last executing test programs: 5.641401583s ago: executing program 1 (id=2): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x1728d0fad5d34c92}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xa3}, @TCA_ROUTE4_POLICE={0x48, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x2, 0x101, 0xce, {0x0, 0x0, 0x3, 0x2, 0x3, 0x62}, {0x6, 0x2, 0x5, 0x3ff, 0x5, 0x92f3}, 0x9, 0x1, 0x2}}, @TCA_POLICE_AVRATE={0x6}]}]}}]}, 0x84}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.241600312s ago: executing program 3 (id=4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x6, "3f0e83", 0x5, 0xb}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x40f00, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) 4.763916773s ago: executing program 1 (id=5): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 4.557520287s ago: executing program 1 (id=6): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa", 0xb, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="d80200001000390400000000fbffffff00000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000e0000001000000000000000000000000e0000002000000000000000000003730e3ccd3f7aaa877550000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e0001000000000000000092010000000000003affffffffffffff00000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000090000000000000000000000000000001f00000002000000feffffffffffffff02000000fcffffffff0f00002abd700004350000020001000000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r5, &(0x7f0000000d00)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x40047452, &(0x7f0000000380)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) 4.472650969s ago: executing program 0 (id=1): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x400, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.449258462s ago: executing program 1 (id=7): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x6, "3f0e83", 0x5, 0xb}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x40f00, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) 3.262507786s ago: executing program 2 (id=3): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x60, 0x4]}}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x3, 0x1, 0x9, 0x14, "7f199114c2212a187ddfb2a6f56c7c07c8ba1a602abf797a7d0e83f445539e0387cacea8fb5067408bd5d5a6fa1728f5058ab4771cb0c6346eaccac3dfcdbc31", "adbba93b1a31dc171e78e8bd2e9d7c88b7f7134fe19e593070535b27fa99a08d", [0x8000000000000000, 0x1ff]}) 3.255694707s ago: executing program 3 (id=8): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x3, 0x80000, r0}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x3, 0x2}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003800000000000190d1f0b6a70c9e78ac1e0001ac1414"], 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000010aaaaaaaaaa0086dd6000260000641100fc0100"/34], 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x1ff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") 2.249402619s ago: executing program 3 (id=9): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r3, &(0x7f0000000080)="108d16bf9206", &(0x7f0000000200)=@tcp6=r1}, 0x20) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) 2.164704171s ago: executing program 0 (id=10): truncate(&(0x7f0000000340)='./file2\x00', 0x6) 1.363413509s ago: executing program 2 (id=11): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x10) write$9p(r0, &(0x7f0000000100)="d5", 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, r0}, 0x50) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb, 0x2, 0x400, 0x7, 0x75, 0xab}, {0x9, 0x5, 0x0, 0x2, 0x400, 0x5, 0x0, 0x1}, {0x9, 0x5, 0x5, 0x3, 0x20, 0x1, 0xff, 0x10}}}}}}]}}, 0x0) 1.097431535s ago: executing program 3 (id=12): r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) fsetxattr$system_posix_acl(r1, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [{0x8, 0x5, 0xffffffffffffffff}], {0x10, 0x6}, {0x20, 0x1}}, 0x2c, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, r3) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) keyctl$dh_compute(0x17, &(0x7f0000000280), &(0x7f0000000300)=""/71, 0x47, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) pselect6(0x40, &(0x7f0000000880)={0xfffffffffffffffc, 0xa000000, 0x1fe, 0x3ff, 0x603, 0x400000000001, 0xfffffffffa86cde8, 0x4}, 0x0, &(0x7f00000002c0)={0x5, 0x7fff, 0xfffffffffbffffff, 0x9, 0x0, 0x4}, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) 0s ago: executing program 3 (id=13): r0 = semget$private(0x0, 0x6, 0x1b5) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r4, &(0x7f00000003c0)=[{&(0x7f00000001c0)='\x00\x00', 0x2}], 0x1) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x200, 0x800}], 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x1, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/179, 0xb3) r6 = io_uring_setup(0x1196, &(0x7f0000000140)={0x0, 0xc8a1, 0x2, 0x1, 0x800000c1}) io_uring_enter(r6, 0x4b7b, 0xe9a7, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. [ 82.184036][ T5758] cgroup: Unknown subsys name 'net' [ 82.318248][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.987799][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.680934][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.690104][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.698013][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.707047][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.715100][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.722724][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.731373][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.741046][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.752343][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.767451][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.778237][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.785601][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.795017][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.796481][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.810096][ T5082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.819976][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.827519][ T5082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.835181][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.886871][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.900187][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.908146][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.923171][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.957647][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.967249][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.383349][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 86.500994][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 86.518745][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 86.654913][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.662404][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.670598][ T5775] bridge_slave_0: entered allmulticast mode [ 86.678034][ T5775] bridge_slave_0: entered promiscuous mode [ 86.694459][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 86.725821][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.733169][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.741030][ T5775] bridge_slave_1: entered allmulticast mode [ 86.748288][ T5775] bridge_slave_1: entered promiscuous mode [ 86.825637][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.832973][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.840364][ T5770] bridge_slave_0: entered allmulticast mode [ 86.847838][ T5770] bridge_slave_0: entered promiscuous mode [ 86.871608][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.881756][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.888927][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.896530][ T5776] bridge_slave_0: entered allmulticast mode [ 86.904397][ T5776] bridge_slave_0: entered promiscuous mode [ 86.913273][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.920749][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.928269][ T5770] bridge_slave_1: entered allmulticast mode [ 86.935819][ T5770] bridge_slave_1: entered promiscuous mode [ 86.953406][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.963238][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.971487][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.980621][ T5776] bridge_slave_1: entered allmulticast mode [ 86.987983][ T5776] bridge_slave_1: entered promiscuous mode [ 87.085599][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.156222][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.195436][ T5775] team0: Port device team_slave_0 added [ 87.207071][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.256344][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.268829][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.277861][ T5774] bridge_slave_0: entered allmulticast mode [ 87.290732][ T5774] bridge_slave_0: entered promiscuous mode [ 87.305899][ T5775] team0: Port device team_slave_1 added [ 87.316578][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.330500][ T5770] team0: Port device team_slave_0 added [ 87.349549][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.356809][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.365238][ T5774] bridge_slave_1: entered allmulticast mode [ 87.373114][ T5774] bridge_slave_1: entered promiscuous mode [ 87.420673][ T5770] team0: Port device team_slave_1 added [ 87.467981][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.477131][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.504025][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.533745][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.546952][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.560314][ T5776] team0: Port device team_slave_0 added [ 87.567466][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.575701][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.602707][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.637673][ T5776] team0: Port device team_slave_1 added [ 87.673324][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.682402][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.710691][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.742055][ T5774] team0: Port device team_slave_0 added [ 87.763806][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.771536][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.797677][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.802740][ T5772] Bluetooth: hci0: command tx timeout [ 87.817636][ T5774] team0: Port device team_slave_1 added [ 87.834289][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.843544][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.869991][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.880931][ T5772] Bluetooth: hci1: command tx timeout [ 87.895148][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.902340][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.928914][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.939658][ T5772] Bluetooth: hci2: command tx timeout [ 87.973848][ T5775] hsr_slave_0: entered promiscuous mode [ 87.981423][ T5775] hsr_slave_1: entered promiscuous mode [ 88.019274][ T5772] Bluetooth: hci3: command tx timeout [ 88.035376][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.043485][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.070299][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.083632][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.090837][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.118180][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.136236][ T5770] hsr_slave_0: entered promiscuous mode [ 88.143142][ T5770] hsr_slave_1: entered promiscuous mode [ 88.150396][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.158424][ T5770] Cannot create hsr debugfs directory [ 88.271551][ T5776] hsr_slave_0: entered promiscuous mode [ 88.278831][ T5776] hsr_slave_1: entered promiscuous mode [ 88.285720][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.293500][ T5776] Cannot create hsr debugfs directory [ 88.331675][ T5774] hsr_slave_0: entered promiscuous mode [ 88.338168][ T5774] hsr_slave_1: entered promiscuous mode [ 88.344966][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.353741][ T5774] Cannot create hsr debugfs directory [ 