last executing test programs: 23.865336157s ago: executing program 2 (id=145): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) openat$mice(0xffffffffffffff9c, 0x0, 0x40) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x1, &(0x7f0000000880)={0x77359400}, 0x0, 0x2) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r1, 0x0, 0x9f) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04080b9cc90038000000"], 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="24000000400007012bbd700000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r2, 0x0, 0xc000) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@rand_addr=0x64010100, 0x4e20, 0x4, 0xc, 0x2, 0xfffffffe}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @private1, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x49ff}}], 0x18}, 0x4) 23.610407845s ago: executing program 0 (id=146): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r1, 0x402, 0x5) preadv(r1, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'ip6_vti0\x00', 0x1}, 0x18) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001400010036bd7000fedbdf252c100000afd0e756f4234f6b9124e5f2d528806a83e5abdb0d4daeaf4109b950acfbb8953bff6575f4bfebba3a261ceb65c2ea575e3bd991cbe926fc691cc446e5acb2f4838b53b4c57b50854b908214b4b742397a409bd090b4d65d80e7477d365d43a4bd401af64d99e8cbeee4659cf4f0ee4ab575c230be776ceffe97b6d6af37f16fdc0e230f42ed03b3acb6be6b7afcf0e21e98db26c6394e1e04ddfba8b669076d6203f458595e4120a6312a89e180994b16a48adcd8502b"], 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000854) 21.457461807s ago: executing program 2 (id=150): inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021) syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x23, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0489010504"], 0x7) mount$9p_rdma(&(0x7f0000000000), 0x0, 0x0, 0x10c820, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) 17.944899433s ago: executing program 2 (id=154): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x48}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16.066913366s ago: executing program 5 (id=158): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/186, 0xba}], 0x1, 0x5, 0x0) io_uring_setup(0x30a7, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000000406010100000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r5 = memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc02\x8b\xb7\xf5\xed\x829\xc6Z\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa\x19\x16\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8Ng\xd8\xb2\xb0\xd1\x11\xf0\xc2Gj+kV/\xa7\xe7\x98u\xc0\xf8$xb\xe2\xf7.:n\x0er\x84\x9fE\xdej\xb3\x05\xab\x1f\xd0\x0fRho\xee\xd5\x13*X\xf3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x7f@\xa5\xf7\xfd\x0f\xc4`\b\xfa\nA\x00\x99\rZO\xcd$\xce\xfa\xf0\xe2\xf1\x87|\xca;,g\xdd\xccJ\xeb9\xe3\x8e\x9d\xea\xfaY\xfc\xe0)J\xb5\v\x80R9\xec|&\xaf\xcet\x84Y\xdd\\\xc2\x83g\x11\x9b\xf4\xa2\x0e@0j@\xe3/7\x94\x1f\x7f\xe9,\xac45\xaeW\xa6\x93>B\xb4\xc0\xbb\a\x88rQ\xdf\xb1\x00\x00Qk\xb6)\xec\x0ev\xe8yvT\xe2$3R\xe8\x8agM\xaaj\xa7\xf0\xbdo\x82\xa9A\x83\x1f\xa8w\xb36q\xc0\xd3\xfd\x81\xb8~\xbc\x03\xbc\x18\xab\xd5\xf9\tI\x12r\r\v\xadb\xbc\x14y\x87Ji2\xe2\x05\\\xcaq\x92o\xf2)q\xdf}\xc6\xd3\xff\x97\x14\xf7\x1a\x9a\x14\t%\ag\x0e\xc7?\xcfV\xef\xb3l\x9e\f\xf7N\x1e4\x11]\x89\xb8\xc8\x89E\x8c!\x1f\x8d\xc7\x7f\xce\xffXJ\xbf\xdc\x110| \x89\xff\x03\x8b\xef\xa5\x04.\x11I\x03\x02\'QN\x1e\xee!D\v\x06\xa3S\xb5\x99\xc1$\xb9\xc9\xe6\xb3\xd8\xc8\x96)g\xd5\xc9\xcb\x96\x18s(\xcb\xbd\x00\x00', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000040)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000180)=0x4) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004800)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$sequencer(r7, &(0x7f0000004a80)=""/157, 0x9d) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0x11, 0x7, {0x7, 0x2, "d6485c87dc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 14.511268592s ago: executing program 2 (id=160): io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 13.166049584s ago: executing program 1 (id=163): r0 = openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi2\x00', 0x103040, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'s526\x00', [0x401, 0x181, 0x2, 0xb, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x180, 0x13, 0x100, 0xffffffa7, 0x9, 0x134d, 0x1, 0x3fd, 0x4000009, 0x7, 0xe2df, 0x5, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x8]}) 12.079800799s ago: executing program 1 (id=167): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0xf}, 0x2, 0x3, 0x0, 0x0, 0x3, 0x5, 0x0, 0x5, 0xb, 0x0}) 11.992432527s ago: executing program 0 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 10.98450938s ago: executing program 4 (id=170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 10.716121983s ago: executing program 5 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206030000000000fffff000000000000900020073797a32000100000500040000000000050005000200000010000300686173683a69702c6d6163000500010007000000140007800800134000000000080012"], 0x5c}}, 0x0) 10.323441624s ago: executing program 0 (id=173): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x48}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 9.093014422s ago: executing program 4 (id=176): syz_open_dev$radio(&(0x7f0000000340), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x7, 0x1200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 8.98709046s ago: executing program 1 (id=177): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/stat\x00') read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1000000) msgrcv(0x0, 0x0, 0x0, 0x2, 0x5800) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) 8.970863787s ago: executing program 5 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.24718987s ago: executing program 0 (id=179): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x400, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x8af6, 0xd, 0x0, 0x100, 0xfffd, 0x2, 0x3, 0x0, 0xfffffffc, r2, 0x0, 0x80000000, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff3230a46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 7.289292347s ago: executing program 3 (id=180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x818}, 0xadf5f7183b013c2c) 6.9111319s ago: executing program 1 (id=181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) 6.812802685s ago: executing program 5 (id=182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x9, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x20000b, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) close(r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x1000000d, 0x240, 0x9, '\x00=\x00'}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) 6.780585199s ago: executing program 4 (id=183): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000301000/0x1000)=nil, &(0x7f0000643000/0x1000)=nil, &(0x7f0000667000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00008d1000/0x2000)=nil, 0x0}, 0x68) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/807], 0x326) syz_emit_ethernet(0x4a, &(0x7f0000000880)={@link_local, @empty, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ra={0xc0}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) preadv2(r0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/144, 0x90}, {&(0x7f00000005c0)=""/56, 0x38}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f00000006c0)=""/16, 0x10}], 0x5, 0x8, 0x2, 0xa) syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100100008004d000048000200000106907864010101ac1414aa070c09904b30ad2bb70fdad144140cf1fffffffffffffff0ac1414aa0000800100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="008000000000000c"], 0x0) r1 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002ff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x62, @empty, @mcast1, 0x7800, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000180)={{r1}, 0x0, 0x0, 0x8, 0x0, 0x1}) ioprio_set$uid(0x3, 0x0, 0x0) r2 = eventfd2(0x1, 0x1) read$eventfd(r2, &(0x7f0000000040), 0x8) eventfd2(0x2, 0x80001) setresuid(0xee00, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r3, 0x1) 6.759130103s ago: executing program 0 (id=184): r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1e) socket$inet_sctp(0x2, 0x5, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) userfaultfd(0x801) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}}, 0x14}}, 0x0) 6.701860745s ago: executing program 3 (id=185): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.597009249s ago: executing program 2 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 6.40091135s ago: executing program 1 (id=187): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x48, '\x00', 0x0, @sk_skb}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) connect$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 6.400027675s ago: executing program 4 (id=188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 4.784951978s ago: executing program 2 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) 4.782743645s ago: executing program 1 (id=190): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x7, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100015052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010840100200012800c0001006d6163766c616e00100002800a000400bbbbbbbbbbbb0000"], 0x40}}, 0x800) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') unlinkat(r8, &(0x7f00000001c0)='./bus\x00', 0x200) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) unshare(0x20060400) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095", @ANYRES32=r9, @ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYRESHEX=r2, @ANYRES8=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r11, &(0x7f0000000780)}, 0x20) 4.380179125s ago: executing program 3 (id=191): capget(&(0x7f0000000040)={0x20080522}, 0x0) 4.023129208s ago: executing program 5 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 3.9230009s ago: executing program 4 (id=193): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/stat\x00') read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1000000) msgrcv(0x0, 0x0, 0x0, 0x2, 0x5800) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) 3.591734096s ago: executing program 3 (id=194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x7}}) 2.644517094s ago: executing program 5 (id=195): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 951.082903ms ago: executing program 3 (id=196): syz_open_dev$radio(&(0x7f0000000340), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x7, 0x1200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 755.059682ms ago: executing program 4 (id=197): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x400, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x8af6, 0xd, 0x0, 0x100, 0xfffd, 0x2, 0x3, 0x0, 0xfffffffc, r2, 0x0, 0x80000000, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff3230a46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 81.879421ms ago: executing program 0 (id=198): io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 0s ago: executing program 3 (id=199): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c"], 0x50}}, 0x20008844) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x15, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0x47) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bridge_slave_1\x00', &(0x7f0000000500)=@ethtool_ts_info}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. [ 101.319779][ T5810] cgroup: Unknown subsys name 'net' [ 101.445895][ T5810] cgroup: Unknown subsys name 'cpuset' [ 101.455499][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 103.161464][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.167443][ T24] cfg80211: failed to load regulatory.db [ 108.171575][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.171591][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.187283][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.195195][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.204662][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.212291][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.224019][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.232870][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.248414][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.257839][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.265021][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.273247][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.281869][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.282349][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.289834][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.305479][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.311949][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.313562][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.331074][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.339187][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.346946][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.354841][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.355858][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.370322][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.378216][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.389472][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.391808][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.407206][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.416267][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.416397][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.153585][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 109.424697][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 109.590621][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 109.658858][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.666925][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.674992][ T5827] bridge_slave_0: entered allmulticast mode [ 109.683995][ T5827] bridge_slave_0: entered promiscuous mode [ 109.694012][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.701137][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.708881][ T5827] bridge_slave_1: entered allmulticast mode [ 109.716835][ T5827] bridge_slave_1: entered promiscuous mode [ 109.753943][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 109.878691][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.935920][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 109.969370][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.005650][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.013072][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.020275][ T5834] bridge_slave_0: entered allmulticast mode [ 110.028351][ T5834] bridge_slave_0: entered promiscuous mode [ 110.037476][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.044744][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.052163][ T5834] bridge_slave_1: entered allmulticast mode [ 110.059768][ T5834] bridge_slave_1: entered promiscuous mode [ 110.067969][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 110.151309][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.158491][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.166305][ T5826] bridge_slave_0: entered allmulticast mode [ 110.174155][ T5826] bridge_slave_0: entered promiscuous mode [ 110.263495][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.270651][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.278865][ T5826] bridge_slave_1: entered allmulticast mode [ 110.286854][ T5826] bridge_slave_1: entered promiscuous mode [ 110.321612][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.333476][ T5827] team0: Port device team_slave_0 added [ 110.342426][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.425862][ T5827] team0: Port device team_slave_1 added [ 110.442178][ T5143] Bluetooth: hci3: command tx timeout [ 110.448174][ T5833] Bluetooth: hci2: command tx timeout [ 110.451348][ T5832] Bluetooth: hci1: command tx timeout [ 110.455380][ T5143] Bluetooth: hci0: command tx timeout [ 110.502149][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.521706][ T5143] Bluetooth: hci4: command tx timeout [ 110.522517][ T5832] Bluetooth: hci5: command tx timeout [ 110.549668][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.557329][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.565193][ T5837] bridge_slave_0: entered allmulticast mode [ 110.573274][ T5837] bridge_slave_0: entered promiscuous mode [ 110.606185][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.617466][ T5834] team0: Port device team_slave_0 added [ 110.639173][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.646840][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.654470][ T5837] bridge_slave_1: entered allmulticast mode [ 110.663088][ T5837] bridge_slave_1: entered promiscuous mode [ 110.670535][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.677711][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.685777][ T5831] bridge_slave_0: entered allmulticast mode [ 110.693491][ T5831] bridge_slave_0: entered promiscuous mode [ 110.725389][ T5834] team0: Port device team_slave_1 added [ 110.733396][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.740351][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.766766][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.794570][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.802268][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.809693][ T5831] bridge_slave_1: entered allmulticast mode [ 110.817514][ T5831] bridge_slave_1: entered promiscuous mode [ 110.869497][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.876948][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.903527][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.959974][ T5826] team0: Port device team_slave_0 added [ 110.994151][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.018684][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.026201][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.033827][ T5835] bridge_slave_0: entered allmulticast mode [ 111.041515][ T5835] bridge_slave_0: entered promiscuous mode [ 111.051852][ T5826] team0: Port device team_slave_1 added [ 111.058494][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.065541][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.091654][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.105372][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.112665][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.138752][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.152983][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.165310][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.182826][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.190433][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.198048][ T5835] bridge_slave_1: entered allmulticast mode [ 111.205619][ T5835] bridge_slave_1: entered promiscuous mode [ 111.266542][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.379834][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.387704][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.414208][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.438540][ T5827] hsr_slave_0: entered promiscuous mode [ 111.445831][ T5827] hsr_slave_1: entered promiscuous mode [ 111.454596][ T5837] team0: Port device team_slave_0 added [ 111.463121][ T5831] team0: Port device team_slave_0 added [ 111.474030][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.484011][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.490962][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.517300][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.560460][ T5837] team0: Port device team_slave_1 added [ 111.568894][ T5831] team0: Port device team_slave_1 added [ 111.579021][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.666186][ T5834] hsr_slave_0: entered promiscuous mode [ 111.673674][ T5834] hsr_slave_1: entered promiscuous mode [ 111.679867][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 111.686238][ T5834] Cannot create hsr debugfs directory [ 111.751464][ T5835] team0: Port device team_slave_0 added [ 111.760375][ T5835] team0: Port device team_slave_1 added [ 111.774614][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.781655][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.808567][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.823149][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.830087][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.856104][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.934907][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.942248][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.969001][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.981025][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.988099][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.014076][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.031080][ T5826] hsr_slave_0: entered promiscuous mode [ 112.038466][ T5826] hsr_slave_1: entered promiscuous mode [ 112.044736][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 112.050459][ T5826] Cannot create hsr debugfs directory [ 112.144442][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.151535][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.177700][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.250742][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.257955][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.284577][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.355390][ T5837] hsr_slave_0: entered promiscuous mode [ 112.362416][ T5837] hsr_slave_1: entered promiscuous mode [ 112.369678][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 112.375491][ T5837] Cannot create hsr debugfs directory [ 112.433331][ T5831] hsr_slave_0: entered promiscuous mode [ 112.439909][ T5831] hsr_slave_1: entered promiscuous mode [ 112.447451][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 112.453790][ T5831] Cannot create hsr debugfs directory [ 112.521568][ T5832] Bluetooth: hci0: command tx timeout [ 112.522718][ T5143] Bluetooth: hci2: command tx timeout [ 112.532674][ T5832] Bluetooth: hci1: command tx timeout [ 112.532723][ T5832] Bluetooth: hci3: command tx timeout [ 112.601708][ T5143] Bluetooth: hci5: command tx timeout [ 112.602149][ T5833] Bluetooth: hci4: command tx timeout [ 112.690566][ T5835] hsr_slave_0: entered promiscuous mode [ 112.697666][ T5835] hsr_slave_1: entered promiscuous mode [ 112.704180][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 112.709913][ T5835] Cannot create hsr debugfs directory [ 113.042079][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.082769][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.120019][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.137506][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.253049][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.269117][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.292220][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.319376][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.406959][ T5826] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.423063][ T5826] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.435448][ T5826] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.453533][ T5826] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.607737][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.614849][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.628807][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.668897][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.698232][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.707675][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.729824][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.766510][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.773811][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.816059][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.823222][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.848533][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.887171][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.907597][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.925346][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.932499][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.955416][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.970785][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.015117][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.022294][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.120915][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.136497][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.149531][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.180576][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.333233][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.435392][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.468870][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.476079][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.588123][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.595707][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.609622][ T5833] Bluetooth: hci3: command tx timeout [ 114.609653][ T5143] Bluetooth: hci1: command tx timeout [ 114.615626][ T5833] Bluetooth: hci0: command tx timeout [ 114.621800][ T5832] Bluetooth: hci2: command tx timeout [ 114.649346][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.688388][ T5832] Bluetooth: hci5: command tx timeout [ 114.694755][ T5143] Bluetooth: hci4: command tx timeout [ 114.738076][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.779251][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.803328][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.812830][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.819943][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.839732][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.884202][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.905773][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.912961][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.942918][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.957875][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.965058][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.012003][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.019142][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.032933][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.040051][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.054729][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.096885][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.104110][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.386116][ T5827] veth0_vlan: entered promiscuous mode [ 115.398285][ T5834] veth0_vlan: entered promiscuous mode [ 115.437174][ T5827] veth1_vlan: entered promiscuous mode [ 115.575647][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.607926][ T5834] veth1_vlan: entered promiscuous mode [ 115.716745][ T5827] veth0_macvtap: entered promiscuous mode [ 115.775422][ T5827] veth1_macvtap: entered promiscuous mode [ 115.816643][ T5834] veth0_macvtap: entered promiscuous mode [ 115.865780][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.889155][ T5834] veth1_macvtap: entered promiscuous mode [ 115.935906][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.976237][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.026715][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.037494][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.063161][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.093571][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.126484][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.166062][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.200685][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.252547][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.265305][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.286552][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.328972][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.363360][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.437391][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.456739][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.586963][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.601869][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.682327][ T5836] Bluetooth: hci0: command tx timeout [ 116.682430][ T5833] Bluetooth: hci3: command tx timeout [ 116.688821][ T5832] Bluetooth: hci2: command tx timeout [ 116.699819][ T5143] Bluetooth: hci1: command tx timeout [ 116.717032][ T5831] veth0_vlan: entered promiscuous mode [ 116.773946][ T5832] Bluetooth: hci4: command tx timeout [ 116.779884][ T5143] Bluetooth: hci5: command tx timeout [ 116.787081][ T5826] veth0_vlan: entered promiscuous mode [ 116.800089][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.830378][ T5837] veth0_vlan: entered promiscuous mode [ 116.875866][ T5831] veth1_vlan: entered promiscuous mode [ 116.910402][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.913266][ T5837] veth1_vlan: entered promiscuous mode [ 116.929331][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.933769][ T5826] veth1_vlan: entered promiscuous mode [ 117.035218][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.043975][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.076286][ T5837] veth0_macvtap: entered promiscuous mode [ 117.107219][ T5826] veth0_macvtap: entered promiscuous mode [ 117.133566][ T5826] veth1_macvtap: entered promiscuous mode [ 117.141821][ T5837] veth1_macvtap: entered promiscuous mode [ 117.153818][ T5831] veth0_macvtap: entered promiscuous mode [ 117.183370][ T5835] veth0_vlan: entered promiscuous mode [ 117.215485][ T5831] veth1_macvtap: entered promiscuous mode [ 117.259945][ T5835] veth1_vlan: entered promiscuous mode [ 117.276461][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.320484][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.345785][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.393988][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.441362][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.452521][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.487529][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.530230][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.561128][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.576136][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.672550][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.688753][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.734520][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.764839][ T5835] veth0_macvtap: entered promiscuous mode [ 117.794367][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.809221][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.852117][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.887371][ T5835] veth1_macvtap: entered promiscuous mode [ 117.929226][ T5980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8'. [ 117.942294][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.994754][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.048604][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.070364][ T5982] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9'. [ 118.072371][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.251650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.321812][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.330297][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.382562][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.482497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.885769][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.921976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.013248][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.021109][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.100951][ T1332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.131726][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.140501][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.158975][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.183761][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.200251][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.230136][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.244538][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.356042][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.374036][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.696824][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.781737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.965215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.042039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 