last executing test programs: 5m19.707886796s ago: executing program 3 (id=125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r0, &(0x7f0000000500)}, 0x20) r1 = syz_io_uring_setup(0x690b, &(0x7f00000006c0)={0x0, 0xa418, 0x10100, 0x3, 0x251}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) r4 = syz_io_uring_setup(0x1866, &(0x7f0000000140), &(0x7f0000000500)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r1, @ANYRES32=r3, @ANYRESDEC=r6, @ANYRES16=r4, @ANYRESOCT=r2, @ANYRESHEX=r6, @ANYRESHEX=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000e84000/0x4000)=nil, 0x4000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(0xffffffffffffffff, 0x0, 0x10) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 5m10.483501044s ago: executing program 3 (id=147): r0 = userfaultfd(0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x60240, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000200)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000180)={0x30}, 0x30) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpgid(r2) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) 5m4.820828651s ago: executing program 3 (id=155): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "979d40", 0x20, 0x6, 0x1, @loopback, @private1, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x1, 0x8, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x101, 0x0, 0x1, 0x4e20, 0x4e22}, 0x4, 0x1}}}}}}}}, 0x0) 5m2.79355559s ago: executing program 3 (id=158): socket$inet6(0xa, 0x800000000000002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)="04ec1a", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r4, 0x1) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 5m0.949790047s ago: executing program 3 (id=164): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xafefa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_init_net_socket$ax25(0x3, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r4 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 4m59.293603076s ago: executing program 3 (id=174): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m43.267120273s ago: executing program 32 (id=174): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m32.877913916s ago: executing program 1 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xa) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x0) mq_open(&(0x7f0000000300)='r9\x16Y\x02\xa5\xebG\xe1\xdc$\xc0\x06\xb0\xe2\x1a~5\xf3\xafq\xb7\xc0Q r\xc1\xcf\xab\x83\xd6U\xea\xdf\x1e\xd9c\x82D\xc0\xa0\xc3\xe1J\x83\xaa\xf9\xac\xe1\xceL\xa6\x82@\x0f\xb7\xb7\x9b5\xb5*\x11!}\xf9\x97\xd5\xf8\x16\x81\xa8\x9f\xa3\x7f\xac\x8b0\x821\xa9\xb9\xa3\xd5\x9a\xae\x8d\xc7Z4\x81G\x18\xd5\xac0\xcd\fG!\xae\x01\xb3Ii7\x02\xaa%\xef;\xc1\x17\x19\xcb\xd2\x83\xc9\xd6\xc6B\xe5\xbe\x96Sw\x1a\bwX>\x8e\x97j\xe8\xac\x9f\xad9OW\xb0\x8cn\xc1\x90\x1cu\xf6\xe8\xe1\x936\a\x16n\xc0\xafX@\xc5\xebI\x94\xd2\xf9H\x8eh\xfe\xf5j\x85U\xd2\f\";\x9f\xad\xdf\x01\xae\x02\xf6<\xef\x1a4y\xc4\x8et\xc7\xb3\xfe\x9d\xdf\x1a\xe5\xa0\xf4\xdb\x1f\xf4\xab+\xa2c\x03Z\xcdE\x95F\xbc]\xfd\x10,8\x1f\xa9\x02\xac~te6?\xfd\xb1k7\xdb\xbc\xfd\xd1\xc1\x10\xb8\xf6\x11\xd6\x81@F4\xd8\xca\xe1\xa6\x87\x11\xa9\xff\xaf\xca\xd6\xc3\x8dJ\x1cQ\x03\xad\xbe\xcb\x9e@\x7f\xd3\nrV\xfa~\xd0\xb4S\x7f\xdbkS\x13,l\xea\x85IK\x14\xb1\xd2S^>:]Y\x16\xb5\xb8\x143\xbfN\xeesK\xf1\xcc\x00\xe6\xaeC\xd0\xbe\xcd\xcf\xfa\xae\x9b\a.\xa1b\xc7\x8e\xc4-\xf22Y\xdf\xc0H\xbe\x89\xc2\xc8\x05C\xb1\x91\xc0\xdf3F\xfee\xd0\xea\xf1\a\x15\x03\xd9\xa9E\x14\'w\x8f\xe4\xaf2\xe8|A\xb8\x96\x02\xf9\x06s8\x189\x17\x04X-\x8c{t\x16\x04\x8e\x85\xa0\xf7\xd3$\x89\xa9\xfe\xed\xd8\xea\xc2t\x16\xee\x04o\xc1T\xc2\x94N\x1d\xf6H\x03\xe5V\xe5\xe0.^\x9a\xe5\xb8\xc3\x15\xc9\xcc\xdc\x9d\x8e9~\xcd\x11\x19\'\xc20\xeb\xf8>\xb7\x9f\xbe&,\xb1\xe9N^]QQ\x81\xc8\xad\xcc>\xd6\xcc\xce\xb34\a[\xd5\xa8*R\xc0\xc9\xdfs\x04a\xea\x01\xa5\x1f\x90\x937\xc92\x7fo\x13\xf8C/\x9a*\xa3Lb\xd1\xd2m\x87) \xbaD\x05\xf0BcRL\xb2\xdb\x92\xcc\xf4@\x83\rGDca\x95\xd7\x88-IWcP\x8f\\p\xb6\x8a\xc6\x98\xed\xf7\xa7\x0215+\xaaK\"\xf4\x12\xc2o\xe1\xbbR\xd7\a{\xc7}1\xb2\xa9\xf9t\x96\xcck\f\xb8;\xe6\x945\xb8P', 0x800, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="3c443aa4484c28de383abef5c95b16127135eac93e8473", @ANYRES64=0x0], 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000140)={0x3, {0x9, 0x3, 0xf, 0x80000001}}) 3m31.338722861s ago: executing program 1 (id=338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r3, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 3m30.210053833s ago: executing program 1 (id=340): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3m29.55611041s ago: executing program 1 (id=342): socket$inet6(0xa, 