88.776401][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.792621][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.803664][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.814747][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.894043][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.910361][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.923289][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.938776][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.038112][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.051530][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.064041][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.078261][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.166134][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.183876][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.209632][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.238912][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.310023][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.396915][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.423037][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.444201][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.484348][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.511556][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.519231][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.532284][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.539507][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.549535][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.556796][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.567863][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.575099][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.596443][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.655880][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.663112][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.676644][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.716998][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.724225][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.833464][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.866915][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.871194][ T5772] Bluetooth: hci0: command tx timeout [ 89.874476][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.893881][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.901139][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.940513][ T5772] Bluetooth: hci1: command tx timeout [ 90.017564][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.029559][ T5772] Bluetooth: hci2: command tx timeout [ 90.100011][ T5772] Bluetooth: hci3: command tx timeout [ 90.235260][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.384499][ T5775] veth0_vlan: entered promiscuous mode [ 90.435412][ T5775] veth1_vlan: entered promiscuous mode [ 90.467140][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.542798][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.611388][ T5775] veth0_macvtap: entered promiscuous mode [ 90.641774][ T5775] veth1_macvtap: entered promiscuous mode [ 90.651932][ T5770] veth0_vlan: entered promiscuous mode [ 90.687043][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.721655][ T5770] veth1_vlan: entered promiscuous mode [ 90.754502][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.768718][ T5774] veth0_vlan: entered promiscuous mode [ 90.791712][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.811490][ T5774] veth1_vlan: entered promiscuous mode [ 90.831310][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.842070][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.851787][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.861171][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.953244][ T5770] veth0_macvtap: entered promiscuous mode [ 90.984763][ T5770] veth1_macvtap: entered promiscuous mode [ 91.017383][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.030672][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.042645][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.060161][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.070771][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.086467][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.134369][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.143770][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.152389][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.152605][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.175833][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.184819][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.196720][ T5774] veth0_macvtap: entered promiscuous mode [ 91.206929][ T5776] veth0_vlan: entered promiscuous mode [ 91.223562][ T5774] veth1_macvtap: entered promiscuous mode [ 91.277629][ T5776] veth1_vlan: entered promiscuous mode [ 91.297049][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.311099][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.375463][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.402293][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.413883][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.425959][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.440197][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.491436][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.504149][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.514683][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.526232][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.538109][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.569426][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.577721][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.612839][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.635745][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.645463][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.654934][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.743724][ T5776] veth0_macvtap: entered promiscuous mode [ 91.755156][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.773833][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.801407][ T5776] veth1_macvtap: entered