last executing test programs: 27.050686369s ago: executing program 0 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00006b0000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000cc0)=""/102392, 0x18ff8) r5 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x4c80, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0x43, 0xa0, 0x1b8, 0x98, 0x248, 0x178, 0x178, 0x248, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @multicast2, 0xff000000, 0xff, 'syz_tun\x00', 'geneve1\x00', {0xff}, {0xff}, 0x88, 0x2, 0x3d}, 0x12a, 0x198, 0x1b8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@cluster={{0x30}, {0x80000, 0x2, 0x6, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) 21.956632645s ago: executing program 0 (id=31): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0x3}, 0x0) r2 = fsopen(&(0x7f00000003c0)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)=@x86={0x5, 0x7, 0x2, 0x0, 0x3, 0x0, 0x8, 0x10, 0x7, 0x0, 0x0, 0xa, 0x0, 0x2, 0x4, 0x7f, 0x9, 0x9, 0x1, '\x00', 0x8, 0x8}) r3 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(&(0x7f0000000600)={0x88000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x5}, &(0x7f0000000380)=""/40, 0x28, &(0x7f0000000500)=""/192, &(0x7f00000005c0)=[r3], 0x1}, 0x58) faccessat2(0xffffffffffffff9c, 0x0, 0x5, 0x300) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000000c0)) ioctl$mixer_OSS_GETVERSION(r4, 0x80086303, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, r5, 0x0) 17.984290338s ago: executing program 2 (id=36): r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x2000000000006) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000007c0)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000800)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r4, &(0x7f0000001f40)=""/102400, 0x19000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r5, &(0x7f000001af40)=[{{0x0, 0x0, 0x0}, 0xe}, {{&(0x7f000001b080)=@pppol2tp, 0x80, &(0x7f000001b100)}, 0x1}, {{&(0x7f000001b3c0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f000001b440)}, 0xb}, {{&(0x7f000001c640)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f000001c6c0), 0x0, &(0x7f000001c700)=""/171, 0xab}, 0x8000}], 0x4, 0x2, 0x0) lseek(r0, 0x8, 0x4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r7, r6, 0x0, 0xf2) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x2000000, 0x11, 0x0, &(0x7f0000000680)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) 15.801491899s ago: executing program 2 (id=39): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x749}) r1 = epoll_create1(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0xfffffed5, 0x26006850) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102368, 0x18fe0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000192c0)={0x140000008}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019300)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000019340)=[{&(0x7f0000019380)=""/163, 0xa3}], 0x1) 15.260732603s ago: executing program 1 (id=40): r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) capset(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1451c2, 0x0) ftruncate(r1, 0x8800000) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/4096, 0x20001b80}, {&(0x7f0000001500)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001580)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000015c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000001600)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001640), 0x0, 0x0) read$msr(r2, &(0x7f0000001680)=""/102392, 0x18ff8) io_setup(0x2, &(0x7f000001a680)=0x0) io_submit(r3, 0x1, &(0x7f000001a6c0)=[0x0]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 15.122640588s ago: executing program 3 (id=41): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f0000000c40)=""/102368, 0x18fe0) sched_setscheduler(0x0, 0x1, &(0x7f0000019c40)=0x20000005) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file1\x00', 0x20400, 0x20) 13.334289258s ago: executing program 3 (id=42): r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x2000000000006) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000007c0)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000800)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r4, &(0x7f0000001f40)=""/102400, 0x19000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r5, &(0x7f000001af40)=[{{0x0, 0x0, 0x0}, 0xe}, {{&(0x7f000001b080)=@pppol2tp, 0x80, &(0x7f000001b100)=[{&(0x7f000001b140)=""/141, 0x8d}, {0x0}], 0x2}, 0x1}, {{&(0x7f000001b3c0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f000001b440)}, 0xb}, {{&(0x7f000001c640)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f000001c6c0), 0x0, &(0x7f000001c700)=""/171, 0xab}, 0x8000}], 0x4, 0x2, 0x0) lseek(r0, 0x8, 0x4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r7, r6, 0x0, 0xf2) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x2000000, 0x11, 0x0, &(0x7f0000000680)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) 12.644726268s ago: executing program 1 (id=43): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0x3}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = fsopen(&(0x7f00000003c0)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)=@x86={0x5, 0x7, 0x2, 0x0, 0x3, 0x0, 0x8, 0x10, 0x7, 0x0, 0x0, 0xa, 0x0, 0x2, 0x4, 0x7f, 0x9, 0x9, 0x1, '\x00', 0x8, 0x8}) r3 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(&(0x7f0000000600)={0x88000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x5}, &(0x7f0000000380)=""/40, 0x28, &(0x7f0000000500)=""/192, &(0x7f00000005c0)=[r3], 0x1}, 0x58) faccessat2(0xffffffffffffff9c, 0x0, 0x5, 0x300) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000000c0)) ioctl$mixer_OSS_GETVERSION(r4, 0x80086303, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, r5, 0x0) 9.487997288s ago: executing program 3 (id=44): openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newnexthop={0x28, 0x68, 0x800, 0x70bd27, 0x0, {0x0, 0x0, 0x1}, [@NHA_GROUP={0xc, 0x2, [{}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x12, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='./dev/sda1\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000540)='./mnt\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'rose0\x00', 