0x6, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) readv(r0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x200800, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3m28.440085015s ago: executing program 1 (id=344): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 3m26.171760554s ago: executing program 1 (id=347): unshare(0x68040200) mmap(&(0x7f000070f000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r2, 0x400, 0x0, 0xffffffff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4004) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r2, 0x215, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(0x0, &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000003c0)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"}\x8e\b\x16\x8c\xa6\x01\x11\x97S\x99k\x1e\x03\x8e\xea\v}+\".\xda,\xfe\xb7\xbf\x01T\x99\xbdF\xd4\x925[\xd1\xeb\xdf\x98\xfa\xb0\x93\xc3>\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xedkQ (\xb9\xdc\x04\xdcb\xf5\x87\x04\x94\xfc o\x95t\x94\x94\x9f\x03\xde\x06\xfb\x12\xe5\x9dq\xcd\x18\n\x13\xac\x98\x13Iq\xa3\x82\xc0\\\xb00\xd0\x1c>\xcb\xa0\xcb\a\x82H\xa1\xf1\xb9\xe9\xe9\xea\xa8B\xc0\x9a\xads\xa1\xadM\xa3[H\xf6mpaRA\x95\xde\xa6\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb8, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x4, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x7fff]}}) landlock_create_ruleset(&(0x7f0000000040)={0x2000, 0x7, 0x1}, 0x18, 0x0) syz_open_dev$loop(0x0, 0x1, 0x8000) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000180)={'ah\x00'}, &(0x7f0000000380)=0x1e) 3m10.108999385s ago: executing program 33 (id=347): unshare(0x68040200) mmap(&(0x7f000070f000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r2, 0x400, 0x0, 0xffffffff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4004) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r2, 0x215, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(0x0, &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000003c0)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"}\x8e\b\x16\x8c\xa6\x01\x11\x97S\x99k\x1e\x03\x8e\xea\v}+\".\xda,\xfe\xb7\xbf\x01T\x99\xbdF\xd4\x925[\xd1\xeb\xdf\x98\xfa\xb0\x93\xc3>\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xedkQ (\xb9\xdc\x04\xdcb\xf5\x87\x04\x94\xfc o\x95t\x94\x94\x9f\x03\xde\x06\xfb\x12\xe5\x9dq\xcd\x18\n\x13\xac\x98\x13Iq\xa3\x82\xc0\\\xb00\xd0\x1c>\xcb\xa0\xcb\a\x82H\xa1\xf1\xb9\xe9\xe9\xea\xa8B\xc0\x9a\xads\xa1\xadM\xa3[H\xf6mpaRA\x95\xde\xa6\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb8, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x4, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x7fff]}}) landlock_create_ruleset(&(0x7f0000000040)={0x2000, 0x7, 0x1}, 0x18, 0x0) syz_open_dev$loop(0x0, 0x1, 0x8000) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000180)={'ah\x00'}, &(0x7f0000000380)=0x1e) 26.201314572s ago: executing program 6 (id=688): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x6, 0x66c, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 23.321511121s ago: executing program 6 (id=693): socket$inet6(0xa, 0x6, 0x0) r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) r4 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet_int(r4, 0x0, 0x32, 0x0, &(0x7f00000000c0)) readv(r0, 0x0, 0x0) 21.444112561s ago: executing program 4 (id=696): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.692100255s ago: executing program 4 (id=699): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = memfd_create(0x0, 0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, r3, 0x0) fcntl$addseals(r3, 0x409, 0xa) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000140)={0x3, {0x9, 0x3, 0xf, 0x80000001}}) 17.435120646s ago: executing program 4 (id=702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(r2, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write(r5, &(0x7f0000000100)="03e457583d5cfbd0240537597e74ff70ae7fb3e5363b83e82d42722224f33ebb0aa3d04e945d", 0x26) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000580)={0x4, 0x3}, 0x4) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 15.423555453s ago: executing program 4 (id=705): socket$inet6(0xa, 0x6, 0x0) r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) readv(r0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x200800, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 13.374510044s ago: executing program 4 (id=708): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3450, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x38ead82ad8168db1) syz_emit_ethernet(0x2a, 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024094, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/36, 0x24) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="0100000000000000044d56"]) 