last executing test programs: 1m0.556159844s ago: executing program 3 (id=110): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001cc0)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 59.699737143s ago: executing program 3 (id=115): r0 = io_uring_setup(0x5ffd, &(0x7f0000000080)={0x0, 0x3551, 0x800, 0x1, 0x20000115}) close_range(r0, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "cc5e65fb4e966cb6"}, 0x38) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) 58.749688496s ago: executing program 3 (id=126): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x9bd, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @private0, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}, 0x20004050) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x1, 0x4048012, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 58.614921822s ago: executing program 3 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4) chdir(&(0x7f00000003c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r1, 0x0, 0x0) 58.532244657s ago: executing program 3 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x300, 0x7, 0x0, 0xfffffff9, 0x0}) 58.198768669s ago: executing program 3 (id=129): socket(0x2b, 0x80801, 0x1) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 57.961014197s ago: executing program 32 (id=129): socket(0x2b, 0x80801, 0x1) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 4.729916324s ago: executing program 0 (id=444): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7e275}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6}, 0x48804) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000200000000000008"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14}, 0x94) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2c0, &(0x7f0000000900)="$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") sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008080) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r1, &(0x7f0000000d40)=""/43, 0x2b) 4.729648043s ago: executing program 1 (id=445): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 4.492334982s ago: executing program 0 (id=446): socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x7c, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(r1) 4.398916635s ago: executing program 4 (id=449): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r1, &(0x7f0000019180)=""/102346, 0x18fca, 0x3) clock_adjtime(0x17, 0x0) 3.707095733s ago: executing program 2 (id=451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x0, 0xef5ebf77ce25880d, 0x70fd2d, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 3.705995273s ago: executing program 1 (id=461): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r0 = memfd_create(&(0x7f0000000000)=',\xea\x00\xd4\xd7\x02\x8dmbs\x0f\xb9\x80\xb9\x13\x92\'\x94N\xc3\xe0m\xa4\x01\x00\x00\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0h7\xa4\xed\x94 \x05q\xa4d\xda0y\xed\xdb\xf4\xeb\x85\x9b\xde\b\xa6\x1f\xaa\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\xecB\x0f', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0xffffffb5) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 3.663604826s ago: executing program 4 (id=454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004900)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x7e}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) 3.490762305s ago: executing program 0 (id=455): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000100020"], 0x24, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000280)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1a37c1, 0x42) 3.423578084s ago: executing program 4 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xfdff) 2.689219214s ago: executing program 4 (id=457): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.688218034s ago: executing program 2 (id=458): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7e275}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6}, 0x48804) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000200000000000008"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14}, 0x94) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008080) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r1, &(0x7f0000000d40)=""/43, 0x2b) 2.686925354s ago: executing program 0 (id=467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.43998779s ago: executing program 2 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'virt_wifi0\x00', 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) 2.413176185s ago: executing program 1 (id=460): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote}}}, 0x108) 1.426080351s ago: executing program 4 (id=462): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.413751929s ago: executing program 0 (id=471): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000180)}, 0x20) 1.412483849s ago: executing program 1 (id=463): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0xa}, 0x20) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x6, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 1.412084869s ago: executing program 2 (id=464): syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x1000a0, 0x0, 0xfe, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x2, 0x1, 0x6, 0x800, 0x9, 0x4, {0x0, 0x56541a3c, 0x7, 0x8, 0x4, 0x1ff, 0xb28d, 0x0, 0xffff, 0x4000, 0x0, r2, r3, 0x8, 0x6}}, {0x4, 0x8000000000000001, 0x2, 0x0, '.%'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0xc0) getdents64(r4, 0x0, 0x0) 717.091366ms ago: executing program 1 (id=465): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file2\x00', 0x2, &(0x7f0000000600)={[{@data_err_abort}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@noload}, {@debug}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}], [{@context={'context', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, '\x00f=\xd8'}}]}, 0xfa, 0x477, &(0x7f00000000c0)="$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") r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x8000, 0x0, 0x5, 0x2, 0xec5e, 0x4, 0x9, 0x74a2, 0x3, 0x9, 0x8, 0x203}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 716.320576ms ago: executing program 0 (id=475): syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 114.45177ms ago: executing program 4 (id=466): socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x7c, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(r1) 110.957419ms ago: executing program 2 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 240.58µs ago: executing program 1 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xfdff) 0s ago: executing program 2 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x0, 0x22}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. [ 63.401206][ T5753] cgroup: Unknown subsys name 'net' [ 63.566644][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.072027][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.516221][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.525095][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.541102][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.549043][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.551460][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.563512][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.570744][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.580199][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.587637][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.596224][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.604127][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.606955][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.611581][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.642179][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.644664][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.655544][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.658928][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.663664][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.678359][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.679103][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.687050][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.693967][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.703496][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.709262][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.134871][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 