120.067538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.169955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.201791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 120.682400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.789192][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.464698][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.493483][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.382675][ T6015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.406886][ T6016] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 124.941943][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 124.958820][ T6015] ceph: No mds server is up or the cluster is laggy [ 124.967199][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 125.446346][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.875313][ T6041] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 125.893152][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 125.907411][ T10] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 126.636220][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 126.651658][ T10] usb 4-1: config 6 has no interface number 0 [ 126.680835][ T10] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 126.945744][ T10] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.974792][ T10] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.986274][ T10] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 127.017444][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 127.048494][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.098665][ T10] usb 4-1: Product: syz [ 127.141314][ T10] usb 4-1: Manufacturer: syz [ 127.145983][ T10] usb 4-1: SerialNumber: syz [ 127.407390][ T10] hso 4-1:6.2: Failed to find BULK IN ep [ 128.337457][ T6054] netlink: 220 bytes leftover after parsing attributes in process `syz.1.29'. [ 128.548267][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.556415][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.577762][ T6054] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 128.604378][ T6054] netlink: 224 bytes leftover after parsing attributes in process `syz.1.29'. [ 129.622359][ T6061] bridge0: entered allmulticast mode [ 130.567704][ T6065] syz_tun: entered allmulticast mode [ 130.651620][ T10] usb 4-1: USB disconnect, device number 2 [ 131.466146][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.473856][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.384028][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.429700][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.557830][ T6111] netlink: 220 bytes leftover after parsing attributes in process `syz.2.49'. [ 133.696668][ T6115] netlink: 'syz.2.49': attribute type 1 has an invalid length. [ 133.860388][ T6115] netlink: 224 bytes leftover after parsing attributes in process `syz.2.49'. [ 134.538770][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.546588][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.573167][ T6110] bridge0: entered allmulticast mode [ 134.599541][ T6100] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.950869][ T6100] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.967570][ T6100] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.039816][ T6100] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.958780][ T6141] netlink: 'syz.5.58': attribute type 1 has an invalid length. [ 135.981122][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.58'. [ 137.977891][ T6160] netlink: 220 bytes leftover after parsing attributes in process `syz.5.66'. [ 138.166245][ T6160] netlink: 'syz.5.66': attribute type 1 has an invalid length. [ 138.183580][ T6160] netlink: 224 bytes leftover after parsing attributes in process `syz.5.66'. [ 138.261299][ T5939] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.421758][ T5939] usb 1-1: Using ep0 maxpacket: 8 [ 138.446321][ T5939] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 138.456069][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.493775][ T5939] usb 1-1: Product: syz [ 138.505464][ T5939] usb 1-1: Manufacturer: syz [ 138.510381][ T5939] usb 1-1: SerialNumber: syz [ 138.533933][ T5939] usb 1-1: config 0 descriptor?? [ 138.788221][ T5939] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 138.849193][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 139.586433][ T6188] netlink: 'syz.2.75': attribute type 1 has an invalid length. [ 139.594133][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 139.607593][ T5939] usb write operation failed. (-71) [ 139.629941][ T5939] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 139.687134][ T5939] dvbdev: DVB: registering new adapter (Terratec H7) [ 139.726396][ T5939] usb 1-1: media controller created [ 139.769280][ T5939] usb read operation failed. (-71) [ 139.786682][ T5939] usb write operation failed. (-71) [ 139.862774][ T5939] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 139.931426][ T5939] usb 1-1: USB disconnect, device number 2 [ 142.447915][ T6214] netlink: 220 bytes leftover after parsing attributes in process `syz.3.83'. [ 142.479621][ T6218] netlink: 'syz.5.82': attribute type 10 has an invalid length. [ 142.533190][ T6221] netlink: 'syz.3.83': attribute type 1 has an invalid length. [ 142.577646][ T6221] netlink: 224 bytes leftover after parsing attributes in process `syz.3.83'. [ 142.605920][ T6217] bridge0: port 3(gretap0) entered blocking state [ 142.612785][ T6217] bridge0: port 3(gretap0) entered disabled state [ 142.619498][ T6217] gretap0: entered allmulticast mode [ 142.626725][ T6217] gretap0: entered promiscuous mode [ 142.632872][ T6217] bridge0: port 3(gretap0) entered blocking state [ 142.639492][ T6217] bridge0: port 3(gretap0) entered forwarding state [ 142.667010][ T6218] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 143.012016][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.206844][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 143.217693][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 143.231363][ T6228] ceph: No mds server is up or the cluster is laggy [ 144.011347][ T5931] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.061652][ T6243] Bluetooth: MGMT ver 1.23 [ 144.481256][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 144.488658][ T5931] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 144.498278][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.637879][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.97'. [ 144.778362][ T6262] netlink: 'syz.4.98': attribute type 1 has an invalid length. [ 144.818469][ T5931] pvrusb2: Hardware description: Terratec Grabster AV400 [ 144.830930][ T5931] pvrusb2: ********** [ 144.836937][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 144.837290][ T5931] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 144.886242][ T5931] pvrusb2: Important functionality might not be entirely working. [ 145.881494][ T5931] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 145.901252][ T5931] pvrusb2: ********** [ 146.107060][ T2340] pvrusb2: Invalid write control endpoint [ 146.387242][ T5909] usb 1-1: USB disconnect, device number 3 [ 147.360856][ T6275] bridge0: port 3(gretap0) entered blocking state [ 147.367446][ T6275] bridge0: port 3(gretap0) entered disabled state [ 147.374068][ T6275] gretap0: entered allmulticast mode [ 147.440929][ T6275] gretap0: entered promiscuous mode [ 147.558932][ T6279] netlink: 220 bytes leftover after parsing attributes in process `syz.5.103'. [ 147.709098][ T6281] netlink: 'syz.5.103': attribute type 1 has an invalid length. [ 147.740501][ T2340] pvrusb2: Invalid write control endpoint [ 147.758372][ T6281] netlink: 224 bytes leftover after parsing attributes in process `syz.5.103'. [ 147.774543][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 