12.455370649s ago: executing program 5 (id=710): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@nombcache}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@stripe={'stripe', 0x3d, 0x7}}, {@discard}, {@data_ordered}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@max_batch_time}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvbH40aapJi6j1YBdEWtAmTdpKEQ/tVUqoP/DixdiktXbbhiaiqUJTqBdBvIgInjxYwT9Ci732pCB48OJJCkWlR8GV2cyk2exufmyTbOx8PrDNzHsz8950882befvebACFVU7/KUXsjYjpJGIwmV/M644ss7yw3b2/PzqdvpKoVl/7M4kkS8u3T7KfA9nOfRHx049J7OlqLHdm7sr5iUpl6nK2PjJ7YXpkZu7KwXMXJs5OnZ26OPbC2LGjR44eGz3U1nldbZJ28vq77w9+Mv7mN1/9k4x++9t4Esfj5WzDpecREb+U2iq1XjnKtf+TpDFr4NgGHH876Mp+T5a+xUl3ByvEuuTvX09EPBGD0RX337zB+PiVjlYO2FTVJKIKFFQi/qGg8uuA/N5+2X1wbMR9MLA93T2x0AHQGP/dC32D0VfrG9h5L4ml3TpJRLTXM1dvV0TcvjV+/cyt8evR2A8HbKL5axHxZLP4T2rxPxR9MVSL/1Jd/KfXBaeyn2n6q22Wv7yruDH+D7d5ZGA1C/Hft2L8R4v4f2tJ/L/dZvnl+4vv9NfFf3+7pwQAAAAAAACFdfNERDzf7PP/0uL4n2gy/mcgIo5vQPnlZeuNn/+X7mxAMUATd09EvNR0/G8pH/071JUtPVIbD9CTnDlXmToUEY9GxIHo2ZGuj65QxsFP93zZKq+cjf/LX2n5t7OxgFk97nTvqN9ncmJ24kHPG4i4ey3iqabjf5PF9j9p0v6nfw+m11jGnmdvnGqVt3r8A5ul+nXE/qbt//2nViQrP59jpHY9MJJfFTR6+sPPvm9Vfrvx7xET8ODS9n/nyvE/lCx9Xs/M+ss4PNddbZXX7vV/b/J67ZEzvVnaBxOzs5dHI3qTk11pal362PrrDA+jPB7yeEnj/8AzK/f/Nbv+74+I+WXHTv6qn1Oce/zfgd9b1cf1P3ROGv+T62r/178wdmPoh1blr639P1Jr6w9kKfr/YMEXeZj21qc3RuFiQNdlbXV9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBhUIqIXZGUhheXS6Xh4YiBiHgsdpYql2Zmnztz6b2Lk2le7fv/S/k3/Q4urCf59/8PLVkfW7Z+OCJ2R8TnXf219eHTlyqTnT55AAAAAAAAAAAAAAAAAAAA2CYGWsz/T/3R1enaAZuuu9MVADqmSfz/3Il6AFtP+w/FJf6huMQ/FJf4h+IS/1Bc4h+KS/xDcYl/AAAAAAB4qOzed/PXJCLmX+yvvVK9WV5PR2sGbLZSpysAdIxH/EBxGfoDxeUeH0hWye9rudNqe65k+vQD7AwAAAAAAAAAAAAAhbN/r/n/UFTm/0Nxmf8PxZXP/9/X4XoAW889PhCrzORvOv9/1b0AAAAAAAAAAAAAgI00M3fl/ESlMnV5Ixd2xBo3/m4zSm934Y3tUY2tXKhWq1fT34LtUp//+UI+FH6LS++OtW2cz/Vb25E79zcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo918AAAD//x99I+M=") syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x11, 0x10012, r0, 0x654b3000) 11.236385555s ago: executing program 4 (id=711): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, 0x0) acct(&(0x7f0000000140)='./file0\x00') 11.081779324s ago: executing program 6 (id=712): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = memfd_create(0x0, 0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, r3, 0x0) fcntl$addseals(r3, 0x409, 0xa) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="3c443aa4484c28de383abef5", @ANYRES64=0x0], 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000140)={0x3, {0x9, 0x3, 0xf, 0x80000001}}) 10.917724061s ago: executing program 0 (id=713): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) getpeername$l2tp(r0, 0x0, 0x0) 10.631803736s ago: executing program 0 (id=715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r3, 0x701, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x33}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 9.568044855s ago: executing program 6 (id=716): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r1, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x6, 0x66c, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 8.934099731s ago: executing program 0 (id=717): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close(0x4) 8.303878423s ago: executing program 5 (id=719): mkdir(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) 7.305003307s ago: executing program 0 (id=720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[], 0x10}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r7 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/38, 0x26}], 0x1, 0x80, 0x200) 7.155879478s ago: executing program 6 (id=722): socket$inet6(0xa, 0x6, 0x0) r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) r4 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet_int(r4, 0x0, 0x32, 0x0, &(0x7f00000000c0)) readv(r0, 0x0, 0x0) 6.008124188s ago: executing program 2 (id=723): socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 4.617608273s ago: executing program 2 (id=724): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0x1, 0x240, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40f41, 0x7a8f08989cc21170) 4.120476018s ago: executing program 2 (id=725): r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @loopback}, 0x10) getpeername$l2tp(r0, 0x0, 0x0) 3.681666343s ago: executing program 5 (id=726): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = memfd_create(0x0, 0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, r3, 0x0) fcntl$addseals(r3, 0x409, 0xa) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="3c443aa4484c28de383abef5", @ANYRES64=0x0], 