last executing test programs: 1m30.322146666s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404801c}, 0x20008090) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0xf) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x100000000e2) keyctl$clear(0x3, 0xfffffffffffffffd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000001100)='./trace\x00', &(0x7f0000001140)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./trace/set_event\x00', 0x2, 0x0) write(r6, &(0x7f00000011c0)='!', 0x1) 1m29.083506516s ago: executing program 2 (id=7): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r1 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x48002) ioctl$CEC_ADAP_G_PHYS_ADDR(r1, 0x80026101, &(0x7f0000000440)) readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000003c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 1m27.41055015s ago: executing program 1 (id=2): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x4000000002) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r5, &(0x7f0000000340), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x48241, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f40)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000015c0)={r7, &(0x7f0000001600), &(0x7f0000001640)=@tcp6=r6}, 0x20) sendmmsg$inet6(r4, &(0x7f00000005c0), 0x40000000000017d, 0x888) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 1m25.945402448s ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000800)={0x0, 0xa9ac}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000008c0)={0x0, 0x100}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000842000/0x1000)=nil, 0x1000}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x800}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x44004080) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) 1m24.32660229s ago: executing program 5 (id=6): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000005c0)=0xffff0018) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) prlimit64(r3, 0x2, &(0x7f00000003c0)={0x9, 0x2}, &(0x7f0000000400)) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000002840)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f000001b840)=0x7) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f000001b880)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffff8}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x20080}, 0x50) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000380)) 1m21.920543272s ago: executing program 5 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0xb) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) keyctl$link(0x8, r3, r3) syz_mount_image$squashfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x2800411, &(0x7f00000004c0)=ANY=[], 0x1, 0x1a4, &(0x7f0000000500)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r4, 0x8000001, 0x1) getdents64(r4, 0x0, 0x22) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000900)={0xffffffffffffffff, r5}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 1m21.455081152s ago: executing program 1 (id=11): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c850) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019500)='my_configfs\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000019540), r4) mount(&(0x7f0000019580)=@filename='none\x00', &(0x7f00000195c0)='my_configfs\x00', &(0x7f0000019600)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000019640)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r5, &(0x7f0000019680)='nullb1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000019700)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r6, &(0x7f0000019740)='12', 0x2) 1m14.532141072s ago: executing program 1 (id=15): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x800455cc, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x3, @empty}, 0x1c) syz_emit_ethernet(0x4f, &(0x7f00000003c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x15, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x15, 0x0, @gue={{0x2, 0x0, 0x2, 0x3}, "ef135044a7"}}}}}}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000280), 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0x101000) 1m11.48899694s ago: executing program 32 (id=7): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r1 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x48002) ioctl$CEC_ADAP_G_PHYS_ADDR(r1, 0x80026101, &(0x7f0000000440)) readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000003c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 1m6.713615953s ago: executing program 33 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0xb) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) keyctl$link(0x8, r3, r3) syz_mount_image$squashfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x2800411, &(0x7f00000004c0)=ANY=[], 0x1, 0x1a4, &(0x7f0000000500)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r4, 0x8000001, 0x1) getdents64(r4, 0x0, 0x22) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000900)={0xffffffffffffffff, r5}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 1m0.048039834s ago: executing program 1 (id=33): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r0 = getpgrp(0x0) mkdir(&(0x7f0000000040)='dir0\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='dir0/tracing_on\x00', 0x1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000006c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r2, &(0x7f0000000e80)=""/102392, 0x18ff8) io_setup(0x3fd, &(0x7f0000019f00)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1ef) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x2c3) truncate(&(0x7f0000000580)='./file0/file1\x00', 0xe2) pipe(0x0) io_setup(0x3fd, 0x0) io_pgetevents(r3, 0x8000000202, 0x0, &(0x7f00000005c0), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) 43.766933494s ago: executing program 34 (id=33): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r0 = getpgrp(0x0) mkdir(&(0x7f0000000040)='dir0\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='dir0/tracing_on\x00', 0x1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000006c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r2, &(0x7f0000000e80)=""/102392, 0x18ff8) io_setup(0x3fd, &(0x7f0000019f00)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1ef) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x2c3) truncate(&(0x7f0000000580)='./file0/file1\x00', 0xe2) pipe(0x0) io_setup(0x3fd, 0x0) io_pgetevents(r3, 0x8000000202, 0x0, &(0x7f00000005c0), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) 39.740485895s ago: executing program 3 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = socket$vsock_seqpacket(0x28, 0x5, 0x0) accept4$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x10, 0x80000) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000fc0)=""/102368, 0x18fe0) add_key$fscrypt_v1(&(0x7f000001a000), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e760c696621b3880f26257e64e4cd633e07920ce048947162db92", 0x39) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 37.855122146s ago: executing program 3 (id=55): r0 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) sendfile(r2, r2, 0x0, 0x2000009) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x8400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00') sendfile(r6, r6, 0x0, 0x3fffff) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 35.114036667s ago: executing program 0 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0xc5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001800)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000003840)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f0000003880)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f00000038c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000003900)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000003940), 0x0, 0x0) read$msr(r2, &(0x7f0000003980)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f000001c980)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) write(r3, &(0x7f000001c9c0)="5a000300", 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f000001ca40), 0x8000) read(r5, &(0x7f000001ca80)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f000001cb80)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0x40045304, 0x0) tkill(r4, 0x7) write$UHID_INPUT(r0, 0x0, 0x0) 33.918633405s ago: executing program 0 (id=59): socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000001500)={0x8, 0xffffe1aa, 0x7ff, 0x1, 0x9}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000006c0)) setpgid(r0, r0) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x9, 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSLCKTRMIOS(r5, 0x80047437, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000f00)=@filename='127.0.0.1:/test\x00', &(0x7f0000000f40)='./mnt\x00', &(0x7f0000000f80)='nfs\x00', 0x0, &(0x7f0000000fc0)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000800)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b49cb0b1a4bbff03a8b3db280000000000000079"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 31.776743432s ago: executing program 0 (id=62): socket$can_bcm(0x1d, 0x2, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000028c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000002900), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000002940)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002a00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x181002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000002b00)='bridge_slave_1\x00', 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000002b40)={0xa, 0x4e20, 0x400, @loopback, 0x7}, 0x1c) listen(r5, 0xb) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000002b80)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000002bc0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r7, &(0x7f0000002c00)=ANY=[], 0xfffffdcf) 31.459818541s ago: executing program 4 (id=63): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000440)={0x41}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='100', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='5\x00', 0x1) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x1d4) getpid() syz_emit_ethernet(0xe, &(0x7f00000014c0)=ANY=[], 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, &(0x7f0000000340), 0x4, 0xbaf, &(0x7f0000001940)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") openat$dm_control(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.cpu/syz1\x00', 0x1ff) syz_usb_connect(0x0, 0x55, &(0x7f0000001340)=ANY=[@ANYBLOB="0f0100020200004024044e2700010000000109024300020100803209040000010202010005240010010524"], 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000001380), 0x19, 0x2) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000013c0)=@usbdevfs_connect) openat$vsock(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 30.201498443s ago: executing program 0 (id=64): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80580, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000500)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x940, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f00000002c0)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000340)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", 0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, r9, 0x0) ioctl$SYNC_IOC_FILE_INFO(r11, 0xc0383e04, &(0x7f0000000380)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x70, 0x90, 0x0, {0x390, 0x8f00}}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) syz_usb_control_io(r12, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 29.313448367s ago: executing program 3 (id=65): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x29, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) recvmsg(r1, 0x0, 0x102) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000180), 0x43) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000001c0)=0xc) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0xfffffffffffffe2c, 0x0, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x20, 0x24, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0x2af}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0xcfa42, 0x0) sendfile(r4, r4, 0x0, 0x200000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) r5 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) readv(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000640)={0x8, 0x120, 0xfa00, {0x1, {0x4c8, 0x8000, "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", 0x60, 0xfe, 0x5, 0x1, 0x6, 0x8, 0x8}}}, 0x128) syz_usb_connect(0x2, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0x8f, 0x5a, 0x8, 0x40, 0x846, 0x1001, 0xe047, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x85, 0x88, 0x10, 0x7, "", [{{0x9, 0x4, 0x6d, 0x3, 0x0, 0x9a, 0x26, 0x13, 0x9}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) 13.417381306s ago: executing program 6 (id=16): mount(0x0, &(0x7f0000000380)='./sys_sec\x00', 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x82b, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bind(0xffffffffffffffff, &(0x7f0000000500)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000600), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000b000000000c001473797a3000000000"], 0x28}}, 0x44) read(0xffffffffffffffff, &(0x7f0000000800)=""/9, 0xfffffd87) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000840)=0x6534, 0x4) sendmmsg(r4, 0x0, 0x0, 0x24044015) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000001b80)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$FITHAW(r4, 0xc0045878) dup(r3) sched_setaffinity(0x0, 0x0, 0x0) 13.405436274s ago: executing program 0 (id=76): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x80080100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000008c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000900)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f000001d900)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000036900)=0x80000000000003) add_key(0x0, &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="9b56b519bb653a24a84fd09a99f2cb4b7b9d0f998f0942bb5fe91eee0316969d753bc0e78cc1b32b15b00e51505c8ac651df413996a5ef7ee37c6164df54a53a408fc02888c81f06d8b14cf4a676dca6ebc91e5fa107856e0f9cd3939ade2777b52314a85e75ba97ffadce80374b26259fa00fe0e3b0c9fe89574d4c335e34bc8fe798cebf3a14ebc14abcb972831415cc87b3972d8ee413976ad38bda9ebcfd8a217469ff32f32880fa5e8c64955f42e1971946c180a1340986559189b1de226ee1bcd9caa8d7f4592b384a824bdf0820f1e25621b66ff1bd", 0xd9, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) fcntl$setownex(r5, 0xf, &(0x7f00000007c0)={0x742aab46eb3d51cd}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0_to_bridge\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000940)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x3, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x5, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0xfffffffa, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x5, 0xff, 0x5, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x9, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x7fffffff, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x5, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x1, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x3c, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0xe3, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x583, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_CTAB={0x404, 