0x112}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000640)={'geneve1\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x591, 0xe0, 0xd6}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0xc2b) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000780)={'rose0\x00', 0x102}) 9.483366699s ago: executing program 0 (id=45): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0x3}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = fsopen(&(0x7f00000003c0)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)=@x86={0x5, 0x7, 0x2, 0x0, 0x3, 0x0, 0x8, 0x10, 0x7, 0x0, 0x0, 0xa, 0x0, 0x2, 0x4, 0x7f, 0x9, 0x9, 0x1, '\x00', 0x8, 0x8}) r3 = getpid() syz_clone3(&(0x7f0000000600)={0x88000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x5}, &(0x7f0000000380)=""/40, 0x28, &(0x7f0000000500)=""/192, &(0x7f00000005c0)=[r3], 0x1}, 0x58) faccessat2(0xffffffffffffff9c, 0x0, 0x5, 0x300) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000000c0)) ioctl$mixer_OSS_GETVERSION(r4, 0x80086303, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, r5, 0x0) 9.306338697s ago: executing program 2 (id=46): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffff8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.911988457s ago: executing program 1 (id=47): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000200025a729bd7000fddbdf250a0080cdff000001000000001400020000000068fff12a314da39100000000000000ffff7f000001050015000200000014dbb5987e5e1d5de20e47c30590f84ac90530c97e71828717f4f313835d0b51972b5139141b0494dc08ae4c44eea4fd631244c7455a5431"], 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000300)="120000000300000000", 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='synaptics-smbus', 0xf) read$FUSE(r2, 0x0, 0x0) 8.580237411s ago: executing program 2 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r4, 0x2) 6.771350264s ago: executing program 2 (id=49): r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x2000000000006) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000007c0)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000800)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r4, &(0x7f0000001f40)=""/102400, 0x19000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r5, &(0x7f000001af40)=[{{0x0, 0x0, 0x0}, 0xe}, {{&(0x7f000001b080)=@pppol2tp, 0x80, &(0x7f000001b100)=[{&(0x7f000001b140)=""/141, 0x8d}, {0x0}], 0x2}, 0x1}, {{&(0x7f000001b3c0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f000001b440)}, 0xb}, {{&(0x7f000001c640)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f000001c6c0), 0x0, &(0x7f000001c700)=""/171, 0xab}, 0x8000}], 0x4, 0x2, 0x0) lseek(r0, 0x8, 0x4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r7, r6, 0x0, 0xf2) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x2000000, 0x11, 0x0, &(0x7f0000000680)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) 6.676156513s ago: executing program 1 (id=50): openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newnexthop={0x28, 0x68, 0x800, 0x70bd27, 0x0, {0x0, 0x0, 0x1}, [@NHA_GROUP={0xc, 0x2, [{}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x12, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='./dev/sda1\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000540)='./mnt\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'rose0\x00', 0x112}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000640)={'geneve1\x00', 0x400}) 5.33042532s ago: executing program 1 (id=51): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, 0x0, 0x0) 4.873563906s ago: executing program 1 (id=52): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0x3}, 0x0) r2 = fsopen(&(0x7f00000003c0)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)=@x86={0x5, 0x7, 0x2, 0x0, 0x3, 0x0, 0x8, 0x10, 0x7, 0x0, 0x0, 0xa, 0x0, 0x2, 0x4, 0x7f, 0x9, 0x9, 0x1, '\x00', 0x8, 0x8}) r3 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(&(0x7f0000000600)={0x88000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x5}, &(0x7f0000000380)=""/40, 0x28, &(0x7f0000000500)=""/192, &(0x7f00000005c0)=[r3], 0x1}, 0x58) faccessat2(0xffffffffffffff9c, 0x0, 0x5, 0x300) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000000c0)) ioctl$mixer_OSS_GETVERSION(r4, 0x80086303, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, r5, 0x0) 4.602032343s ago: executing program 3 (id=53): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x749}) r1 = epoll_create1(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0xfffffed5, 0x26006850) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102368, 0x18fe0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000192c0)={0x140000008}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019300)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000019340)=[{&(0x7f0000019380)=""/163, 0xa3}], 0x1) 4.421646862s ago: executing program 0 (id=54): write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000400)={0x180801400, &(0x7f0000000480)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) pidfd_send_signal(r5, 0x21, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0x200000e0) ppoll(&(0x7f0000000540)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.510312197s ago: executing program 0 (id=55): r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x2000000000006) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000007c0)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000800)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r4, &(0x7f0000001f40)=""/102400, 0x19000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r5, &(0x7f000001af40)=[{{0x0, 0x0, 0x0}, 0xe}, {{&(0x7f000001b080)=@pppol2tp, 0x80, &(0x7f000001b100)=[{&(0x7f000001b140)=""/141, 0x8d}, {0x0}], 0x2}, 0x1}, {{&(0x7f000001b3c0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f000001b440)}, 0xb}, {{&(0x7f000001c640)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f000001c6c0), 0x0, &(0x7f000001c700)=""/171, 0xab}, 0x8000}], 0x4, 0x2, 0x0) lseek(r0, 0x8, 0x4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r7, r6, 0x0, 0xf2) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x2000000, 0x11, 0x0, &(0x7f0000000680)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) 