378][ T5141] Bluetooth: hci0: command tx timeout [ 93.514126][ T5826] veth1_vlan: entered promiscuous mode [ 93.534870][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.564027][ T5821] veth0_macvtap: entered promiscuous mode [ 93.641238][ T5821] veth1_macvtap: entered promiscuous mode [ 93.659907][ T5141] Bluetooth: hci2: command tx timeout [ 93.684196][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.734794][ T5826] veth0_macvtap: entered promiscuous mode [ 93.749315][ T5141] Bluetooth: hci1: command tx timeout [ 93.803867][ T5826] veth1_macvtap: entered promiscuous mode [ 93.861421][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.898177][ T5141] Bluetooth: hci3: command tx timeout [ 93.903660][ T5141] Bluetooth: hci4: command tx timeout [ 93.959825][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.982455][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.033659][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.042850][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.057480][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.066497][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.084951][ T5834] veth0_vlan: entered promiscuous mode [ 94.095825][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.121413][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.132496][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.150521][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.160594][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.200087][ T5834] veth1_vlan: entered promiscuous mode [ 94.284426][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.373589][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.380783][ T5834] veth0_macvtap: entered promiscuous mode [ 94.387773][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.440594][ T5834] veth1_macvtap: entered promiscuous mode [ 94.501536][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.514892][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.544958][ T5827] veth0_vlan: entered promiscuous mode [ 94.563731][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.586431][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.594432][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.630847][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.654466][ T5827] veth1_vlan: entered promiscuous mode [ 94.681758][ T5836] veth0_vlan: entered promiscuous mode [ 94.702574][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.703141][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.711334][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.728519][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.738464][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.747520][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.763436][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.807421][ T5836] veth1_vlan: entered promiscuous mode [ 94.850082][ T5827] veth0_macvtap: entered promiscuous mode [ 94.919955][ T5827] veth1_macvtap: entered promiscuous mode [ 95.161451][ T5836] veth0_macvtap: entered promiscuous mode [ 95.311539][ T5914] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 95.575953][ T5141] Bluetooth: hci0: command tx timeout [ 95.640505][ T5836] veth1_macvtap: entered promiscuous mode [ 95.652157][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.712981][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.716127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 95.721245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 95.743024][ T5141] Bluetooth: hci2: command tx timeout [ 95.762636][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.816151][ T5141] Bluetooth: hci1: command tx timeout [ 95.839910][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.862342][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.892975][ T5876] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.934387][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.941890][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.958893][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.976762][ T5829] Bluetooth: hci3: command tx timeout [ 95.982276][ T5141] Bluetooth: hci4: command tx timeout [ 96.001826][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.011480][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.020282][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.030042][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.042775][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.053309][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.063083][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.071950][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.095192][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 96.175592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.184395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.338468][ T5876] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 96.534353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.636711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.655462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.664271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.673227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.739215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.167014][ T10] cfg80211: failed to load regulatory.db [ 97.174215][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.182859][ T5876] usb 3-1: Product: syz [ 97.187154][ T5876] usb 3-1: Manufacturer: syz [ 97.191792][ T5876] usb 3-1: SerialNumber: syz [ 97.260989][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.300845][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.516690][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.558967][ T5876] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 97.572846][ T5876] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 97.588827][ T5876] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 97.624037][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.221007][ T5932] kAFS: No cell specified [ 98.236787][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.244693][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.549806][ T5917] Zero length message leads to an empty skb [ 99.932142][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.995022][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.025881][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.404786][ T5944] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 101.496891][ T10] usb 2-1: device not accepting address 2, error -71 [ 102.187548][ T9] usb 3-1: USB disconnect, device number 2 [ 102.915116][ T5952] overlayfs: missing 'lowerdir' [ 103.110610][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 103.677507][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 103.826479][ T9] visor 3-1:1.0: device disconnected [ 104.073299][ T5961] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 104.099045][ T5961] overlayfs: missing 'lowerdir' [ 108.292621][ T5990] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 109.090789][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 110.801613][ T30] audit: type=1800 audit(1748666988.499:2): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.19" name="bus" dev="overlay" ino=55 res=0 errno=0 [ 113.011701][ T6024] netlink: 44 bytes leftover after parsing attributes in process `syz.2.26'. [ 113.227712][ T10] libceph: connect (1)[c::]:6789 error -101 [ 113.247178][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 113.284010][ T6021] ceph: No mds server is up or the cluster is laggy [ 113.311438][ T6030] overlayfs: missing 'lowerdir' [ 113.843222][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.509056][ T6036] veth0_vlan: entered allmulticast mode [ 115.111645][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.320550][ T9] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.333677][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.350497][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.471093][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 115.510736][ T9] usb 3-1: invalid MIDI out EP 0 [ 116.100972][ T6049] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 116.457816][ T5141] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 116.931384][ T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 117.065350][ T9] usb 3-1: USB disconnect, device number 3 [ 118.605230][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.796441][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.828097][ T9] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.879381][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.922949][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.973695][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.113018][ T9] usb 2-1: invalid MIDI out EP 0 [ 120.207761][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 120.341303][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.825704][ T5141] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 122.079006][ T6094] ceph: No mds server is up or the cluster is laggy [ 122.086271][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 122.092506][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 123.778047][ T6118] syz_tun: entered allmulticast mode [ 123.827854][ T6116] syz_tun: left allmulticast mode [ 126.013375][ T10] usb 2-1: USB disconnect, device number 4 [ 127.605704][ T6131] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 127.761936][ T5141] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 127.820636][ T5141] CPU: 1 UID: 0 PID: 5141 Comm: kworker/u9:1 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 127.820670][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.820686][ T5141] Workqueue: hci2 hci_rx_work [ 127.820735][ T5141] Call Trace: [ 127.820748][ T5141] [ 127.820758][ T5141] dump_stack_lvl+0x189/0x250 [ 127.820796][ T5141] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.820819][ T5141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.820874][ T5141] sysfs_create_dir_ns+0x259/0x280 [ 127.820902][ T5141] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 127.820928][ T5141] ? do_raw_spin_unlock+0x122/0x240 [ 127.820968][ T5141] kobject_add_internal+0x59f/0xb40 [ 127.821005][ T5141] kobject_add+0x155/0x220 [ 127.821037][ T5141] ? __pfx_kobject_add+0x10/0x10 [ 127.821063][ T5141] ? _raw_spin_unlock+0x3f/0x50 [ 127.821101][ T5141] ? get_device_parent+0x366/0x3a0 [ 127.821139][ T5141] device_add+0x408/0xb50 [ 127.821182][ T5141] hci_conn_add_sysfs+0xd5/0x1e0 [ 127.821221][ T5141] le_conn_complete_evt+0xc3a/0x1220 [ 127.821265][ T5141] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 127.821300][ T5141] ? irqentry_exit+0x74/0x90 [ 127.821321][ T5141] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.821344][ T5141] ? skb_pull_data+0xfb/0x200 [ 127.821386][ T5141] hci_le_conn_complete_evt+0x187/0x450 [ 127.821430][ T5141] hci_event_packet+0x78c/0x1200 [ 127.821457][ T5141] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 127.821487][ T5141] ? __pfx_hci_event_packet+0x10/0x10 [ 127.821521][ T5141] ? hci_send_to_monitor+0xe2/0x570 [ 127.821555][ T5141] hci_rx_work+0x46a/0xe80 [ 127.821588][ T5141] ? process_scheduled_works+0x9ef/0x17b0 [ 127.821618][ T5141] process_scheduled_works+0xae1/0x17b0 [ 127.821679][ T5141] ? __pfx_process_scheduled_works+0x10/0x10 [ 127.821727][ T5141] worker_thread+0x8a0/0xda0 [ 127.821758][ T5141] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 127.821808][ T5141] ? __kthread_parkme+0x7b/0x200 [ 127.821849][ T5141] kthread+0x70e/0x8a0 [ 127.821885][ T5141] ? __pfx_worker_thread+0x10/0x10 [ 127.821912][ T5141] ? __pfx_kthread+0x10/0x10 [ 127.821948][ T5141] ? _raw_spin_unlock_irq+0x23/0x50 [ 127.821981][ T5141] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.822000][ T5141] ? __pfx_kthread+0x10/0x10 [ 127.822034][ T5141] ret_from_fork+0x3fc/0x770 [ 127.822063][ T5141] ? __pfx_ret_from_fork+0x10/0x10 [ 127.822095][ T5141] ? __switch_to_asm+0x39/0x70 [ 127.822115][ T5141] ? __switch_to_asm+0x33/0x70 [ 127.822134][ T5141] ? __pfx_kthread+0x10/0x10 [ 127.822168][ T5141] ret_from_fork_asm+0x1a/0x30 [ 127.822209][ T5141] [ 127.822621][ T5141] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 128.144396][ T5141] Bluetooth: hci2: failed to register connection device [ 128.588967][ T5875] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.628345][ T10] libceph: connect (1)[c::]:6789 error -101 [ 128.634499][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 128.745229][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 128.766492][ T5875] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.792672][ T5875] usb 1-1: config 0 has no interface number 0 [ 128.816400][ T5875] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 128.832430][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.853967][ T5875] usb 1-1: Product: syz [ 128.859643][ T6161] ceph: No mds server is up or the cluster is laggy [ 128.908503][ T10] libceph: connect (1)[c::]:6789 error -101 [ 128.914645][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 128.920737][ T5875] usb 1-1: Manufacturer: syz [ 128.925569][ T5875] usb 1-1: SerialNumber: syz [ 128.941225][ T5875] usb 1-1: config 0 descriptor?? [ 129.624599][ T30] audit: type=1326 audit(1748667007.319:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e498e969 code=0x7ffc0000 [ 129.642006][ T9] libceph: connect (1)[c::]:6789 error -101 [ 129.660217][ T5875] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 129.675278][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 129.715530][ T5875] usb 1-1: selecting invalid altsetting 1 [ 129.741197][ T5875] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 129.748225][ T30] audit: type=1326 audit(1748667007.329:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e498e969 code=0x7ffc0000 [ 129.796404][ T5875] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 129.802635][ T30] audit: type=1326 audit(1748667007.329:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23e492ab39 code=0x7ffc0000 [ 129.816558][ T5875] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 129.841729][ T30] audit: type=1326 audit(1748667007.329:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f23e498e969 code=0x7ffc0000 [ 129.843711][ T5875] usb 1-1: media controller created [ 129.867439][ T30] audit: type=1326 audit(1748667007.329:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e498e969 code=0x7ffc0000 [ 130.036444][ T30] audit: type=1326 audit(1748667007.339:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e498e969 code=0x7ffc0000 [ 130.078777][ T30] audit: type=1326 