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000140)={0x3, {0x9, 0x3, 0xf, 0x80000001}}) 3.568127645s ago: executing program 2 (id=727): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x88c40, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x4}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc048aeca, &(0x7f0000000200)) 2.457494509s ago: executing program 5 (id=728): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x0, &(0x7f00000000c0)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x8, 0x800) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.276601545s ago: executing program 6 (id=729): eventfd2(0x0, 0x801) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000540)=ANY=[]) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000800000000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) pipe(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_PARENT(r4, 0x541b, 0x1000000000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x0, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) pselect6(0x40, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x9, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)={0x8, 0x0, 0x3}, &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETVESABLANK(r8, 0x560e, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000fe1122c0c2a40000000000000000001811000075512f8e5fc41060f7378ede8de1a95e9f59604adbbbdd48f81585d354a860af9cb4b8ebd28b1365760e9d1ebc8709305e652a91bcf76651e6", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) 2.218689079s ago: executing program 2 (id=730): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) getdents64(r2, &(0x7f0000001f80)=""/4099, 0x1003) 1.733820136s ago: executing program 5 (id=731): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close(0x4) 1.732973609s ago: executing program 0 (id=732): socket$inet6(0xa, 0x6, 0x0) r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) readv(r0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x200800, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 125.564441ms ago: executing program 0 (id=733): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{0x0, 0x0, 0x10, 0x4009}, 'syz0\x00', 0x9}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000000000000000000000aa00"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x64, 0x23b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x1, "0062ba7d82000000000000000000f7fffeff00"}) syz_open_pts(r0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b81000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r9}, 0x10) 50.403319ms ago: executing program 5 (id=734): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = open(0x0, 0x64300, 0x1a) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000, 0xc291, 0xa44, 0x84, 0x9, 0x0, 0x0, 0x80, 0x5}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() prctl$PR_SET_THP_DISABLE(0x19, 0x10000000000001) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x12023) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 0s ago: executing program 2 (id=735): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c7347, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x3, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010c000000000000000009000000100004800c00078008cc83578d000000"], 0x24}}, 0x0) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x44, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x74e8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x44}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r9}, 0x18) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 81.541246][ T5820] cgroup: Unknown subsys name 'net' [ 81.679776][ T5820] cgroup: Unknown subsys name 'cpuset' [ 81.689467][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.479307][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.808365][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.826613][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.842463][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.850693][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.860339][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.869556][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.878845][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.887560][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.896218][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.904430][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.914340][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.915389][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.922507][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.929877][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