1.244261794s ago: executing program 3 (id=56): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000200025a729bd7000fddbdf250a0080cdff000001000000001400020000000068fff12a314da39100000000000000ffff7f000001050015000200000014dbb5987e5e1d5de20e47c30590f84ac90530c97e71828717f4f313835d0b51972b5139141b0494dc08ae4c44eea4fd631244c7455a5431"], 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='synaptics-smbus', 0xf) read$FUSE(r2, 0x0, 0x0) 316.098968ms ago: executing program 2 (id=57): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) syz_open_dev$video4linux(0x0, 0xff, 0x100082) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap(&(0x7f0000518000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x3a28d000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102368, 0x18fe0) timer_create(0x0, 0x0, &(0x7f0000019180)=0x0) timer_settime(r4, 0x1, &(0x7f00000191c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000019240), 0x0, 0x14b000) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000019280)={0x0, 0x0, &(0x7f00000192c0)={&(0x7f0000019300)={0x10, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) openat(0xffffffffffffff9c, &(0x7f0000019340)='.\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000019380)='.\x00', 0xffffffd3) capset(&(0x7f00000193c0)={0x19980330}, &(0x7f0000019400)={0x0, 0x0, 0x9}) accept(r0, 0x0, 0x0) 106.440369ms ago: executing program 0 (id=58): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000d00)=""/102400, 0x19000) sched_setaffinity(r2, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000380)=""/66, 0x0, 0x200000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000440)={0x1, 0x1, 0x0, &(0x7f0000000480)=""/85, 0x0, 0x60000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000500)=0xfffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000400)='.', 0x1}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 3 (id=59): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) getpgrp(0x0) setrlimit(0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000019280), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000192c0)={0x1}, 0x8) shmget(0x2, 0x2000, 0x8, &(0x7f000040f000/0x2000)=nil) statx(0xffffffffffffffff, &(0x7f0000019300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x20, &(0x7f0000019380)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019500)={&(0x7f0000019540)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xaf}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x24}}, 0x24000806) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 83.912765][ T5777] cgroup: Unknown subsys name 'net' [ 84.080212][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.782329][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.711475][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.720534][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.728878][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.739241][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.747394][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.754953][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.793540][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.813403][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.821634][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.829242][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.838157][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.889559][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.897461][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.898441][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.913692][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.920834][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.928680][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.936024][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.939994][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.947823][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.952400][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.960155][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.972318][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.980998][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.055300][ T5789] (null): rxe_set_mtu: Set mtu to 1024 [ 88.069349][ T5793] (null): rxe_set_mtu: Set mtu to 1024 [ 88.078859][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.094860][ T5795] (null): rxe_set_mtu: Set mtu to 1024 [ 88.105880][ T5795] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.113219][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.124523][ T5793] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.132124][ T5798] (null): rxe_set_mtu: Set mtu to 1024 [ 88.138589][ T5798] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.186122][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.529042][ T5789] infiniband rxe0: set active [ 88.539008][ T5789] infiniband rxe0: added rxe_eth0 [ 88.561563][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.667831][ T5789] RDS/IB: rxe0: added [ 88.675478][ T5789] smc: adding ib device rxe0 with port count 1 [ 88.702801][ T5789] smc: ib device rxe0 port 1 has pnetid [ 88.734369][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.748548][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.833425][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 88.952650][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 88.995310][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 89.073284][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.379195][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.387434][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.395218][ T5798] bridge_slave_0: entered allmulticast mode [ 89.405663][ T5798] bridge_slave_0: entered promiscuous mode [ 89.419463][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.427042][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.434356][ T5795] bridge_slave_0: entered allmulticast mode [ 89.441779][ T5795] bridge_slave_0: entered promiscuous mode [ 89.464039][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.481000][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.488275][ T5798] bridge_slave_1: entered allmulticast mode [ 89.496113][ T5798] bridge_slave_1: entered promiscuous mode [ 89.513599][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.520960][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.528162][ T5795] bridge_slave_1: entered allmulticast mode [ 89.536164][ T5795] bridge_slave_1: entered promiscuous mode [ 89.565103][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.571617][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.579087][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.587210][ T5793] bridge_slave_0: entered allmulticast mode [ 89.595337][ T5793] bridge_slave_0: entered promiscuous mode [ 89.628793][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.676750][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.694274][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.701856][ T5793] bridge_slave_1: entered allmulticast mode [ 89.709318][ T5793] bridge_slave_1: entered promiscuous mode [ 89.731780][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.775386][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.804475][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.841627][ T5099] Bluetooth: hci0: command tx timeout [ 89.847923][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.869560][ T5798] team0: Port device team_slave_0 added [ 89.883758][ T5798] team0: Port device team_slave_1 added [ 89.914773][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.927762][ T5795] team0: Port device team_slave_0 added [ 89.971861][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.978875][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.004925][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.020229][ T5795] team0: Port device team_slave_1 added [ 90.026411][ T5789] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.051184][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.058285][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.091715][ T5099] Bluetooth: hci3: command tx timeout [ 90.097391][ T5099] Bluetooth: hci2: command tx timeout [ 90.103170][ T5099] Bluetooth: hci1: command tx timeout [ 90.120920][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.182084][ T5793] team0: Port device team_slave_0 added [ 90.193783][ T5793] team0: Port device team_slave_1 added [ 90.229328][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.236620][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.262637][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.315147][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.325886][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.352730][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.386933][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.394416][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.421346][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.441314][ T5798] hsr_slave_0: entered promiscuous mode [ 90.448311][ T5798] hsr_slave_1: entered promiscuous mode [ 90.462608][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.469601][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.495927][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.559014][ T5795] hsr_slave_0: entered promiscuous mode [ 90.565604][ T5795] hsr_slave_1: entered promiscuous mode [ 90.572398][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.580317][ T5795] Cannot create hsr debugfs directory [ 90.683628][ T5793] hsr_slave_0: entered promiscuous mode [ 90.690167][ T5793] hsr_slave_1: entered promiscuous mode [ 90.697099][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.705431][ T5793] Cannot create hsr debugfs directory [ 91.048625][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 91.179855][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.196600][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.230443][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.239984][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.247567][ T5789] bridge_slave_0: entered allmulticast mode [ 91.255372][ T5789] bridge_slave_0: entered promiscuous mode [ 91.263379][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.275892][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.287652][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.296250][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.303732][ T5789] bridge_slave_1: entered allmulticast mode [ 91.311601][ T5789] bridge_slave_1: entered promiscuous mode [ 91.384158][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.412737][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.432821][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.448147][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.461999][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.486538][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.534674][ T5789] team0: Port device team_slave_0 added [ 91.566688][ T5789] team0: Port device team_slave_1 added [ 91.629384][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.643126][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.650683][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.677650][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.692191][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.699198][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.725920][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.742521][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.757109][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.768089][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.852254][ T5789] hsr_slave_0: entered promiscuous mode [ 91.858990][ T5789] hsr_slave_1: entered promiscuous mode [ 91.865802][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.873589][ T5789] Cannot create hsr debugfs directory [ 91.910917][ T5794] Bluetooth: hci0: command tx timeout [ 92.077813][ T974] cfg80211: failed to load regulatory.db [ 92.105484][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.152245][ T5794] Bluetooth: hci1: command tx timeout [ 92.157727][ T5794] Bluetooth: hci2: command tx timeout [ 92.163583][ T5099] Bluetooth: hci3: command tx timeout [ 