audit(1748667007.339:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23e492ab39 code=0x7ffc0000 [ 130.938716][ T30] audit: type=1326 audit(1748667007.339:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e498e969 code=0x7ffc0000 [ 130.938741][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.971812][ T30] audit: type=1326 audit(1748667007.349:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23e492ab39 code=0x7ffc0000 [ 131.004572][ T6181] netlink: 'syz.0.55': attribute type 21 has an invalid length. [ 131.013077][ T6181] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.518425][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.565443][ T30] audit: type=1326 audit(1748667007.349:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e498e969 code=0x7ffc0000 [ 131.731376][ T5875] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 131.750772][ T5875] zl10353_read_register: readreg error (reg=127, ret==-71) [ 131.775621][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 131.827580][ T5875] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 131.846533][ T10] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 131.865126][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.886207][ T10] usb 2-1: Product: syz [ 131.911937][ T10] usb 2-1: Manufacturer: syz [ 131.932016][ T10] usb 2-1: SerialNumber: syz [ 132.160255][ T5875] usb 1-1: USB disconnect, device number 2 [ 132.346089][ T10] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 132.369158][ T10] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 132.443994][ T10] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 132.594079][ T2972] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.427602][ T2972] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.551025][ T10] usb 2-1: USB disconnect, device number 5 [ 133.579742][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 133.630252][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 133.658520][ T2972] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.670609][ T10] visor 2-1:1.0: device disconnected [ 134.266321][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.70'. [ 134.374117][ T2972] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.882217][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 134.892183][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 135.018125][ T6213] ceph: No mds server is up or the cluster is laggy [ 135.359923][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.371721][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.392043][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.413348][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.422572][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.848679][ T2972] bridge_slave_1: left allmulticast mode [ 136.138488][ T2972] bridge_slave_1: left promiscuous mode [ 136.303189][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.374857][ T5141] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 137.498585][ T5141] Bluetooth: hci2: command tx timeout [ 137.587245][ T2972] bridge_slave_0: left allmulticast mode [ 137.625472][ T2972] bridge_slave_0: left promiscuous mode [ 137.632133][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.545889][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.552600][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.585638][ T5141] Bluetooth: hci2: command tx timeout [ 140.485305][ T1208] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.612993][ T2972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.632099][ T2972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.642584][ T2972] bond0 (unregistering): Released all slaves [ 140.659632][ T1208] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.672464][ T1208] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.692158][ T1208] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.739149][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.803251][ T1208] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.817573][ T1208] usb 3-1: invalid MIDI out EP 0 [ 141.655709][ T5141] Bluetooth: hci2: command tx timeout [ 141.682061][ T1208] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 141.847184][ T6081] udevd[6081]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.283231][ T2972] hsr_slave_0: left promiscuous mode [ 142.292655][ T2972] hsr_slave_1: left promiscuous mode [ 142.301401][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.314494][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.388193][ T2972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.407965][ T2972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.504714][ T2972] veth1_macvtap: left promiscuous mode [ 142.521433][ T2972] veth0_macvtap: left promiscuous mode [ 142.527684][ T2972] veth1_vlan: left promiscuous mode [ 142.534345][ T2972] veth0_vlan: left promiscuous mode [ 143.510196][ T5902] usb 3-1: USB