0x3, [0x10000, 0xfa1f, 0x7, 0x1, 0x9, 0x80000001, 0xe, 0x7f, 0x3, 0x6, 0x0, 0x9, 0x200, 0x6, 0xc2b4, 0x10000, 0x2bd, 0x200, 0x4, 0x3, 0x6, 0x7, 0xfffffffc, 0x5, 0x2, 0x1, 0x9, 0x4, 0x1ff, 0xfffffffd, 0x2, 0x3, 0x3, 0x2, 0x1, 0x5, 0x5, 0x9, 0x8, 0x0, 0x8000, 0x7fffffff, 0x0, 0x7fffffff, 0x612, 0x7dc6, 0x9, 0x3, 0x8, 0x5, 0x2, 0x2, 0x8, 0x4, 0xffffff80, 0x3, 0x101, 0x3, 0x101, 0x2, 0x400, 0x1, 0x0, 0xffff7fff, 0x10001, 0xd5, 0x5, 0x200, 0x9, 0x8000, 0x7fff, 0xdafb, 0x1, 0x1, 0x5, 0x6, 0x109, 0x6, 0x1, 0x3, 0x7, 0x88, 0x2, 0x1, 0xc, 0x6, 0xfffffff1, 0x7, 0xb, 0x400, 0x8, 0xda47, 0x6, 0x1, 0xe477, 0xe2, 0xfffffbff, 0x92ad, 0x3, 0x5, 0x0, 0x5b, 0x5, 0x1, 0x4, 0x7, 0xfffff800, 0x4, 0x1, 0x0, 0x2, 0x7, 0xa7e, 0x4, 0x5, 0x401, 0x0, 0x0, 0x7e, 0x7, 0x81, 0xa, 0x7835, 0x9, 0x89, 0xacb, 0x0, 0xe96a, 0x0, 0x68b3, 0x8, 0xff, 0x7fff, 0x6, 0x4, 0x7, 0x4, 0x8, 0x2, 0x1f78, 0x8, 0x9, 0x2, 0xa5, 0x7, 0x29, 0x40, 0x1, 0x5, 0x0, 0xfffffffc, 0x2, 0x6f, 0xd79, 0x8001, 0x4, 0x5, 0x5, 0x2344, 0xf, 0x800, 0x0, 0x7, 0xe224, 0x1, 0x2, 0x3, 0x1000, 0x0, 0x2, 0xfff, 0x0, 0x0, 0xfffffffe, 0xfffff000, 0x3, 0x100, 0x4, 0x37, 0x1, 0x8, 0x28a, 0x4a1, 0x28, 0x8001, 0xc5, 0x169, 0x92, 0x4004, 0x8001, 0x7, 0x7, 0x100, 0x6, 0x4, 0xe3, 0x10000, 0x7, 0x2, 0xba5, 0x4, 0x8, 0x64, 0x1, 0x80, 0x0, 0x1, 0x6, 0xb032, 0xfffffffd, 0x6510, 0x7, 0x0, 0x1ff, 0x2, 0x6, 0xa00000, 0x8001, 0x1, 0x7, 0x8000, 0x1, 0xffff, 0xfffffffd, 0x6, 0x7, 0xfff, 0x8, 0x7, 0xdc, 0x3, 0x1, 0x55, 0xff, 0x9, 0x3, 0x3ff, 0x7, 0x5, 0x80, 0x0, 0x5, 0xe, 0x1000, 0x400, 0xd, 0x2d, 0x10000, 0x2107, 0x6, 0x3, 0x6, 0x2, 0x6, 0x6, 0x9]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x3, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x868}}, 0x0) socket$packet(0x11, 0x2, 0x300) capset(0x0, &(0x7f0000000580)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000014ffffffb702000008000000b50a0000e2ff000085000000cb00000095"], &(0x7f0000000740)='GPL\x00', 0x2, 0xde, &(0x7f00000011c0)=""/222}, 0x94) fchdir(r4) sigaltstack(0x0, 0x0) 13.397858283s ago: executing program 3 (id=77): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x1}}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) semctl$GETPID(0xffffffffffffffff, 0x4, 0xb, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000240)={'veth1_macvtap\x00', 0x2000}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x184) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x110009, 0x3, 0xfffffffc, 0x6000, 0x0, r3, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x40010, r1, 0x48bdd000) sendfile(r7, r7, &(0x7f0000000080), 0x7f03) 13.396392633s ago: executing program 4 (id=78): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000680)=0x4, 0x4) bind$inet6(r5, &(0x7f00000006c0)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000740)=0x4, 0x4) bind$inet6(r6, &(0x7f0000000780)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000007c0)={0xa, 0x4e20, 0x5e, @mcast2, 0x4}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000840)={0xa, 0x4e20, 0x1, @mcast1, 0x7}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000880)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bind$inet6(r10, &(0x7f00000008c0)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000900)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) 9.567279015s ago: executing program 6 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = socket$vsock_seqpacket(0x28, 0x5, 0x0) accept4$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x10, 0x80000) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000fc0)=""/102368, 0x18fe0) add_key$fscrypt_v1(&(0x7f000001a000), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e760c696621b3880f26257e64e4cd633e07920ce048947162db92", 0x39) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.566547271s ago: executing program 4 (id=67): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1a0001) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x20002, 0x80) ioctl(r2, 0x40104d04, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 9.559075603s ago: executing program 0 (id=80): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xd, 0xe, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, 0x0, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r1, &(0x7f0000000640)}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='27', 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000380)={0xa, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) setns(0xc9, 0x0) r4 = syz_io_uring_setup(0x126b, 0x0, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}, 0x20) prctl$PR_GET_THP_DISABLE(0x2a) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e26, @multicast1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x2000090, 0x0) 9.534845293s ago: executing program 3 (id=69): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r0 = fanotify_init(0x8, 0x800) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_open_dev$tty1(0xc, 0x4, 0x4) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x1d5, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 7.58843102s ago: executing program 6 (id=70): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) timer_create(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000180)=r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/68, 0x0, 0x60000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000000440)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000004c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x4008af04, &(0x7f0000000540)) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000240)=""/21, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000005c0), 0x301, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000280)=0xfff, 0x5) r4 = socket$kcm(0x2, 0x0, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="80e839909a7407099d7963e0eca14be5ae5ba238b7cd1fe855c1b66ec386f9541cebd38fad7e3eddef304545c9abc69ebbc2dde9794ee71e8ea662a1233a54391c95c8385853fa25d11510feb360763655af6691dd6c863889", @ANYRES16=r0, @ANYRESDEC, @ANYBLOB="e3559981fb3fe1cae9bf97cdbe31c021cb7b1f0ff6f5bc5b27ec45fc5f21b7ae87023fd4633abfd0782e202a", @ANYRES8=r1, @ANYRESOCT=r4], 0x5c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) 7.537309579s ago: executing program 4 (id=71): unshare(0x2020400) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x134, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e21, 0x5, 0x2, 0xd0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x6, 0xfffffffffffffbff, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0xffffffff}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x134}}, 0x844) io_uring_enter(r0, 0x4d78, 0x7cf1, 0x61, &(0x7f0000000640)={[0x2]}, 0x8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) gettid() r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000700)=0xe) ioctl$TCFLSH(r3, 0x540b, 0x1) connect$pppl2tp(r2, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x0, 0x2, {0xa, 0x4e21, 0x401, @mcast1, 0x7fffffff}}}, 0x3a) syz_open_dev$sndmidi(0x0, 0x80, 0x2c22c1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000680)={0x3, 0x4}) r5 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, 0x0) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000600)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000300)=0x1) write$ppp(r6, &(0x7f0000000340)="b068", 0x2) 7.244391304s ago: executing program 7 (id=26): openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000680), 0x2, 0x141102) r2 = gettid() ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x20, 0x200, 0x5}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) read$FUSE(r3, 0x0, 0x0) rt_sigqueueinfo(r2, 0x21, &(0x7f0000002840)={0x2c, 0x0, 0xfffffffb}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000700)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='wwnn=0x1000000044001123,wwpn=0x2000000044001123', 0x2f) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123', 0x63) 7.220802547s ago: executing program 8 (id=48): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000940)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000001440)={0x2, 0x1bd, @loopback}, 0x10) listen(r3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./cifs\x00', 0x0) mount(&(0x7f00000014c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000001500)='./cifs\x00', &(0x7f0000001540)='cifs\x00', 0x0, &(0x7f0000001580)='vers=1.0,user=root,pass=root\x00') setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@rand_addr=0x64010101, 0x4e20, 0x0, 0x4e24, 0x80, 0xa, 0x80, 0x20, 0x93097b4d69932262}, {0xffffffff00000000, 0x2, 0xffffffffffff7fff, 0x40, 0xfffd, 0x8, 0x100007, 0x3e6}, {0xa6d, 0xa737, 0x3, 0x5}, 0x0, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d6, 0xff}, 0x2, @in6=@mcast2, 0x34ff, 0x1, 0x3, 0xf, 0xffff, 0x4, 0x4}}, 0xe8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001680)='xfrm0\x00', 0x10) syz_open_dev$vim2m(&(0x7f00000016c0), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000001700)={0xf0f01d, 0x5}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000001740)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r4, &(0x7f0000001780)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e", 0x21, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) 7.090544029s ago: executing program 3 (id=72): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$snddsp(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x6000) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000200)=@add_del={0x2, &(0x7f0000000100)='geneve0\x00'}) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0xc9100120, 0x0, 0x0) shutdown(r3, 0x1) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 3.082642888s ago: executing program 4 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000680)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r1, &(0x7f0000000740)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100"], &(0x7f0000019740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000019780)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000019800)=0x1, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x11, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.08216033s ago: executing program 7 (id=74): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000149c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000014a00)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000014a40)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000014ac0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8003}, r1, 0x1}}, 0x48) timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$tipc(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r3], 0x2a, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x40, 0x2, 0x2, 0x3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bind$bt_hci(r2, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./mnt\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x117) mount(0x0, &(0x7f0000000440)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000540)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='dummy_udc.0', 0xb) 3.023892148s ago: executing program 8 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0xc5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001800)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000003840)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f0000003880)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f00000038c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000003900)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000003940), 0x0, 0x0) read$msr(r2, &(0x7f0000003980)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f000001c980)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) write(r3, &(0x7f000001c9c0)="5a000300", 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f000001ca40), 0x8000) read(r5, &(0x7f000001ca80)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f000001cb80)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0x40045304, 0x0) tkill(r4, 0x7) write$UHID_INPUT(r0, 0x0, 0x0) 1.847071048s ago: executing program 4 (id=79): prlimit64(0x0, 0xe, &(0x7f00000030c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000003100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000003140)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) syz_emit_vhci(&(0x7f00000031c0)=ANY=[@ANYBLOB], 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000003200), 0x0, 0x0) read$msr(r3, &(0x7f0000005240)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./debug/lru_gen\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000000680)={0x2020}, 0x2020) pread64(r4, &(0x7f00000026c0), 0x100, 0x3f00) read$FUSE(r4, &(0x7f000001e280)={0x2020}, 0x2020) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x54, 0x1f, 0x0, 0xfffffffd}, {0x54, 0x0, 0x5, 0x200}, {0x6}]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 7 (id=81): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 91.454628][ T10] cfg80211: failed to load regulatory.db [ 95.009827][ T5615] cgroup: Unknown subsys name 'net' [ 95.146182][ T5615] cgroup: Unknown subsys name 'cpuset' [ 95.155503][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.779013][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.483781][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.498716][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.502021][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.502692][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.504032][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.504603][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.505731][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.514881][ T4945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.531804][ T4945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.539152][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.541395][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.542869][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.543376][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.544441][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.545222][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.561518][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.563323][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.566018][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.567238][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.571347][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.572206][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.589550][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.592692][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.599463][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.600328][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.646294][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.650220][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.652827][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.659544][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.662356][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.074311][ T5642] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 101.089667][ T5638] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 