92.203397][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.247263][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.254698][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.296552][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.317550][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.324781][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.338211][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.366412][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.382108][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.396321][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.409834][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.432295][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.466089][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.473336][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.490258][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.497535][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.552343][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.616737][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.624022][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.647324][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.654594][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.698398][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.857809][ T5795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.904978][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.985826][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.043205][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.050388][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.125507][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.132765][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.227660][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.278795][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.395319][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.414816][ T5798] veth0_vlan: entered promiscuous mode [ 93.477622][ T5798] veth1_vlan: entered promiscuous mode [ 93.519057][ T5793] veth0_vlan: entered promiscuous mode [ 93.535101][ T5793] veth1_vlan: entered promiscuous mode [ 93.614027][ T5795] veth0_vlan: entered promiscuous mode [ 93.648634][ T5795] veth1_vlan: entered promiscuous mode [ 93.680631][ T5793] veth0_macvtap: entered promiscuous mode [ 93.699059][ T5798] veth0_macvtap: entered promiscuous mode [ 93.712520][ T5793] veth1_macvtap: entered promiscuous mode [ 93.723807][ T5798] veth1_macvtap: entered promiscuous mode [ 93.760493][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.789568][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.805302][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.825876][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.838332][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.850567][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.862985][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.874264][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.887792][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.908740][ T5798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.919698][ T5798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.929185][ T5798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.938393][ T5798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.955250][ T5795] veth0_macvtap: entered promiscuous mode [ 93.976668][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.985711][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.995766][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.005209][ T5794] Bluetooth: hci0: command tx timeout [ 94.008405][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.025417][ T5795] veth1_macvtap: entered promiscuous mode [ 94.064735][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.076660][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.087611][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.098174][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.109857][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.143144][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.155756][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.166310][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.178084][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.190402][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.213305][ T5789] veth0_vlan: entered promiscuous mode [ 94.235249][ T5794] Bluetooth: hci2: command tx timeout [ 94.240715][ T5794] Bluetooth: hci3: command tx timeout [ 94.246554][ T5800] Bluetooth: hci1: command tx timeout [ 94.278833][ T5795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.287878][ T5795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.299794][ T5795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.309125][ T5795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.347259][ T5789] veth1_vlan: entered promiscuous mode [ 94.438714][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.449524][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.532809][ T5789] veth0_macvtap: entered promiscuous mode [ 94.542252][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.550142][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.597616][ T5789] veth1_macvtap: entered promiscuous mode [ 94.607031][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.622475][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.641789][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.647507][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.649664][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.682950][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.761761][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.770522][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.801705][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.808323][ T5798] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.822728][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.855753][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.867201][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.877933][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.889442][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.909517][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.930428][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.961137][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.972190][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.983057][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.993256][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.005780][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.020259][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.051843][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.060708][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.073262][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.082357][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.110432][ T5883] Zero length message leads to an empty skb [ 96.070903][ T5794] Bluetooth: hci0: command tx timeout [ 96.311898][ T5800] Bluetooth: hci1: command tx timeout [ 96.317462][ T5099] Bluetooth: hci2: command tx timeout [ 96.323041][ T5794] Bluetooth: hci3: command tx timeout [ 96.334629][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.348242][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.591268][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.661072][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.740973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.961311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.847383][ T5908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 99.932432][ T5908] Bluetooth: MGMT ver 1.22 [ 100.056431][ T5908] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 101.521033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.930040][ T5915] warning: `syz.0.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.055136][ T5857] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.081339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 104.490912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 109.610872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 110.541006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 117.290902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 117.401130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 119.319410][ T6007] syzkaller0: entered promiscuous mode [ 119.351240][ T6007] syzkaller0: entered allmulticast mode [ 120.780977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 123.631152][ T6026] nbd: nbd3 already in use [ 125.370601][ T6030] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 128.574609][ T6053] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure [ 132.687685][ T6072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.38'. [ 132.811524][ T6072] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 133.041411][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.048344][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.311201][ T6105] syzkaller0: entered promiscuous mode [ 139.337345][ T6105] syzkaller0: entered allmulticast mode [ 139.640270][ T6109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.47'. [ 139.756362][ T6109] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 146.370764][ C0] sched: RT throttling activated [ 147.969905][ T6155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.56'. [ 148.094080][ T6155] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8 [ 148.728125][ C0] ------------[ cut here ]------------ [ 148.733995][ C0] WARNING: CPU: 0 PID: 0 at net/mac80211/tx.c:5135 __ieee80211_beacon_get+0x1141/0x1520 [ 148.743919][ C0] Modules linked in: [ 148.747945][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 148.755065][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 148.765230][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 148.771681][ C0] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 148.791491][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 148.797619][ C0] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffffffff8de93480 [ 148.805699][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.813760][ C0] RBP: 0000000000000000 R08: ffffffff8de93480 R09: 0000000000000003 [ 148.821805][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805bdc2420 [ 148.829810][ C0] R13: ffff88805cfa9824 R14: ffff88805bdc2910 R15: ffff88805cfa9800 [ 148.837861][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 148.846959][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.853589][ C0] CR2: 00007f871552ed40 CR3: 000000001f341000 CR4: 00000000003506f0 [ 148.861602][ C0] Call Trace: [ 148.864894][ C0] [ 148.867775][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 148.873380][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 148.878974][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 148.885785][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 148.891398][ C0] __iterate_interfaces+0x225/0x4c0 [ 148.896616][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 148.902902][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 148.910119][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 148.916406][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 148.923481][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 148.928711][ C0] ? hw_scan_work+0xf10/0xf10 [ 148.933480][ C0] __hrtimer_run_queues+0x525/0xc10 [ 148.938732][ C0] ? hrtimer_interrupt+0x980/0x980 [ 148.943905][ C0] ? read_tsc+0x9/0x20 [ 148.947999][ C0] hrtimer_run_softirq+0x177/0x290 [ 148.953160][ C0] handle_softirqs+0x27d/0x820 [ 148.957942][ C0] ? read_tsc+0x9/0x20 [ 148.962050][ C0] ? ktime_get+0x24b/0x280 [ 148.966478][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 148.971279][ C0] ? do_softirq+0x1a0/0x1a0 [ 148.975794][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 148.981044][ C0] __irq_exit_rcu+0xd3/0x190 [ 148.985665][ C0] ? irq_exit_rcu+0x20/0x20 [ 148.990281][ C0] irq_exit_rcu+0x9/0x20 [ 148.994561][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 149.000216][ C0] [ 149.003185][ C0] [ 149.006127][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 149.012149][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 