disconnect, device number 4 [ 143.737870][ T5141] Bluetooth: hci2: command tx timeout [ 143.745580][ T1224] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.996956][ T1224] usb 1-1: Using ep0 maxpacket: 32 [ 144.174698][ T1224] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.275844][ T1224] usb 1-1: config 0 has no interface number 0 [ 144.468208][ T1224] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 144.478909][ T1224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.512368][ T1224] usb 1-1: Product: syz [ 144.527247][ T1224] usb 1-1: Manufacturer: syz [ 144.531917][ T1224] usb 1-1: SerialNumber: syz [ 144.652821][ T1224] usb 1-1: config 0 descriptor?? [ 144.667236][ T1224] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 144.912538][ T1224] usb 1-1: selecting invalid altsetting 1 [ 144.919231][ T1224] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 144.937679][ T1224] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 144.985976][ T1224] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 145.263410][ T6314] netlink: 'syz.0.92': attribute type 21 has an invalid length. [ 145.287956][ T1224] usb 1-1: media controller created [ 145.425353][ T1224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.902849][ T2972] team0 (unregistering): Port device team_slave_1 removed [ 145.955531][ T2972] team0 (unregistering): Port device team_slave_0 removed [ 146.546192][ T1224] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 146.577265][ T1224] zl10353_read_register: readreg error (reg=127, ret==-110) [ 147.046737][ T24] usb 1-1: USB disconnect, device number 3 [ 147.064232][ T6221] chnl_net:caif_netlink_parms(): no params data found [ 148.977576][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 149.216430][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 149.807082][ T10] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 149.841141][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.858889][ T10] usb 1-1: Product: syz [ 149.894149][ T10] usb 1-1: Manufacturer: syz [ 149.906406][ T10] usb 1-1: SerialNumber: syz [ 149.998460][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.036239][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.043650][ T6221] bridge_slave_0: entered allmulticast mode [ 150.121802][ T6221] bridge_slave_0: entered promiscuous mode [ 150.180025][ T10] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 150.219501][ T10] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 150.240642][ T10] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 150.266265][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.273441][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.289835][ T6350] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 150.321519][ T6221] bridge_slave_1: entered allmulticast mode [ 150.353681][ T6221] bridge_slave_1: entered promiscuous mode [ 150.727869][ T6359] overlayfs: missing 'lowerdir' [ 152.618939][ T5902] usb 1-1: USB disconnect, device number 4 [ 152.633314][ T5902] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 153.247569][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.294137][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.304083][ T5902] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 153.334777][ T5902] visor 1-1:1.0: device disconnected [ 153.368607][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 154.729503][ T6221] team0: Port device team_slave_0 added [ 154.781903][ T6221] team0: Port device team_slave_1 added [ 155.195626][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.202643][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.231381][ T6400] kAFS: No cell specified [ 155.396267][ T6221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.329257][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.555423][ T5872] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.632254][ T6406] random: crng reseeded on system resumption [ 156.766103][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.792079][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.851403][ T6221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.935811][ T5872] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 156.951725][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.365454][ T5872] usb 3-1: config 0 descriptor?? [ 158.145510][ T6221] hsr_slave_0: entered promiscuous mode [ 158.308285][ T6221] hsr_slave_1: entered promiscuous mode [ 158.314751][ T6221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.328179][ T6221] Cannot create hsr debugfs directory [ 158.462538][ T6421] overlayfs: missing 'lowerdir' [ 159.402331][ T5872] usb 3-1: USB disconnect, device number 5 [ 162.454150][ T6221] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.641878][ T6221] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.767512][ T6451] overlayfs: missing 'lowerdir' [ 163.678763][ T6221] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.980277][ T6221] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.139401][ T6481] syz_tun: entered allmulticast mode [ 167.375944][ T5885] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 167.586164][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 167.744572][ T5885] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 167.815121][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.871281][ T5885] usb 3-1: Product: syz [ 167.892551][ T5885] usb 3-1: Manufacturer: syz [ 167.918424][ T5885] usb 3-1: SerialNumber: syz [ 168.088792][ T6221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.276347][ T5885] usb 3-1: palm_os_4_probe - error -110 getting connection info [ 168.309422][ T5885] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 168.636282][ T5885] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 168.644822][ T6221] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.671344][ T5885] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 273.745031][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 273.752095][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6494/1:b..l [ 273.760377][ C0] rcu: (detected by 0, t=10502 jiffies, g=15789, q=218 ncpus=2) [ 273.768127][ C0] task:syz.3.139 state:R running task stack:21192 pid:6494 tgid:6491 ppid:5836 task_flags:0x400140 flags:0x00004002 [ 273.782227][ C0] Call Trace: [ 273.785532][ C0] [ 273.788488][ C0] __schedule+0x16a2/0x4cb0 [ 273.793053][ C0] ? __lock_acquire+0xab9/0xd20 [ 273.797936][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 273.803256][ C0] ? __mutex_trylock_common+0x153/0x260 [ 273.808843][ C0] ? __pfx___schedule+0x10/0x10 [ 273.813747][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 273.819079][ C0] preempt_schedule_irq+0xb5/0x150 [ 273.824227][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 273.830011][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 273.835861][ C0] irqentry_exit+0x6f/0x90 [ 273.840306][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.846311][ C0] RIP: 0010:unwind_next_frame+0x2b4/0x2390 [ 273.852157][ C0] Code: 00 00 fc ff df 0f 84 03 02 00 00 4a 8d 14 ad b4 31 ad 8f 45 29 e8 4a 8d 1c 82 48 83 c3 fc 49 89 d5 48 39 da 0f 86 1c 10 00 00 <49> 29 d5 e9 80 00 00 00 31 db e9 eb 16 00 00 49 81 fc 00 10 03 91 [ 273.871793][ C0] RSP: 0018:ffffc90003fbe118 EFLAGS: 00000202 [ 273.877911][ C0] RAX: ffffffff8fbb5310 RBX: ffffffff8fbb5314 RCX: ffffffff8fbb5318 [ 273.885915][ C0] RDX: ffffffff8fbb5314 RSI: ffffffff903a8324 RDI: ffffffff8be191a0 [ 273.893918][ C0] RBP: ffffffff8fbb5318 R08: 0000000000000001 R09: ffffffff81727865 [ 273.901914][ C0] R10: ffffc90003fbe238 R11: ffffffff81acdb00 R12: ffffffff82166cfa [ 273.909912][ C0] R13: ffffffff8fbb5314 R14: ffffc90003fbe1e8 R15: ffffffff8fbb5314 [ 273.918085][ C0] ? kmem_cache_alloc_node_noprof+0x1ba/0x3c0 [ 273.924194][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 273.930381][ C0] ? unwind_next_frame+0xa5/0x2390 [ 273.935535][ C0] ? unwind_next_frame+0xd4/0x2390 [ 273.940684][ C0] ? unwind_next_frame+0xa5/0x2390 [ 273.945835][ C0] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 273.951942][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 273.958131][ C0] arch_stack_walk+0x11c/0x150 [ 273.962936][ C0] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 273.969042][ C0] stack_trace_save+0x9c/0xe0 [ 273.973757][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 273.979173][ C0] ? stack_depot_save_flags+0x40/0x900 [ 273.984675][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.990769][ C0] kasan_save_track+0x3e/0x80 [ 273.995481][ C0] ? kasan_save_track+0x3e/0x80 [ 274.000359][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 274.005415][ C0] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 274.011845][ C0] __kasan_slab_alloc+0x6c/0x80 [ 274.016732][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 274.022663][ C0] ? __alloc_skb+0x112/0x2d0 [ 274.027291][ C0] __alloc_skb+0x112/0x2d0 [ 274.031875][ C0] __ipv6_ifa_notify+0x1e8/0xac0 [ 274.036857][ C0] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 274.042349][ C0] ? __pfx_fib6_clean_node+0x10/0x10 [ 274.047677][ C0] ? __lock_acquire+0xab9/0xd20 [ 274.052567][ C0] ? fib6_flush_trees+0x12c/0x1a0 [ 274.057672][ C0] ? __pfx_fib6_flush_trees+0x10/0x10 [ 274.063076][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 274.068476][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 274.074224][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 274.079462][ C0] add_addr+0x1b8/0x2d0 [ 274.083662][ C0] add_v4_addrs+0x70c/0xbd0 [ 274.088231][ C0] ? __pfx_add_v4_addrs+0x10/0x10 [ 274.093290][ C0] ? rcu_is_watching+0x15/0xb0 [ 274.098106][ C0] ? ipv6_find_idev+0x11a/0x1d0 [ 274.102994][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 274.108651][ C0] ? __pfx_igmp6_group_added+0x10/0x10 [ 274.114147][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 