last executing test programs: 3m41.570312837s ago: executing program 1 (id=64): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="9e4aa4c07d192c34f0ab28f8dc69582227b99a06a74bede44e623b5f0e09bc13ff7292a6f773766ad22ae8cb1923ebb34a1780", 0x33, 0x41, &(0x7f0000000180)={0xa, 0x4e23, 0x8001, @loopback, 0xe}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x32}, 0x8) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 3m39.154365593s ago: executing program 1 (id=68): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) close(r1) 3m37.941635012s ago: executing program 1 (id=70): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000840)={0x40, 0x1, 0x23, "701dbca1a5199b006d954e287b2d0ada3a2c58411ee3414013c97f91e7bd851187baea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x2c020400) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x8) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) 3m32.393447051s ago: executing program 1 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x18183) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0xfe8e, 0x12) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 3m31.234509987s ago: executing program 1 (id=81): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xa719}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) ioctl(r2, 0x2285, 0x0) 3m23.361537289s ago: executing program 1 (id=95): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) close(r1) 3m7.96471446s ago: executing program 32 (id=95): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) close(r1) 2m26.797475557s ago: executing program 3 (id=188): syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x40}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r0, 0x0}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2m24.266649187s ago: executing program 3 (id=194): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xa719}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) ioctl(r2, 0x2285, 0x0) 2m21.061246139s ago: executing program 3 (id=200): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = accept4(r0, 0x0, 0x0, 0x80000) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 2m18.680562085s ago: executing program 3 (id=205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa400, 0x0) close(r1) gettid() r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xb8b}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) setsockopt$inet_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000340)=@gcm_128={{0x304}, "934a64527cdd4996", "7fedfa8ae30ab4754f861cdb2cda82a1", "fc497d88", "2b7071c695368184"}, 0x28) setsockopt$inet_int(r5, 0x0, 0x18, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) 2m16.514221876s ago: executing program 4 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) listen(0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32=r8], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x40) 2m13.811178526s ago: executing program 3 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m12.748472675s ago: executing program 3 (id=213): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xa719}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) ioctl(r2, 0x2285, 0x0) 2m12.650996095s ago: executing program 4 (id=214): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x15, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001dc0)={0x84, 0x3b, 0x400, 0x70bd29, 0x25dfdbfb, {0x18}, [@generic="bebce85a06a6e2420c18fd23881f42df247c9d42884a8e12ae099549ef622e958ba9180b9db01a36ccd30b37fff8d09305d137f593924f1489803e6951d679e8891447011ff6b7c2d8", @generic="7f", @typed={0x4, 0x4c}, @generic="f4becddd5e33dac29ff5cbab4da96a6cc87c4353067aa51bf4354e355f6fa39c"]}, 0x84}}, 0x804) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xa2}) 2m4.656910115s ago: executing program 4 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.freeze\x00', 0x275a, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000008, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000000)={0x2f, 0x6, 0x0, {0x3, 0x1, 0x6, 0x0, '-/:@,)'}}, 0x2f) write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) open$dir(&(0x7f0000000340)='./file0\x00', 0x8100, 0x7c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x10f4, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x90) preadv(r4, 0x0, 0x0, 0x0, 0x6) syz_emit_ethernet(0x2a, 0x0, 0x0) 2m2.32492324s ago: executing program 4 (id=227): add_key$fscrypt_provisioning(0x0, &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) syz_emit_ethernet(0x5b, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0xc, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @multicast1, @broadcast, {[@lsrr={0x83, 0x17, 0x4e, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @private=0x7f, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x3, 0x8}]}}, '2'}}}}}, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0xc, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 2m1.383359809s ago: executing program 4 (id=230): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x10}, 0x9}, 0x1c) ioctl$TCFLSH(r0, 0x540b, 0x1) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$TCFLSH(r0, 0x400455c8, 0x20000000008) socket(0x10, 0x80002, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x17, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0xfffffffffffffdd9) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r7, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000200)={'wlan0\x00', {0x2, 0x0, @remote}}) 1m59.369197328s ago: executing program 4 (id=233): openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1m57.314938643s ago: executing program 33 (id=213): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xa719}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) ioctl(r2, 0x2285, 0x0) 1m43.054143435s ago: executing program 34 (id=233): openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 22.173117647s ago: executing program 2 (id=381): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x100) ioctl(r2, 0x2285, 0x0) 18.516667737s ago: executing program 2 (id=385): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 15.931230909s ago: executing program 5 (id=389): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 13.452738517s ago: executing program 6 (id=392): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, 0x0, &(0x7f0000000340)='%ps \x00'}, 0x20) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6=@empty}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xfffffddd) io_uring_enter(0xffffffffffffffff, 0x79d1, 0xb60b, 0x41, 0x0, 0x0) socket$inet(0x2, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26048811}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4000) 13.270923363s ago: executing program 5 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000092030000534450000800000018300000040000000000000000000000185200000800000000000000000000008520000003000000181a0000", @ANYBLOB="0000000000000000186a00000000000000000000030000009dfcb8097b24008becaff14940675532c548cc8c6ae5c2aa6110301b29f04a8b754a5c3b77436880f5d7dee4011b72dd24bdae2e890d1c98fa422c9b7889d27257b623b04028d9b154f0446c65a610ad9ed0e2c260158e7c4a19d9c08566c408e3d612031e61f82a7be109bd7519f295bdb6a9c5cd"], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1000}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000140)=[{0x2, 0x4, 0x7}, {0x2, 0x2, 0x3, 0xa0a2cff5ddeefbdd}, {0x5, 0x2, 0x2}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000000), 0x3, r2}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x4, r4, r2, 0xeeeeeeee}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @empty}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000ffffffffffff0800450000280025813cf1b3d79fe5"], 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) 13.257054966s ago: executing program 0 (id=394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000200)=""/85, 0xaa) 12.223369348s ago: executing program 0 (id=395): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000000010002", 0x7) mount(&(0x7f0000000100), 0x0, &(0x7f00000002c0)='9p\x00', 0x94, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x30, 0x9, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x0) socket$kcm(0x10, 0x2, 0x0) 11.791310805s ago: executing program 6 (id=396): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c40)={0x14, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x4, 0x8d, 0x0, 0x1, [@generic]}]}, 0x14}], 0x1, 0x0, 0x0, 0x2000081}, 0x20048040) 11.11329278s ago: executing program 2 (id=397): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) 11.056696096s ago: executing program 0 (id=398): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f00000029c0), 0x400006d, 0x20000004) readv(r4, &(0x7f00000000c0), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newchain={0x3c, 0x64, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x1}, {0x1, 0x8}, {0xffe0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_RATE={0x6, 0x5, {0x1b, 0xcd}}, @TCA_CHAIN={0x8, 0xb, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b2b, &(0x7f0000000100)={'wlan1\x00', @broadcast}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x4745504d, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000001f) close_range(r8, 0xffffffffffffffff, 0x0) 11.056006774s ago: executing program 6 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000092030000534450000800000018300000040000000000000000000000185200000800000000000000000000008520000003000000181a0000", @ANYBLOB="0000000000000000186a00000000000000000000030000009dfcb8097b24008becaff14940675532c548cc8c6ae5c2aa6110301b29f04a8b754a5c3b77436880f5d7dee4011b72dd24bdae2e890d1c98fa422c9b7889d27257b623b04028d9b154f0446c65a610ad9ed0e2c260158e7c4a19d9c08566c408e3d612031e61f82a7be109bd7519f295bdb6a9c5cd"], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1000}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000140)=[{0x2, 0x4, 0x7}, {0x2, 0x2, 0x3, 0xa0a2cff5ddeefbdd}, {0x5, 0x2, 0x2}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000000), 0x3, r2}) socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @empty}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000ffffffffffff0800450000280025813cf1b3d79fe5"], 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) 10.702338413s ago: executing program 5 (id=400): socket(0x2a, 0x2, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008014) 9.370841112s ago: executing program 2 (id=401): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) ioctl(r2, 0x2285, 0x0) 8.430509956s ago: executing program 6 (id=402): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x10}, 0x9}, 0x1c) ioctl$TCFLSH(r0, 0x540b, 0x1) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$TCFLSH(r0, 0x400455c8, 0x20000000008) socket(0x10, 0x80002, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x17, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0xfffffffffffffdd9) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0x68, 0x4854, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000200)={'wlan0\x00', {0x2, 0x0, @remote}}) 8.399812212s ago: executing program 0 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x24040054) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x3, "f58a"}]}}, 0x0}, 0x0) signalfd(r0, &(0x7f0000000840)={[0x6]}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) fdatasync(r2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$netlink(0x10, 0x3, 0x4) r5 = socket(0xa, 0x5, 0x0) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 8.349030967s ago: executing program 2 (id=404): openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sysinfo(&(0x7f00000015c0)=""/4096) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 8.213694158s ago: executing program 5 (id=405): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x100) ioctl(r2, 0x2285, 0x0) 6.55009945s ago: executing program 6 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000092030000534450000800000018300000040000000000000000000000185200000800000000000000000000008520000003000000181a0000", @ANYBLOB="0000000000000000186a00000000000000000000030000009dfcb8097b24008becaff14940675532c548cc8c6ae5c2aa6110301b29f04a8b754a5c3b77436880f5d7dee4011b72dd24bdae2e890d1c98fa422c9b7889d27257b623b04028d9b154f0446c65a610ad9ed0e2c260158e7c4a19d9c08566c408e3d612031e61f82a7be109bd7519f295bdb6a9c5cd"], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1000}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000140)=[{0x2, 0x4, 0x7}, {0x2, 0x2, 0x3, 0xa0a2cff5ddeefbdd}, {0x5, 0x2, 0x2}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000000), 0x3, r2}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x4, r4, r2, 0xeeeeeeee}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @empty}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000ffffffffffff0800450000280025813cf1b3d79fe5"], 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) 5.278905188s ago: executing program 5 (id=407): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000002c00), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) 