101.098529][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.111140][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.128424][ T5647] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 101.148070][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.150467][ T5633] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 101.196167][ T5634] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 101.610960][ T5645] Bluetooth: hci1: command tx timeout [ 101.611135][ T5635] Bluetooth: hci4: command tx timeout [ 101.611705][ T5640] Bluetooth: hci2: command tx timeout [ 101.690556][ T5635] Bluetooth: hci3: command tx timeout [ 101.690794][ T5645] Bluetooth: hci0: command tx timeout [ 101.690983][ T5640] Bluetooth: hci5: command tx timeout [ 101.729286][ T5643] infiniband rxe0: set active [ 101.729316][ T5643] infiniband rxe0: added rxe_eth0 [ 101.760910][ T5643] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 101.760968][ T5643] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 101.761041][ T5643] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 101.804211][ T870] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.865947][ T5643] RDS/IB: rxe0: added [ 101.866385][ T5643] smc: adding ib device rxe0 with port count 1 [ 101.866500][ T5643] smc: ib device rxe0 port 1 has no pnetid [ 101.914866][ T2065] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.970835][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.140558][ T2065] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.211364][ T870] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.239435][ T870] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.482560][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.959208][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.142598][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.142751][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.142930][ T5642] bridge_slave_0: entered allmulticast mode [ 103.146090][ T5642] bridge_slave_0: entered promiscuous mode [ 103.242843][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.242965][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.243161][ T5642] bridge_slave_1: entered allmulticast mode [ 103.244877][ T5642] bridge_slave_1: entered promiscuous mode [ 103.261556][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.263376][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.263491][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.263916][ T5638] bridge_slave_0: entered allmulticast mode [ 103.268806][ T5638] bridge_slave_0: entered promiscuous mode [ 103.345112][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.345228][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.345360][ T5633] bridge_slave_0: entered allmulticast mode [ 103.347411][ T5633] bridge_slave_0: entered promiscuous mode [ 103.380094][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.380224][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.380385][ T5638] bridge_slave_1: entered allmulticast mode [ 103.382484][ T5638] bridge_slave_1: entered promiscuous mode [ 103.447104][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.447226][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.447659][ T5633] bridge_slave_1: entered allmulticast mode [ 103.457122][ T5633] bridge_slave_1: entered promiscuous mode [ 103.561155][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.564527][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.581853][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.582050][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.582524][ T5647] bridge_slave_0: entered allmulticast mode [ 103.584669][ T5647] bridge_slave_0: entered promiscuous mode [ 103.587827][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.587947][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.588545][ T5647] bridge_slave_1: entered allmulticast mode [ 103.590697][ T5647] bridge_slave_1: entered promiscuous mode [ 103.610507][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.685491][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.688676][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.690445][ T5645] Bluetooth: hci4: command tx timeout [ 103.690485][ T5645] Bluetooth: hci1: command tx timeout [ 103.690625][ T5640] Bluetooth: hci2: command tx timeout [ 103.705895][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.707124][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.707293][ T5634] bridge_slave_0: entered allmulticast mode [ 103.709498][ T5634] bridge_slave_0: entered promiscuous mode [ 103.718398][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.770513][ T5635] Bluetooth: hci0: command tx timeout [ 103.770556][ T5635] Bluetooth: hci5: command tx timeout [ 103.770596][ T5635] Bluetooth: hci3: command tx timeout [ 103.806448][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.806698][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.807996][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.808156][ T5634] bridge_slave_1: entered allmulticast mode [ 103.811123][ T5634] bridge_slave_1: entered promiscuous mode [ 103.832747][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.837464][ T5642] team0: Port device team_slave_0 added [ 103.858989][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.918182][ T5642] team0: Port device team_slave_1 added [ 103.921704][ T5638] team0: Port device team_slave_0 added [ 103.945145][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.012506][ T5638] team0: Port device team_slave_1 added [ 104.016986][ T5647] team0: Port device team_slave_0 added [ 104.025234][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.054920][ T5633] team0: Port device team_slave_0 added [ 104.056019][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.056040][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.056084][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.064123][ T5633] team0: Port device team_slave_1 added [ 104.096732][ T5647] team0: Port device team_slave_1 added [ 104.140094][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.140123][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.140168][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.218592][ T5634] team0: Port device team_slave_0 added [ 104.231498][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.231522][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.231564][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.234518][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.234538][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.234581][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.235876][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.235896][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.235938][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.247141][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.247164][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.247206][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.255801][ T5634] team0: Port device team_slave_1 added [ 104.311442][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.311540][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.311590][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.322814][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.326953][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.326976][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.327019][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.518374][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.518400][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.518445][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.588716][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.588742][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.588787][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.656916][ T5633] hsr_slave_0: entered promiscuous mode [ 104.657841][ T5633] hsr_slave_1: entered promiscuous mode [ 104.740655][ T5642] hsr_slave_0: entered promiscuous mode [ 104.741828][ T5642] hsr_slave_1: entered promiscuous mode [ 104.742547][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 104.742570][ T5642] Cannot create hsr debugfs directory [ 104.795278][ T5638] hsr_slave_0: entered promiscuous mode [ 104.796185][ T5638] hsr_slave_1: entered promiscuous mode [ 104.796942][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 104.796968][ T5638] Cannot create hsr debugfs directory [ 104.807779][ T5647] hsr_slave_0: entered promiscuous mode [ 104.808856][ T5647] hsr_slave_1: entered promiscuous mode [ 104.809757][ T5647] debugfs: 'hsr0' already exists in 'hsr' [ 104.809779][ T5647] Cannot create hsr debugfs directory [ 104.952731][ T5634] hsr_slave_0: entered promiscuous mode [ 104.953608][ T5634] hsr_slave_1: entered promiscuous mode [ 104.954217][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 104.954241][ T5634] Cannot create hsr debugfs directory [ 105.613251][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.630779][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.632741][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.636907][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.638263][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.663998][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.665139][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.679240][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.770088][ T5640] Bluetooth: hci2: command tx timeout [ 105.770133][ T5640] Bluetooth: hci1: command tx timeout [ 105.770167][ T5640] Bluetooth: hci4: command tx timeout [ 105.822881][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.823114][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.823276][ T5643] bridge_slave_0: entered allmulticast mode [ 105.824891][ T5643] bridge_slave_0: entered promiscuous mode [ 105.844810][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.844935][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.845081][ T5643] bridge_slave_1: entered allmulticast mode [ 105.847362][ T5643] bridge_slave_1: entered promiscuous mode [ 105.853375][ T5640] Bluetooth: hci5: command tx timeout [ 105.853407][ T5645] Bluetooth: hci3: command tx timeout [ 105.853439][ T5645] Bluetooth: hci0: command tx timeout [ 105.893416][ T5642] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.902598][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.903729][ T5642] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.908810][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.939487][ T5642] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.950901][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.951925][ T5642] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.954927][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.967529][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.989241][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.029207][ T5643] team0: Port device team_slave_0 added [ 106.049033][ T5643] team0: Port device team_slave_1 added [ 106.106453][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.106477][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.106516][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.128522][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.128545][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.128588][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.225029][ T5647] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.229674][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.231295][ T5647] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.241030][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.263994][ T5643] hsr_slave_0: entered promiscuous mode [ 106.264922][ T5643] hsr_slave_1: entered promiscuous mode [ 106.265535][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 106.265559][ T5643] Cannot create hsr debugfs directory [ 106.265752][ T5647] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.282522][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.311606][ T5647] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.315084][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.531816][ T5638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.535687][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.536668][ T5638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.543083][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.585872][ T5638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.589755][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.591986][ T5638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.607767][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.631705][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.730397][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.734026][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.774157][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.778386][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.795984][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.810088][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.814053][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.841599][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.846747][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.886984][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.887207][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.910881][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.935218][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.935313][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.963683][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.028088][ T5643] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.042657][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.059032][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.059130][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.084698][ T5643] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.088543][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.117279][ T5643] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.123088][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.124280][ T5643] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.134051][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.155297][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.155394][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.236658][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.316668][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.360513][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.360646][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.432942][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.433073][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.499579][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.625905][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.686175][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.686302][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.749041][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.776751][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.776881][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.798761][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.850798][ T5635] Bluetooth: hci1: command tx timeout [ 107.850842][ T5635] Bluetooth: hci2: command tx timeout [ 107.850890][ T5640] Bluetooth: hci4: command tx timeout [ 107.885374][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.931088][ T5635] Bluetooth: hci0: command tx timeout [ 107.931134][ T5635] Bluetooth: hci3: command tx timeout [ 107.931194][ T5640] Bluetooth: hci5: command tx timeout [ 107.969433][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.969561][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.989608][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.045985][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.046123][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.089833][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.090023][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.178432][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.178573][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.828737][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.115750][ T5633] veth0_vlan: entered promiscuous mode [ 109.194214][ T5633] veth1_vlan: entered promiscuous mode [ 109.306990][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.398226][ T5633] veth0_macvtap: entered promiscuous mode [ 109.439551][ T5633] veth1_macvtap: entered promiscuous mode [ 109.473106][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.478227][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.592987][ T989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.593180][ T989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.593243][ T989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.634897][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.874500][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.874531][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.884334][ T148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.004158][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.004189][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.450659][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.598724][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.667669][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.679864][ T5643] veth0_vlan: entered promiscuous mode [ 110.742790][ T5633] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.777821][ T5643] veth1_vlan: entered promiscuous mode [ 110.941541][ T5642] veth0_vlan: entered promiscuous mode [ 110.977711][ T5643] veth0_macvtap: entered promiscuous mode [ 111.938628][ T5638] veth0_vlan: entered promiscuous mode [ 111.949027][ T5642] veth1_vlan: entered promiscuous mode [ 111.977638][ T5647] veth0_vlan: entered promiscuous mode [ 112.019479][ T5642] veth0_macvtap: entered promiscuous mode [ 112.030825][ T5642] veth1_macvtap: entered promiscuous mode [ 112.063527][ T5643] veth1_macvtap: entered promiscuous mode [ 112.093401][ T5634] veth0_vlan: entered promiscuous mode [ 112.099687][ T5638] veth1_vlan: entered promiscuous mode [ 112.125607][ T5647] veth1_vlan: entered promiscuous mode [ 112.149378][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.161161][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.183369][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.201867][ T5634] veth1_vlan: entered promiscuous mode [ 112.207265][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.270699][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.271781][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.321315][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.345615][ T5638] veth0_macvtap: entered promiscuous mode [ 112.350844][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.350909][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.350968][ T62] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.351046][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.351105][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.430254][ T5647] veth0_macvtap: entered promiscuous mode [ 112.452106][ T5647] veth1_macvtap: entered promiscuous mode [ 112.473038][ T5638] veth1_macvtap: entered promiscuous mode [ 112.656692][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.656717][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.683027][ T5634] veth0_macvtap: entered promiscuous mode [ 112.735055][ T5634] veth1_macvtap: entered promiscuous mode [ 112.759333][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.763227][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.788616][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.788640][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.828918][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.836351][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.917886][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.917910][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.000701][ T80] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.000756][ T80] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.000801][ T80] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.000846][ T80] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.000890][ T80] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.000935][ T80] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.000979][ T80] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.001023][ T80] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.003598][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.148508][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.148538][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.251423][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.504375][ T25] rxe_eth0 speed is unknown, defaulting to 1000 [ 113.525225][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.580033][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.586278][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.586309][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.640048][ T989] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.664178][ T989] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.869317][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.869348][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.927321][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.927349][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.025318][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.025351][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.116827][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.116853][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.283914][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.283946][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.641003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 115.843184][ T5909] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 115.898683][ T5909] loop4: detected capacity change from 0 to 256 [ 116.669613][ T5907] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 116.669647][ T5907] FAT-fs (loop4): Filesystem has been set read-only [ 118.200118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 118.610112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.262773][ T148] IPVS: starting estimator thread 0... [ 119.291487][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.350110][ T5919] IPVS: using max 23 ests per chain, 55200 per kthread [ 119.451875][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 123.320889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.880864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 126.290462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.700008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 126.856457][ T5954] loop0: detected capacity change from 0 to 16 [ 126.891415][ T5954] erofs (device loop0): mounted with root inode @ nid 36. [ 127.455118][ T5833] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 127.455395][ T5833] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 127.608708][ T5955] loop3: detected capacity change from 0 to 512 [ 127.871885][ T5955] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.12: inode has both inline data and extents flags [ 127.872001][ T5955] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.872799][ T5955] EXT4-fs error (device loop3): ext4_orphan_get:1407: comm syz.3.12: couldn't read orphan inode 15 (err -117) [ 127.872888][ T5955] loop3: lost filesystem error report for type 5 error -117 [ 127.875055][ T5955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.567692][ T5968] ip_tables: iptables: counters copy to user failed while replacing table [ 129.697483][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.227552][ T5981] sd 0:0:1:0: device reset [ 131.054611][ T5977] FAULT_INJECTION: forcing a failure. [ 131.054611][ T5977] name failslab, interval 1, probability 5, space 0, times 100 [ 131.054657][ T5977] CPU: 1 UID: 0 PID: 5977 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(full) [ 131.054699][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 131.054721][ T5977] Call Trace: [ 131.054733][ T5977] [ 131.054747][ T5977] dump_stack_lvl+0x100/0x190 [ 131.054810][ T5977] should_fail_ex.cold+0x5/0xa [ 131.054866][ T5977] should_failslab+0xc2/0x120 [ 131.054927][ T5977] __kmalloc_cache_noprof+0x91/0x6d0 [ 131.054969][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.055015][ T5977] ? xfd_validate_state+0x129/0x190 [ 131.055059][ T5977] ? __do_sys_memfd_create+0x170/0x3c0 [ 131.055122][ T5977] __do_sys_memfd_create+0x170/0x3c0 [ 131.055173][ T5977] do_syscall_64+0x123/0x7b0 [ 131.055237][ T5977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.055275][ T5977] RIP: 0033:0x7f3a3db9fb19 [ 131.055304][ T5977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.055339][ T5977] RSP: 002b:00007f3a3ea32e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 131.055376][ T5977] RAX: ffffffffffffffda RBX: 0000000000000baf RCX: 00007f3a3db9fb19 [ 131.055400][ T5977] RDX: 00007f3a3ea32ee0 RSI: 0000000000000000 RDI: 00007f3a3dc37d63 [ 131.055424][ T5977] RBP: 0000200000001940 R08: 00000000ffffffff R09: 0000000000000000 [ 131.055447][ T5977] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000002c0 [ 131.055470][ T5977] R13: 00007f3a3ea32ee0 R14: 00007f3a3ea32ea0 R15: 0000200000000340 [ 131.055520][ T5977] [ 131.133534][ T5977] FAULT_INJECTION: forcing a failure. [ 131.133534][ T5977] name failslab, interval 1, probability 5, space 0, times 99 [ 131.133575][ T5977] CPU: 0 UID: 0 PID: 5977 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(full) [ 131.133624][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 131.133646][ T5977] Call Trace: [ 131.133658][ T5977] [ 131.133671][ T5977] dump_stack_lvl+0x100/0x190 [ 131.133734][ T5977] should_fail_ex.cold+0x5/0xa [ 131.133789][ T5977] should_failslab+0xc2/0x120 [ 131.133848][ T5977] kmem_cache_alloc_noprof+0x92/0x6a0 [ 131.133898][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.133943][ T5977] ? __asan_memcpy+0x3c/0x60 [ 131.133987][ T5977] ? __kernfs_new_node+0xd2/0xa10 [ 131.134053][ T5977] __kernfs_new_node+0xd2/0xa10 [ 131.134116][ T5977] ? __pfx___kernfs_new_node+0x10/0x10 [ 131.134181][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.134225][ T5977] ? lock_acquire+0x1d1/0x380 [ 131.134273][ T5977] ? kernfs_root+0x23/0x2a0 [ 131.134323][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.134366][ T5977] ? find_held_lock+0x2b/0x80 [ 131.134403][ T5977] ? kernfs_root+0xee/0x2a0 [ 131.134451][ T5977] ? kernfs_root+0xee/0x2a0 [ 131.134498][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.134556][ T5977] kernfs_create_dir_ns+0xa4/0x2b0 [ 131.134627][ T5977] cgroup_mkdir+0x407/0x13a0 [ 131.134693][ T5977] ? __pfx_cgroup_mkdir+0x10/0x10 [ 131.134752][ T5977] kernfs_iop_mkdir+0x111/0x190 [ 131.134807][ T5977] ? security_inode_mkdir+0xc9/0x2b0 [ 131.134849][ T5977] vfs_mkdir+0x36d/0x8a0 [ 131.134907][ T5977] filename_mkdirat+0x4c4/0x630 [ 131.134953][ T5977] ? __pfx_filename_mkdirat+0x10/0x10 [ 131.134994][ T5977] ? strncpy_from_user+0x19d/0x2d0 [ 131.135042][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.135087][ T5977] ? do_getname+0x191/0x390 [ 131.135139][ T5977] __x64_sys_mkdirat+0x89/0xc0 [ 131.135181][ T5977] do_syscall_64+0x123/0x7b0 [ 131.135245][ T5977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.135284][ T5977] RIP: 0033:0x7f3a3db9fb19 [ 131.135314][ T5977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.135349][ T5977] RSP: 002b:00007f3a3ea33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 131.135384][ T5977] RAX: ffffffffffffffda RBX: 00007f3a3de25fa0 RCX: 00007f3a3db9fb19 [ 131.135409][ T5977] RDX: 00000000000001ff RSI: 0000200000001140 RDI: ffffffffffffff9c [ 131.135433][ T5977] RBP: 00007f3a3dc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 131.135457][ T5977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.135480][ T5977] R13: 00007f3a3de26038 R14: 00007f3a3de25fa0 R15: 00007ffcc0e2f2e8 [ 131.135531][ T5977] [ 131.135984][ T5983] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 131.168078][ T5977] FAULT_INJECTION: forcing a failure. [ 131.168078][ T5977] name failslab, interval 1, probability 5, space 0, times 98 [ 131.168117][ T5977] CPU: 0 UID: 0 PID: 5977 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(full) [ 131.168158][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 131.168179][ T5977] Call Trace: [ 131.168190][ T5977] [ 131.168204][ T5977] dump_stack_lvl+0x100/0x190 [ 131.168263][ T5977] should_fail_ex.cold+0x5/0xa [ 131.168317][ T5977] should_failslab+0xc2/0x120 [ 131.168375][ T5977] kmem_cache_alloc_noprof+0x92/0x6a0 [ 131.168425][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.168471][ T5977] ? do_getname+0x35/0x390 [ 131.168524][ T5977] do_getname+0x35/0x390 [ 131.168578][ T5977] do_sys_openat2+0xc3/0x1d0 [ 131.168627][ T5977] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.168667][ T5977] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 131.168731][ T5977] __x64_sys_openat+0x12d/0x210 [ 131.168775][ T5977] ? __pfx___x64_sys_openat+0x10/0x10 [ 131.168822][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.168871][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.168924][ T5977] do_syscall_64+0x123/0x7b0 [ 131.168985][ T5977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.169022][ T5977] RIP: 0033:0x7f3a3db6034e [ 131.169051][ T5977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.169085][ T5977] RSP: 002b:00007f3a3ea30ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.169119][ T5977] RAX: ffffffffffffffda RBX: 00007f3a3ea336c0 RCX: 00007f3a3db6034e [ 131.169144][ T5977] RDX: 0000000000000002 RSI: 00007f3a3dc36f02 RDI: ffffffffffffff9c [ 131.169167][ T5977] RBP: 00007f3a3dc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 131.169190][ T5977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000055 [ 131.169213][ T5977] R13: 0000200000001340 R14: 0000000000000000 R15: 00007ffcc0e2f2e8 [ 131.169262][ T5977] [ 131.189779][ T5977] FAULT_INJECTION: forcing a failure. [ 131.189779][ T5977] name failslab, interval 1, probability 5, space 0, times 97 [ 131.189818][ T5977] CPU: 0 UID: 0 PID: 5977 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(full) [ 131.189859][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 