67.171094][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 67.265677][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 67.338170][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.345447][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.353256][ T5764] bridge_slave_0: entered allmulticast mode [ 67.360670][ T5764] bridge_slave_0: entered promiscuous mode [ 67.368609][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 67.398022][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.405970][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.414845][ T5767] bridge_slave_0: entered allmulticast mode [ 67.421813][ T5767] bridge_slave_0: entered promiscuous mode [ 67.430430][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.437985][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.445810][ T5764] bridge_slave_1: entered allmulticast mode [ 67.453090][ T5764] bridge_slave_1: entered promiscuous mode [ 67.484222][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.498669][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.507699][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.518746][ T5767] bridge_slave_1: entered allmulticast mode [ 67.527840][ T5767] bridge_slave_1: entered promiscuous mode [ 67.564162][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.606701][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.652978][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.667699][ T5764] team0: Port device team_slave_0 added [ 67.679520][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.686888][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.694420][ T5766] bridge_slave_0: entered allmulticast mode [ 67.702186][ T5766] bridge_slave_0: entered promiscuous mode [ 67.718781][ T5764] team0: Port device team_slave_1 added [ 67.738344][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.745964][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.753372][ T5766] bridge_slave_1: entered allmulticast mode [ 67.760810][ T5766] bridge_slave_1: entered promiscuous mode [ 67.806486][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.814156][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.841466][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.866745][ T5767] team0: Port device team_slave_0 added [ 67.873298][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.881333][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.888591][ T5765] bridge_slave_0: entered allmulticast mode [ 67.895709][ T5765] bridge_slave_0: entered promiscuous mode [ 67.903908][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.911725][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.938380][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.958933][ T5767] team0: Port device team_slave_1 added [ 67.965625][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.973080][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.980397][ T5765] bridge_slave_1: entered allmulticast mode [ 67.987103][ T5765] bridge_slave_1: entered promiscuous mode [ 68.005358][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.046789][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.074638][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.100361][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.107510][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.136485][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.152523][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.176108][ T5764] hsr_slave_0: entered promiscuous mode [ 68.182626][ T5764] hsr_slave_1: entered promiscuous mode [ 68.198555][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.205822][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.232445][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.268323][ T5766] team0: Port device team_slave_0 added [ 68.278839][ T5766] team0: Port device team_slave_1 added [ 68.308262][ T5765] team0: Port device team_slave_0 added [ 68.317459][ T5765] team0: Port device team_slave_1 added [ 68.363181][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.372620][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.399729][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.412483][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.419968][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.447941][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.504191][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.511434][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.538639][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.551618][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.558586][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.584791][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.606871][ T5767] hsr_slave_0: entered promiscuous mode [ 68.613441][ T5767] hsr_slave_1: entered promiscuous mode [ 68.620683][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.628851][ T5767] Cannot create hsr debugfs directory [ 68.710786][ T5773] Bluetooth: hci3: command tx timeout [ 68.718324][ T5766] hsr_slave_0: entered promiscuous mode [ 68.725014][ T5766] hsr_slave_1: entered promiscuous mode [ 68.731804][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.739381][ T5766] Cannot create hsr debugfs directory [ 68.780178][ T5765] hsr_slave_0: entered promiscuous mode [ 68.786656][ T5765] hsr_slave_1: entered promiscuous mode [ 68.792878][ T5771] Bluetooth: hci1: command tx timeout [ 68.798652][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.798756][ T5773] Bluetooth: hci0: command tx timeout [ 68.806681][ T5765] Cannot create hsr debugfs directory [ 68.812420][ T5771] Bluetooth: hci2: command tx timeout [ 69.120742][ T5764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.147597][ T5764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.157778][ T5764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.169416][ T5764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.250379][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.264002][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.282344][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.295139][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.402737][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.418114][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.428265][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.442102][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.519215][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.530943][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.557196][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.567807][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.586313][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.638284][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.683863][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.691502][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.722194][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.748749][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.755897][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.796269][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.832854][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.844167][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.851506][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.882009][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.889154][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.920898][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.937169][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.982256][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.989430][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.015305][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.034650][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.042039][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.061416][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.069354][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.110440][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.117605][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.339421][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.454588][ T5764] veth0_vlan: entered promiscuous mode [ 70.478807][ T5764] veth1_vlan: entered promiscuous mode [ 70.580859][ T5764] veth0_macvtap: entered promiscuous mode [ 70.604196][ T5764] veth1_macvtap: entered promiscuous mode [ 70.667398][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.696925][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.718055][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.743621][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.775662][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.785214][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.795174][ T5773] Bluetooth: hci3: command tx timeout [ 70.802147][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.811837][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.870352][ T5777] Bluetooth: hci1: command tx timeout [ 70.875894][ T5771] Bluetooth: hci2: command tx timeout [ 70.881764][ T5773] Bluetooth: hci0: command tx timeout [ 70.885695][ T5765] veth0_vlan: entered promiscuous mode [ 70.924372][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.935675][ T5765] veth1_vlan: entered promiscuous mode [ 70.956690][ T5767] veth0_vlan: entered promiscuous mode [ 71.003943][ T5767] veth1_vlan: entered promiscuous mode [ 71.042737][ T5765] veth0_macvtap: entered promiscuous mode [ 71.062390][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.066383][ T5765] veth1_macvtap: entered promiscuous mode [ 71.076928][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.139500][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.153562][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.166935][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.208465][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.224773][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.239103][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.248927][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.252255][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.262764][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.266053][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.282822][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.291888][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.303369][ T5766] veth0_vlan: entered promiscuous mode [ 71.324898][ T5767] veth0_macvtap: entered promiscuous mode [ 71.354498][ T5767] veth1_macvtap: entered promiscuous mode [ 71.377067][ T5766] veth1_vlan: entered promiscuous mode [ 71.398564][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.413121][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.423480][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.439283][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.462028][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.536909][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.558354][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.562472][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.623763][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.635871][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.646648][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.672185][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.681158][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.687887][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.727509][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.738262][ T5766] veth0_macvtap: entered promiscuous mode [ 71.748021][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.752914][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.765780][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.781569][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.790599][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.813096][ T5766] veth1_macvtap: entered promiscuous mode [ 71.921469][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.944830][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.955229][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.966755][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.978426][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.996345][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.013437][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.046498][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.070782][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.091218][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.120781][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.130961][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.156644][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.256403][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.343594][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.383339][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.410866][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.439523][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.511381][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.519248][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.610351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.666791][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.694337][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.767810][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.794274][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.874360][ T5771] Bluetooth: hci3: command tx timeout [ 72.881573][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.919697][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.949785][ T5771] Bluetooth: hci2: command tx timeout [ 72.950145][ T5773] Bluetooth: hci0: command tx timeout [ 72.955265][ T5777] Bluetooth: hci1: command tx timeout [ 73.332807][ T5862] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.866170][ T5876] ip6gretap1: entered promiscuous mode [ 74.193936][ T5886] netlink: 'syz.1.20': attribute type 1 has an invalid length. [ 74.283660][ T5886] team0: Port device veth3 added [ 74.573033][ T5807] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.779823][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 74.794919][ T5807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.810874][ T5807] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.828653][ T5807] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.842373][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.850976][ T5807] usb 4-1: Product: syz [ 74.855335][ T5807] usb 4-1: Manufacturer: syz [ 74.860484][ T5807] usb 4-1: SerialNumber: syz [ 74.949892][ T5771] Bluetooth: hci3: command tx timeout [ 75.029937][ T5777] Bluetooth: hci2: command tx timeout [ 75.035970][ T5771] Bluetooth: hci0: command tx timeout [ 75.039813][ T5773] Bluetooth: hci1: command tx timeout [ 75.125960][ T5807] usb 4-1: 0:2 : does not exist [ 75.145340][ T5807] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 75.194009][ T5807] usb 4-1: USB disconnect, device number 2 [ 75.299528][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.571440][ T5911] tipc: Failed to remove unknown binding: 66,1,1/0:3171554814/3171554816 [ 75.583463][ T5911] tipc: Failed to remove unknown binding: 66,1,1/0:3171554814/3171554816 [ 75.595219][ T5911] tipc: Failed to remove unknown binding: 66,1,1/0:3171554814/3171554816 [ 75.803277][ T5915] process 'syz.0.32' launched './file1' with NULL argv: empty string added [ 75.819532][ T28] audit: type=1326 audit(1773079363.541:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20259c799 code=0x7ffc0000 [ 75.878565][ T28] audit: type=1326 audit(1773079363.541:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20259c799 code=0x7ffc0000 [ 75.902114][ T28] audit: type=1326 audit(1773079363.541:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb20259c799 code=0x7ffc0000 [ 75.945396][ T28] audit: type=1326 audit(1773079363.541:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20259c799 code=0x7ffc0000 [ 75.989772][ T28] audit: type=1326 audit(1773079363.541:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20259c799 code=0x7ffc0000 [ 76.014267][ T28] audit: type=1326 audit(1773079363.541:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb20259c799 code=0x7ffc0000 [ 76.040437][ T28] audit: type=1326 audit(1773079363.571:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20259c799 code=0x7ffc0000 [ 76.105050][ T28] audit: type=1326 audit(1773079363.571:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb20255cfce code=0x7ffc0000 [ 76.147582][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.35'. [ 76.158077][ T28] audit: type=1326 audit(1773079363.571:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20259c799 code=0x7ffc0000 [ 76.184967][ T28] audit: type=1326 audit(1773079363.571:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20259c799 code=0x7ffc0000 [ 76.213295][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 76.745821][ T5942] syz.1.40[5942]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 76.862747][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.919925][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.017485][ T5945] netlink: 'syz.0.41': attribute type 16 has an invalid length. [ 77.027212][ T5945] netlink: 'syz.0.41': attribute type 17 has an invalid length. [ 77.172104][ T5945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.406755][ T5957] capability: warning: `syz.0.46' uses 32-bit capabilities (legacy support in use) [ 77.623360][ T5962] netlink: 156 bytes leftover after parsing attributes in process `syz.0.48'. [ 77.654067][ T5962] netlink: 156 bytes leftover after parsing attributes in process `syz.0.48'. [ 77.667159][ T5965] overlayfs: failed to clone upperpath [ 77.715519][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'. [ 77.840785][ T5966] kvm: pic: non byte read [ 77.866825][ T5966] kvm: pic: single mode not supported [ 77.867000][ T5966] kvm: pic: non byte read [ 77.882933][ T5966] kvm: pic: non byte read [ 77.893363][ T5966] kvm: pic: non byte read [ 77.900767][ T5966] kvm: pic: non byte read [ 77.925005][ T5966] kvm: pic: single mode not supported [ 77.925205][ T5966] kvm: pic: level sensitive irq not supported [ 77.935546][ T5966] kvm: pic: non byte read [ 77.952703][ T5966] kvm: pic: level sensitive irq not supported [ 77.952775][ T5966] kvm: pic: non byte read [ 77.968054][ T5966] kvm: pic: single mode not supported [ 77.968117][ T5966] kvm: pic: non byte read [ 78.004723][ T5966] kvm: pic: non byte read [ 78.193550][ T5979] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 78.287725][ T5983] loop0: detected capacity change from 0 to 512 [ 78.323615][ T5983] ext3: Unknown parameter 'context' [ 78.365026][ T5905] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.650186][ T5768] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.662138][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.61'. [ 78.846251][ T5768] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.857568][ T5768] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 78.869776][ T5768] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 233, changing to 11 [ 78.881390][ T5768] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 33751, setting to 1024 [ 78.896153][ T5768] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.905689][ T5768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.913943][ T5768] usb 1-1: Product: syz [ 78.918176][ T5768] usb 1-1: Manufacturer: syz [ 78.923048][ T5768] usb 1-1: SerialNumber: syz [ 78.938722][ T5768] cdc_mbim 1-1:1.0: skipping garbage [ 78.970181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.029735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.038353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.041894][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 79.047408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 79.156927][ T5983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.284781][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 79.303703][ T9] usb 4-1: config 0 has no interface number 0 [ 79.319402][ T9] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 79.330769][ T9] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 79.369724][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 79.379092][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.405928][ T9] usb 4-1: Product: syz [ 79.420964][ T9] usb 4-1: Manufacturer: syz [ 79.425627][ T9] usb 4-1: SerialNumber: syz [ 79.455509][ T9] usb 4-1: config 0 descriptor?? [ 79.469097][ T5993] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 79.476895][ T5993] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 79.488350][ T9] smsc95xx v2.0.0 [ 79.508170][ T6004] overlayfs: failed to clone upperpath [ 79.722634][ T5993] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 79.765215][ T5993] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 79.788939][ T5983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.998486][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 80.011757][ T5768] cdc_mbim 1-1:1.0: bind() failure [ 80.015487][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 80.038198][ T5768] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 80.057283][ T5768] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 80.078245][ T5768] usbtest: probe of 1-1:1.1 failed with error -71 [ 80.115787][ T5768] usb 1-1: USB disconnect, device number 2 [ 80.383851][ T6029] overlayfs: failed to clone upperpath [ 80.574624][ T6030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.471421][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 81.500378][ T9] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 81.528696][ T9] usb 4-1: USB disconnect, device number 3 [ 81.592282][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 81.813242][ T6052] Zero length message leads to an empty skb [ 81.931340][ T23] cfg80211: failed to load regulatory.db [ 81.939531][ T6054] Illegal XDP return value 4294967294 on prog (id 8) dev syz_tun, expect packet loss! [ 82.240347][ T6070] io-wq is not configured for unbound workers [ 83.069417][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.93'. [ 83.107910][ T6083] overlayfs: failed to clone upperpath [ 83.283211][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 