promiscuous mode [ 91.940116][ T5772] Bluetooth: hci0: command tx timeout [ 91.978184][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.989597][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.999523][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.011124][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.021509][ T5772] Bluetooth: hci1: command tx timeout [ 92.030534][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.041112][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.052949][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.072387][ T5837] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 92.081078][ T5837] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 92.088932][ T5837] Zero length message leads to an empty skb [ 92.103101][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.113192][ T5772] Bluetooth: hci2: command tx timeout [ 92.134598][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.145452][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.155656][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.157421][ T1197] cfg80211: failed to load regulatory.db [ 92.168315][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.186207][ T5772] Bluetooth: hci3: command tx timeout [ 92.210215][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.258859][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.295303][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.317966][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.355746][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.367929][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.376987][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.387649][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.510701][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.579235][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.778527][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.827955][ T5849] syz.0.1[5849]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.850265][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.908302][ T5849] loop0: detected capacity change from 0 to 2048 [ 93.093578][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.172082][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.279207][ T5852] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.300793][ T5854] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6'. [ 93.374883][ T5853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'. [ 94.019122][ T5772] Bluetooth: hci0: command tx timeout [ 94.046109][ T5849] overlayfs: upper fs does not support tmpfile. [ 94.090872][ T5849] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 94.098132][ T5849] overlayfs: failed to set xattr on upper [ 94.105057][ T5772] Bluetooth: hci1: command tx timeout [ 94.120145][ T5849] overlayfs: ...falling back to redirect_dir=nofollow. [ 94.134520][ T5849] overlayfs: ...falling back to index=off. [ 94.149571][ T5849] overlayfs: ...falling back to uuid=null. [ 94.189652][ T5772] Bluetooth: hci2: command tx timeout [ 94.269376][ T5772] Bluetooth: hci3: command tx timeout [ 94.336093][ T5864] loop3: detected capacity change from 0 to 256 [ 95.585873][ T5866] loop9: detected capacity change from 0 to 255852544 [ 95.651771][ T5852] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 95.699963][ T5852] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 95.754732][ T5852] Remounting filesystem read-only [ 95.771627][ T5867] loop9: detected capacity change from 255852544 to 524287999 [ 95.784056][ T11] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 95.791389][ T11] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 95.812321][ C1] I/O error, dev loop9, sector 255852416 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.816052][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.836923][ C1] I/O error, dev loop9, sector 255852416 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.847034][ C1] Buffer I/O error on dev loop9, logical block 31981552, async page read [ 95.853739][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.883212][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.918808][ T11] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 95.942250][ T5869] block nbd0: server does not support multiple connections per device. [ 95.964407][ T5869] block nbd0: shutting down sockets [ 95.972001][ T11] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 95.992529][ T11] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 96.029913][ T11] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 96.037299][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.071107][ T11] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 96.078237][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.088644][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.108420][ T5772] Bluetooth: hci0: command 0x0401 tx timeout [ 96.116592][ T11] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 96.196447][ T5873] warning: `syz.2.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.212667][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.243801][ T11] NILFS (loop0): discard dirty page: offset=98304, ino=3 [ 96.264668][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.286338][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.296614][ T11] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 96.304558][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.323188][ T5876] loop3: detected capacity change from 0 to 512 [ 96.338893][ T5876] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.354239][ T5876] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.375541][ T5876] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 96.383804][ T5876] System zones: 1-12 [ 96.407014][ T5876] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.441836][ T5876] EXT4-fs (loop3): 1 truncate cleaned up [ 96.449699][ T5876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.482394][ T11] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 96.530783][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.606595][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.688505][ T11] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 