3.485468594s ago: executing program 5 (id=408): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 3.34091612s ago: executing program 0 (id=409): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c40)={0x14, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x4, 0x8d, 0x0, 0x1, [@generic]}]}, 0x14}], 0x1, 0x0, 0x0, 0x2000081}, 0x20048040) 3.040693291s ago: executing program 0 (id=410): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x18, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x200002f, 0x20, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100", 0x0, 0x375, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) syz_emit_ethernet(0x3e, 0x0, &(0x7f00000001c0)={0x1, 0x93, [0xb33, 0x9aa, 0x80000000, 0xc0f]}) 1.835884605s ago: executing program 2 (id=411): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x18, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x10, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="238d7acf0800", 0x0, 0x0, 0x1b, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x200002f, 0x20, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100", 0x0, 0x375, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) syz_emit_ethernet(0x3e, 0x0, &(0x7f00000001c0)={0x1, 0x93, [0xb33, 0x9aa, 0x80000000, 0xc0f]}) 0s ago: executing program 6 (id=412): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000340)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000019300)=""/97, &(0x7f0000000480)=""/74, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 354.931710][ T5853] cgroup: Unknown subsys name 'net' [ 355.045853][ T5853] cgroup: Unknown subsys name 'cpuset' [ 355.055082][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 356.567448][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 358.918738][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.937394][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.951331][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.952815][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.965917][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.966575][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.981216][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.981762][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.988858][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.996706][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.007293][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.010204][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.016580][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.039055][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.046264][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.054075][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.061792][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.070266][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.077548][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.085712][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.086751][ T5885] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.095590][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.102122][ T5885] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.107393][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.122434][ T5875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.131772][ T5875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.147770][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.157181][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.165783][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.173647][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.958004][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 360.111285][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 360.182789][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 360.196887][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 360.313697][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 360.325490][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 360.493851][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.502379][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.509630][ T5864] bridge_slave_0: entered allmulticast mode [ 360.517463][ T5864] bridge_slave_0: entered promiscuous mode [ 360.564907][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.572283][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.579391][ T5864] bridge_slave_1: entered allmulticast mode [ 360.587570][ T5864] bridge_slave_1: entered promiscuous mode [ 360.680235][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.687517][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.694789][ T5870] bridge_slave_0: entered allmulticast mode [ 360.703031][ T5870] bridge_slave_0: entered promiscuous mode [ 360.723075][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.730240][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.737501][ T5874] bridge_slave_0: entered allmulticast mode [ 360.744990][ T5874] bridge_slave_0: entered promiscuous mode [ 360.779641][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.786869][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.794233][ T5870] bridge_slave_1: entered allmulticast mode [ 360.801697][ T5870] bridge_slave_1: entered promiscuous mode [ 360.837508][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.844814][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.852012][ T5874] bridge_slave_1: entered allmulticast mode [ 360.859352][ T5874] bridge_slave_1: entered promiscuous mode [ 360.869682][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.879640][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.887726][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.894969][ T5882] bridge_slave_0: entered allmulticast mode [ 360.902564][ T5882] bridge_slave_0: entered promiscuous mode [ 360.965785][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.975130][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.982570][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.989708][ T5882] bridge_slave_1: entered allmulticast mode [ 360.997378][ T5882] bridge_slave_1: entered promiscuous mode [ 361.018008][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.025201][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.032643][ T5865] bridge_slave_0: entered allmulticast mode [ 361.039974][ T5865] bridge_slave_0: entered promiscuous mode [ 361.047852][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.055294][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.063021][ T5877] bridge_slave_0: entered allmulticast mode [ 361.070388][ T5877] bridge_slave_0: entered promiscuous mode [ 361.077018][ T5876] Bluetooth: hci2: command tx timeout [ 361.077024][ T5873] Bluetooth: hci0: command tx timeout [ 361.125855][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.135118][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.142625][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.149765][ T5865] bridge_slave_1: entered allmulticast mode [ 361.155818][ T5876] Bluetooth: hci1: command tx timeout [ 361.163558][ T5865] bridge_slave_1: entered promiscuous mode [ 361.170704][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.177832][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.185097][ T5877] bridge_slave_1: entered allmulticast mode [ 361.192520][ T5877] bridge_slave_1: entered promiscuous mode [ 361.202262][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.240848][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.241333][ T5876] Bluetooth: hci3: command tx timeout [ 361.250027][ T5873] Bluetooth: hci5: command tx timeout [ 361.255638][ T5885] Bluetooth: hci4: command tx timeout [ 361.323338][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.334792][ T5864] team0: Port device team_slave_0 added [ 361.343805][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.355026][ T5870] team0: Port device team_slave_0 added [ 361.403955][ T5864] team0: Port device team_slave_1 added [ 361.412695][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.424358][ T5870] team0: Port device team_slave_1 added [ 361.432730][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.444627][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.513529][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.525672][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.550680][ T5874] team0: Port device team_slave_0 added [ 361.626110][ T5874] team0: Port device team_slave_1 added [ 361.633025][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.639966][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.666190][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.679938][ T5882] team0: Port device team_slave_0 added [ 361.686730][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.694139][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.720590][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.747692][ T5877] team0: Port device team_slave_0 added [ 361.767633][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.775085][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.801567][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.814551][ T5882] team0: Port device team_slave_1 added [ 361.820820][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.827899][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.853837][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.874886][ T5865] team0: Port device team_slave_0 added [ 361.882919][ T5877] team0: Port device team_slave_1 added [ 361.890560][ T5865] team0: Port device team_slave_1 added [ 361.917476][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.924653][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.950769][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.023510][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.030474][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.056786][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.144796][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.152170][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.178394][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.190174][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.198043][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.224094][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.236214][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.243238][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.269599][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.312014][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.318969][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.357432][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.391781][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.398740][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.425480][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.439557][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.446598][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.474654][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.493118][ T5864] hsr_slave_0: entered promiscuous mode [ 362.499879][ T5864] hsr_slave_1: entered promiscuous mode [ 362.512389][ T5870] hsr_slave_0: entered promiscuous mode [ 362.518859][ T5870] hsr_slave_1: entered promiscuous mode [ 362.525296][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 362.531107][ T5870] Cannot create hsr debugfs directory [ 362.631364][ T5874] hsr_slave_0: entered promiscuous mode [ 362.638085][ T5874] hsr_slave_1: entered promiscuous mode [ 362.646171][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 362.652039][ T5874] Cannot create hsr debugfs directory [ 362.745806][ T5882] hsr_slave_0: entered promiscuous mode [ 362.752540][ T5882] hsr_slave_1: entered promiscuous mode [ 362.758703][ T5882] debugfs: 'hsr0' already exists in 'hsr' [ 362.764769][ T5882] Cannot create hsr debugfs directory [ 362.788552][ T5877] hsr_slave_0: entered promiscuous mode [ 362.795114][ T5877] hsr_slave_1: entered promiscuous mode [ 362.801558][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 362.807316][ T5877] Cannot create hsr debugfs directory [ 362.843948][ T5865] hsr_slave_0: entered promiscuous mode [ 362.850602][ T5865] hsr_slave_1: entered promiscuous mode [ 362.856895][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 362.862933][ T5865] Cannot create hsr debugfs directory [ 363.151953][ T5885] Bluetooth: hci0: command tx timeout [ 363.157481][ T5876] Bluetooth: hci2: command tx timeout [ 363.231592][ T5876] Bluetooth: hci1: command tx timeout [ 363.311090][ T5876] Bluetooth: hci5: command tx timeout [ 363.321457][ T5885] Bluetooth: hci4: command tx timeout [ 363.326918][ T5876] Bluetooth: hci3: command tx timeout [ 363.553381][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.584884][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 363.595832][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 