83.283224][ T28] audit: type=1800 audit(1773079371.001:29): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.95" name="bus" dev="overlay" ino=105 res=0 errno=0 [ 83.367669][ T6089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.478395][ T6092] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 83.815002][ T1071] bond0: (slave bond_slave_0): interface is now down [ 83.839068][ T1071] bond0: (slave bond_slave_1): interface is now down [ 84.303536][ T6112] sctp: [Deprecated]: syz.1.105 (pid 6112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.303536][ T6112] Use struct sctp_sack_info instead [ 84.609507][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 84.679263][ T6124] xt_socket: unknown flags 0x4c [ 85.622634][ T6139] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 85.651653][ T6139] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 85.667620][ T6139] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 86.867367][ T1071] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.978082][ T1071] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.172038][ T1071] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.325106][ T1071] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.459119][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 87.800339][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.812664][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.824738][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.839062][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.846866][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.854865][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.151028][ T28] audit: type=1326 audit(1773079375.871:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482ad9c799 code=0x7fc00000 [ 88.220265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.253690][ T28] audit: type=1326 audit(1773079375.891:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f482ad9c799 code=0x7fc00000 [ 88.448555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.650281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.659724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 88.691119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.919841][ T5777] Bluetooth: hci3: command tx timeout [ 90.402886][ T6185] chnl_net:caif_netlink_parms(): no params data found [ 90.475417][ T6231] overlayfs: failed to clone upperpath [ 90.647131][ T6238] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.699724][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.771113][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.778477][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.786241][ T6185] bridge_slave_0: entered allmulticast mode [ 90.794474][ T6185] bridge_slave_0: entered promiscuous mode [ 90.859239][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.860125][ T6246] tmpfs: Bad value for 'mpol' [ 90.872114][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.879520][ T6185] bridge_slave_1: entered allmulticast mode [ 90.897171][ T6185] bridge_slave_1: entered promiscuous mode [ 90.899336][ T6246] mmap: syz.1.147 (6246): VmData 175874048 exceed data ulimit 1129. Update limits or use boot option ignore_rlimit_data. [ 90.936049][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.969398][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.991666][ T6185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.006839][ T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 91.022698][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.049511][ T8] usb 1-1: SerialNumber: syz [ 91.062689][ T6185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.149054][ T1071] hsr_slave_0: left promiscuous mode [ 91.158576][ T1071] hsr_slave_1: left promiscuous mode [ 91.172691][ T1071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.196340][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.226178][ T1071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.262919][ T1071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.292049][ T1071] bridge_slave_1: left allmulticast mode [ 91.297769][ T1071] bridge_slave_1: left promiscuous mode [ 91.314726][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.323870][ T8] usb 1-1: 0:2 : does not exist [ 91.345318][ T1071] bridge_slave_0: left allmulticast mode [ 91.358024][ T1071] bridge_slave_0: left promiscuous mode [ 91.366243][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.386298][ T8] usb 1-1: USB disconnect, device number 3 [ 91.423334][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.440812][ T1071] veth1_macvtap: left promiscuous mode [ 91.454719][ T1071] veth0_macvtap: left promiscuous mode [ 91.465794][ T1071] veth1_vlan: left promiscuous mode [ 91.475019][ T1071] veth0_vlan: left promiscuous mode [ 92.002884][ T5777] Bluetooth: hci3: command tx timeout [ 92.093578][ T1071] team0 (unregistering): Port device team_slave_1 removed [ 92.137701][ T1071] team0 (unregistering): Port device team_slave_0 removed [ 92.183266][ T1071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.224235][ T1071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.547866][ T1071] bond0 (unregistering): Released all slaves [ 92.695040][ T6185] team0: Port device team_slave_0 added [ 92.732738][ T6185] team0: Port device team_slave_1 added [ 92.859775][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.866788][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.937218][ T6185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.957198][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.970285][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.019696][ T28] audit: type=1804 audit(1773079380.721:32): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.154" name="file1" dev="ramfs" ino=9689 res=1 errno=0 [ 93.140627][ T6185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.361851][ T6271] loop0: detected capacity change from 0 to 40427 [ 93.400100][ T6271] F2FS-fs (loop0): invalid crc value [ 93.428097][ T6271] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.468079][ T6185] hsr_slave_0: entered promiscuous mode [ 93.484291][ T6271] F2FS-fs (loop0): Start checkpoint disabled! [ 93.514058][ T6185] hsr_slave_1: entered promiscuous mode [ 93.526674][ T6271] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 93.534543][ T6185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.550703][ T6185] Cannot create hsr debugfs directory [ 93.718521][ T28] audit: type=1800 audit(1773079381.431:33): pid=6280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.155" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 93.845621][ T6280] syz.0.155: attempt to access beyond end of device [ 93.845621][ T6280] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 93.865139][ T6280] syz.0.155: attempt to access beyond end of device [ 93.865139][ T6280] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.882719][ T6280] syz.0.155: attempt to access beyond end of device [ 93.882719][ T6280] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.900194][ T6280] syz.0.155: attempt to access beyond end of device [ 93.900194][ T6280] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.915877][ T6280] syz.0.155: attempt to access beyond end of device [ 93.915877][ T6280] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.937027][ T6280] syz.0.155: attempt to access beyond end of device [ 93.937027][ T6280] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 93.953692][ T6280] syz.0.155: attempt to access beyond end of device [ 93.953692][ T6280] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.969443][ T6280] syz.0.155: attempt to access beyond end of device [ 93.969443][ T6280] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 93.985354][ T6280] syz.0.155: attempt to access beyond end of device [ 93.985354][ T6280] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 94.000953][ T6280] syz.0.155: attempt to access beyond end of device [ 94.000953][ T6280] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 94.313181][ T5777] Bluetooth: hci3: command tx timeout [ 94.988148][ T3545] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 95.029696][ T3545] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 95.264207][ T6185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.294982][ T6185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.327204][ T6185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.367121][ T6185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.698047][ T6185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.767352][ T6185] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.823346][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.830636][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.888649][ T6310] netlink: 'syz.0.157': attribute type 4 has an invalid length. [ 95.959107][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.966989][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.028279][ T6312] netlink: 'syz.0.157': attribute type 4 has an invalid length. [ 96.390027][ T5777] Bluetooth: hci3: command tx timeout [ 96.738805][ T6185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.950699][ T6343] netlink: 44 bytes leftover after parsing attributes in process `syz.1.165'. [ 96.955094][ T6340] ======================================================= [ 96.955094][ T6340] WARNING: The mand mount option has been deprecated and [ 96.955094][ T6340] and is ignored by this kernel. Remove the mand [ 96.955094][ T6340] option from the mount to silence this warning. [ 96.955094][ T6340] ======================================================= [ 96.994988][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.085534][ T6342] overlayfs: statfs failed on './file0' [ 97.253831][ T6351] overlayfs: failed to clone upperpath [ 97.481904][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.169'. [ 97.511007][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.169'. [ 97.556137][ T6363] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 97.612175][ T6363] gretap0: entered promiscuous mode [ 97.643509][ T6363] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 97.783884][ T6371] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 97.800801][ T6185] veth0_vlan: entered promiscuous mode [ 97.854177][ T6185] veth1_vlan: entered promiscuous mode [ 97.938594][ T6185] veth0_macvtap: entered promiscuous mode [ 97.978863][ T6380] loop0: detected capacity change from 0 to 128 [ 97.982088][ T6185] veth1_macvtap: entered promiscuous mode [ 98.046223][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.083297][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.107156][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.140360][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.168735][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.204171][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.241188][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.270402][ T6380] loop0: detected capacity change from 128 to 0 [ 98.288912][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.331089][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.335733][ T6385] FAT-fs (loop0): FAT read failed (blocknr 1) [ 98.358858][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.393764][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.413738][ T6385] FAT-fs (loop0): FAT read failed (blocknr 1) [ 98.419782][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.441160][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.449704][ T6385] FAT-fs (loop0): unable to read inode block for updating (i_pos 96) [ 98.477631][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.519795][ T6385] FAT-fs (loop0): FAT read failed (blocknr 1) [ 98.527718][ T6185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.547010][ T6385] FAT-fs (loop0): unable to read inode block for updating (i_pos 96) [ 98.560330][ T6185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.584440][ T6185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.609985][ T6185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.701160][ T6391] mmap: syz.2.177 (6391) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.846226][ T5765] FAT-fs (loop0): unable to read boot sector to mark fs as dirty [ 98.918221][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.941235][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.965090][ T6399] netlink: 32 bytes leftover after parsing attributes in process `syz.0.179'. [ 99.125672][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.135534][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.159065][ T6402] Dead loop on virtual device ip6_vti0, fix it urgently! [ 101.671704][ T6427] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.709502][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 101.733303][ T6427] bridge_slave_1: left allmulticast mode [ 101.769243][ T6427] bridge_slave_1: left promiscuous mode [ 101.782980][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.880730][ T6427] bridge_slave_0: left allmulticast mode [ 101.900226][ T6427] bridge_slave_0: left promiscuous mode [ 101.906138][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.000360][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 102.077829][ T6431] pimreg: entered allmulticast mode [ 102.088548][ T6434] pimreg: left allmulticast mode [ 102.420273][ T6445] kernel profiling enabled (shift: 63) [ 102.426198][ T6445] profiling shift: 63 too large [ 102.591885][ T6451] overlayfs: failed to clone upperpath [ 103.649566][ C0] sched: RT throttling activated [ 104.206302][ T6474] loop2: detected capacity change from 0 to 512 [ 104.663522][ T5905] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.185793][ T6493] tipc: Started in network mode [ 105.222034][ T6493] tipc: Node identity ac14140f, cluster identity 4711 [ 105.265437][ T6493] tipc: Enabled bearer , priority 10 [ 105.949809][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.173223][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 106.187627][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 106.205506][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.225870][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.248444][ T8] usb 3-1: Product: syz [ 106.255040][ T8] usb 3-1: Manufacturer: syz [ 106.271012][ T8] usb 3-1: SerialNumber: syz [ 106.287107][ T8] usb 3-1: config 0 descriptor?? [ 106.299891][ T8] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 106.314922][ T8] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 106.392562][ T5805] tipc: Node number set to 2886997007 [ 106.918490][ T8] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 107.384987][ T8] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 107.444834][ T8] em28xx 3-1:0.0: board has no eeprom [ 107.539635][ T8] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 107.585034][ T8] em28xx 3-1:0.0: dvb set to bulk mode. [ 107.600222][ T5805] em28xx 3-1:0.0: Binding DVB extension [ 107.714572][ T8] usb 3-1: USB disconnect, device number 2 [ 107.833880][ T8] em28xx 3-1:0.0: Disconnecting em28xx [ 107.863229][ T5805] em28xx 3-1:0.0: Registering input extension [ 107.900423][ T8] em28xx 3-1:0.0: Closing input extension [ 107.967933][ T6580] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 108.016418][ T8] em28xx 3-1:0.0: Freeing device [ 109.662447][ T28] audit: type=1326 audit(1773079397.381:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.0.