96.699443][ T172] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.187579][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.207628][ T11] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 97.221954][ T11] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 97.247399][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.259280][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.271138][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.283011][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.297654][ T11] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 97.308907][ T11] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 97.316741][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.326278][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.337664][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.351571][ T11] NILFS (loop0): discard dirty page: offset=0, ino=19 [ 97.358518][ T11] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 97.375556][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.400924][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.424366][ T172] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 97.449288][ T172] usb 3-1: config 1 has no interface number 0 [ 97.455593][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.473627][ T172] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 97.492641][ T11] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 97.509338][ T172] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 97.520770][ T11] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 97.539127][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.557009][ T172] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 97.569920][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.579572][ T172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.587745][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.602298][ T172] usb 3-1: Product: syz [ 97.606908][ T172] usb 3-1: Manufacturer: syz [ 97.612797][ T11] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 98.049819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.459443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.379077][ C0] sched: RT throttling activated [ 99.381702][ T5772] Bluetooth: hci0: command tx timeout [ 99.389313][ T172] usb 3-1: SerialNumber: syz [ 100.406395][ T5877] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.019384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.429117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.169771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.579405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 105.729803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 106.139344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 106.549050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 108.289822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 205.429040][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 205.436219][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12/1:b..l P3451/1:b..l [ 205.445667][ C1] rcu: (detected by 1, t=10502 jiffies, g=11297, q=806 ncpus=2) [ 205.453527][ C1] task:kworker/u4:7 state:R running task stack:25256 pid:3451 ppid:2 flags:0x00004000 [ 205.465448][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 205.471820][ C1] Call Trace: [ 205.475198][ C1] [ 205.478183][ C1] __schedule+0x15ae/0x4660 [ 205.482767][ C1] ? asan.module_dtor+0x20/0x20 [ 205.487663][ C1] ? mark_lock+0x94/0x320 [ 205.492048][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 205.498104][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 205.503460][ C1] preempt_schedule_irq+0xbf/0x150 [ 205.508728][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 205.514686][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 205.520641][ C1] irqentry_exit+0x67/0x70 [ 205.525115][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 205.531168][ C1] RIP: 0010:lock_release+0x594/0x8c0 [ 205.536513][ C1] Code: 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 2f 04 f8 75 70 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 43 c7 44 2f 08 00 00 00 00 65 48 8b 04 25 [ 205.556252][ C1] RSP: 0018:ffffc9000cb47620 EFLAGS: 00000206 [ 205.562406][ C1] RAX: 0000000000000001 RBX: e18be1269993d88d RCX: 0a0cc43ca13ce100 [ 205.570535][ C1] RDX: 0000000000000005 RSI: ffffffff8acadce0 RDI: ffffffff8b1cfa20 [ 205.578553][ C1] RBP: ffffc9000cb47740 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 205.586575][ C1] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: ffff88802e2a8ba8 [ 205.594706][ C1] R13: dffffc0000000000 R14: ffff88802e2a8ad0 R15: 1ffff92001968ed0 [ 205.602946][ C1] ? ieee80211_vif_get_shift+0x1a/0x290 [ 205.608652][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 205.613834][ C1] ? ieee80211_vif_get_shift+0x1a/0x290 [ 205.619432][ C1] ? ieee80211_vif_get_shift+0x1a/0x290 [ 205.625032][ C1] ieee80211_vif_get_shift+0x22b/0x290 [ 205.630549][ C1] ieee80211_sta_get_rates+0xf9/0x6c0 [ 205.635974][ C1] ? sta_info_get+0x4f/0x2a0 [ 205.640604][ C1] ? sta_info_get+0x4f/0x2a0 [ 205.645240][ C1] ? sta_info_get+0x28d/0x2a0 [ 205.649963][ C1] ieee80211_ibss_rx_queued_mgmt+0x1117/0x2dc0 [ 205.656160][ C1] ? verify_lock_unused+0x140/0x140 [ 205.661430][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xecc/0x2dc0 [ 205.667717][ C1] ? ieee80211_ibss_rx_no_sta+0x790/0x790 [ 205.673525][ C1] ? mark_lock+0x94/0x320 [ 205.677973][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 205.684100][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 205.689265][ C1] ? lock_chain_count+0x20/0x20 [ 205.694159][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 205.700213][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 205.705811][ C1] ? skb_dequeue+0x124/0x160 [ 205.710456][ C1] ieee80211_iface_work+0x730/0xc90 [ 205.715710][ C1] cfg80211_wiphy_work+0x228/0x260 [ 205.720958][ C1] ? process_scheduled_works+0x975/0x1600 [ 205.726819][ C1] process_scheduled_works+0xa60/0x1600 [ 205.732450][ C1] ? worker_attach_to_pool+0x370/0x370 [ 205.737977][ C1] ? assign_work+0x3cc/0x5d0 [ 205.742799][ C1] worker_thread+0xa5e/0xfe0 [ 205.747603][ C1] kthread+0x2fa/0x390 [ 205.751713][ C1] ? pr_cont_work+0x550/0x550 [ 205.756520][ C1] ? kthread_blkcg+0xd0/0xd0 [ 205.761154][ C1] ret_from_fork+0x48/0x80 [ 205.766236][ C1] ? kthread_blkcg+0xd0/0xd0 [ 205.770929][ C1] ret_from_fork_asm+0x11/0x20 [ 205.775762][ C1] [ 205.778832][ C1] task:kworker/u4:1 state:R running task stack:23312 pid:12 ppid:2 flags:0x00004000 [ 205.789666][ C1] Workqueue: bat_events batadv_nc_worker [ 205.795351][ C1] Call Trace: [ 205.798684][ C1] [ 205.801658][ C1] __schedule+0x15ae/0x4660 [ 205.806259][ C1] ? asan.module_dtor+0x20/0x20 [ 205.811185][ C1] ? mark_lock+0x94/0x320 [ 205.815586][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 205.821629][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 205.826966][ C1] preempt_schedule_irq+0xbf/0x150 [ 205.832120][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 205.837903][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 205.843795][ C1] irqentry_exit+0x67/0x70 [ 205.848348][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 205.854026][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 205.859355][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 205.879005][ C1] RSP: 0018:ffffc90000117a40 EFLAGS: 00000206 [ 205.885131][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 26fb9dc8b89d7200 [ 205.893179][ C1] RDX: 0000000000000000 RSI: ffffffff8acadce0 RDI: ffffffff8b1cfa20 [ 205.901195][ C1] RBP: ffffc90000117b48 R08: dffffc0000000000 R09: 1ffffffff223cea0 [ 205.909215][ C1] R10: dffffc0000000000 R11: fffffbfff223cea1 R12: 1ffff92000022f54 [ 205.917225][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 205.925275][ C1] ? batadv_nc_worker+0xd2/0x600 [ 205.930264][ C1] ? read_lock_is_recursive+0x20/0x20 [ 205.935681][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 205.941710][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 205.946787][ C1] ? batadv_nc_worker+0xd2/0x600 [ 205.951767][ C1] batadv_nc_worker+0xef/0x600 [ 205.956578][ C1] ? batadv_nc_worker+0xd2/0x600 [ 205.961560][ C1] ? process_scheduled_works+0x975/0x1600 [ 205.967332][ C1] process_scheduled_works+0xa60/0x1600 [ 205.972961][ C1] ? worker_attach_to_pool+0x370/0x370 [ 205.978566][ C1] ? assign_work+0x3cc/0x5d0 [ 205.983217][ C1] worker_thread+0xa5e/0xfe0 [ 205.988152][ C1] kthread+0x2fa/0x390 [ 205.992268][ C1] ? pr_cont_work+0x550/0x550 [ 205.997328][ C1] ? kthread_blkcg+0xd0/0xd0 [ 206.001965][ C1] ret_from_fork+0x48/0x80 [ 206.006430][ C1] ? kthread_blkcg+0xd0/0xd0 [ 206.011322][ C1] ret_from_fork_asm+0x11/0x20 [ 206.016283][ C1] [ 206.019438][ C1] rcu: rcu_preempt kthread starved for 10558 jiffies! g11297 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 206.030683][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 206.040700][ C1] rcu: RCU grace-period kthread stack dump: [ 206.046623][ C1] task:rcu_preempt state:R running task stack:27472 pid:17 ppid:2 flags:0x00004000 [ 206.057454][ C1] Call Trace: [ 206.060854][ C1] [ 206.063824][ C1] __schedule+0x15ae/0x4660 [ 206.068384][ C1] ? lock_chain_count+0x20/0x20 [ 206.073289][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 206.079258][ C1] ? asan.module_dtor+0x20/0x20 [ 206.084175][ C1] ? rcu_is_watching+0x15/0xb0 [ 206.089088][ C1] schedule+0xbd/0x170 [ 206.093208][ C1] schedule_timeout+0x188/0x2d0 [ 206.098103][ C1] ? console_conditional_schedule+0x40/0x40 [ 206.104046][ C1] ? update_process_times+0x1b0/0x1b0 [ 206.109477][ C1] ? prepare_to_swait_event+0x344/0x360 [ 206.115164][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 206.120165][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 206.125059][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 206.131082][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 206.136150][ C1] ? rcu_gp_init+0x1530/0x1530 [ 206.141041][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 206.145947][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.151370][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 206.156621][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 206.161263][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 206.166442][ C1] ? __kthread_parkme+0x71/0x1c0 [ 206.171452][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 206.176548][ C1] kthread+0x2fa/0x390 [ 206.180663][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 206.185904][ C1] ? kthread_blkcg+0xd0/0xd0 [ 206.190570][ C1] ret_from_fork+0x48/0x80 [ 206.195042][ C1] ? kthread_blkcg+0xd0/0xd0 [ 206.199695][ C1] ret_from_fork_asm+0x11/0x20 [ 206.204547][ C1] [ 206.207655][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 206.214045][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 206.221103][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 206.231374][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 206.237072][ C1] Code: 4c 1d 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 43 77 3c 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 206.256729][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 206.262843][ C1] RAX: f8f50f98551e2600 RBX: ffffffff81628b01 RCX: f8f50f98551e2600 [ 206.271125][ C1] RDX: 0000000000000001 RSI: ffffffff8acacb60 RDI: ffffffff8b1cfa20 [ 206.279230][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75 [ 206.287343][ C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8 [ 206.295454][ C1] R13: dffffc0000000000 R14: 1ffff110036ce780 R15: 0000000000000000 [ 206.303559][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 206.312567][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.319213][ C1] CR2: 0000001b2da17b9c CR3: 000000002d2ba000 CR4: 00000000003506e0 [ 206.327430][ C1] Call Trace: [ 206.330756][ C1] [ 206.333733][ C1] default_idle+0x13/0x20 [ 206.338149][ C1] default_idle_call+0x6c/0xa0 [ 206.342972][ C1] do_idle+0x221/0x5c0 [ 206.347100][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 206.352363][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 206.358352][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 206.363608][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 206.369559][ C1] ? _raw_spin_unlock+0x40/0x40 [ 206.374552][ C1] cpu_startup_entry+0x43/0x60 [ 206.379384][ C1] start_secondary+0xee/0xf0 [ 206.384197][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 206.390348][ C1]