149.017809][ C0] Code: f1 33 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 61 50 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 149.037466][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 149.043610][ C0] RAX: 4d51b81175331200 RBX: ffffffff81635d01 RCX: 4d51b81175331200 [ 149.051641][ C0] RDX: 0000000000000001 RSI: ffffffff8aead140 RDI: ffffffff8b3c5260 [ 149.059673][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8c36b6b R09: 1ffff11017186d6d [ 149.067722][ C0] R10: dffffc0000000000 R11: ffffed1017186d6e R12: 1ffffffff1bc0fbc [ 149.075744][ C0] R13: dffffc0000000000 R14: 1ffffffff1bd2690 R15: 0000000000000000 [ 149.083772][ C0] ? do_idle+0x221/0x5c0 [ 149.088043][ C0] default_idle+0x13/0x20 [ 149.092413][ C0] default_idle_call+0x6c/0xa0 [ 149.097189][ C0] do_idle+0x221/0x5c0 [ 149.101341][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 149.106649][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 149.112346][ C0] cpu_startup_entry+0x43/0x60 [ 149.117140][ C0] rest_init+0x2e2/0x300 [ 149.121445][ C0] ? time_init+0x40/0x40 [ 149.125735][ C0] arch_call_rest_init+0xe/0x10 [ 149.130612][ C0] start_kernel+0x461/0x4e0 [ 149.135266][ C0] x86_64_start_reservations+0x2a/0x30 [ 149.140827][ C0] x86_64_start_kernel+0x60/0x60 [ 149.145815][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 149.151970][ C0] [ 149.155004][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 149.162293][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 149.169324][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 149.179397][ C0] Call Trace: [ 149.182691][ C0] [ 149.185548][ C0] dump_stack_lvl+0x18c/0x250 [ 149.190268][ C0] ? show_regs_print_info+0x20/0x20 [ 149.195506][ C0] ? load_image+0x420/0x420 [ 149.200039][ C0] panic+0x2ca/0x720 [ 149.203954][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 149.208477][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 149.214745][ C0] __warn+0x2e0/0x470 [ 149.218766][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 149.224501][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 149.230234][ C0] report_bug+0x2be/0x4f0 [ 149.234612][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 149.240356][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 149.246111][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 149.251847][ C0] handle_bug+0xcf/0x120 [ 149.256107][ C0] exc_invalid_op+0x1a/0x50 [ 149.260628][ C0] asm_exc_invalid_op+0x1a/0x20 [ 149.265500][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 149.271843][ C0] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 149.291953][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 149.298040][ C0] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffffffff8de93480 [ 149.306030][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.314059][ C0] RBP: 0000000000000000 R08: ffffffff8de93480 R09: 0000000000000003 [ 149.322130][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805bdc2420 [ 149.330130][ C0] R13: ffff88805cfa9824 R14: ffff88805bdc2910 R15: ffff88805cfa9800 [ 149.338122][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 149.343904][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 149.349649][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 149.355221][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 149.360699][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 149.367510][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 149.373100][ C0] __iterate_interfaces+0x225/0x4c0 [ 149.378311][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 149.384587][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 149.391819][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 149.398097][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 149.405140][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 149.410349][ C0] ? hw_scan_work+0xf10/0xf10 [ 149.415038][ C0] __hrtimer_run_queues+0x525/0xc10 [ 149.420281][ C0] ? hrtimer_interrupt+0x980/0x980 [ 149.425407][ C0] ? read_tsc+0x9/0x20 [ 149.429496][ C0] hrtimer_run_softirq+0x177/0x290 [ 149.434626][ C0] handle_softirqs+0x27d/0x820 [ 149.439402][ C0] ? read_tsc+0x9/0x20 [ 149.443478][ C0] ? ktime_get+0x24b/0x280 [ 149.447921][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 149.452742][ C0] ? do_softirq+0x1a0/0x1a0 [ 149.457299][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 149.462521][ C0] __irq_exit_rcu+0xd3/0x190 [ 149.467140][ C0] ? irq_exit_rcu+0x20/0x20 [ 149.471675][ C0] irq_exit_rcu+0x9/0x20 [ 149.475928][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 149.481581][ C0] [ 149.484522][ C0] [ 149.487468][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 149.493467][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 149.499113][ C0] Code: f1 33 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 61 50 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 149.518752][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 149.524853][ C0] RAX: 4d51b81175331200 RBX: ffffffff81635d01 RCX: 4d51b81175331200 [ 149.532838][ C0] RDX: 0000000000000001 RSI: ffffffff8aead140 RDI: ffffffff8b3c5260 [ 149.540870][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8c36b6b R09: 1ffff11017186d6d [ 149.548880][ C0] R10: dffffc0000000000 R11: ffffed1017186d6e R12: 1ffffffff1bc0fbc [ 149.556869][ C0] R13: dffffc0000000000 R14: 1ffffffff1bd2690 R15: 0000000000000000 [ 149.564859][ C0] ? do_idle+0x221/0x5c0 [ 149.569128][ C0] default_idle+0x13/0x20 [ 149.573471][ C0] default_idle_call+0x6c/0xa0 [ 149.578251][ C0] do_idle+0x221/0x5c0 [ 149.582336][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 149.587566][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 149.593228][ C0] cpu_startup_entry+0x43/0x60 [ 149.598005][ C0] rest_init+0x2e2/0x300 [ 149.602261][ C0] ? time_init+0x40/0x40 [ 149.606524][ C0] arch_call_rest_init+0xe/0x10 [ 149.611417][ C0] start_kernel+0x461/0x4e0 [ 149.615942][ C0] x86_64_start_reservations+0x2a/0x30 [ 149.621421][ C0] x86_64_start_kernel+0x60/0x60 [ 149.626393][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 149.632484][ C0] [ 149.636122][ C0] Kernel Offset: disabled [ 149.640512][ C0] Rebooting in 86400 seconds..