131.189880][ T5977] Call Trace: [ 131.189896][ T5977] [ 131.189909][ T5977] dump_stack_lvl+0x100/0x190 [ 131.189969][ T5977] should_fail_ex.cold+0x5/0xa [ 131.190022][ T5977] should_failslab+0xc2/0x120 [ 131.190080][ T5977] kmem_cache_alloc_noprof+0x92/0x6a0 [ 131.190129][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.190175][ T5977] ? do_getname+0x35/0x390 [ 131.190228][ T5977] do_getname+0x35/0x390 [ 131.190278][ T5977] do_sys_openat2+0xc3/0x1d0 [ 131.190321][ T5977] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.190361][ T5977] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 131.190424][ T5977] __x64_sys_openat+0x12d/0x210 [ 131.190468][ T5977] ? __pfx___x64_sys_openat+0x10/0x10 [ 131.190515][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.190564][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.190622][ T5977] do_syscall_64+0x123/0x7b0 [ 131.190683][ T5977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.190720][ T5977] RIP: 0033:0x7f3a3db6034e [ 131.190749][ T5977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.190783][ T5977] RSP: 002b:00007f3a3ea32b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.190817][ T5977] RAX: ffffffffffffffda RBX: 00007f3a3ea336c0 RCX: 00007f3a3db6034e [ 131.190842][ T5977] RDX: 0000000000000002 RSI: 00007f3a3ea32c00 RDI: ffffffffffffff9c [ 131.190865][ T5977] RBP: 00007f3a3ea32c00 R08: 0000000000000000 R09: 0000000000000000 [ 131.190888][ T5977] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 131.190911][ T5977] R13: 00007f3a3de26038 R14: 00007f3a3de25fa0 R15: 00007ffcc0e2f2e8 [ 131.190961][ T5977] [ 131.286542][ T5977] FAULT_INJECTION: forcing a failure. [ 131.286542][ T5977] name failslab, interval 1, probability 5, space 0, times 96 [ 131.286593][ T5977] CPU: 0 UID: 0 PID: 5977 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(full) [ 131.286635][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 131.286656][ T5977] Call Trace: [ 131.286668][ T5977] [ 131.286681][ T5977] dump_stack_lvl+0x100/0x190 [ 131.286743][ T5977] should_fail_ex.cold+0x5/0xa [ 131.286798][ T5977] should_failslab+0xc2/0x120 [ 131.286857][ T5977] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 131.286910][ T5977] ? __d_alloc+0x34/0xad0 [ 131.286960][ T5977] __d_alloc+0x34/0xad0 [ 131.287000][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.287051][ T5977] d_alloc_pseudo+0x1c/0xc0 [ 131.287105][ T5977] alloc_file_pseudo+0x118/0x290 [ 131.287154][ T5977] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 131.287197][ T5977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 131.287244][ T5977] ? alloc_fd+0x471/0x7a0 [ 131.287290][ T5977] sock_alloc_file+0x50/0x210 [ 131.287330][ T5977] __sys_socket+0x1c0/0x260 [ 131.287378][ T5977] ? __pfx___sys_socket+0x10/0x10 [ 131.287438][ T5977] __x64_sys_socket+0x72/0xb0 [ 131.287483][ T5977] ? lockdep_hardirqs_on+0x7d/0x110 [ 131.287543][ T5977] do_syscall_64+0x123/0x7b0 [ 131.287609][ T5977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.287647][ T5977] RIP: 0033:0x7f3a3db9fb19 [ 131.287676][ T5977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.287711][ T5977] RSP: 002b:00007f3a3ea33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 131.287746][ T5977] RAX: ffffffffffffffda RBX: 00007f3a3de25fa0 RCX: 00007f3a3db9fb19 [ 131.287770][ T5977] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 131.287793][ T5977] RBP: 00007f3a3dc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 131.287816][ T5977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.287838][ T5977] R13: 00007f3a3de26038 R14: 00007f3a3de25fa0 R15: 00007ffcc0e2f2e8 [ 131.287887][ T5977] [ 131.856329][ T5640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.859227][ T5640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.871494][ T5640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.900115][ T5640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.912005][ T5640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 132.424112][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.424335][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.444173][ T6001] Zero length message leads to an empty skb [ 132.499195][ T5645] Bluetooth: Wrong link type (-57) [ 132.576729][ T6005] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 132.608480][ T6006] loop3: detected capacity change from 0 to 164 [ 133.043705][ T148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.142176][ T6016] loop3: detected capacity change from 0 to 16 [ 133.148889][ T6016] ======================================================= [ 133.148889][ T6016] WARNING: The mand mount option has been deprecated and [ 133.148889][ T6016] and is ignored by this kernel. Remove the mand [ 133.148889][ T6016] option from the mount to silence this warning. [ 133.148889][ T6016] ======================================================= [ 133.239331][ T6016] erofs (device loop3): mounted with root inode @ nid 36. [ 134.023508][ T5645] Bluetooth: hci6: command tx timeout [ 134.400413][ T148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.543649][ T1013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 135.563932][ T989] IPVS: starting estimator thread 0... [ 135.574050][ T148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.931136][ T6029] IPVS: using max 22 ests per chain, 52800 per kthread [ 136.090086][ T5640] Bluetooth: hci6: command tx timeout [ 136.092310][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.093396][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.094043][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.098224][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.098953][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.320226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.350169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.540090][ T30] audit: type=1800 audit(1794201874.188:2): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.28" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=-22 [ 137.707867][ T62] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.780887][ T148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.973093][ T6005] syz.0.21 (6005): drop_caches: 2 [ 138.175086][ T5640] Bluetooth: hci6: command tx timeout [ 138.178156][ T5645] Bluetooth: hci1: command tx timeout [ 139.271916][ T148] bridge_slave_1: left allmulticast mode [ 139.271965][ T148] bridge_slave_1: left promiscuous mode [ 139.272866][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.974125][ T148] bridge_slave_0: left allmulticast mode [ 139.974162][ T148] bridge_slave_0: left promiscuous mode [ 139.974403][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.250041][ T5645] Bluetooth: hci1: command tx timeout [ 140.250083][ T5645] Bluetooth: hci6: command tx timeout [ 142.209227][ T5985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 142.342533][ T5645] Bluetooth: hci1: command tx timeout [ 142.669684][ T6072] loop0: detected capacity change from 0 to 4096 [ 142.734917][ T6072] ntfs3(loop0): ino=3, mi_enum_attr [ 142.785265][ T5833] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 142.810376][ T5942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 143.308917][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.069316][ T6078] block device autoloading is deprecated and will be removed. [ 144.410530][ T5645] Bluetooth: hci1: command tx timeout [ 145.014975][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.061831][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.094046][ T148] bond0 (unregistering): Released all slaves [ 145.781486][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 145.920561][ T5992] rxe_eth0 speed is unknown, defaulting to 1000 [ 147.581743][ T30] audit: type=1800 audit(1794201884.258:3): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.39" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 148.223450][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 148.414433][ T989] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 149.615794][ T6110] loop3: detected capacity change from 0 to 512 [ 149.621555][ T6110] EXT4-fs (loop3): orphan cleanup on readonly fs [ 149.623485][ T6110] EXT4-fs error (device loop3): ext4_xattr_inode_iget:470: comm syz.3.40: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 149.623534][ T6110] loop3: lost filesystem error report for type 5 error -117 [ 149.627002][ T6110] EXT4-fs (loop3): 1 orphan inode deleted [ 149.630891][ T6110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.479933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 152.260108][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.572039][ T6030] rxe_eth0 speed is unknown, defaulting to 1000 [ 153.539113][ T5942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 153.552945][ T6134] loop4: detected capacity change from 0 to 512 [ 154.259938][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 157.815256][ T148] hsr_slave_0: left promiscuous mode [ 157.834145][ T148] hsr_slave_1: left promiscuous mode [ 157.837068][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.837107][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.885919][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.885946][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.984368][ T148] veth1_macvtap: left promiscuous mode [ 157.984430][ T148] veth0_macvtap: left promiscuous mode [ 157.984564][ T148] veth1_vlan: left promiscuous mode [ 157.984665][ T148] veth0_vlan: left promiscuous mode [ 158.097019][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.106646][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.108740][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.124718][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.132540][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.158361][ T5789] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 158.312334][ T6161] null_blk: zone_size must be power-of-two [ 158.894707][ T5789] usb 4-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 159.035268][ T5789] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 159.035339][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.038181][ T5789] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 159.038218][ T5789] usb 4-1: Manufacturer: syz [ 159.086625][ T5789] usb 4-1: config 0 descriptor?? [ 159.292560][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.293553][ T1013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.301625][ T5789] rc_core: IR keymap rc-hauppauge not found [ 159.301645][ T5789] Registered IR keymap rc-empty [ 159.392717][ T5789] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 159.407597][ T5789] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 159.718298][ T5767] usb 4-1: USB disconnect, device number 2 [ 159.913609][ T6169] usb usb2: usbfs: process 6169 (syz.4.61) did not claim interface 0 before use [ 160.036777][ T148] team0 (unregistering): Port device team_slave_1 removed [ 160.240014][ T5645] Bluetooth: hci4: command tx timeout [ 160.343713][ T148] team0 (unregistering): Port device team_slave_0 removed [ 160.443751][ T6174] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.503326][ T6174] loop0: detected capacity change from 0 to 256 [ 161.309622][ T6172] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 161.309657][ T6172] FAT-fs (loop0): Filesystem has been set read-only [ 163.274577][ T5645] Bluetooth: hci4: command tx timeout [ 163.819868][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 164.411458][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.076620][ T152] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.289982][ T5645] Bluetooth: hci4: command tx timeout [ 165.894308][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.904332][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.904510][ T5992] bridge_slave_0: entered allmulticast mode [ 165.910687][ T5992] bridge_slave_0: entered promiscuous mode [ 165.925317][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.927179][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.927319][ T5992] bridge_slave_1: entered allmulticast mode [ 165.940642][ T5992] bridge_slave_1: entered promiscuous mode [ 166.829435][ T5992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.863014][ T5992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.325457][ T5992] team0: Port device team_slave_0 added [ 167.370257][ T5645] Bluetooth: hci4: command tx timeout [ 167.377344][ T5992] team0: Port device team_slave_1 added [ 167.679753][ T148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.064642][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.064669][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.064714][ T5992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.489604][ T6224] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.59' sets config #-1 [ 168.491081][ T6224] ip_tables: iptables: counters copy to user failed while replacing table [ 168.548927][ T6225] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.59' sets config #1 [ 168.995929][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.995955][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.996000][ T5992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.374746][ T148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.450903][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.639656][ T6158] rxe_eth0 speed is unknown, defaulting to 1000 [ 169.676697][ T5992] hsr_slave_0: entered promiscuous mode [ 169.685457][ T5992] hsr_slave_1: entered promiscuous mode [ 170.763280][ T6240] FAULT_INJECTION: forcing a failure. [ 170.763280][ T6240] name failslab, interval 1, probability 5, space 0, times 100 [ 170.763334][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.4.63 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.763387][ T6240] Tainted: [L]=SOFTLOCKUP [ 170.763400][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 170.763423][ T6240] Call Trace: [ 170.763435][ T6240] [ 170.763449][ T6240] dump_stack_lvl+0x100/0x190 [ 170.763515][ T6240] should_fail_ex.cold+0x5/0xa [ 170.763571][ T6240] should_failslab+0xc2/0x120 [ 170.763639][ T6240] kmem_cache_alloc_noprof+0x92/0x6a0 [ 170.763701][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.763754][ T6240] ? security_file_alloc+0x34/0x2c0 [ 170.763828][ T6240] security_file_alloc+0x34/0x2c0 [ 170.763890][ T6240] init_file+0x95/0x480 [ 170.763933][ T6240] alloc_empty_file+0x79/0x1c0 [ 170.763978][ T6240] alloc_file_pseudo+0x17e/0x290 [ 170.764026][ T6240] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 170.764069][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.764137][ T6240] __shmem_file_setup+0x205/0x460 [ 170.764181][ T6240] ? lock_acquire+0x1d1/0x380 [ 170.764232][ T6240] ? __pfx___shmem_file_setup+0x10/0x10 [ 170.764275][ T6240] ? do_raw_spin_lock+0x128/0x260 [ 170.764332][ T6240] ? find_held_lock+0x2b/0x80 [ 170.764368][ T6240] ? alloc_fd+0x471/0x7a0 [ 170.764406][ T6240] ? alloc_fd+0x471/0x7a0 [ 170.764444][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.764498][ T6240] memfd_alloc_file+0x24a/0x590 [ 170.764540][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.764584][ T6240] ? _raw_spin_unlock+0x28/0x50 [ 170.764633][ T6240] ? __pfx_memfd_alloc_file+0x10/0x10 [ 170.764691][ T6240] __do_sys_memfd_create+0x2ce/0x3c0 [ 170.764742][ T6240] do_syscall_64+0x123/0x7b0 [ 170.764806][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.764846][ T6240] RIP: 0033:0x7fb73b99fb19 [ 170.764877][ T6240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.764913][ T6240] RSP: 002b:00007fb73c908e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 170.764950][ T6240] RAX: ffffffffffffffda RBX: 0000000000000baf RCX: 00007fb73b99fb19 [ 170.764975][ T6240] RDX: 00007fb73c908ee0 RSI: 0000000000000000 RDI: 00007fb73ba37d63 [ 170.765000][ T6240] RBP: 0000200000001940 R08: 00000000ffffffff R09: 0000000000000000 [ 170.765024][ T6240] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000002c0 [ 170.765046][ T6240] R13: 00007fb73c908ee0 R14: 00007fb73c908ea0 R15: 0000200000000340 [ 170.765101][ T6240] [ 170.813696][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.838108][ T6240] FAULT_INJECTION: forcing a failure. [ 170.838108][ T6240] name failslab, interval 1, probability 5, space 0, times 99 [ 170.838156][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.4.63 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.838206][ T6240] Tainted: [L]=SOFTLOCKUP [ 170.838219][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 170.838241][ T6240] Call Trace: [ 170.838253][ T6240] [ 170.838273][ T6240] dump_stack_lvl+0x100/0x190 [ 170.838347][ T6240] should_fail_ex.cold+0x5/0xa [ 170.838408][ T6240] should_failslab+0xc2/0x120 [ 170.838467][ T6240] __kmalloc_noprof+0xfc/0x840 [ 170.838515][ T6240] ? rcu_is_watching+0x13/0xc0 [ 170.838559][ T6240] ? tomoyo_realpath_from_path+0xb6/0x690 [ 170.838608][ T6240] tomoyo_realpath_from_path+0xb6/0x690 [ 170.838650][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.838702][ T6240] tomoyo_check_open_permission+0x2af/0x3c0 [ 170.838760][ T6240] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 170.838832][ T6240] ? hook_file_open+0x245/0x8e0 [ 170.838944][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.839002][ T6240] tomoyo_file_open+0x6b/0x90 [ 170.839048][ T6240] security_file_open+0xb5/0x1e0 [ 170.839113][ T6240] do_dentry_open+0x552/0x1470 [ 170.839173][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.839224][ T6240] vfs_open_consume+0xcc/0x460 [ 170.839265][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.839317][ T6240] path_openat+0x1547/0x23f0 [ 170.839364][ T6240] ? __pfx_path_openat+0x10/0x10 [ 170.839415][ T6240] do_file_open+0x20e/0x430 [ 170.839457][ T6240] ? __pfx_do_file_open+0x10/0x10 [ 170.839529][ T6240] ? _raw_spin_unlock+0x28/0x50 [ 170.839585][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.839635][ T6240] ? alloc_fd+0x471/0x7a0 [ 170.839694][ T6240] do_sys_openat2+0x163/0x1d0 [ 170.839737][ T6240] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.839798][ T6240] __x64_sys_openat+0x12d/0x210 [ 170.839842][ T6240] ? __pfx___x64_sys_openat+0x10/0x10 [ 170.839895][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.839954][ T6240] do_syscall_64+0x123/0x7b0 [ 170.840021][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.840066][ T6240] RIP: 0033:0x7fb73b99fb19 [ 170.840099][ T6240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.840134][ T6240] RSP: 002b:00007fb73c909028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 170.840170][ T6240] RAX: ffffffffffffffda RBX: 00007fb73bc25fa0 RCX: 00007fb73b99fb19 [ 170.840196][ T6240] RDX: 0000000000000100 RSI: 0000200000001100 RDI: ffffffffffffff9c [ 170.840227][ T6240] RBP: 00007fb73ba37b70 R08: 0000000000000000 R09: 0000000000000000 [ 170.840251][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.840279][ T6240] R13: 00007fb73bc26038 R14: 00007fb73bc25fa0 R15: 00007ffdab8290f8 [ 170.840335][ T6240] [ 170.875511][ T6240] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.887920][ T148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.900805][ T6240] FAULT_INJECTION: forcing a failure. [ 170.900805][ T6240] name failslab, interval 1, probability 5, space 0, times 98 [ 170.900855][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.4.63 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.900907][ T6240] Tainted: [L]=SOFTLOCKUP [ 170.900921][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 170.900943][ T6240] Call Trace: [ 170.900955][ T6240] [ 170.900969][ T6240] dump_stack_lvl+0x100/0x190 [ 170.901035][ T6240] should_fail_ex.cold+0x5/0xa [ 170.901091][ T6240] should_failslab+0xc2/0x120 [ 170.901159][ T6240] kmem_cache_alloc_noprof+0x92/0x6a0 [ 170.901209][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.901255][ T6240] ? __asan_memcpy+0x3c/0x60 [ 170.901301][ T6240] ? __kernfs_new_node+0xd2/0xa10 [ 170.901369][ T6240] __kernfs_new_node+0xd2/0xa10 [ 170.901424][ T6240] ? arch_stack_walk+0xa6/0xf0 [ 170.901486][ T6240] ? __pfx___kernfs_new_node+0x10/0x10 [ 170.901549][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.901594][ T6240] ? lock_acquire+0x1d1/0x380 [ 170.901644][ T6240] ? kernfs_root+0x23/0x2a0 [ 170.901695][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.901741][ T6240] ? find_held_lock+0x2b/0x80 [ 170.901777][ T6240] ? kernfs_root+0xee/0x2a0 [ 170.901828][ T6240] ? kernfs_root+0xee/0x2a0 [ 170.901882][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.901941][ T6240] kernfs_new_node+0x194/0x200 [ 170.902004][ T6240] ? __pfx_kernfs_new_node+0x10/0x10 [ 170.902062][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.902115][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.902160][ T6240] ? trace_contention_end+0x126/0x160 [ 170.902223][ T6240] __kernfs_create_file+0x53/0x350 [ 170.902272][ T6240] cgroup_addrm_files+0x48e/0xd30 [ 170.902329][ T6240] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 170.902429][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.902474][ T6240] ? css_next_child+0xcf/0x2e0 [ 170.902521][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.902567][ T6240] ? css_next_descendant_pre+0x58/0x1a0 [ 170.902621][ T6240] css_populate_dir+0x343/0x590 [ 170.902666][ T6240] cgroup_mkdir+0x975/0x13a0 [ 170.902732][ T6240] ? __pfx_cgroup_mkdir+0x10/0x10 [ 170.902792][ T6240] kernfs_iop_mkdir+0x111/0x190 [ 170.902850][ T6240] ? security_inode_mkdir+0xc9/0x2b0 [ 170.902894][ T6240] vfs_mkdir+0x36d/0x8a0 [ 170.902953][ T6240] filename_mkdirat+0x4c4/0x630 [ 170.903000][ T6240] ? __pfx_filename_mkdirat+0x10/0x10 [ 170.903041][ T6240] ? strncpy_from_user+0x19d/0x2d0 [ 170.903091][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 170.903141][ T6240] ? do_getname+0x191/0x390 [ 170.903193][ T6240] __x64_sys_mkdirat+0x89/0xc0 [ 170.903235][ T6240] do_syscall_64+0x123/0x7b0 [ 170.903299][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.903339][ T6240] RIP: 0033:0x7fb73b99fb19 [ 170.903374][ T6240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.903410][ T6240] RSP: 002b:00007fb73c909028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 170.903446][ T6240] RAX: ffffffffffffffda RBX: 00007fb73bc25fa0 RCX: 00007fb73b99fb19 [ 170.903471][ T6240] RDX: 00000000000001ff RSI: 0000200000001140 RDI: ffffffffffffff9c [ 170.903496][ T6240] RBP: 00007fb73ba37b70 R08: 0000000000000000 R09: 0000000000000000 [ 170.903520][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.903543][ T6240] R13: 00007fb73bc26038 R14: 00007fb73bc25fa0 R15: 00007ffdab8290f8 [ 170.903594][ T6240] [ 170.946871][ T6240] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 171.006836][ T6240] FAULT_INJECTION: forcing a failure. [ 171.006836][ T6240] name failslab, interval 1, probability 5, space 0, times 97 [ 171.006885][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.4.63 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.006936][ T6240] Tainted: [L]=SOFTLOCKUP [ 171.006950][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 171.006971][ T6240] Call Trace: [ 171.006983][ T6240] [ 171.006997][ T6240] dump_stack_lvl+0x100/0x190 [ 171.007061][ T6240] should_fail_ex.cold+0x5/0xa [ 171.007125][ T6240] should_failslab+0xc2/0x120 [ 171.007185][ T6240] kmem_cache_alloc_noprof+0x92/0x6a0 [ 171.007235][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.007281][ T6240] ? do_getname+0x35/0x390 [ 171.007335][ T6240] do_getname+0x35/0x390 [ 171.007386][ T6240] do_sys_openat2+0xc3/0x1d0 [ 171.007430][ T6240] ? __pfx_do_sys_openat2+0x10/0x10 [ 171.007469][ T6240] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 171.007534][ T6240] __x64_sys_openat+0x12d/0x210 [ 171.007579][ T6240] ? __pfx___x64_sys_openat+0x10/0x10 [ 171.007625][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.007674][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.007727][ T6240] do_syscall_64+0x123/0x7b0 [ 171.007790][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.007828][ T6240] RIP: 0033:0x7fb73b96034e [ 171.007857][ T6240] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.007892][ T6240] RSP: 002b:00007fb73c906ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.007927][ T6240] RAX: ffffffffffffffda RBX: 00007fb73c9096c0 RCX: 00007fb73b96034e [ 171.007951][ T6240] RDX: 0000000000000002 RSI: 00007fb73ba36f02 RDI: ffffffffffffff9c [ 171.007975][ T6240] RBP: 00007fb73ba37b70 R08: 0000000000000000 R09: 0000000000000000 [ 171.007998][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000055 [ 171.008021][ T6240] R13: 0000200000001340 R14: 0000000000000000 R15: 00007ffdab8290f8 [ 171.008070][ T6240] [ 171.095915][ T6240] FAULT_INJECTION: forcing a failure. [ 171.095915][ T6240] name failslab, interval 1, probability 5, space 0, times 96 [ 171.095965][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.4.63 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.096016][ T6240] Tainted: [L]=SOFTLOCKUP [ 171.096029][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 171.096051][ T6240] Call Trace: [ 171.096063][ T6240] [ 171.096076][ T6240] dump_stack_lvl+0x100/0x190 [ 171.096146][ T6240] should_fail_ex.cold+0x5/0xa [ 171.096200][ T6240] should_failslab+0xc2/0x120 [ 171.096260][ T6240] kmem_cache_alloc_noprof+0x92/0x6a0 [ 171.096310][ T6240] ? d_instantiate+0x8a/0xb0 [ 171.096354][ T6240] ? alloc_empty_file+0x5b/0x1c0 [ 171.096405][ T6240] alloc_empty_file+0x5b/0x1c0 [ 171.096450][ T6240] alloc_file_pseudo+0x17e/0x290 [ 171.096497][ T6240] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 171.096538][ T6240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.096586][ T6240] ? alloc_fd+0x471/0x7a0 [ 171.096632][ T6240] sock_alloc_file+0x50/0x210 [ 171.096671][ T6240] __sys_socket+0x1c0/0x260 [ 171.096719][ T6240] ? __pfx___sys_socket+0x10/0x10 [ 171.096780][ T6240] __x64_sys_socket+0x72/0xb0 [ 171.096825][ T6240] ? lockdep_hardirqs_on+0x7d/0x110 [ 171.096882][ T6240] do_syscall_64+0x123/0x7b0 [ 171.096943][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.096982][ T6240] RIP: 0033:0x7fb73b99fb19 [ 171.097011][ T6240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.097046][ T6240] RSP: 002b:00007fb73c909028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 171.097081][ T6240] RAX: ffffffffffffffda RBX: 00007fb73bc25fa0 RCX: 00007fb73b99fb19 [ 171.097110][ T6240] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 171.097133][ T6240] RBP: 00007fb73ba37b70 R08: 0000000000000000 R09: 0000000000000000 [ 171.097155][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.097178][ T6240] R13: 00007fb73bc26038 R14: 00007fb73bc25fa0 R15: 00007ffdab8290f8 [ 171.097227][ T6240] [ 171.645794][ T148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.023311][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 172.104761][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 172.188137][ T11] usb 1-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 172.195553][ T11] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 172.195617][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.213615][ T11] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 172.213653][ T11] usb 1-1: Manufacturer: syz [ 172.229535][ T11] usb 1-1: config 0 descriptor?? [ 172.270671][ T5767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.423059][ T11] rc_core: IR keymap rc-hauppauge not found [ 172.423083][ T11] Registered IR keymap rc-empty [ 172.427663][ T11] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 172.458357][ T11] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 172.496288][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.496439][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.496598][ T6030] bridge_slave_0: entered allmulticast mode [ 172.530351][ T6030] bridge_slave_0: entered promiscuous mode [ 172.724666][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.724761][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.725231][ T6030] bridge_slave_1: entered allmulticast mode [ 172.734940][ T6030] bridge_slave_1: entered promiscuous mode [ 172.849338][ T5757] usb 1-1: USB disconnect, device number 2 [ 173.196921][ T6030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.209119][ T5788] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 173.278738][ T6030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.398256][ T5788] usb 4-1: unable to get BOS descriptor or descriptor too short [ 173.408868][ T5788] usb 4-1: not running at top speed; connect to a high speed hub [ 173.408903][ T5788] usb 4-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=e0.47 [ 173.430162][ T5788] usb 4-1: config 133 has an invalid interface number: 109 but max is 0 [ 173.430204][ T5788] usb 4-1: config 133 has no interface number 0 [ 173.430247][ T5788] usb 4-1: config 133 interface 109 has no altsetting 0 [ 173.438047][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.438084][ T5788] usb 4-1: Product: syz [ 173.438110][ T5788] usb 4-1: Manufacturer: syz [ 173.438145][ T5788] usb 4-1: SerialNumber: syz [ 173.632846][ T6030] team0: Port device team_slave_0 added [ 173.726715][ T6030] team0: Port device team_slave_1 added [ 173.967840][ T5788] kaweth 4-1:133.109: couldn't find required endpoints [ 173.983179][ T5788] usb 4-1: USB disconnect, device number 3 [ 173.987889][ T148] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.041958][ T5943] udevd[5943]: setting mode of /dev/bus/usb/004/003 to 020664 failed: No such file or directory [ 174.042072][ T5943] udevd[5943]: setting owner of /dev/bus/usb/004/003 to uid=0, gid=0 failed: No such file or directory [ 174.134474][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.134500][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.134537][ T6030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.205699][ T5992] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 174.250268][ T5992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.346588][ T148] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.397376][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.397402][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.397448][ T6030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.497441][ T5992] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.538187][ T5992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.539361][ T5992] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.579618][ T5992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.605987][ T5992] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 174.628631][ T5992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.651526][ T5757] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 174.774502][ T148] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.186499][ T148] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.276035][ T6030] hsr_slave_0: entered promiscuous mode [ 175.280444][ T6030] hsr_slave_1: entered promiscuous mode [ 175.300026][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.309193][ T6030] debugfs: 'hsr0' already exists in 'hsr' [ 175.309220][ T6030] Cannot create hsr debugfs directory [ 175.667786][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.667957][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.668381][ T6158] bridge_slave_0: entered allmulticast mode [ 175.702540][ T6158] bridge_slave_0: entered promiscuous mode [ 175.784298][ T6158] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.784488][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.784643][ T6158] bridge_slave_1: entered allmulticast mode [ 175.787086][ T6158] bridge_slave_1: entered promiscuous mode [ 176.017128][ T6158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.108230][ T6158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.151424][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 176.425659][ T6158] team0: Port device team_slave_0 added [ 176.445942][ T6158] team0: Port device team_slave_1 added [ 176.574682][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.797240][ T148] bridge_slave_1: left allmulticast mode [ 176.797278][ T148] bridge_slave_1: left promiscuous mode [ 176.797534][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.855900][ T148] bridge_slave_0: left allmulticast mode [ 176.855939][ T148] bridge_slave_0: left promiscuous mode [ 176.857674][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.979198][ T148] bridge_slave_1: left allmulticast mode [ 176.979241][ T148] bridge_slave_1: left promiscuous mode [ 176.979522][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.025863][ T148] bridge_slave_0: left allmulticast mode [ 177.025900][ T148] bridge_slave_0: left promiscuous mode [ 177.026122][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.842524][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.867484][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.885007][ T148] bond0 (unregistering): Released all slaves [ 178.313965][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.329132][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.337395][ T148] bond0 (unregistering): Released all slaves [ 178.504529][ T6158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.504550][ T6158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.508045][ T6158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.515874][ T6158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.515894][ T6158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.515937][ T6158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.684566][ T6158] hsr_slave_0: entered promiscuous mode [ 178.688174][ T6158] hsr_slave_1: entered promiscuous mode [ 178.699423][ T6158] debugfs: 'hsr0' already exists in 'hsr' [ 178.699442][ T6158] Cannot create hsr debugfs directory [ 179.971897][ T6030] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 179.998400][ T6030] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.139373][ T6030] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 180.169053][ T6030] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.179268][ T6030] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 180.209470][ T6030] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.237916][ T5992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.278249][ T6030] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 180.303916][ T6030] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.325752][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 180.499618][ T5992] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.802182][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.802297][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.031484][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.031613][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.069313][ T6158] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 181.105761][ T6158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.106823][ T6158] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 181.154249][ T6158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.156457][ T6158] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 181.184108][ T6158] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.249057][ T148] hsr_slave_0: left promiscuous mode [ 181.259341][ T148] hsr_slave_1: left promiscuous mode [ 181.271462][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.271494][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.275647][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.275674][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.363495][ T148] hsr_slave_0: left promiscuous mode [ 181.366166][ T148] hsr_slave_1: left promiscuous mode [ 181.384686][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.384719][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.388545][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.388578][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.488915][ T148] veth1_macvtap: left promiscuous mode [ 181.488967][ T148] veth0_macvtap: left promiscuous mode [ 181.489087][ T148] veth1_vlan: left promiscuous mode [ 181.489170][ T148] veth0_vlan: left promiscuous mode [ 181.522957][ T148] veth1_macvtap: left promiscuous mode [ 181.523114][ T148] veth0_macvtap: left promiscuous mode [ 181.523236][ T148] veth1_vlan: left promiscuous mode [ 181.523322][ T148] veth0_vlan: left promiscuous mode [ 182.311190][ T148] team0 (unregistering): Port device team_slave_1 removed [ 182.356175][ T148] team0 (unregistering): Port device team_slave_0 removed [ 182.781393][ T148] team0 (unregistering): Port device team_slave_1 removed [ 182.798189][ T148] team0 (unregistering): Port device team_slave_0 removed [ 182.985501][ T6158] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 182.994383][ T6158] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.011355][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 183.465836][ T6030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.528764][ T6030] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.613037][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.613170][ T5983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.654302][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.654426][ T5983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.772942][ T6158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.899427][ T6158] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.915429][ T148] IPVS: stop unused estimator thread 0... [ 183.991178][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.991303][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.028849][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.028973][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.174051][ T5290] 8021q: adding VLAN 0 to HW filter on device eth7 [ 185.267733][ T5992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.707896][ T6030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.878165][ T6158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.448082][ T5992] veth0_vlan: entered promiscuous mode [ 186.483098][ T5992] veth1_vlan: entered promiscuous mode [ 186.606129][ T5992] veth0_macvtap: entered promiscuous mode [ 186.626415][ T5992] veth1_macvtap: entered promiscuous mode [ 186.702644][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.749536][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.834386][ T6158] veth0_vlan: entered promiscuous mode [ 186.897205][ T6017] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.904124][ T6158] veth1_vlan: entered promiscuous mode [ 186.941617][ T148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.941699][ T148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.029621][ T6030] veth0_vlan: entered promiscuous mode [ 187.047539][ T5290] 8021q: adding VLAN 0 to HW filter on device eth8 [ 187.060611][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.060637][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.069563][ T6030] veth1_vlan: entered promiscuous mode [ 187.128520][ T6158] veth0_macvtap: entered promiscuous mode [ 187.137876][ T14] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.144783][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.144809][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.194322][ T6158] veth1_macvtap: entered promiscuous mode [ 187.198722][ T6030] veth0_macvtap: entered promiscuous mode [ 187.230937][ T6030] veth1_macvtap: entered promiscuous mode [ 187.255723][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.289411][ T6158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.295600][ T6158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.317215][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.400161][ T5983] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.400236][ T5983] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.400296][ T5983] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.400357][ T5983] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.662129][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.662169][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.696230][ T5983] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.696683][ T5983] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.697084][ T5983] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.745326][ T5942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.745358][ T5942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.801160][ T5942] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.954436][ T6418] syz.3.77 uses obsolete (PF_INET,SOCK_PACKET) [ 189.975037][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.975069][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.447658][ T30] audit: type=1800 audit(1794201929.015:4): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.77" name="file0" dev="overlay" ino=147 res=0 errno=-22 [ 190.606494][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.606539][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.855576][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.855690][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.889059][ T6447] Bluetooth: MGMT ver 1.23 [ 194.128312][ T6458] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 194.128312][ T6458] [ 194.128653][ T6458] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 194.145256][ T6458] CIFS: Attempting to mount //127.0.0.1/share [ 197.602707][ T6458] CIFS: VFS: \\127.0.0.1 Error -512 sending data on socket to server [ 197.605960][ T6458] CIFS: VFS: cifs_mount failed w/return code = -103 [ 199.189714][ T6489] configfs-gadget.g1 gadget.0: HOST MAC 36:2a:2d:73:36:55 [ 199.189756][ T6489] configfs-gadget.g1 gadget.0: MAC 36:d3:93:65:e1:a8 [ 199.329489][ T5290] 8021q: adding VLAN 0 to HW filter on device eth9 [ 200.502628][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 200.934324][ T25] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 201.195292][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.195342][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 201.195410][ T25] usb 1-1: Dual-Role OTG device on HNP port [ 201.195731][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.245153][ C1] ------------[ cut here ]------------ [ 201.245178][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 201.245204][ C1] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#1: kworker/1:0/25 [ 201.267794][ C1] Modules linked in: [ 201.271805][ C1] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.282603][ C1] Tainted: [L]=SOFTLOCKUP [ 201.286937][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 201.297013][ C1] Workqueue: usb_hub_wq hub_event [ 201.302098][ C1] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 201.307541][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d da 50 85 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 e0 bf fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 80 b2 fb 8c [ 201.327187][ C1] RSP: 0018:ffffc90000a18a10 EFLAGS: 00010046 [ 201.333285][ C1] RAX: dffffc0000000000 RBX: ffff88802b1000e0 RCX: ffffffff8cfbf6e0 [ 201.341321][ C1] RDX: 0000000000000081 RSI: ffffffff8cfbbfe0 RDI: ffffffff927897d0 [ 201.349314][ C1] RBP: 0000000000000081 R08: ffffffff8cfbb2c0 R09: 0000000000000000 [ 201.357311][ C1] R10: ffffffff926b115f R11: 0000000000000001 R12: ffffffff8cfbb2c0 [ 201.365285][ C1] R13: 0000000000000000 R14: ffff88802b1000e0 R15: ffff88807f0880a0 [ 201.373256][ C1] FS: 0000000000000000(0000) GS:ffff888122570000(0000) knlGS:0000000000000000 [ 201.382193][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.388777][ C1] CR2: 000000110c2ce2b3 CR3: 000000005b338000 CR4: 0000000000350ef0 [ 201.396750][ C1] Call Trace: [ 201.400027][ C1] [ 201.402879][ C1] hidg_set_alt+0x190/0xa10 [ 201.407394][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 201.412648][ C1] ? rcu_is_watching+0x13/0xc0 [ 201.417440][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.423087][ C1] composite_setup+0x2ccf/0x9290 [ 201.428035][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.433705][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 201.438681][ C1] ? __pfx_composite_setup+0x10/0x10 [ 201.443986][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 201.449390][ C1] ? do_raw_spin_lock+0x128/0x260 [ 201.454476][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 201.459891][ C1] ? configfs_composite_setup+0xfb/0x130 [ 201.465568][ C1] configfs_composite_setup+0xfb/0x130 [ 201.471047][ C1] dummy_timer+0x20a0/0x3840 [ 201.475654][ C1] ? do_raw_spin_lock+0x128/0x260 [ 201.480710][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.486356][ C1] ? find_held_lock+0x2b/0x80 [ 201.491031][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 201.496701][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 201.502346][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 201.508176][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.513823][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 201.519502][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 201.525506][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 201.530455][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.536098][ C1] ? mark_held_locks+0x40/0x70 [ 201.540884][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 201.546979][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 201.551937][ C1] __hrtimer_run_queues+0x448/0x9a0 [ 201.557159][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 201.562285][ C1] handle_softirqs+0x216/0xa20 [ 201.567092][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 201.572378][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.578017][ C1] ? _raw_spin_unlock+0x28/0x50 [ 201.582876][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.588518][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 201.594178][ C1] __irq_exit_rcu+0x178/0x220 [ 201.598869][ C1] irq_exit_rcu+0x9/0x30 [ 