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482ad9c799 code=0x7fc00000 [ 112.373551][ T6671] binder: 6669:6671 ioctl c0306201 2000000003c0 returned -14 [ 112.387483][ T6672] netlink: 72 bytes leftover after parsing attributes in process `syz.2.251'. [ 112.766512][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.257'. [ 112.936960][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.256'. [ 113.685342][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 113.729870][ T6720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.891041][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.035621][ T6771] loop2: detected capacity change from 0 to 512 [ 117.070246][ T6771] EXT4-fs: quotafile must be on filesystem root [ 117.630405][ T6788] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 118.046577][ T6790] batadv_slave_0: entered promiscuous mode [ 118.121495][ T6789] batadv_slave_0: left promiscuous mode [ 119.967063][ T6857] syz.1.299 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 121.725309][ T6875] syz.2.301 (6875): drop_caches: 2 [ 122.065378][ T6891] kvm: pic: non byte read [ 122.100210][ T6891] kvm: pic: non byte read [ 122.110241][ T6891] kvm: pic: non byte read [ 122.114841][ T6891] kvm: pic: non byte read [ 122.144920][ T6891] kvm: pic: non byte read [ 122.151260][ T6891] kvm: pic: non byte read [ 122.156002][ T6891] kvm: pic: non byte read [ 122.166060][ T6891] kvm: pic: non byte read [ 122.171000][ T6891] kvm: pic: non byte read [ 122.175591][ T6891] kvm: pic: non byte read [ 122.349729][ T5768] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 122.561540][ T5768] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 122.596474][ T5768] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.629863][ T5768] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.659638][ T5768] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 122.724150][ T5768] usb 1-1: config 0 interface 0 has no altsetting 0 [ 122.738875][ T5768] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 122.764569][ T5768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.805969][ T5768] usb 1-1: config 0 descriptor?? [ 123.278941][ T5768] hid-alps 0003:044E:120C.0001: unbalanced delimiter at end of report description [ 123.337252][ T5768] hid-alps 0003:044E:120C.0001: parse failed [ 123.353874][ T5768] hid-alps: probe of 0003:044E:120C.0001 failed with error -22 [ 123.573035][ T5804] usb 1-1: USB disconnect, device number 4 [ 124.590681][ T6976] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 126.317725][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.333'. [ 126.514592][ T7030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.526448][ T7038] random: crng reseeded on system resumption [ 126.983505][ T7036] macvlan2: entered promiscuous mode [ 127.001280][ T7036] veth0_to_bond: entered promiscuous mode [ 127.061469][ T7036] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 127.852843][ T5804] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.997405][ T7072] kvm: pic: single mode not supported [ 127.997435][ T7072] kvm: pic: level sensitive irq not supported [ 128.005442][ T7072] kvm: pic: level sensitive irq not supported [ 128.049632][ T5804] usb 3-1: Using ep0 maxpacket: 16 [ 128.072177][ T5804] usb 3-1: config 0 has no interfaces? [ 128.078114][ T5804] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.106270][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.126187][ T5804] usb 3-1: config 0 descriptor?? [ 128.152295][ T5777] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 128.162178][ T5777] Bluetooth: hci3: Injecting HCI hardware error event [ 128.173901][ T5777] Bluetooth: hci3: hardware error 0x00 [ 128.371171][ T7087] overlayfs: failed to clone upperpath [ 128.402020][ T8] usb 3-1: USB disconnect, device number 3 [ 128.802251][ T7096] loop4: detected capacity change from 0 to 512 [ 128.812258][ T7096] EXT4-fs: Ignoring removed bh option [ 128.863982][ T7096] EXT4-fs (loop4): orphan cleanup on readonly fs [ 128.877216][ T7096] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #11: block 1: comm syz.4.357: lblock 0 mapped to illegal pblock 1 (length 1) [ 128.901455][ T7096] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 128.915203][ T7096] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.357: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 128.940529][ T7096] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.357: ea_inode dec ref err=-117 [ 128.964383][ T7096] EXT4-fs (loop4): 1 orphan inode deleted [ 129.000876][ T7096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 129.486790][ T6185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.140549][ T7119] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.259680][ T5777] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 131.302916][ T28] audit: type=1800 audit(1773079419.021:35): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.369" name="bus" dev="overlay" ino=275 res=0 errno=0 [ 131.359823][ T5768] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.551124][ T5768] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.565512][ T5768] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.612027][ T5768] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 131.625960][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.655330][ T5768] usb 3-1: SerialNumber: syz [ 131.902720][ T5768] usb 3-1: 0:2 : does not exist [ 131.956366][ T5768] usb 3-1: USB disconnect, device number 4 [ 132.060283][ T7125] syz.0.367 (7125): drop_caches: 2 [ 132.423991][ T7144] tipc: Started in network mode [ 132.428967][ T7144] tipc: Node identity ac1414aa, cluster identity 4711 [ 132.438415][ T7144] tipc: Enabled bearer , priority 10 [ 132.474102][ T7144] tipc: Enabled bearer , priority 0 [ 133.113708][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.120170][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.175504][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.383'. [ 133.266458][ T7177] netlink: 36 bytes leftover after parsing attributes in process `syz.1.385'. [ 133.549764][ T5804] tipc: Node number set to 2886997162 [ 134.579853][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.402'. [ 134.628442][ T7229] binder_alloc: 7228: binder_alloc_buf size 16384 failed, no address space [ 134.659863][ T7229] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 135.031191][ T7238] block device autoloading is deprecated and will be removed. [ 135.266685][ T7248] netlink: 'syz.1.410': attribute type 11 has an invalid length. [ 136.234990][ T7277] loop0: detected capacity change from 0 to 512 [ 136.272383][ T7277] FAT-fs (loop0): Directory bread(block 199916) failed [ 136.280616][ T7277] FAT-fs (loop0): Directory bread(block 199917) failed [ 136.287934][ T7277] FAT-fs (loop0): Directory bread(block 199918) failed [ 136.295081][ T7277] FAT-fs (loop0): Directory bread(block 199919) failed [ 136.303487][ T7277] FAT-fs (loop0): Directory bread(block 199920) failed [ 136.303617][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.419'. [ 136.312438][ T7277] FAT-fs (loop0): Directory bread(block 199921) failed [ 136.312634][ T7277] FAT-fs (loop0): Directory bread(block 199922) failed [ 136.312655][ T7277] FAT-fs (loop0): Directory bread(block 199923) failed [ 136.484079][ T7277] ptrace attach of "./syz-executor exec"[7282] was attempted by "./syz-executor exec"[7277] [ 136.573726][ T7277] FAT-fs (loop0): FAT read failed (blocknr 128) [ 136.763650][ T7290] Invalid argument reading file caps for ./file0 [ 136.933250][ T7294] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (1420284373 ns) > initial count (164304968 ns). Using initial count