363.615996][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 363.671154][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.683202][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.697652][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.719335][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 363.799221][ T5865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 363.813203][ T5865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 363.840912][ T5865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 363.856547][ T5865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 363.957961][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 363.976341][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 363.990922][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 364.023443][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.130492][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.145825][ T5882] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.160753][ T5882] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.182720][ T5882] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.196747][ T5882] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.277262][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.321286][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.328520][ T5900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.347622][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.359530][ T5877] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 364.373764][ T5877] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 364.385614][ T5877] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 364.397306][ T5877] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 364.424630][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.431784][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.445351][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.524366][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.545556][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.568777][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.576004][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.603961][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.611215][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.647596][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.654731][ T5900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.707230][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.714376][ T5900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.734974][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.847704][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.873056][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.898474][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.905658][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.947746][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.954937][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.026621][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.036849][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.064291][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.071520][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.107677][ T4851] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.114844][ T4851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.186038][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.232134][ T5885] Bluetooth: hci0: command tx timeout [ 365.244971][ T5876] Bluetooth: hci2: command tx timeout [ 365.275750][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.295105][ T4851] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.302289][ T4851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.315968][ T5885] Bluetooth: hci1: command tx timeout [ 365.383306][ T4851] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.390488][ T4851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.392369][ T5876] Bluetooth: hci4: command tx timeout [ 365.399002][ T5873] Bluetooth: hci5: command tx timeout [ 365.408627][ T5885] Bluetooth: hci3: command tx timeout [ 365.612940][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.633616][ T5864] veth0_vlan: entered promiscuous mode [ 365.676083][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.690052][ T5864] veth1_vlan: entered promiscuous mode [ 365.777874][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.889828][ T5864] veth0_macvtap: entered promiscuous mode [ 365.945489][ T5864] veth1_macvtap: entered promiscuous mode [ 365.958597][ T5870] veth0_vlan: entered promiscuous mode [ 365.988476][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.025899][ T5870] veth1_vlan: entered promiscuous mode [ 366.045976][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.096615][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.124946][ T5928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.135441][ T5928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.163030][ T5928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.193269][ T5928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.210278][ T5874] veth0_vlan: entered promiscuous mode [ 366.249024][ T5874] veth1_vlan: entered promiscuous mode [ 366.293352][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.349235][ T5870] veth0_macvtap: entered promiscuous mode [ 366.382808][ T5882] veth0_vlan: entered promiscuous mode [ 366.425301][ T5870] veth1_macvtap: entered promiscuous mode [ 366.444764][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.468824][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.512217][ T5865] veth0_vlan: entered promiscuous mode [ 366.519213][ T5882] veth1_vlan: entered promiscuous mode [ 366.548608][ T5874] veth0_macvtap: entered promiscuous mode [ 366.573172][ T5874] veth1_macvtap: entered promiscuous mode [ 366.594206][ T5865] veth1_vlan: entered promiscuous mode [ 366.605897][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.627371][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.635878][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.654620][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.696117][ T5927] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.711751][ T5927] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.754036][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 366.771487][ T5927] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.783937][ T5865] veth0_macvtap: entered promiscuous mode [ 366.791531][ T5927] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.825793][ T5865] veth1_macvtap: entered promiscuous mode [ 366.846682][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.904871][ T5882] veth0_macvtap: entered promiscuous mode [ 366.923857][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.143616][ T5882] veth1_macvtap: entered promiscuous mode [ 367.211004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 367.249778][ T4851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.312130][ T5885] Bluetooth: hci2: command tx timeout [ 367.328958][ T5873] Bluetooth: hci0: command tx timeout [ 367.343325][ T4851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.391374][ T5873] Bluetooth: hci1: command tx timeout [ 367.471289][ T5885] Bluetooth: hci3: command tx timeout [ 367.471304][ T5876] Bluetooth: hci4: command tx timeout [ 367.471406][ T5873] Bluetooth: hci5: command tx timeout [ 367.559725][ T4851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.581199][ T4851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.616997][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.671724][ T4851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.679624][ T4851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.712995][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.748666][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.784193][ T4851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.815156][ T4851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.827981][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.838314][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.851779][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.859356][ T4851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.877906][ T5877] veth0_vlan: entered promiscuous mode [ 368.351532][ T4851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.385832][ T5976] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.406260][ T5877] veth1_vlan: entered promiscuous mode [ 368.427216][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.440116][ T5976] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.453569][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.484030][ T6019] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.553586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 368.627934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 368.765221][ T5928] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.968717][ T6026] binder: 6024:6026 ioctl 4018620d 0 returned -22 [ 369.406336][ T5981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.427792][ T5981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.552664][ T5877] veth0_macvtap: entered promiscuous mode [ 369.585196][ T5877] veth1_macvtap: entered promiscuous mode [ 369.627668][ T5981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.670923][ T5981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.762523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 370.273680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 370.274681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 370.372329][ T6034] NILFS (loop1): device size too small [ 370.479963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 370.683576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 370.687385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 370.687977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 371.908452][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.956521][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.121010][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.887147][ T6021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.912262][ T6021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.934015][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.060917][ T5928] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.306721][ T5928] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.334843][ T5928] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.368087][ T5928] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.377178][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.424504][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.105247][ T6054] ======================================================= [ 374.105247][ T6054] WARNING: The mand mount option has been deprecated and [ 374.105247][ T6054] and is ignored by this kernel. Remove the mand [ 374.105247][ T6054] option from the mount to silence this warning. [ 374.105247][ T6054] ======================================================= [ 374.162267][ T5976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.182021][ T5976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.524834][ T6058] option changes via remount are deprecated (pid=6053 comm=syz.4.5) [ 374.875097][ T5957] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 374.881037][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.942527][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.948049][ T5957] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 374.990296][ T5957] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 375.049502][ T5957] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 375.262580][ T5957] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 375.608360][ T6068] : entered promiscuous mode [ 375.795338][ T5957] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 375.812661][ T5957] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 375.820079][ T5957] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 375.972232][ T5957] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 375.979659][ T5957] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 376.089350][ T5957] hid-generic 0003:0003:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 377.209088][ T6075] Bluetooth: MGMT ver 1.23 [ 377.255707][ T6085] futex_wake_op: syz.4.15 tries to shift op by -1; fix this program [ 378.127136][ T6076] fido_id[6076]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 378.949528][ T6094] NILFS (loop0): device size too small [ 380.196155][ T6100] overlayfs: missing 'lowerdir' [ 380.575935][ T6107] binder: 6101:6107 ioctl 4018620d 0 returned -22 [ 381.513449][ T6114] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 383.021630][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.032055][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.432779][ T6124] Zero length message leads to an empty skb [ 384.479938][ T6131] netlink: 'syz.5.24': attribute type 1 has an invalid length. [ 384.510820][ T6132] netlink: 'syz.1.23': attribute type 1 has an invalid length. [ 389.294400][ T6164] option changes via remount are deprecated (pid=6157 comm=syz.5.29) [ 389.680609][ T6073] hid_parser_main: 8 callbacks suppressed [ 389.680626][ T6073] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 389.926944][ T6178] SQUASHFS error: Failed to read block 0x0: -5 [ 389.933312][ T6178] unable to read squashfs_super_block [ 390.127393][ T6174] SQUASHFS error: Failed to read block 0x0: -5 [ 390.134019][ T6174] unable to read squashfs_super_block [ 390.162214][ T6073] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 390.169681][ T6073] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 390.177187][ T6073] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 390.289712][ T6073] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 390.317778][ T6073] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 390.703224][ T6181] option changes via remount are deprecated (pid=6179 comm=syz.2.33) [ 391.006210][ T6073] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 391.013673][ T6073] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 391.031100][ T6073] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 391.038515][ T6073] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 391.129785][ T6073] hid-generic 0003:0003:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 391.296182][ T6188] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 392.238693][ T6189] fido_id[6189]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 395.861459][ T6086] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 396.151380][ T6086] usb 1-1: Using ep0 maxpacket: 32 [ 396.202347][ T6086] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 396.221030][ T6086] usb 1-1: config 0 has no interface number 0 [ 396.221946][ T6215] futex_wake_op: syz.4.42 tries to shift op by -1; fix this program [ 396.241035][ T6086] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 396.321044][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 396.710398][ T6086] usb 1-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 396.731202][ T6086] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 396.741551][ T6086] usb 1-1: config 0 interface 126 has no altsetting 0 [ 396.782732][ T6086] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 396.801875][ T6086] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.810056][ T6086] usb 1-1: Product: syz [ 396.846459][ T6086] usb 1-1: Manufacturer: syz [ 396.851433][ T6086] usb 1-1: SerialNumber: syz [ 396.862072][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 396.881545][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 396.882724][ T6086] usb 1-1: config 0 descriptor?? [ 396.899320][ T6210] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 396.945827][ T24] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 397.021047][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.029074][ T24] usb 6-1: Product: syz [ 397.055268][ T24] usb 6-1: Manufacturer: syz [ 397.059905][ T24] usb 6-1: SerialNumber: syz [ 397.100423][ T24] usb 6-1: config 0 descriptor?? [ 397.926179][ T24] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 397.944813][ T6086] ir_usb 1-1:0.126: IR Dongle converter detected [ 397.968539][ T6086] usb 1-1: IRDA class descriptor not found, device not bound [ 398.027653][ T6086] usb 1-1: USB disconnect, device number 2 [ 398.375744][ T24] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 398.422806][ T24] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 398.772455][ T24] usb 6-1: USB disconnect, device number 2 [ 402.456892][ T6264] SQUASHFS error: Failed to read block 0x0: -5 [ 402.463619][ T6264] unable to read squashfs_super_block [ 403.721179][ T6027] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 403.918422][ T6027] usb 2-1: Using ep0 maxpacket: 32 [ 403.976155][ T6027] usb 2-1: config 0 interface 0 has no altsetting 0 [ 404.378835][ T6027] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 404.419595][ T6027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.439039][ T6027] usb 2-1: Product: syz [ 404.491031][ T6027] usb 2-1: Manufacturer: syz [ 404.495657][ T6027] usb 2-1: SerialNumber: syz [ 404.534372][ T6027] usb 2-1: config 0 descriptor?? [ 404.554038][ T6027] gs_usb 2-1:0.0: Required endpoints not found [ 404.706117][ T6274] binder: 6273:6274 ioctl 4018620d 0 returned -22 [ 406.911931][ T6086] usb 2-1: USB disconnect, device number 2 [ 407.102756][ T6296] binder: 6295:6296 ioctl 4018620d 0 returned -22 [ 408.996334][ T6300] netlink: 'syz.1.64': attribute type 4 has an invalid length. [ 410.991382][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 411.068216][ T6318] ubi31: attaching mtd0 [ 411.086436][ T6317] warning: `syz.2.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 411.206832][ T6318] ubi31: scanning is finished [ 411.229244][ T6318] ubi31: empty MTD device detected [ 411.364639][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 411.389433][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 411.412729][ T24] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 411.430513][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.463956][ T24] usb 2-1: Product: syz [ 411.482284][ T24] usb 2-1: Manufacturer: syz [ 411.508683][ T24] usb 2-1: SerialNumber: syz [ 411.544820][ T6318] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 411.554687][ T24] usb 2-1: config 0 descriptor?? [ 411.567634][ T6318] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 411.628535][ T6318] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 411.648816][ T6318] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 411.871981][ T6318] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 411.878894][ T6318] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 411.949319][ T6318] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2061177454 [ 412.013384][ T6318] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 412.373282][ T24] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 412.380527][ T6322] ubi31: background thread "ubi_bgt31d" started, PID 6322 [ 412.594102][ T24] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 413.015288][ T24] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 414.342959][ T6337] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 415.142160][ T6345] binder: 6340:6345 ioctl 4018620d 0 returned -22 [ 415.641878][ T24] hid_parser_main: 8 callbacks suppressed [ 415.641897][ T24] hid-generic 0003:0003:0000.0003: unknown main item tag 0x0 [ 415.721526][ T24] hid-generic 0003:0003:0000.0003: unknown main item tag 0x0 [ 415.778586][ T24] hid-generic 0003:0003:0000.0003: unknown main item tag 0x0 [ 415.852345][ T24] hid-generic 0003:0003:0000.0003: unknown main item tag 0x0 [ 415.907676][ T24] hid-generic 0003:0003:0000.0003: unknown main item tag 0x0 [ 415.951264][ T24] hid-generic 0003:0003:0000.0003: unknown main item tag 0x0 [ 416.008661][ T24] hid-generic 0003:0003:0000.0003: unknown main item tag 0x0 [ 416.057868][ T24] hid-generic 0003:0003:0000.0003: unknown main item tag 0x0 [ 416.082172][ T6027] usb 2-1: USB disconnect, device number 3 [ 416.201055][ T24] hid-generic 0003:0003:0000.0003: unknown main item tag 0x0 [ 416.401505][ T24] hid-generic 0003:0003:0000.0003: unknown main item tag 0x0 [ 416.469759][ T6353] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 416.732366][ T24] hid-generic 0003:0003:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 417.422704][ T6355] fido_id[6355]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 417.449779][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.82'. [ 419.164213][ T6382] SQUASHFS error: Failed to read block 0x0: -5 [ 419.170505][ T6382] unable to read squashfs_super_block [ 422.531121][ T6401] NILFS (loop0): device size too small [ 430.233520][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 430.278024][ T6441] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 430.310155][ T6441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.104'. [ 430.453287][ T6429] 9p: Bad value for 'rfdno' [ 430.515573][ T6443] program syz.4.103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 431.911261][ T6446] ubi: mtd0 is already attached to ubi31 [ 433.421858][ T6466] netlink: 'syz.3.110': attribute type 4 has an invalid length. [ 437.232127][ T6497] 9p: Bad value for 'rfdno' [ 440.202166][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 440.442850][ T1212] IPVS: starting estimator thread 0... [ 440.531113][ T6516] IPVS: using max 33 ests per chain, 79200 per kthread [ 440.553376][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.120'. [ 441.705789][ T6520] NILFS (loop2): device size too small [ 443.186639][ T5876] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 443.195502][ T5876] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 443.203180][ T5876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 443.242740][ T5876] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 443.261838][ T5876] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 444.424565][ T6532] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 444.444674][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.451056][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.740678][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 445.391169][ T5873] Bluetooth: hci6: command tx timeout [ 445.645388][ T5927] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.404012][ T5927] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.937468][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 447.454257][ T5927] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.471331][ T5873] Bluetooth: hci6: command tx timeout [ 447.901775][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.130'. [ 448.891712][ T6554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.315986][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 449.554582][ T5873] Bluetooth: hci6: command tx timeout [ 450.192680][ T5927] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.457432][ T6590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.121632][ T5873] Bluetooth: hci6: command tx timeout [ 453.113564][ T6591] macvlan2: entered promiscuous mode [ 453.120876][ T6591] macvlan2: entered allmulticast mode [ 453.135612][ T6591] bond1: entered promiscuous mode [ 453.167313][ T6591] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 453.260111][ T6591] bond1: left promiscuous mode [ 453.349392][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.370101][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.389096][ T6525] bridge_slave_0: entered allmulticast mode [ 453.409685][ T6525] bridge_slave_0: entered promiscuous mode [ 453.445351][ T6596] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 453.488231][ T6590] macvlan2: entered promiscuous mode [ 453.496096][ T6590] macvlan2: entered allmulticast mode [ 453.503063][ T6590] bond1: entered promiscuous mode [ 453.508264][ T6590] ip6gretap1: entered promiscuous mode [ 453.515154][ T6590] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 453.546720][ T6590] bond1: left promiscuous mode [ 453.563231][ T6590] ip6gretap1: left promiscuous mode [ 453.757692][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.765077][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.772828][ T6525] bridge_slave_1: entered allmulticast mode [ 453.782776][ T6525] bridge_slave_1: entered promiscuous mode [ 454.905783][ T6614] program syz.4.142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.272622][ T6622] binder: 6618:6622 ioctl 4018620d 0 returned -22 [ 455.275415][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.560097][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.968694][ T6525] team0: Port device team_slave_0 added [ 458.058430][ T6525] team0: Port device team_slave_1 added [ 459.542474][ T5927] bridge_slave_1: left allmulticast mode [ 459.548200][ T5927] bridge_slave_1: left promiscuous mode [ 459.584247][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.649186][ T5927] bridge_slave_0: left allmulticast mode [ 459.659561][ T5927] bridge_slave_0: left promiscuous mode [ 459.677966][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.939464][ T6649] program syz.2.150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.913944][ T5927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.945353][ T5927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.971415][ T5927] bond0 (unregistering): Released all slaves [ 461.185806][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.192811][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.265243][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.361758][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.368924][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.468959][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.121211][ T6664] program syz.2.152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.492924][ T6525] hsr_slave_0: entered promiscuous mode [ 462.512635][ T6525] hsr_slave_1: entered promiscuous mode [ 462.772078][ T6525] debugfs: 'hsr0' already exists in 'hsr' [ 462.782649][ T6525] Cannot create hsr debugfs directory [ 462.873123][ T6672] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 464.100100][ T5927] hsr_slave_0: left promiscuous mode [ 464.142914][ T5927] hsr_slave_1: left promiscuous mode [ 464.165263][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.191816][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.223883][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.243179][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.716384][ T6096] hid_parser_main: 8 callbacks suppressed [ 465.716408][ T6096] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 465.750363][ T5927] veth1_macvtap: left promiscuous mode [ 465.754152][ T6096] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 465.781122][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.158'. [ 465.797746][ T6096] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 465.992216][ T6096] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 466.000327][ T6096] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 466.007945][ T6096] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 466.018654][ T6096] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 466.021405][ T5927] veth0_macvtap: left promiscuous mode [ 466.026198][ T6096] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 466.041394][ T6096] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 466.049428][ T6096] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 466.086735][ T6096] hid-generic 0003:0003:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 466.086985][ T5927] veth1_vlan: left promiscuous mode [ 466.169982][ T5927] veth0_vlan: left promiscuous mode [ 466.384861][ T6694] fido_id[6694]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 466.940329][ T6702] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 468.695642][ T6713] netlink: 76 bytes leftover after parsing attributes in process `syz.2.163'. [ 468.907914][ T6720] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 469.559101][ T6724] SQUASHFS error: Failed to read block 0x0: -5 [ 469.566626][ T6724] unable to read squashfs_super_block [ 472.068563][ T5927] team0 (unregistering): Port device team_slave_1 removed [ 472.098711][ T5927] team0 (unregistering): Port device team_slave_0 removed [ 472.381916][ T6737] program syz.3.168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.074555][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.173'. [ 476.623200][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 477.102567][ T6525] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 477.225572][ T6525] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 477.406419][ T6525] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 477.449948][ T6525] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 477.694372][ T6797] program syz.3.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.982602][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 478.343735][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.180'. [ 478.924706][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.030776][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.181'. [ 480.030196][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.111833][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.118981][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.294110][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.301289][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.824251][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.187'. [ 482.374259][ T5875] Bluetooth: hci4: command 0x0406 tx timeout [ 482.380359][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 482.386993][ T5878] Bluetooth: hci5: command 0x0406 tx timeout [ 482.391242][ T6842] Bluetooth: hci1: command 0x0406 tx timeout [ 482.393076][ T5878] Bluetooth: hci3: command 0x0406 tx timeout [ 483.972652][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.191'. [ 484.192075][ T6858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.191'. [ 484.246532][ T6858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.321207][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.192'. [ 485.528800][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.617288][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 487.574922][ T6886] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.610061][ T6886] bond0: (slave bond2): Enslaving as an active interface with an up link [ 490.557218][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.203'. [ 491.014955][ T6923] program syz.3.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 492.918712][ T6936] NILFS (loop0): device size too small [ 494.694929][ T6525] veth0_vlan: entered promiscuous mode [ 494.729065][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.210'. [ 494.730858][ T6525] veth1_vlan: entered promiscuous mode [ 495.822623][ T6525] veth0_macvtap: entered promiscuous mode [ 495.909174][ T6525] veth1_macvtap: entered promiscuous mode [ 496.106040][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.149157][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.237623][ T6963] program syz.5.215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.632744][ T5900] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.657893][ T5900] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.724955][ T5900] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.761509][ T6153] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.506638][ T6021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.552697][ T6987] ubi: mtd0 is already attached to ubi31 [ 498.721069][ T6021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.039470][ T6139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.087489][ T6139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.652574][ T7027] 9p: Bad value for 'rfdno' [ 505.989665][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.996159][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.988884][ T7041] futex_wake_op: syz.4.227 tries to shift op by -1; fix this program [ 507.258703][ T7047] overlayfs: failed to resolve './file0': -2 [ 510.055350][ T7056] netlink: 'syz.6.232': attribute type 4 has an invalid length. [ 512.991358][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.999639][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 513.007390][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 513.015651][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 513.025645][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.082676][ T7085] netlink: 'syz.0.239': attribute type 1 has an invalid length. [ 513.287934][ T7085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.472995][ T7093] 9p: Bad value for 'rfdno' [ 513.815323][ T7086] macvlan2: entered promiscuous mode [ 514.128016][ T7086] macvlan2: entered allmulticast mode [ 514.522044][ T7086] bond1: entered promiscuous mode [ 514.603602][ T7100] comedi comedi3: mpc624: I/O port conflict (0x1,16) [ 515.250055][ T5876] Bluetooth: hci0: command tx timeout [ 515.331235][ T7086] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 516.544584][ T7086] bond1: left promiscuous mode [ 517.206009][ T7088] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 517.296611][ T7085] macvlan2: entered promiscuous mode [ 517.312522][ T5876] Bluetooth: hci0: command tx timeout [ 517.339024][ T7085] macvlan2: entered allmulticast mode [ 517.541821][ T7085] bond1: entered promiscuous mode [ 517.546906][ T7085] ip6gretap1: entered promiscuous mode [ 517.605633][ T7085] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 517.646293][ T7085] bond1: left promiscuous mode [ 517.656807][ T7085] ip6gretap1: left promiscuous mode [ 518.735692][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 519.501286][ T5876] Bluetooth: hci0: command tx timeout [ 521.697818][ T5869] Bluetooth: hci0: command tx timeout [ 524.675763][ T7174] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 524.710790][ T7174] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 525.406284][ T6523] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.130204][ T7082] chnl_net:caif_netlink_parms(): no params data found [ 526.385417][ T6523] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.950128][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.258'. [ 527.386749][ T5876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 527.398867][ T5876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 527.412875][ T5876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 527.483988][ T5876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 527.494869][ T5876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 527.967636][ T7199] program syz.0.260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.197579][ T6523] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.552848][ T5876] Bluetooth: hci5: command tx timeout [ 531.631649][ T5869] Bluetooth: hci5: command tx timeout [ 532.014386][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.032898][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.040140][ T7082] bridge_slave_0: entered allmulticast mode [ 532.049139][ T7082] bridge_slave_0: entered promiscuous mode [ 532.070562][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.336573][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.365856][ T7082] bridge_slave_1: entered allmulticast mode [ 533.063548][ T7082] bridge_slave_1: entered promiscuous mode [ 533.357686][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 533.400466][ T6523] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.711373][ T5869] Bluetooth: hci5: command tx timeout [ 534.008174][ T7254] Bluetooth: MGMT ver 1.23 [ 534.832720][ T7082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.792284][ T7082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.949513][ T7273] program syz.0.270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.541016][ T5869] Bluetooth: hci5: command tx timeout [ 536.785131][ T7082] team0: Port device team_slave_0 added [ 537.665670][ T7082] team0: Port device team_slave_1 added [ 539.812957][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 541.101830][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.121064][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.230003][ T7082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.566695][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.573814][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.841089][ T7082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.853339][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.282'. [ 541.862586][ T6523] bridge_slave_1: left allmulticast mode [ 541.862636][ T6523] bridge_slave_1: left promiscuous mode [ 541.862843][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.712228][ T6523] bridge_slave_0: left allmulticast mode [ 542.742245][ T6523] bridge_slave_0: left promiscuous mode [ 542.747982][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.133970][ T6523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.146114][ T6523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.159056][ T6523] bond0 (unregistering): Released all slaves [ 545.463938][ T7343] program syz.6.286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 545.860004][ T6523] : left promiscuous mode [ 546.096871][ T7336] program syz.2.287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.316591][ T7082] hsr_slave_0: entered promiscuous mode [ 548.332412][ T7082] hsr_slave_1: entered promiscuous mode [ 552.072604][ T7380] futex_wake_op: syz.5.298 tries to shift op by -1; fix this program [ 553.022348][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.299'. [ 553.125940][ T6523] hsr_slave_0: left promiscuous mode [ 553.156225][ T6523] hsr_slave_1: left promiscuous mode [ 553.190507][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.222018][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.253244][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.278855][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.349809][ T6523] veth1_macvtap: left promiscuous mode [ 553.390709][ T6523] veth0_macvtap: left promiscuous mode [ 553.400447][ T6523] veth1_vlan: left promiscuous mode [ 553.420658][ T6523] veth0_vlan: left promiscuous mode [ 555.883066][ T7409] SQUASHFS error: Failed to read block 0x0: -5 [ 555.889597][ T7409] unable to read squashfs_super_block [ 559.971567][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 560.173931][ T7437] loop6: detected capacity change from 0 to 2640 [ 560.182578][ T7437] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.213416][ T7437] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.251391][ T7437] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.259297][ T7437] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.292266][ T7437] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.305140][ T7438] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 560.320660][ T7438] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 560.344951][ T7437] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.361683][ T7437] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.369561][ T7437] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.383953][ T7438] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 560.394399][ T7438] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 560.408385][ T7437] ldm_validate_partition_table(): Disk read failed. [ 560.416896][ T7438] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 560.426947][ T7437] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.449079][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 560.467619][ T7437] Buffer I/O error on dev loop6, logical block 0, async page read [ 560.475611][ T7438] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 560.486432][ T7437] Dev loop6: unable to read RDB block 0 [ 560.492342][ T7438] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 560.502599][ T7437] loop6: unable to read partition table [ 560.516019][ T7437] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 560.539833][ T7438] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 560.861800][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.309'. [ 562.042136][ T6523] team0 (unregistering): Port device team_slave_1 removed [ 562.110307][ T6523] team0 (unregistering): Port device team_slave_0 removed [ 565.306013][ T7480] SQUASHFS error: Failed to read block 0x0: -5 [ 565.312707][ T7480] unable to read squashfs_super_block [ 566.124241][ T7482] loop6: detected capacity change from 0 to 2640 [ 566.153427][ T7482] buffer_io_error: 6 callbacks suppressed [ 566.153445][ T7482] Buffer I/O error on dev loop6, logical block 0, async page read [ 566.190853][ T7482] Buffer I/O error on dev loop6, logical block 0, async page read [ 566.272168][ T7482] Buffer I/O error on dev loop6, logical block 0, async page read [ 566.274609][ T7486] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 566.280225][ T7482] Buffer I/O error on dev loop6, logical block 0, async page read [ 566.304418][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.319'. [ 566.340260][ T7482] Buffer I/O error on dev loop6, logical block 0, async page read [ 566.352873][ T7482] Buffer I/O error on dev loop6, logical block 0, async page read [ 566.361926][ T7482] Buffer I/O error on dev loop6, logical block 0, async page read [ 566.379635][ T7482] Buffer I/O error on dev loop6, logical block 0, async page read [ 566.390340][ T7482] ldm_validate_partition_table(): Disk read failed. [ 566.406053][ T7486] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 566.419660][ T7482] Buffer I/O error on dev loop6, logical block 0, async page read [ 566.428526][ T7482] Buffer I/O error on dev loop6, logical block 0, async page read [ 566.441105][ T7482] Dev loop6: unable to read RDB block 0 [ 566.447288][ T7482] loop6: unable to read partition table [ 566.455804][ T7486] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 566.456481][ T7482] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 566.662560][ T7486] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 566.760344][ T7486] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 566.770892][ T7486] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 566.812771][ T7486] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 566.822983][ T7486] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 567.579163][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.587308][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.403296][ T7495] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 569.480577][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 569.567815][ T7507] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 569.631977][ T5876] Bluetooth: hci6: command 0x0406 tx timeout [ 570.213846][ T7197] chnl_net:caif_netlink_parms(): no params data found [ 570.518048][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.325'. [ 570.949239][ T7527] SQUASHFS error: Failed to read block 0x0: -5 [ 570.955848][ T7527] unable to read squashfs_super_block [ 572.021304][ T7534] ubi: mtd0 is already attached to ubi31 [ 572.515728][ T7536] futex_wake_op: syz.2.330 tries to shift op by -1; fix this program [ 573.034315][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.051206][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.078870][ T7197] bridge_slave_0: entered allmulticast mode [ 573.099050][ T7197] bridge_slave_0: entered promiscuous mode [ 573.360850][ T7546] binder: 7540:7546 ioctl 4018620d 0 returned -22 [ 573.700174][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.832533][ T7542] program syz.5.332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 574.071447][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.078710][ T7197] bridge_slave_1: entered allmulticast mode [ 574.283919][ T7197] bridge_slave_1: entered promiscuous mode [ 574.320485][ T6523] IPVS: stop unused estimator thread 0... [ 574.424753][ T7555] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 575.038317][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 575.050369][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 575.061661][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 575.069581][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 575.084731][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 575.556838][ T7566] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 576.292925][ T7197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.394139][ T7197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.161125][ T5876] Bluetooth: hci1: command tx timeout [ 577.432293][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.337'. [ 577.667352][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 577.945636][ T7197] team0: Port device team_slave_0 added [ 578.644441][ T6523] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.848348][ T7197] team0: Port device team_slave_1 added [ 578.921254][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.341'. [ 579.231068][ T5876] Bluetooth: hci1: command tx timeout [ 579.362231][ T6523] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.125181][ T5869] Bluetooth: hci1: command tx timeout [ 582.251380][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.258331][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.337411][ T7197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.402889][ T6523] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.222383][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.229444][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.256470][ T7197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.997660][ T5869] Bluetooth: hci1: command tx timeout [ 585.696195][ T6523] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.176022][ T7197] hsr_slave_0: entered promiscuous mode [ 586.202603][ T7197] hsr_slave_1: entered promiscuous mode [ 586.231338][ T7197] debugfs: 'hsr0' already exists in 'hsr' [ 586.251186][ T7197] Cannot create hsr debugfs directory [ 586.257326][ T7553] chnl_net:caif_netlink_parms(): no params data found [ 588.242452][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 588.390203][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 588.400173][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 588.409584][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 588.425373][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 588.435339][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 588.554121][ T7662] fuse: Bad value for 'group_id' [ 588.559289][ T7662] fuse: Bad value for 'group_id' [ 589.739932][ T7672] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 590.739464][ T5869] Bluetooth: hci0: command tx timeout [ 591.481288][ T7684] Bluetooth: MGMT ver 1.23 [ 591.752214][ T7553] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.262710][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.269998][ T7553] bridge_slave_0: entered allmulticast mode [ 592.305001][ T7553] bridge_slave_0: entered promiscuous mode [ 592.331302][ T7156] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 592.567908][ T7553] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.815893][ T5869] Bluetooth: hci0: command tx timeout [ 592.821406][ T7156] usb 1-1: Using ep0 maxpacket: 32 [ 592.826952][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.841736][ T7553] bridge_slave_1: entered allmulticast mode [ 592.852994][ T7156] usb 1-1: config 0 interface 0 has no altsetting 0 [ 592.862173][ T7156] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 592.892103][ T7156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.900152][ T7156] usb 1-1: Product: syz [ 592.901305][ T7553] bridge_slave_1: entered promiscuous mode [ 592.904504][ T7156] usb 1-1: Manufacturer: syz [ 592.920311][ T7156] usb 1-1: SerialNumber: syz [ 592.928879][ T7156] usb 1-1: config 0 descriptor?? [ 593.335261][ T7702] SQUASHFS error: Failed to read block 0x0: -5 [ 593.342126][ T7702] unable to read squashfs_super_block [ 593.801861][ T7156] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 593.936143][ T7553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.003698][ T7553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.173586][ T6523] bridge_slave_1: left allmulticast mode [ 594.179307][ T6523] bridge_slave_1: left promiscuous mode [ 594.185357][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.408383][ T7720] program syz.6.362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 594.411776][ T6523] bridge_slave_0: left allmulticast mode [ 594.844316][ T5869] Bluetooth: hci0: command tx timeout [ 594.850433][ T6523] bridge_slave_0: left promiscuous mode [ 594.882711][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.127147][ T7156] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 595.322657][ T7156] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 595.341687][ T7156] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 595.458188][ T7727] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 596.128750][ T7156] usb 1-1: USB disconnect, device number 3 [ 596.266057][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 596.541130][ T6405] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 596.702310][ T6405] usb 6-1: Using ep0 maxpacket: 32 [ 596.717655][ T6405] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 596.739741][ T6405] usb 6-1: config 0 has no interface number 0 [ 596.753713][ T6405] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 596.781033][ T6405] usb 6-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 596.792694][ T6523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.802573][ T6405] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 596.824878][ T6523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.841090][ T6405] usb 6-1: config 0 interface 126 has no altsetting 0 [ 596.852970][ T6405] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 596.868329][ T6405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.869031][ T6523] bond0 (unregistering): (slave bond2): Releasing backup interface [ 596.881717][ T6405] usb 6-1: Product: syz [ 596.895601][ T6523] bond0 (unregistering): Released all slaves [ 596.901195][ T6405] usb 6-1: Manufacturer: syz [ 596.906280][ T6405] usb 6-1: SerialNumber: syz [ 596.911209][ T5869] Bluetooth: hci0: command tx timeout [ 596.966545][ T6405] usb 6-1: config 0 descriptor?? [ 596.981951][ T7731] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 597.070595][ T6523] bond1 (unregistering): Released all slaves [ 597.240068][ T6523] bond2 (unregistering): Released all slaves [ 597.426895][ T6405] ir_usb 6-1:0.126: IR Dongle converter detected [ 597.705257][ T6405] usb 6-1: IRDA class descriptor not found, device not bound [ 597.765978][ T6405] usb 6-1: USB disconnect, device number 3 [ 597.840854][ T7553] team0: Port device team_slave_0 added [ 597.850551][ T7553] team0: Port device team_slave_1 added [ 599.424300][ T7746] ubi: mtd0 is already attached to ubi31 [ 602.201132][ T7553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.208111][ T7553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.531850][ T7553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.836632][ T7786] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 603.398267][ T7655] chnl_net:caif_netlink_parms(): no params data found [ 603.553194][ T7781] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 603.675241][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.377'. [ 603.690099][ T6523] hsr_slave_0: left promiscuous mode [ 603.925247][ T6523] hsr_slave_1: left promiscuous mode [ 603.934688][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.571913][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.641990][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.672177][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.372825][ T6523] veth1_macvtap: left promiscuous mode [ 606.379724][ T6523] veth0_macvtap: left promiscuous mode [ 606.461492][ T6523] veth1_vlan: left promiscuous mode [ 606.594876][ T6523] veth0_vlan: left promiscuous mode [ 610.009003][ T6523] team0 (unregistering): Port device team_slave_1 removed [ 610.656610][ T6523] team0 (unregistering): Port device team_slave_0 removed [ 612.126744][ T7553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.144038][ T7553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.178761][ T7553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.248318][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.258266][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.494179][ T7838] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 614.318404][ T7853] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 615.589735][ T7553] hsr_slave_0: entered promiscuous mode [ 615.664659][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.392'. [ 615.750248][ T7553] hsr_slave_1: entered promiscuous mode [ 615.989046][ T7553] debugfs: 'hsr0' already exists in 'hsr' [ 616.003369][ T7553] Cannot create hsr debugfs directory [ 617.263934][ T7655] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.290834][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.334001][ T7655] bridge_slave_0: entered allmulticast mode [ 617.352388][ T7655] bridge_slave_0: entered promiscuous mode [ 617.388244][ T7655] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.425718][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.444711][ T7655] bridge_slave_1: entered allmulticast mode [ 617.453377][ T7655] bridge_slave_1: entered promiscuous mode [ 619.478911][ T7902] SQUASHFS error: Failed to read block 0x0: -5 [ 619.485513][ T7902] unable to read squashfs_super_block [ 620.148820][ T7655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.177147][ T7655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.177098][ T7914] binder: 7905:7914 ioctl 4018620d 0 returned -22 [ 623.225832][ T7655] team0: Port device team_slave_0 added [ 623.250875][ T7655] team0: Port device team_slave_1 added [ 625.268124][ T7655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.301031][ T7655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.391169][ T7655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.527556][ T7655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.548043][ T7655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.631047][ T7655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.663458][ T7655] hsr_slave_0: entered promiscuous mode [ 626.685057][ T7655] hsr_slave_1: entered promiscuous mode [ 626.709177][ T7655] debugfs: 'hsr0' already exists in 'hsr' [ 626.741252][ T7655] Cannot create hsr debugfs directory [ 628.911923][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.918256][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.195675][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.202058][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 733.971003][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 733.978116][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7946/1:b..l P7931/1:b..l P5877/1:b..l [ 733.988674][ C1] rcu: (detected by 1, t=10502 jiffies, g=23289, q=449 ncpus=2) [ 733.996391][ C1] task:syz-executor state:R running task stack:21368 pid:5877 tgid:5877 ppid:5863 task_flags:0x400140 flags:0x00080000 [ 734.010487][ C1] Call Trace: [ 734.013774][ C1] [ 734.016711][ C1] __schedule+0x14bc/0x5000 [ 734.021242][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.026888][ C1] ? rcu_is_watching+0x15/0xb0 [ 734.031662][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.037303][ C1] ? __pfx___schedule+0x10/0x10 [ 734.042161][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.047796][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 734.052740][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 734.058030][ C1] preempt_schedule_irq+0xb5/0x150 [ 734.063145][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 734.068961][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.074595][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 734.080412][ C1] irqentry_exit+0x5d8/0x660 [ 734.085014][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 734.090999][ C1] RIP: 0010:lock_acquire+0x16c/0x340 [ 734.096285][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 d4 38 e0 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 734.115893][ C1] RSP: 0018:ffffc90003eaea58 EFLAGS: 00000206 [ 734.121973][ C1] RAX: d1ab658e3776e600 RBX: 0000000000000000 RCX: d1ab658e3776e600 [ 734.129942][ C1] RDX: 00000000eb3427e3 RSI: ffffffff8d9791a8 RDI: ffffffff8bc08360 [ 734.137915][ C1] RBP: ffffffff81743f85 R08: ffffffff81743f85 R09: ffffffff8df41a20 [ 734.146017][ C1] R10: dffffc0000000000 R11: ffffffff81ada120 R12: 0000000000000002 [ 734.154003][ C1] R13: ffffffff8df41a20 R14: 0000000000000000 R15: 0000000000000246 [ 734.162068][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 734.167195][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 734.173371][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 734.178506][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.184165][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 734.189280][ C1] ? copy_pmd_range+0x76cc/0x7e00 [ 734.194304][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 734.199417][ C1] unwind_next_frame+0xc2/0x23d0 [ 734.204363][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 734.209497][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 734.214694][ C1] ? __pte_alloc+0x25/0x1a0 [ 734.219200][ C1] ? copy_pmd_range+0x76cc/0x7e00 [ 734.224222][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 734.230424][ C1] arch_stack_walk+0x11c/0x150 [ 734.235206][ C1] ? copy_pmd_range+0x76cc/0x7e00 [ 734.240260][ C1] stack_trace_save+0x9c/0xe0 [ 734.244953][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 734.250518][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.256157][ C1] save_stack+0xf5/0x1f0 [ 734.260396][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 734.265334][ C1] ? __pfx_save_stack+0x10/0x10 [ 734.270228][ C1] ? post_alloc_hook+0x234/0x290 [ 734.275165][ C1] ? get_page_from_freelist+0x2365/0x2440 [ 734.280896][ C1] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 734.286877][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 734.291906][ C1] ? alloc_pages_noprof+0xa9/0x190 [ 734.297020][ C1] ? pte_alloc_one+0x23/0x370 [ 734.301788][ C1] ? __pte_alloc+0x25/0x1a0 [ 734.306295][ C1] ? copy_pmd_range+0x76cc/0x7e00 [ 734.311330][ C1] ? seqcount_lockdep_reader_access+0x102/0x180 [ 734.317593][ C1] __set_page_owner+0x8d/0x4c0 [ 734.322361][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 734.327742][ C1] post_alloc_hook+0x234/0x290 [ 734.332511][ C1] get_page_from_freelist+0x2365/0x2440 [ 734.338063][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.343697][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 734.348676][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.354320][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 734.360219][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.365861][ C1] ? prepare_alloc_pages+0x22b/0x650 [ 734.371158][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 734.376969][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 734.383309][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.388948][ C1] ? policy_nodemask+0x27c/0x720 [ 734.393892][ C1] alloc_pages_mpol+0x232/0x4a0 [ 734.398751][ C1] alloc_pages_noprof+0xa9/0x190 [ 734.403699][ C1] pte_alloc_one+0x23/0x370 [ 734.408215][ C1] ? __pte_alloc+0x1d/0x1a0 [ 734.412721][ C1] __pte_alloc+0x25/0x1a0 [ 734.417057][ C1] copy_pmd_range+0x76cc/0x7e00 [ 734.421911][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.427558][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 734.432507][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.438151][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 734.444556][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 734.449760][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.455407][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.461039][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 734.466250][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.471880][ C1] ? __pud_alloc+0x369/0x470 [ 734.476500][ C1] copy_page_range+0xb88/0x11d0 [ 734.481383][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 734.486681][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.492325][ C1] dup_mmap+0xf4a/0x1b80 [ 734.496588][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 734.501274][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.506906][ C1] ? mm_init+0xa91/0xc60 [ 734.511150][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.516793][ C1] copy_mm+0x13c/0x4b0 [ 734.520870][ C1] copy_process+0x165d/0x3950 [ 734.525567][ C1] ? copy_process+0x915/0x3950 [ 734.530343][ C1] ? __pfx_copy_process+0x10/0x10 [ 734.535377][ C1] ? count_memcg_event_mm+0x21/0x260 [ 734.540684][ C1] kernel_clone+0x21e/0x820 [ 734.545197][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 734.550249][ C1] __x64_sys_clone+0x18b/0x1e0 [ 734.555019][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 734.560334][ C1] ? do_syscall_64+0xbe/0xf80 [ 734.565031][ C1] do_syscall_64+0xfa/0xf80 [ 734.569545][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.575609][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.581245][ C1] ? exc_page_fault+0xab/0x100 [ 734.586012][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.591902][ C1] RIP: 0033:0x7f1b74385e93 [ 734.596315][ C1] RSP: 002b:00007ffccc8dd2c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 734.604737][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b74385e93 [ 734.612704][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 734.620672][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 734.628643][ C1] R10: 000055559500b7d0 R11: 0000000000000246 R12: 0000000000000000 [ 734.636612][ C1] R13: 00000000000927c0 R14: 00000000000982ec R15: 00007ffccc8dd460 [ 734.644605][ C1] [ 734.647621][ C1] task:syz.0.410 state:R running task stack:25104 pid:7931 tgid:7929 ppid:5870 task_flags:0x40044c flags:0x00080001 [ 734.661135][ C1] Call Trace: [ 734.664406][ C1] [ 734.667336][ C1] __schedule+0x14bc/0x5000 [ 734.671872][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 734.678213][ C1] ? __pfx___schedule+0x10/0x10 [ 734.683065][ C1] ? do_raw_spin_lock+0x121/0x290 [ 734.688105][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.693749][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.699381][ C1] ? preempt_schedule+0xae/0xc0 [ 734.704233][ C1] preempt_schedule_common+0x83/0xd0 [ 734.709521][ C1] preempt_schedule+0xae/0xc0 [ 734.714203][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 734.719592][ C1] preempt_schedule_thunk+0x16/0x30 [ 734.724801][ C1] _raw_spin_unlock+0x3f/0x50 [ 734.729490][ C1] unmap_page_range+0x38bc/0x4170 [ 734.734566][ C1] ? mas_next_slot+0xc20/0xcf0 [ 734.739338][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 734.744719][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.750354][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.755991][ C1] ? unmap_vmas+0x144/0x580 [ 734.760585][ C1] unmap_vmas+0x399/0x580 [ 734.764918][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.770568][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 734.775455][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.781095][ C1] exit_mmap+0x239/0xb10 [ 734.785336][ C1] ? uprobe_clear_state+0x20f/0x290 [ 734.790537][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 734.795298][ C1] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 734.800950][ C1] ? __pfx_exit_aio+0x10/0x10 [ 734.805654][ C1] ? uprobe_clear_state+0x27c/0x290 [ 734.810934][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.816586][ C1] __mmput+0x118/0x430 [ 734.820661][ C1] exit_mm+0x1da/0x2c0 [ 734.824750][ C1] ? __pfx_exit_mm+0x10/0x10 [ 734.829361][ C1] do_exit+0x658/0x2310 [ 734.833532][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.839172][ C1] ? do_raw_spin_lock+0x121/0x290 [ 734.844211][ C1] ? __pfx_do_exit+0x10/0x10 [ 734.848829][ C1] do_group_exit+0x21c/0x2d0 [ 734.853429][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.859064][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 734.864266][ C1] get_signal+0x1285/0x1340 [ 734.868797][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 734.874360][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 734.880543][ C1] ? exit_to_user_mode_loop+0x55/0x4f0 [ 734.886008][ C1] exit_to_user_mode_loop+0x87/0x4f0 [ 734.891292][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.896927][ C1] ? rcu_is_watching+0x15/0xb0 [ 734.901705][ C1] do_syscall_64+0x2d0/0xf80 [ 734.906302][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.912370][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.918093][ C1] ? exc_page_fault+0xab/0x100 [ 734.922862][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.928756][ C1] RIP: 0033:0x7f90d9b8f749 [ 734.933164][ C1] RSP: 002b:00007f90d7dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 734.941580][ C1] RAX: 0000000000010106 RBX: 00007f90d9de6090 RCX: 00007f90d9b8f749 [ 734.949553][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 734.957522][ C1] RBP: 00007f90d9c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 734.965584][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 734.973553][ C1] R13: 00007f90d9de6128 R14: 00007f90d9de6090 R15: 00007fff9f066ec8 [ 734.981551][ C1] [ 734.984567][ C1] task:syz.2.411 state:R running task stack:25520 pid:7946 tgid:7939 ppid:5874 task_flags:0x400040 flags:0x00080000 [ 734.998073][ C1] Call Trace: [ 735.001346][ C1] [ 735.004282][ C1] __schedule+0x14bc/0x5000 [ 735.008830][ C1] ? __pfx___schedule+0x10/0x10 [ 735.013680][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.019328][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 735.024274][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 735.029566][ C1] preempt_schedule_irq+0xb5/0x150 [ 735.034680][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 735.040498][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.046139][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 735.051955][ C1] irqentry_exit+0x5d8/0x660 [ 735.056560][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 735.062549][ C1] RIP: 0010:unwind_next_frame+0x2c6/0x23d0 [ 735.068363][ C1] Code: 8f 45 29 e8 4a 8d 1c 82 48 83 c3 fc 49 89 d5 48 39 da 0f 86 21 02 00 00 49 29 d5 49 c1 fd 02 4a 8d 04 6d 00 00 00 00 4c 01 e8 <48> 8d 14 46 48 bd 00 00 00 00 00 fc ff df e9 8f 01 00 00 31 db e9 [ 735.087968][ C1] RSP: 0018:ffffc9000498eb38 EFLAGS: 00000212 [ 735.094042][ C1] RAX: 000000000000002a RBX: ffffffff8fa2bf94 RCX: ffffffff8fa2bf9c [ 735.102017][ C1] RDX: ffffffff8fa2bf5c RSI: ffffffff90228cd4 RDI: ffffffff8bc08300 [ 735.109987][ C1] RBP: ffffffff8fa2bf98 R08: 000000000000001d R09: ffffffff8df41a20 [ 735.117957][ C1] R10: dffffc0000000000 R11: ffffffff81ada120 R12: ffffffff8224e5a8 [ 735.125928][ C1] R13: 000000000000000e R14: ffffc9000498ec08 R15: ffffffff8fa2bf98 [ 735.133901][ C1] ? folio_alloc_mpol_noprof+0x38/0x70 [ 735.139373][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 735.145639][ C1] ? unwind_next_frame+0xd4/0x23d0 [ 735.150761][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 735.155879][ C1] ? folio_alloc_mpol_noprof+0x39/0x70 [ 735.161346][ C1] ? folio_alloc_mpol_noprof+0x39/0x70 [ 735.166827][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 735.172992][ C1] arch_stack_walk+0x11c/0x150 [ 735.177764][ C1] ? folio_alloc_mpol_noprof+0x39/0x70 [ 735.183232][ C1] stack_trace_save+0x9c/0xe0 [ 735.187922][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 735.193311][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.198950][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.204585][ C1] save_stack+0xf5/0x1f0 [ 735.208829][ C1] ? __pfx_save_stack+0x10/0x10 [ 735.213673][ C1] ? post_alloc_hook+0x234/0x290 [ 735.218610][ C1] ? get_page_from_freelist+0x2365/0x2440 [ 735.224328][ C1] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 735.230311][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 735.235339][ C1] ? folio_alloc_mpol_noprof+0x39/0x70 [ 735.240824][ C1] ? seqcount_lockdep_reader_access+0x102/0x180 [ 735.247088][ C1] __set_page_owner+0x8d/0x4c0 [ 735.251856][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 735.257251][ C1] post_alloc_hook+0x234/0x290 [ 735.262017][ C1] get_page_from_freelist+0x2365/0x2440 [ 735.267567][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.273203][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 735.278180][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.283819][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 735.289723][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.295359][ C1] ? prepare_alloc_pages+0x22b/0x650 [ 735.300657][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 735.306471][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 735.312808][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.318444][ C1] ? do_raw_spin_lock+0x121/0x290 [ 735.323571][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.329206][ C1] ? policy_nodemask+0x27c/0x720 [ 735.334155][ C1] alloc_pages_mpol+0x232/0x4a0 [ 735.339034][ C1] folio_alloc_mpol_noprof+0x39/0x70 [ 735.344330][ C1] __read_swap_cache_async+0x101/0x480 [ 735.349811][ C1] read_swap_cache_async+0xca/0x1d0 [ 735.355020][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.360665][ C1] ? __pfx_read_swap_cache_async+0x10/0x10 [ 735.366481][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.372119][ C1] ? madvise_vma_behavior+0xb02/0x4170 [ 735.377591][ C1] madvise_vma_behavior+0x2aca/0x4170 [ 735.382970][ C1] ? madvise_vma_behavior+0xb02/0x4170 [ 735.388437][ C1] ? __pfx___calc_delta+0x10/0x10 [ 735.393652][ C1] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 735.399381][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.405103][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 735.410048][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.415681][ C1] ? __switch_to+0xda8/0x1670 [ 735.420365][ C1] ? rcu_is_watching+0x15/0xb0 [ 735.425148][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.430795][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.436441][ C1] ? finish_task_switch+0x23d/0x940 [ 735.441652][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.447376][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 735.452579][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.458214][ C1] ? finish_task_switch+0x23d/0x940 [ 735.463428][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.469062][ C1] ? rcu_is_watching+0x15/0xb0 [ 735.473829][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.479465][ C1] ? trace_sched_exit_tp+0x36/0xf0 [ 735.484585][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.490224][ C1] ? __schedule+0x14d2/0x5000 [ 735.494904][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.500556][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.506198][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.511847][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.517491][ C1] ? mas_prev_slot+0xb31/0xbb0 [ 735.522299][ C1] ? __futex_wait+0x1d1/0x3d0 [ 735.526986][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.532623][ C1] ? __futex_wait+0x34a/0x3d0 [ 735.537494][ C1] madvise_walk_vmas+0x575/0xaf0 [ 735.542447][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 735.547400][ C1] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 735.552868][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.558595][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.564227][ C1] ? blk_start_plug+0x6f/0x1b0 [ 735.569000][ C1] madvise_do_behavior+0x38e/0x550 [ 735.574121][ C1] ? __pfx_madvise_do_behavior+0x10/0x10 [ 735.579767][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.585403][ C1] ? down_read+0x274/0x2e0 [ 735.589820][ C1] ? madvise_lock+0x146/0x2f0 [ 735.594498][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.600143][ C1] do_madvise+0x1bc/0x270 [ 735.604477][ C1] ? __pfx_do_madvise+0x10/0x10 [ 735.609355][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.615001][ C1] __x64_sys_madvise+0xa7/0xc0 [ 735.619770][ C1] do_syscall_64+0xfa/0xf80 [ 735.624277][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.630340][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.636146][ C1] ? exc_page_fault+0xab/0x100 [ 735.640915][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.646808][ C1] RIP: 0033:0x7fc3ac98f749 [ 735.651219][ C1] RSP: 002b:00007fc3ad771038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 735.659634][ C1] RAX: ffffffffffffffda RBX: 00007fc3acbe6180 RCX: 00007fc3ac98f749 [ 735.667607][ C1] RDX: 0000000000000003 RSI: 000000000060005f RDI: 0000200000000000 [ 735.675573][ C1] RBP: 00007fc3aca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 735.683545][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.691515][ C1] R13: 00007fc3acbe6218 R14: 00007fc3acbe6180 R15: 00007ffc708eb7e8 [ 735.699504][ C1] [ 735.702517][ C1] rcu: rcu_preempt kthread starved for 10433 jiffies! g23289 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 735.713706][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 735.723665][ C1] rcu: RCU grace-period kthread stack dump: [ 735.729539][ C1] task:rcu_preempt state:R running task stack:27736 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 735.743051][ C1] Call Trace: [ 735.746325][ C1] [ 735.749254][ C1] __schedule+0x14bc/0x5000 [ 735.753786][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 735.758987][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.764622][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 735.770529][ C1] ? __pfx___schedule+0x10/0x10 [ 735.775387][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.781021][ C1] ? schedule+0x91/0x360 [ 735.785270][ C1] schedule+0x165/0x360 [ 735.789431][ C1] schedule_timeout+0x12b/0x270 [ 735.794292][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 735.799681][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 735.805585][ C1] ? __pfx_process_timeout+0x10/0x10 [ 735.810891][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.816523][ C1] ? prepare_to_swait_event+0x341/0x380 [ 735.822086][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 735.826963][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 735.832162][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 735.838321][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 735.843605][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 735.848825][ C1] ? finish_swait+0xcd/0x1f0 [ 735.853433][ C1] rcu_gp_kthread+0x99/0x390 [ 735.858030][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 735.863229][ C1] ? __kthread_parkme+0x7b/0x200 [ 735.868175][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.873814][ C1] ? __kthread_parkme+0x1a1/0x200 [ 735.878854][ C1] kthread+0x711/0x8a0 [ 735.882936][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 735.888133][ C1] ? __pfx_kthread+0x10/0x10 [ 735.892726][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.898366][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 735.903574][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 735.909205][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 735.914399][ C1] ? __pfx_kthread+0x10/0x10 [ 735.918997][ C1] ret_from_fork+0x599/0xb30 [ 735.923589][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 735.928710][ C1] ? __switch_to_asm+0x39/0x70 [ 735.933481][ C1] ? __switch_to_asm+0x33/0x70 [ 735.938256][ C1] ? __pfx_kthread+0x10/0x10 [ 735.942865][ C1] ret_from_fork_asm+0x1a/0x30 [ 735.947667][ C1] [ 735.950679][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 735.956994][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 735.965925][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 735.976239][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 735.981970][ C1] Code: 5e 83 b4 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 33 83 b4 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 736.001575][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 736.007652][ C1] RAX: 65953e8de9a07300 RBX: ffffffff81978fda RCX: 65953e8de9a07300 [ 736.015621][ C1] RDX: 0000000000000001 RSI: ffffffff8d79261c RDI: ffffffff8bc08360 [ 736.023591][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 736.031556][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822070 [ 736.039527][ C1] R13: 1ffff110038d7b70 R14: 0000000000000001 R15: 0000000000000001 [ 736.047504][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 736.056431][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.063009][ C1] CR2: 00007f151da19cc2 CR3: 00000000307b1000 CR4: 0000000000350ef0 [ 736.070984][ C1] Call Trace: [ 736.074259][ C1] [ 736.077182][ C1] default_idle+0x13/0x20 [ 736.081518][ C1] default_idle_call+0x73/0xb0 [ 736.086291][ C1] do_idle+0x1ea/0x520 [ 736.090362][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 736.094950][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 736.100599][ C1] ? __pfx_do_idle+0x10/0x10 [ 736.105211][ C1] cpu_startup_entry+0x44/0x60 [ 736.109984][ C1] start_secondary+0x101/0x110 [ 736.114847][ C1] common_startup_64+0x13e/0x147 [ 736.119805][ C1] [ 738.672279][ T5876] Bluetooth: hci1: command tx timeout [ 738.677739][ T5145] Bluetooth: hci0: command 0x0406 tx timeout