201.603134][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 201.608819][ C1] [ 201.611750][ C1] [ 201.614678][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 201.620662][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 201.626486][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 7a ae f7 f5 48 89 df e8 02 05 f8 f5 e8 ed 18 25 f6 fb bf 01 00 00 00 52 cb e6 f5 65 48 83 3d c1 62 c9 09 00 74 06 5b e9 9c a3 1e f5 [ 201.646096][ C1] RSP: 0018:ffffc900001f6f48 EFLAGS: 00000202 [ 201.652172][ C1] RAX: 000000000002822f RBX: ffff8880b813b980 RCX: 0000000000000040 [ 201.660140][ C1] RDX: 0000000000000001 RSI: ffffffff8e62869f RDI: 0000000000000001 [ 201.668125][ C1] RBP: 1ffff9200003edeb R08: 0000000000000001 R09: 0000000000000000 [ 201.676099][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880b813b980 [ 201.684086][ C1] R13: 0000000000000001 R14: ffff8880314e3e80 R15: dffffc0000000000 [ 201.692077][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 201.697290][ C1] wq_worker_sleeping+0x276/0x2d0 [ 201.702324][ C1] ? __pfx_wq_worker_sleeping+0x10/0x10 [ 201.707907][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.713561][ C1] schedule+0x244/0x2c0 [ 201.717731][ C1] schedule_timeout+0x127/0x280 [ 201.722586][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 201.727965][ C1] ? __pfx_process_timeout+0x10/0x10 [ 201.733278][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.738925][ C1] ? mark_held_locks+0x40/0x70 [ 201.743714][ C1] __wait_for_common+0x2e6/0x500 [ 201.748684][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 201.754068][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 201.759569][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.765234][ C1] usb_start_wait_urb+0x2ae/0x580 [ 201.770277][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 201.775841][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.781504][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.787145][ C1] ? __asan_memset+0x23/0x50 [ 201.791751][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.797397][ C1] usb_control_msg+0x328/0x4b0 [ 201.802186][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 201.807486][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.813218][ C1] usb_control_msg_send+0xca/0x130 [ 201.818353][ C1] usb_set_configuration+0xb8f/0x1dc0 [ 201.823790][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 201.829877][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 201.835290][ C1] usb_probe_device+0xef/0x400 [ 201.840052][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 201.845434][ C1] really_probe+0x241/0xa60 [ 201.849967][ C1] __driver_probe_device+0x210/0x460 [ 201.855330][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.860996][ C1] driver_probe_device+0x4a/0x140 [ 201.866147][ C1] __device_attach_driver+0x1df/0x320 [ 201.871573][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 201.877499][ C1] bus_for_each_drv+0x159/0x1e0 [ 201.882362][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 201.887772][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.893425][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 201.898639][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.904281][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 201.910206][ C1] __device_attach+0x1e4/0x4c0 [ 201.915038][ C1] ? __pfx___device_attach+0x10/0x10 [ 201.920355][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.926001][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 201.931217][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.936872][ C1] device_initial_probe+0xaf/0xf0 [ 201.941904][ C1] __bus_probe_device+0x60/0x160 [ 201.946856][ C1] device_add+0x121d/0x1970 [ 201.951373][ C1] ? __pfx_device_add+0x10/0x10 [ 201.956256][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 201.962005][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.967667][ C1] usb_new_device.part.0+0xcc2/0x1686 [ 201.973072][ C1] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 201.978879][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.984525][ C1] ? mark_held_locks+0x40/0x70 [ 201.989306][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 201.994958][ C1] hub_event.cold+0x1e3/0xe90 [ 201.999674][ C1] ? __pfx_hub_event+0x10/0x10 [ 202.004453][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.010130][ C1] ? check_irq_usage+0x7b0/0x8b0 [ 202.015094][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.020739][ C1] ? lock_acquire+0x1d1/0x380 [ 202.025447][ C1] ? process_one_work+0xa2c/0x1b10 [ 202.030575][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.036225][ C1] ? process_one_work+0x906/0x1b10 [ 202.041344][ C1] ? process_one_work+0x906/0x1b10 [ 202.046458][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.052122][ C1] process_one_work+0xac7/0x1b10 [ 202.057086][ C1] ? __pfx_process_one_work+0x10/0x10 [ 202.062471][ C1] ? lock_acquire+0x1d1/0x380 [ 202.067183][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.072832][ C1] worker_thread+0x5ef/0xe50 [ 202.077441][ C1] ? kthread+0x13a/0x450 [ 202.081684][ C1] ? __pfx_worker_thread+0x10/0x10 [ 202.086797][ C1] kthread+0x373/0x450 [ 202.090894][ C1] ? __pfx_kthread+0x10/0x10 [ 202.095520][ C1] ret_from_fork+0x730/0xd60 [ 202.100123][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 202.105273][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.110918][ C1] ? __switch_to+0x800/0x10e0 [ 202.115624][ C1] ? __switch_to_asm+0x39/0x70 [ 202.120396][ C1] ? __pfx_kthread+0x10/0x10 [ 202.125017][ C1] ret_from_fork_asm+0x1a/0x30 [ 202.129816][ C1] [ 202.132829][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 202.140111][ C1] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.150890][ C1] Tainted: [L]=SOFTLOCKUP [ 202.155204][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 202.165358][ C1] Workqueue: usb_hub_wq hub_event [ 202.170464][ C1] Call Trace: [ 202.173739][ C1] [ 202.176575][ C1] dump_stack_lvl+0x100/0x190 [ 202.181279][ C1] vpanic+0x2dc/0x6f8 [ 202.185279][ C1] panic+0xd1/0xe0 [ 202.189009][ C1] ? __pfx_panic+0x10/0x10 [ 202.193454][ C1] check_panic_on_warn.cold+0x19/0x34 [ 202.198836][ C1] ? usb_ep_enable+0x3e6/0x490 [ 202.203601][ C1] __warn.cold+0x191/0x321 [ 202.208034][ C1] __report_bug+0x30f/0x440 [ 202.212557][ C1] ? usb_ep_enable+0x3e6/0x490 [ 202.217335][ C1] ? __pfx___report_bug+0x10/0x10 [ 202.222386][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.228049][ C1] ? try_to_wake_up+0x158/0x1980 [ 202.233032][ C1] report_bug_entry+0xe2/0x290 [ 202.237827][ C1] ? usb_ep_enable+0x3f8/0x490 [ 202.242623][ C1] handle_bug+0x1cd/0x2a0 [ 202.246997][ C1] exc_invalid_op+0x17/0x50 [ 202.251534][ C1] asm_exc_invalid_op+0x1a/0x20 [ 202.256388][ C1] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 202.261767][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d da 50 85 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 e0 bf fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 80 b2 fb 8c [ 202.281396][ C1] RSP: 0018:ffffc90000a18a10 EFLAGS: 00010046 [ 202.287477][ C1] RAX: dffffc0000000000 RBX: ffff88802b1000e0 RCX: ffffffff8cfbf6e0 [ 202.295466][ C1] RDX: 0000000000000081 RSI: ffffffff8cfbbfe0 RDI: ffffffff927897d0 [ 202.303451][ C1] RBP: 0000000000000081 R08: ffffffff8cfbb2c0 R09: 0000000000000000 [ 202.311457][ C1] R10: ffffffff926b115f R11: 0000000000000001 R12: ffffffff8cfbb2c0 [ 202.319427][ C1] R13: 0000000000000000 R14: ffff88802b1000e0 R15: ffff88807f0880a0 [ 202.327428][ C1] hidg_set_alt+0x190/0xa10 [ 202.331952][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 202.337171][ C1] ? rcu_is_watching+0x13/0xc0 [ 202.341937][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.347585][ C1] composite_setup+0x2ccf/0x9290 [ 202.352528][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.358224][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 202.363208][ C1] ? __pfx_composite_setup+0x10/0x10 [ 202.368533][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 202.373943][ C1] ? do_raw_spin_lock+0x128/0x260 [ 202.379030][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 202.384430][ C1] ? configfs_composite_setup+0xfb/0x130 [ 202.390079][ C1] configfs_composite_setup+0xfb/0x130 [ 202.395573][ C1] dummy_timer+0x20a0/0x3840 [ 202.400233][ C1] ? do_raw_spin_lock+0x128/0x260 [ 202.405290][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.410938][ C1] ? find_held_lock+0x2b/0x80 [ 202.415622][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 202.421267][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 202.426923][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 202.432763][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.438415][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 202.444069][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 202.450076][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 202.455035][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.460683][ C1] ? mark_held_locks+0x40/0x70 [ 202.465498][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 202.471361][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 202.476327][ C1] __hrtimer_run_queues+0x448/0x9a0 [ 202.481571][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 202.486728][ C1] handle_softirqs+0x216/0xa20 [ 202.491516][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 202.496844][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.502499][ C1] ? _raw_spin_unlock+0x28/0x50 [ 202.507370][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.513018][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 202.518680][ C1] __irq_exit_rcu+0x178/0x220 [ 202.523368][ C1] irq_exit_rcu+0x9/0x30 [ 202.527622][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 202.533287][ C1] [ 202.536209][ C1] [ 202.539132][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 202.545136][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 202.550982][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 7a ae f7 f5 48 89 df e8 02 05 f8 f5 e8 ed 18 25 f6 fb bf 01 00 00 00 52 cb e6 f5 65 48 83 3d c1 62 c9 09 00 74 06 5b e9 9c a3 1e f5 [ 202.570618][ C1] RSP: 0018:ffffc900001f6f48 EFLAGS: 00000202 [ 202.576699][ C1] RAX: 000000000002822f RBX: ffff8880b813b980 RCX: 0000000000000040 [ 202.584670][ C1] RDX: 0000000000000001 RSI: ffffffff8e62869f RDI: 0000000000000001 [ 202.592645][ C1] RBP: 1ffff9200003edeb R08: 0000000000000001 R09: 0000000000000000 [ 202.600619][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880b813b980 [ 202.608588][ C1] R13: 0000000000000001 R14: ffff8880314e3e80 R15: dffffc0000000000 [ 202.616683][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 202.621912][ C1] wq_worker_sleeping+0x276/0x2d0 [ 202.626950][ C1] ? __pfx_wq_worker_sleeping+0x10/0x10 [ 202.632596][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.638261][ C1] schedule+0x244/0x2c0 [ 202.642452][ C1] schedule_timeout+0x127/0x280 [ 202.647319][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 202.652710][ C1] ? __pfx_process_timeout+0x10/0x10 [ 202.658018][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.663688][ C1] ? mark_held_locks+0x40/0x70 [ 202.668481][ C1] __wait_for_common+0x2e6/0x500 [ 202.673448][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 202.678863][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 202.684358][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.690026][ C1] usb_start_wait_urb+0x2ae/0x580 [ 202.695084][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 202.700646][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.706326][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.712001][ C1] ? __asan_memset+0x23/0x50 [ 202.716609][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.722259][ C1] usb_control_msg+0x328/0x4b0 [ 202.727052][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 202.732365][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.738028][ C1] usb_control_msg_send+0xca/0x130 [ 202.743164][ C1] usb_set_configuration+0xb8f/0x1dc0 [ 202.748587][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 202.754671][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 202.760062][ C1] usb_probe_device+0xef/0x400 [ 202.764828][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 202.770223][ C1] really_probe+0x241/0xa60 [ 202.774764][ C1] __driver_probe_device+0x210/0x460 [ 202.780068][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.785760][ C1] driver_probe_device+0x4a/0x140 [ 202.790811][ C1] __device_attach_driver+0x1df/0x320 [ 202.796210][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 202.802133][ C1] bus_for_each_drv+0x159/0x1e0 [ 202.806998][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 202.812381][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.818023][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 202.823251][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.828902][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 202.834769][ C1] __device_attach+0x1e4/0x4c0 [ 202.839559][ C1] ? __pfx___device_attach+0x10/0x10 [ 202.844877][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.850528][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 202.855791][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.861439][ C1] device_initial_probe+0xaf/0xf0 [ 202.866467][ C1] __bus_probe_device+0x60/0x160 [ 202.871420][ C1] device_add+0x121d/0x1970 [ 202.875956][ C1] ? __pfx_device_add+0x10/0x10 [ 202.880807][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 202.886558][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.892206][ C1] usb_new_device.part.0+0xcc2/0x1686 [ 202.897593][ C1] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 202.903429][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.909078][ C1] ? mark_held_locks+0x40/0x70 [ 202.913863][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.919541][ C1] hub_event.cold+0x1e3/0xe90 [ 202.924261][ C1] ? __pfx_hub_event+0x10/0x10 [ 202.929335][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.934983][ C1] ? check_irq_usage+0x7b0/0x8b0 [ 202.939946][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.945619][ C1] ? lock_acquire+0x1d1/0x380 [ 202.950312][ C1] ? process_one_work+0xa2c/0x1b10 [ 202.955447][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.961118][ C1] ? process_one_work+0x906/0x1b10 [ 202.966267][ C1] ? process_one_work+0x906/0x1b10 [ 202.971397][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.977061][ C1] process_one_work+0xac7/0x1b10 [ 202.982046][ C1] ? __pfx_process_one_work+0x10/0x10 [ 202.987446][ C1] ? lock_acquire+0x1d1/0x380 [ 202.992176][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.997829][ C1] worker_thread+0x5ef/0xe50 [ 203.002457][ C1] ? kthread+0x13a/0x450 [ 203.006701][ C1] ? __pfx_worker_thread+0x10/0x10 [ 203.011899][ C1] kthread+0x373/0x450 [ 203.015965][ C1] ? __pfx_kthread+0x10/0x10 [ 203.020575][ C1] ret_from_fork+0x730/0xd60 [ 203.025186][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 203.030314][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.035967][ C1] ? __switch_to+0x800/0x10e0 [ 203.040678][ C1] ? __switch_to_asm+0x39/0x70 [ 203.045471][ C1] ? __pfx_kthread+0x10/0x10 [ 203.050100][ C1] ret_from_fork_asm+0x1a/0x30 [ 203.054935][ C1] [ 203.058196][ C1] Kernel Offset: disabled [ 203.062516][ C1] Rebooting in 86400 seconds..