to start timer. [ 138.198489][ T28] audit: type=1800 audit(1773079425.911:36): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.438" name="bus" dev="overlay" ino=589 res=0 errno=0 [ 138.560050][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 138.756750][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.767531][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.785770][ T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.804453][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.823908][ T8] usb 5-1: SerialNumber: syz [ 139.065234][ T8] usb 5-1: 0:2 : does not exist [ 139.103111][ T8] usb 5-1: USB disconnect, device number 2 [ 139.152713][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.301476][ T7342] syz.2.441 (7342) used greatest stack depth: 19208 bytes left [ 140.425137][ T7361] loop0: detected capacity change from 0 to 256 [ 140.431817][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.445'. [ 142.404556][ T7391] loop2: detected capacity change from 0 to 256 [ 142.586308][ T7393] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 142.754385][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 143.536851][ T7402] syz.4.457 (7402): drop_caches: 2 [ 250.479542][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 250.486555][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1071/1:b..l [ 250.495078][ C0] rcu: (detected by 0, t=10502 jiffies, g=20061, q=169442 ncpus=2) [ 250.503098][ C0] task:kworker/u4:5 state:R running task stack:22672 pid:1071 ppid:2 flags:0x00004000 [ 250.515533][ C0] Workqueue: bat_events batadv_nc_worker [ 250.521248][ C0] Call Trace: [ 250.524556][ C0] [ 250.527600][ C0] __schedule+0x1553/0x45a0 [ 250.532246][ C0] ? register_lock_class+0xc4/0x8a0 [ 250.537490][ C0] ? mark_lock+0x91/0x320 [ 250.541862][ C0] ? asan.module_dtor+0x20/0x20 [ 250.546746][ C0] ? mark_lock+0x94/0x320 [ 250.551124][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 250.557147][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 250.562567][ C0] preempt_schedule_irq+0xbf/0x150 [ 250.567712][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 250.573474][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 250.579320][ C0] irqentry_exit+0x67/0x70 [ 250.583856][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.589866][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 250.595275][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 250.614914][ C0] RSP: 0018:ffffc900045ffa40 EFLAGS: 00000206 [ 250.621021][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: b8c79e86ac373900 [ 250.629024][ C0] RDX: 0000000000000000 RSI: ffffffff8acadae0 RDI: ffffffff8b1c85a0 [ 250.637023][ C0] RBP: ffffc900045ffb48 R08: dffffc0000000000 R09: 1ffffffff22382a0 [ 250.645023][ C0] R10: dffffc0000000000 R11: fffffbfff22382a1 R12: 1ffff920008bff54 [ 250.653025][ C0] R13: ffffffff8d132060 R14: 0000000000000246 R15: dffffc0000000000 [ 250.661053][ C0] ? batadv_nc_worker+0xd2/0x610 [ 250.666126][ C0] ? read_lock_is_recursive+0x20/0x20 [ 250.671533][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 250.677552][ C0] ? batadv_nc_worker+0xd2/0x610 [ 250.682971][ C0] batadv_nc_worker+0xef/0x610 [ 250.687776][ C0] ? batadv_nc_worker+0xd2/0x610 [ 250.692940][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 250.698787][ C0] process_scheduled_works+0xa5d/0x15d0 [ 250.704398][ C0] ? worker_attach_to_pool+0x380/0x380 [ 250.709900][ C0] ? assign_work+0x3d2/0x5d0 [ 250.714533][ C0] worker_thread+0xa55/0xfc0 [ 250.719185][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 250.725113][ C0] ? _raw_spin_unlock+0x40/0x40 [ 250.730004][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 250.735950][ C0] kthread+0x2fa/0x390 [ 250.740050][ C0] ? pr_cont_work+0x560/0x560 [ 250.744762][ C0] ? kthread_blkcg+0xd0/0xd0 [ 250.749381][ C0] ret_from_fork+0x48/0x80 [ 250.753839][ C0] ? kthread_blkcg+0xd0/0xd0 [ 250.758474][ C0] ret_from_fork_asm+0x11/0x20 [ 250.763298][ C0] [ 250.766374][ C0] rcu: rcu_preempt kthread starved for 10528 jiffies! g20061 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 250.777596][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 250.787589][ C0] rcu: RCU grace-period kthread stack dump: [ 250.793606][ C0] task:rcu_preempt state:R running task stack:27080 pid:17 ppid:2 flags:0x00004000 [ 250.804513][ C0] Call Trace: [ 250.807815][ C0] [ 250.810773][ C0] __schedule+0x1553/0x45a0 [ 250.815339][ C0] ? _raw_spin_unlock_irqrestore+0x31/0x120 [ 250.821280][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 250.827207][ C0] ? asan.module_dtor+0x20/0x20 [ 250.832093][ C0] ? enqueue_timer+0x23d/0x550 [ 250.836886][ C0] ? __mod_timer+0x984/0xdb0 [ 250.841520][ C0] schedule+0xbd/0x170 [ 250.845626][ C0] schedule_timeout+0x188/0x2d0 [ 250.850507][ C0] ? console_conditional_schedule+0x40/0x40 [ 250.856435][ C0] ? update_process_times+0x1b0/0x1b0 [ 250.861845][ C0] ? prepare_to_swait_event+0x339/0x360 [ 250.867427][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 250.872311][ C0] ? rcu_gp_init+0x1162/0x1560 [ 250.877110][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 250.881997][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 250.888082][ C0] ? rcu_gp_init+0x1560/0x1560 [ 250.892894][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 250.897785][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.903108][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 250.908343][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 250.912966][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 250.918117][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 250.923092][ C0] ? __kthread_parkme+0x162/0x1c0 [ 250.928240][ C0] kthread+0x2fa/0x390 [ 250.932772][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 250.937914][ C0] ? kthread_blkcg+0xd0/0xd0 [ 250.942535][ C0] ret_from_fork+0x48/0x80 [ 250.946991][ C0] ? kthread_blkcg+0xd0/0xd0 [ 250.951620][ C0] ret_from_fork_asm+0x11/0x20 [ 250.956438][ C0] [ 250.959483][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 250.965855][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 250.972908][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.982992][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 250.988657][ C0] Code: 40 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 29 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 251.008296][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 251.014400][ C0] RAX: 8d7900b567b99f00 RBX: ffffffff8162ac40 RCX: 8d7900b567b99f00 [ 251.022400][ C0] RDX: 0000000000000001 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 251.030398][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 251.038424][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19d2688 [ 251.046428][ C0] R13: 1ffffffff19c0fbc R14: 0000000000000000 R15: dffffc0000000000 [ 251.054425][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 251.063396][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.070005][ C0] CR2: 000000110c2817b2 CR3: 0000000057e51000 CR4: 00000000003506f0 [ 251.078018][ C0] Call Trace: [ 251.081320][ C0] [ 251.084266][ C0] default_idle+0x13/0x20 [ 251.088627][ C0] default_idle_call+0x6c/0xa0 [ 251.093423][ C0] do_idle+0x1f0/0x4e0 [ 251.097540][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 251.102784][ C0] ? do_idle+0x4bf/0x4e0 [ 251.107081][ C0] cpu_startup_entry+0x43/0x60 [ 251.111882][ C0] rest_init+0x2e2/0x300 [ 251.116158][ C0] ? time_init+0x40/0x40 [ 251.120435][ C0] arch_call_rest_init+0xe/0x10 [ 251.125325][ C0] start_kernel+0x459/0x4e0 [ 251.129870][ C0] x86_64_start_reservations+0x2a/0x30 [ 251.135409][ C0] x86_64_start_kernel+0x60/0x60 [ 251.140383][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 251.146498][ C0]