.936866][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.950971][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.953795][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.961214][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.973347][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.982375][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.990410][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.000326][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.008317][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.015982][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.026662][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.034126][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.092114][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.102055][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.110588][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.117784][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.740916][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.863819][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 88.948126][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.092949][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 89.232295][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.251506][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.259192][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.267564][ T5831] bridge_slave_0: entered allmulticast mode [ 89.275197][ T5831] bridge_slave_0: entered promiscuous mode [ 89.289795][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.297261][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.305259][ T5838] bridge_slave_0: entered allmulticast mode [ 89.312749][ T5838] bridge_slave_0: entered promiscuous mode [ 89.333898][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.341406][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.349213][ T5831] bridge_slave_1: entered allmulticast mode [ 89.356822][ T5831] bridge_slave_1: entered promiscuous mode [ 89.370111][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.377401][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.384808][ T5838] bridge_slave_1: entered allmulticast mode [ 89.392177][ T5838] bridge_slave_1: entered promiscuous mode [ 89.522270][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.529624][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.537773][ T5834] bridge_slave_0: entered allmulticast mode [ 89.544795][ T5834] bridge_slave_0: entered promiscuous mode [ 89.591571][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.601926][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.609159][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.618034][ T5834] bridge_slave_1: entered allmulticast mode [ 89.625006][ T5834] bridge_slave_1: entered promiscuous mode [ 89.634875][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.665043][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.688700][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.696301][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.703517][ T5832] bridge_slave_0: entered allmulticast mode [ 89.711072][ T5832] bridge_slave_0: entered promiscuous mode [ 89.739371][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.787457][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.794759][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.802409][ T5832] bridge_slave_1: entered allmulticast mode [ 89.812177][ T5832] bridge_slave_1: entered promiscuous mode [ 89.893840][ T5831] team0: Port device team_slave_0 added [ 89.917032][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.930911][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.943840][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.956269][ T5838] team0: Port device team_slave_0 added [ 89.962637][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.970029][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.977596][ T5833] bridge_slave_0: entered allmulticast mode [ 89.984544][ T5833] bridge_slave_0: entered promiscuous mode [ 89.995383][ T5831] team0: Port device team_slave_1 added [ 90.002453][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.009846][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.017557][ T5833] bridge_slave_1: entered allmulticast mode [ 90.024549][ T5833] bridge_slave_1: entered promiscuous mode [ 90.049222][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.066729][ T5840] Bluetooth: hci0: command tx timeout [ 90.097271][ T5838] team0: Port device team_slave_1 added [ 90.145957][ T54] Bluetooth: hci3: command tx timeout [ 