147.790033][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 147.823887][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 147.851536][ T2340] pvrusb2: Device being rendered inoperable [ 147.887559][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 147.971048][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 147.992179][ T2340] pvrusb2: Attached sub-driver cx25840 [ 147.997845][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 148.010229][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 148.557887][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 148.571436][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 148.592331][ T6290] ceph: No mds server is up or the cluster is laggy [ 150.089922][ T5909] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 151.261609][ T5909] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 151.271708][ T5909] usb 1-1: config 0 has no interface number 0 [ 151.277924][ T5909] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 151.278557][ T6322] syz.1.115 uses obsolete (PF_INET,SOCK_PACKET) [ 151.571595][ T5909] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 151.601378][ T5909] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 151.653721][ T5909] usb 1-1: config 0 interface 11 has no altsetting 0 [ 151.679124][ T5909] usb 1-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 151.691859][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.704745][ T5909] usb 1-1: config 0 descriptor?? [ 151.713723][ T6309] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.764116][ T5909] keyspan 1-1:0.11: Keyspan 4 port adapter converter detected [ 151.795959][ T5909] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 151.811935][ T5909] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 151.843287][ T5909] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 151.864600][ T5909] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 151.884814][ T5909] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 151.903190][ T5909] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 151.959554][ T5909] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 151.985094][ T5909] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 152.020159][ T5909] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 152.063614][ T5909] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 152.104604][ T5909] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 152.148484][ T5909] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 152.255353][ T6334] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 152.265141][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 152.446692][ T5909] usb 1-1: USB disconnect, device number 4 [ 152.769251][ T5909] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 152.832392][ T5909] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 153.065310][ T5909] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 153.085390][ T5909] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 153.121000][ T24] libceph: connect (1)[c::]:6789 error -101 [ 153.127161][ T6337] ceph: No mds server is up or the cluster is laggy [ 153.138833][ T5909] keyspan 1-1:0.11: device disconnected [ 153.151114][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 153.723315][ T5143] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 156.899156][ T6375] netlink: 220 bytes leftover after parsing attributes in process `syz.2.136'. [ 157.209348][ T6375] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 157.386645][ T6375] netlink: 224 bytes leftover after parsing attributes in process `syz.2.136'. [ 158.052285][ T6384] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 158.065057][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 159.591292][ T976] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 159.990180][ T976] usb 6-1: Using ep0 maxpacket: 8 [ 160.560463][ T976] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 160.581784][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.589887][ T976] usb 6-1: Product: syz [ 160.601379][ T976] usb 6-1: Manufacturer: syz [ 160.605996][ T976] usb 6-1: SerialNumber: syz [ 160.855315][ T6404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'. [ 161.107098][ T6406] fuse: Unknown parameter '0x0000000000000003' [ 161.396758][ T6409] nvme_fabrics: missing parameter 'transport=%s' [ 161.403734][ T6409] nvme_fabrics: missing parameter 'nqn=%s' [ 161.722731][ T976] usb 6-1: config 0 descriptor?? [ 161.945231][ T5832] Bluetooth: hci3: unexpected event 0x08 length: 11 > 4 [ 162.489911][ T976] usb 6-1: can't set config #0, error -71 [ 162.592452][ T976] usb 6-1: USB disconnect, device number 2 [ 163.961373][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 166.048908][ T6426] netlink: 'syz.3.149': attribute type 10 has an invalid length. [ 166.171817][ T5832] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 166.485571][ T6426] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 166.871437][ T6443] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 169.738287][ T6465] bridge0: port 3(gretap0) entered blocking state [ 169.746132][ T6465] bridge0: port 3(gretap0) entered disabled state [ 169.753686][ T6465] gretap0: entered allmulticast mode [ 169.780521][ T6465] gretap0: entered promiscuous mode [ 171.529762][ T5941] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 172.184463][ T5941] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 172.241412][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.355390][ T5941] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 172.443160][ T5941] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 172.498007][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.552470][ T5941] usb 6-1: config 0 descriptor?? [ 173.906006][ T6503] fuse: Unknown parameter '0x0000000000000003' [ 173.978842][ T5941] usbhid 6-1:0.0: can't add hid device: -71 [ 173.993441][ T5941] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 174.030826][ T5941] usb 6-1: USB disconnect, device number 3 [ 174.825218][ T6517] warning: `syz.3.174' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.826954][ T6520] netlink: 220 bytes leftover after parsing attributes in process `syz.3.175'. [ 176.367799][ T6520] netlink: 'syz.3.175': attribute type 1 has an invalid length. [ 176.375549][ T6520] netlink: 224 bytes leftover after parsing attributes in process `syz.3.175'. [ 178.243573][ T30] audit: type=1326 audit(1763831303.576:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.5.182" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c7298f749 code=0x0 [ 178.303647][ T6548] fuse: Unknown parameter '0x0000000000000003' [ 181.267302][ T6570] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 181.274535][ T6570] overlayfs: failed to set xattr on upper [ 181.280309][ T6570] overlayfs: ...falling back to redirect_dir=nofollow. [ 181.287287][ T6570] overlayfs: ...falling back to index=off. [ 181.293223][ T6570] overlayfs: ...falling back to uuid=null. [ 181.377480][ T6571] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 181.384617][ T6571] overlayfs: failed to set xattr on upper [ 181.390391][ T6571] overlayfs: ...falling back to redirect_dir=nofollow. [ 181.397334][ T6571] overlayfs: ...falling back to index=off. [ 181.404195][ T6571] overlayfs: ...falling back to uuid=null. [ 181.410348][ T6571] overlayfs: conflicting lowerdir path [ 184.851073][ T6593] comedi comedi3: c6xdigio: I/O port conflict (0x401,3) [ 184.870955][ T6593] ================================================================== [ 184.879017][ T6593] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 184.887002][ T6593] Read of size 8 at addr ffff88807844e030 by task syz.3.199/6593 [ 184.894708][ T6593] [ 184.897021][ T6593] CPU: 0 UID: 0 PID: 6593 Comm: syz.3.199 Not tainted syzkaller #0 PREEMPT(full) [ 184.897053][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.897070][ T6593] Call Trace: [ 184.897079][ T6593] [ 184.897090][ T6593] dump_stack_lvl+0x116/0x1f0 [ 184.897128][ T6593] print_report+0xcd/0x630 [ 184.897154][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.897189][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.897222][ T6593] ? __phys_addr+0xe8/0x180 [ 184.897263][ T6593] ? sysfs_remove_file_ns+0x63/0x70 [ 184.897289][ T6593] kasan_report+0xe0/0x110 [ 184.897316][ T6593] ? sysfs_remove_file_ns+0x63/0x70 [ 184.897347][ T6593] sysfs_remove_file_ns+0x63/0x70 [ 184.897375][ T6593] driver_remove_file+0x4a/0x60 [ 184.897418][ T6593] bus_remove_driver+0x224/0x2c0 [ 184.897453][ T6593] driver_unregister+0x76/0xb0 [ 184.897495][ T6593] comedi_device_detach_locked+0x12f/0xa50 [ 184.897542][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.897579][ T6593] comedi_device_detach+0x67/0xb0 [ 184.897623][ T6593] comedi_device_attach+0x43d/0x900 [ 184.897672][ T6593] do_devconfig_ioctl+0x1b1/0x710 [ 184.897703][ T6593] ? __mutex_lock+0x1c5/0x1060 [ 184.897743][ T6593] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 184.897784][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.897820][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.897853][ T6593] ? find_held_lock+0x2b/0x80 [ 184.897892][ T6593] comedi_unlocked_ioctl+0x165d/0x2f00 [ 184.897934][ T6593] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 184.897981][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.898021][ T6593] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 184.898063][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.898097][ T6593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 184.898134][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.898168][ T6593] ? do_vfs_ioctl+0x128/0x14f0 [ 184.898202][ T6593] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 184.898242][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.898275][ T6593] ? find_held_lock+0x2b/0x80 [ 184.898309][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.898343][ T6593] ? hook_file_ioctl_common+0x145/0x410 [ 184.898375][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.898409][ T6593] ? __fget_files+0x20e/0x3c0 [ 184.898455][ T6593] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 184.898494][ T6593] __x64_sys_ioctl+0x18e/0x210 [ 184.898531][ T6593] do_syscall_64+0xcd/0xfa0 [ 184.898568][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.898596][ T6593] RIP: 0033:0x7f63e198f749 [ 184.898617][ T6593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.898644][ T6593] RSP: 002b:00007f63e28fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.898670][ T6593] RAX: ffffffffffffffda RBX: 00007f63e1be5fa0 RCX: 00007f63e198f749 [ 184.898689][ T6593] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000005 [ 184.898707][ T6593] RBP: 00007f63e1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 184.898724][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.898741][ T6593] R13: 00007f63e1be6038 R14: 00007f63e1be5fa0 R15: 00007ffc58c26ca8 [ 184.898770][ T6593] [ 184.898779][ T6593] [ 185.214789][ T6593] Allocated by task 6108: [ 185.219107][ T6593] kasan_save_stack+0x33/0x60 [ 185.223833][ T6593] kasan_save_track+0x14/0x30 [ 185.228522][ T6593] __kasan_kmalloc+0xaa/0xb0 [ 185.233131][ T6593] bus_add_driver+0x92/0x690 [ 185.237727][ T6593] driver_register+0x15c/0x4b0 [ 185.242507][ T6593] c6xdigio_attach+0xa3/0x4b0 [ 185.247200][ T6593] comedi_device_attach+0x3b3/0x900 [ 185.252434][ T6593] do_devconfig_ioctl+0x1b1/0x710 [ 185.257461][ T6593] comedi_unlocked_ioctl+0x165d/0x2f00 [ 185.262926][ T6593] __x64_sys_ioctl+0x18e/0x210 [ 185.267694][ T6593] do_syscall_64+0xcd/0xfa0 [ 185.272200][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.278091][ T6593] [ 185.280401][ T6593] Freed by task 6377: [ 185.284378][ T6593] kasan_save_stack+0x33/0x60 [ 185.289065][ T6593] kasan_save_track+0x14/0x30 [ 185.293750][ T6593] __kasan_save_free_info+0x3b/0x60 [ 185.298968][ T6593] __kasan_slab_free+0x5f/0x80 [ 185.303748][ T6593] kfree+0x2b8/0x6d0 [ 185.307642][ T6593] kobject_put+0x1e7/0x5a0 [ 185.312061][ T6593] bus_remove_driver+0x16e/0x2c0 [ 185.316999][ T6593] driver_unregister+0x76/0xb0 [ 185.321771][ T6593] comedi_device_detach_locked+0x12f/0xa50 [ 185.327590][ T6593] do_devconfig_ioctl+0x555/0x710 [ 185.332613][ T6593] comedi_unlocked_ioctl+0x165d/0x2f00 [ 185.338076][ T6593] __x64_sys_ioctl+0x18e/0x210 [ 185.342840][ T6593] do_syscall_64+0xcd/0xfa0 [ 185.347348][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.353240][ T6593] [ 185.355551][ T6593] The buggy address belongs to the object at ffff88807844e000 [ 185.355551][ T6593] which belongs to the cache kmalloc-256 of size 256 [ 185.369592][ T6593] The buggy address is located 48 bytes inside of [ 185.369592][ T6593] freed 256-byte region [ffff88807844e000, ffff88807844e100) [ 185.383296][ T6593] [ 185.385605][ T6593] The buggy address belongs to the physical page: [ 185.391998][ T6593] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807844e000 pfn:0x7844e [ 185.402050][ T6593] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 185.410535][ T6593] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 185.419024][ T6593] page_type: f5(slab) [ 185.423005][ T6593] raw: 00fff00000000240 ffff88813ffa6b40 ffffea0001e1cf10 ffffea0001dffe90 [ 185.431580][ T6593] raw: ffff88807844e000 000000000010000e 00000000f5000000 0000000000000000 [ 185.440153][ T6593] head: 00fff00000000240 ffff88813ffa6b40 ffffea0001e1cf10 ffffea0001dffe90 [ 185.448813][ T6593] head: ffff88807844e000 000000000010000e 00000000f5000000 0000000000000000 [ 185.457477][ T6593] head: 00fff00000000001 ffffea0001e11381 00000000ffffffff 00000000ffffffff [ 185.466140][ T6593] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 185.474792][ T6593] page dumped because: kasan: bad access detected [ 185.481189][ T6593] page_owner tracks the page as allocated [ 185.486896][ T6593] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5831, tgid 5831 (syz-executor), ts 116501140995, free_ts 116472968962 [ 185.508431][ T6593] post_alloc_hook+0x1af/0x220 [ 185.513202][ T6593] get_page_from_freelist+0x10a3/0x3a30 [ 185.518752][ T6593] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 185.524646][ T6593] alloc_pages_mpol+0x1fb/0x550 [ 185.529486][ T6593] new_slab+0x24a/0x360 [ 185.533636][ T6593] ___slab_alloc+0xd79/0x1a50 [ 185.538310][ T6593] __slab_alloc.constprop.0+0x63/0x110 [ 185.543772][ T6593] __kmalloc_noprof+0x501/0x880 [ 185.548623][ T6593] fib_create_info+0x53f/0x46b0 [ 185.553507][ T6593] fib_table_insert+0x177/0x1c40 [ 185.558461][ T6593] fib_magic+0x4d4/0x5c0 [ 185.562704][ T6593] fib_add_ifaddr+0x16d/0x580 [ 185.567385][ T6593] fib_netdev_event+0x38a/0x710 [ 185.572238][ T6593] notifier_call_chain+0xbc/0x410 [ 185.577272][ T6593] call_netdevice_notifiers_info+0xbe/0x140 [ 185.583166][ T6593] __dev_notify_flags+0x12c/0x2e0 [ 185.588180][ T6593] page last free pid 23 tgid 23 stack trace: [ 185.594138][ T6593] __free_frozen_pages+0x7df/0x1160 [ 185.599333][ T6593] rcu_core+0x79c/0x1530 [ 185.603575][ T6593] handle_softirqs+0x219/0x8e0 [ 185.608338][ T6593] run_ksoftirqd+0x3a/0x60 [ 185.612751][ T6593] smpboot_thread_fn+0x3f7/0xae0 [ 185.617696][ T6593] kthread+0x3c5/0x780 [ 185.621754][ T6593] ret_from_fork+0x675/0x7d0 [ 185.626334][ T6593] ret_from_fork_asm+0x1a/0x30 [ 185.631102][ T6593] [ 185.633407][ T6593] Memory state around the buggy address: [ 185.639020][ T6593] ffff88807844df00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 185.647066][ T6593] ffff88807844df80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 185.655118][ T6593] >ffff88807844e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.663169][ T6593] ^ [ 185.668781][ T6593] ffff88807844e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.676828][ T6593] ffff88807844e100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 185.684873][ T6593] ================================================================== [ 185.752979][ T6593] Disabling lock debugging due to kernel taint [ 185.866902][ T6596] bridge0: entered allmulticast mode [ 185.886619][ T6593] ------------[ cut here ]------------ [ 185.892133][ T6593] kernfs: can not remove 'bind', no directory [ 185.942359][ T6593] WARNING: CPU: 1 PID: 6593 at fs/kernfs/dir.c:1706 kernfs_remove_by_name_ns+0xff/0x110 [ 185.952201][ T6593] Modules linked in: [ 185.956117][ T6593] CPU: 1 UID: 0 PID: 6593 Comm: syz.3.199 Tainted: G B syzkaller #0 PREEMPT(full) [ 