274.120174][ C0] addrconf_init_auto_addrs+0x39b/0xb50 [ 274.125756][ C0] ? __pfx_addrconf_init_auto_addrs+0x10/0x10 [ 274.131872][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 274.137535][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 274.142583][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 274.148585][ C0] ? tls_dev_event+0x717/0xec0 [ 274.153392][ C0] ? addrconf_link_ready+0x112/0x170 [ 274.158713][ C0] addrconf_notify+0xacc/0x1010 [ 274.163609][ C0] notifier_call_chain+0x1b3/0x3e0 [ 274.168760][ C0] __dev_notify_flags+0x18d/0x2e0 [ 274.173838][ C0] ? __pfx___dev_notify_flags+0x10/0x10 [ 274.179413][ C0] ? __dev_change_flags+0x4cc/0x6d0 [ 274.184649][ C0] ? __pfx___dev_change_flags+0x10/0x10 [ 274.190241][ C0] rtnl_newlink_create+0x61c/0xb00 [ 274.195405][ C0] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 274.201072][ C0] ? rtnl_newlink+0x8db/0x1c70 [ 274.205872][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 274.210936][ C0] ? ns_capable+0x8a/0xf0 [ 274.215304][ C0] rtnl_newlink+0x16d6/0x1c70 [ 274.220013][ C0] ? netlink_sendmsg+0x805/0xb30 [ 274.224995][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 274.230073][ C0] ? kasan_quarantine_put+0xdd/0x220 [ 274.235391][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.240622][ C0] ? nlmon_xmit+0xb0/0x100 [ 274.245077][ C0] ? kmem_cache_free+0x18f/0x400 [ 274.250060][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 274.255463][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.260688][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 274.266099][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 274.271852][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 274.277011][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 274.282161][ C0] ? __dev_queue_xmit+0x27e/0x3a70 [ 274.287309][ C0] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 274.292547][ C0] ? __lock_acquire+0xab9/0xd20 [ 274.297448][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 274.302499][ C0] rtnetlink_rcv_msg+0x7cc/0xb70 [ 274.307471][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 274.312608][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.318097][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 274.323146][ C0] ? __copy_skb_header+0xa7/0x550 [ 274.328207][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 274.333618][ C0] netlink_rcv_skb+0x208/0x470 [ 274.338418][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.343908][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.349238][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.354472][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.359727][ C0] netlink_unicast+0x75b/0x8d0 [ 274.364532][ C0] netlink_sendmsg+0x805/0xb30 [ 274.369345][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.374685][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.379992][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.385312][ C0] __sock_sendmsg+0x21c/0x270 [ 274.390018][ C0] ____sys_sendmsg+0x505/0x830 [ 274.394827][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.400160][ C0] ? import_iovec+0x74/0xa0 [ 274.404701][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 274.409420][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.414692][ C0] ? __fget_files+0x2a/0x420 [ 274.419304][ C0] ? __fget_files+0x3a0/0x420 [ 274.424016][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 274.428992][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.434504][ C0] ? rcu_is_watching+0x15/0xb0 [ 274.439303][ C0] ? do_syscall_64+0xbe/0x3b0 [ 274.444016][ C0] do_syscall_64+0xfa/0x3b0 [ 274.448569][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.453813][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.459910][ C0] ? clear_bhb_loop+0x60/0xb0 [ 274.464629][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.470553][ C0] RIP: 0033:0x7fab6d78e969 [ 274.475104][ C0] RSP: 002b:00007fab6e539038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.483554][ C0] RAX: ffffffffffffffda RBX: 00007fab6d9b6080 RCX: 00007fab6d78e969 [ 274.491560][ C0] RDX: 0000000020000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 274.499564][ C0] RBP: 00007fab6d810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 274.507563][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.515566][ C0] R13: 0000000000000000 R14: 00007fab6d9b6080 R15: 00007fffd6fc5578 [ 274.523597][ C0] [ 274.526645][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10488 jiffies! g15789 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 274.538995][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=7127 [ 274.546837][ C0] rcu: rcu_preempt kthread starved for 10489 jiffies! g15789 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 274.558248][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 274.568238][ C0] rcu: RCU grace-period kthread stack dump: [ 