185.966918][ T6593] Tainted: [B]=BAD_PAGE [ 185.971056][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.981143][ T6593] RIP: 0010:kernfs_remove_by_name_ns+0xff/0x110 [ 185.987465][ T6593] Code: 48 89 df 31 db e8 61 a2 ff ff 48 89 ef e8 99 66 33 ff eb b1 e8 d2 47 58 ff 90 48 c7 c7 00 b5 a3 8b 4c 89 e6 e8 82 7b 16 ff 90 <0f> 0b 90 90 eb b4 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 186.007190][ T6593] RSP: 0018:ffffc9001e3af930 EFLAGS: 00010282 [ 186.013639][ T6593] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000c9be000 [ 186.021831][ T6593] RDX: 0000000000080000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 186.029798][ T6593] RBP: ffffffff8f278000 R08: 0000000000000001 R09: 0000000000000000 [ 186.037793][ T6593] R10: 0000000000000001 R11: 203a73666e72656b R12: ffffffff8c1e75c0 [ 186.045882][ T6593] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88814ca3b000 [ 186.053881][ T6593] FS: 00007f63e28fc6c0(0000) GS:ffff888124b06000(0000) knlGS:0000000000000000 [ 186.062829][ T6593] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.069421][ T6593] CR2: 00007f63e2899d58 CR3: 0000000078aff000 CR4: 0000000000350ef0 [ 186.077470][ T6593] Call Trace: [ 186.080743][ T6593] [ 186.083694][ T6593] driver_remove_file+0x4a/0x60 [ 186.088562][ T6593] bus_remove_driver+0x224/0x2c0 [ 186.093553][ T6593] driver_unregister+0x76/0xb0 [ 186.098329][ T6593] comedi_device_detach_locked+0x12f/0xa50 [ 186.104179][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.109820][ T6593] comedi_device_detach+0x67/0xb0 [ 186.115225][ T6593] comedi_device_attach+0x43d/0x900 [ 186.120448][ T6593] do_devconfig_ioctl+0x1b1/0x710 [ 186.125764][ T6593] ? __mutex_lock+0x1c5/0x1060 [ 186.130548][ T6593] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 186.136219][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.141889][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.147527][ T6593] ? find_held_lock+0x2b/0x80 [ 186.152249][ T6593] comedi_unlocked_ioctl+0x165d/0x2f00 [ 186.157720][ T6593] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.163756][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.169403][ T6593] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 186.175265][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.180905][ T6593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.186839][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.192523][ T6593] ? do_vfs_ioctl+0x128/0x14f0 [ 186.197293][ T6593] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 186.202357][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.207994][ T6593] ? find_held_lock+0x2b/0x80 [ 186.212722][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.218624][ T6593] ? hook_file_ioctl_common+0x145/0x410 [ 186.224365][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.230008][ T6593] ? __fget_files+0x20e/0x3c0 [ 186.234736][ T6593] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 186.240554][ T6593] __x64_sys_ioctl+0x18e/0x210 [ 186.245366][ T6593] do_syscall_64+0xcd/0xfa0 [ 186.249879][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.255826][ T6593] RIP: 0033:0x7f63e198f749 [ 186.260237][ T6593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.279900][ T6593] RSP: 002b:00007f63e28fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.288352][ T6593] RAX: ffffffffffffffda RBX: 00007f63e1be5fa0 RCX: 00007f63e198f749 [ 186.296356][ T6593] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000005 [ 186.304349][ T6593] RBP: 00007f63e1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 186.312407][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.320665][ T6593] R13: 00007f63e1be6038 R14: 00007f63e1be5fa0 R15: 00007ffc58c26ca8 [ 186.328838][ T6593] [ 186.331893][ T6593] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.339166][ T6593] CPU: 1 UID: 0 PID: 6593 Comm: syz.3.199 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.349926][ T6593] Tainted: [B]=BAD_PAGE [ 186.354059][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.364102][ T6593] Call Trace: [ 186.367368][ T6593] [ 186.370283][ T6593] dump_stack_lvl+0x3d/0x1f0 [ 186.374879][ T6593] vpanic+0x640/0x6f0 [ 186.378875][ T6593] ? kernfs_remove_by_name_ns+0xff/0x110 [ 186.384518][ T6593] panic+0xca/0xd0 [ 186.388252][ T6593] ? __pfx_panic+0x10/0x10 [ 186.392687][ T6593] check_panic_on_warn+0xab/0xb0 [ 186.397644][ T6593] __warn+0xf6/0x3c0 [ 186.401530][ T6593] ? kernfs_remove_by_name_ns+0xff/0x110 [ 186.407175][ T6593] report_bug+0x3c3/0x580 [ 186.411507][ T6593] ? kernfs_remove_by_name_ns+0xff/0x110 [ 186.417150][ T6593] handle_bug+0x184/0x210 [ 186.421489][ T6593] exc_invalid_op+0x17/0x50 [ 186.426026][ T6593] asm_exc_invalid_op+0x1a/0x20 [ 186.430873][ T6593] RIP: 0010:kernfs_remove_by_name_ns+0xff/0x110 [ 186.437123][ T6593] Code: 48 89 df 31 db e8 61 a2 ff ff 48 89 ef e8 99 66 33 ff eb b1 e8 d2 47 58 ff 90 48 c7 c7 00 b5 a3 8b 4c 89 e6 e8 82 7b 16 ff 90 <0f> 0b 90 90 eb b4 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 186.456727][ T6593] RSP: 0018:ffffc9001e3af930 EFLAGS: 00010282 [ 186.462790][ T6593] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000c9be000 [ 186.470751][ T6593] RDX: 0000000000080000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 186.478716][ T6593] RBP: ffffffff8f278000 R08: 0000000000000001 R09: 0000000000000000 [ 186.486679][ T6593] R10: 0000000000000001 R11: 203a73666e72656b R12: ffffffff8c1e75c0 [ 186.494644][ T6593] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88814ca3b000 [ 186.502614][ T6593] ? __warn_printk+0x1a5/0x350 [ 186.507407][ T6593] driver_remove_file+0x4a/0x60 [ 186.512271][ T6593] bus_remove_driver+0x224/0x2c0 [ 186.517215][ T6593] driver_unregister+0x76/0xb0 [ 186.521990][ T6593] comedi_device_detach_locked+0x12f/0xa50 [ 186.527816][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.533460][ T6593] comedi_device_detach+0x67/0xb0 [ 186.538499][ T6593] comedi_device_attach+0x43d/0x900 [ 186.543723][ T6593] do_devconfig_ioctl+0x1b1/0x710 [ 186.548775][ T6593] ? __mutex_lock+0x1c5/0x1060 [ 186.553553][ T6593] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 186.559115][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.564762][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.570399][ T6593] ? find_held_lock+0x2b/0x80 [ 186.575088][ T6593] comedi_unlocked_ioctl+0x165d/0x2f00 [ 186.580564][ T6593] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.586560][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.592201][ T6593] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 186.598020][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.603657][ T6593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.609557][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.615192][ T6593] ? do_vfs_ioctl+0x128/0x14f0 [ 186.619960][ T6593] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 186.625004][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.630641][ T6593] ? find_held_lock+0x2b/0x80 [ 186.635326][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.640959][ T6593] ? hook_file_ioctl_common+0x145/0x410 [ 186.646511][ T6593] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.652161][ T6593] ? __fget_files+0x20e/0x3c0 [ 186.656854][ T6593] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 186.662667][ T6593] __x64_sys_ioctl+0x18e/0x210 [ 186.667446][ T6593] do_syscall_64+0xcd/0xfa0 [ 186.671953][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.677860][ T6593] RIP: 0033:0x7f63e198f749 [ 186.682266][ T6593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.701876][ T6593] RSP: 002b:00007f63e28fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.710288][ T6593] RAX: ffffffffffffffda RBX: 00007f63e1be5fa0 RCX: 00007f63e198f749 [ 186.718256][ T6593] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000005 [ 186.726226][ T6593] RBP: 00007f63e1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 186.734191][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.742157][ T6593] R13: 00007f63e1be6038 R14: 00007f63e1be5fa0 R15: 00007ffc58c26ca8 [ 186.750135][ T6593] [ 186.753467][ T6593] Kernel Offset: disabled [ 186.757784][ T6593] Rebooting in 86400 seconds..