274.574143][ C0] task:rcu_preempt state:I stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 274.586117][ C0] Call Trace: [ 274.589424][ C0] [ 274.592390][ C0] __schedule+0x16a2/0x4cb0 [ 274.596960][ C0] ? schedule+0x165/0x360 [ 274.601335][ C0] ? __pfx___schedule+0x10/0x10 [ 274.606237][ C0] ? schedule+0x91/0x360 [ 274.610521][ C0] schedule+0x165/0x360 [ 274.614719][ C0] schedule_timeout+0x12b/0x270 [ 274.619605][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 274.625009][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 274.630942][ C0] ? __pfx_process_timeout+0x10/0x10 [ 274.636273][ C0] ? prepare_to_swait_event+0x341/0x380 [ 274.642005][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 274.646894][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.652136][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 274.658320][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 274.663628][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 274.668870][ C0] ? finish_swait+0xcd/0x1f0 [ 274.673501][ C0] rcu_gp_kthread+0x99/0x390 [ 274.678135][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 274.683359][ C0] ? __kthread_parkme+0x7b/0x200 [ 274.688327][ C0] ? __kthread_parkme+0x1a1/0x200 [ 274.693391][ C0] kthread+0x70e/0x8a0 [ 274.697506][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 274.702759][ C0] ? __pfx_kthread+0x10/0x10 [ 274.707392][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.712631][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.717854][ C0] ? __pfx_kthread+0x10/0x10 [ 274.722479][ C0] ret_from_fork+0x3fc/0x770 [ 274.727112][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 274.732261][ C0] ? __switch_to_asm+0x39/0x70 [ 274.737139][ C0] ? __switch_to_asm+0x33/0x70 [ 274.741973][ C0] ? __pfx_kthread+0x10/0x10 [ 274.746598][ C0] ret_from_fork_asm+0x1a/0x30 [ 274.751411][ C0] [ 274.754446][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 274.760799][ C0] Sending NMI from CPU 0 to CPUs 1: [ 274.766133][ C1] NMI backtrace for cpu 1 [ 274.766151][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 274.766180][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.766195][ C1] RIP: 0010:rcu_is_watching+0x67/0xb0 [ 274.766221][ C1] Code: 89 f7 e8 6c 2d 7a 00 48 c7 c3 58 9f 99 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 49 5b f1 10 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc cc cc cc cc e8 b1 71 [ 274.766236][ C1] RSP: 0018:ffffc90000a08cf8 EFLAGS: 00000002 [ 274.766252][ C1] RAX: 00000000004c01b5 RBX: ffff8880b8732f58 RCX: 6067c77b9ebb1100 [ 274.766265][ C1] RDX: ffff88801d28da00 RSI: ffffffff8be191e0 RDI: ffffffff8be191a0 [ 274.766279][ C1] RBP: ffffc90000a08e90 R08: ffffffff8f9f7ef7 R09: 1ffffffff1f3efde [ 274.766292][ C1] R10: dffffc0000000000 R11: fffffbfff1f3efdf R12: ffff88805ef66340 [ 274.766306][ C1] R13: dffffc0000000000 R14: ffffffff8db7fc68 R15: dffffc0000000000 [ 274.766320][ C1] FS: 0000000000000000(0000) GS:ffff888125d99000(0000) knlGS:0000000000000000 [ 274.766334][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.766346][ C1] CR2: 0000200000038000 CR3: 0000000021fd4000 CR4: 00000000003526f0 [ 274.766362][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 274.766373][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 274.766384][ C1] Call Trace: [ 274.766392][ C1] [ 274.766400][ C1] debug_deactivate+0x80/0x200 [ 274.766432][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 274.766476][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 274.766503][ C1] ? read_tsc+0x9/0x20 [ 274.766528][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 274.766563][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 274.766588][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 274.766617][ C1] [ 274.766623][ C1] [ 274.766630][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 274.766649][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 274.766678][ C1] Code: 03 d5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 b2 2b 00 f3 0f 1e fa fb f4 d8 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 274.766692][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 274.766707][ C1] RAX: 6067c77b9ebb1100 RBX: ffffffff819752a8 RCX: 6067c77b9ebb1100 [ 274.766721][ C1] RDX: 0000000000000001 RSI: ffffffff8d95adbe RDI: ffffffff8be19200 [ 274.766733][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 274.766747][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8f9f7ef0 [ 274.766760][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a51b40 [ 274.766780][ C1] ? do_idle+0x1e8/0x510 [ 274.766807][ C1] default_idle+0x13/0x20 [ 274.766825][ C1] default_idle_call+0x74/0xb0 [ 274.766846][ C1] do_idle+0x1e8/0x510 [ 274.766869][ C1] ? __pfx_do_idle+0x10/0x10 [ 274.766899][ C1] cpu_startup_entry+0x44/0x60 [ 274.766920][ C1] start_secondary+0x101/0x110 [ 274.766937][ C1] common_startup_64+0x13e/0x147 [ 274.766971][ C1]