90.152257][ T5840] Bluetooth: hci4: command tx timeout [ 90.207058][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.220253][ T5832] team0: Port device team_slave_0 added [ 90.226271][ T54] Bluetooth: hci1: command tx timeout [ 90.232362][ T5840] Bluetooth: hci2: command tx timeout [ 90.237378][ T5832] team0: Port device team_slave_1 added [ 90.248782][ T5834] team0: Port device team_slave_0 added [ 90.256157][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.263118][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.290011][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.302641][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.310575][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.336707][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.351039][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.379063][ T5834] team0: Port device team_slave_1 added [ 90.403598][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.410933][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.436902][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.457841][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.464791][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.492282][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.539931][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.547049][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.573978][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.588098][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.595081][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.621188][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.709406][ T5833] team0: Port device team_slave_0 added [ 90.719856][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.728483][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.754566][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.768182][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.775159][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.801688][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.860494][ T5833] team0: Port device team_slave_1 added [ 90.928589][ T5838] hsr_slave_0: entered promiscuous mode [ 90.935372][ T5838] hsr_slave_1: entered promiscuous mode [ 90.967778][ T5831] hsr_slave_0: entered promiscuous mode [ 90.974228][ T5831] hsr_slave_1: entered promiscuous mode [ 90.981673][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.989798][ T5831] Cannot create hsr debugfs directory [ 91.012205][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.019880][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.046608][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.065655][ T5832] hsr_slave_0: entered promiscuous mode [ 91.072048][ T5832] hsr_slave_1: entered promiscuous mode [ 91.079112][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.086755][ T5832] Cannot create hsr debugfs directory [ 91.104450][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.111501][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.137659][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.265369][ T5834] hsr_slave_0: entered promiscuous mode [ 91.292639][ T5834] hsr_slave_1: entered promiscuous mode [ 91.305155][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.312824][ T5834] Cannot create hsr debugfs directory [ 91.452070][ T5833] hsr_slave_0: entered promiscuous mode [ 91.459238][ T5833] hsr_slave_1: entered promiscuous mode [ 91.465479][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.473945][ T5833] Cannot create hsr debugfs directory [ 91.966760][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.980559][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.011762][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.027253][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.129896][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.146013][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.147218][ T5840] Bluetooth: hci0: command tx timeout [ 92.163846][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.181144][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.227099][ T5840] Bluetooth: hci4: command tx timeout [ 92.232613][ T54] Bluetooth: hci3: command tx timeout [ 92.241829][ T974] cfg80211: failed to load regulatory.db [ 92.276419][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.305799][ T54] Bluetooth: hci2: command tx timeout [ 92.311268][ T54] Bluetooth: hci1: command tx timeout [ 92.327026][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.341751][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.406282][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.462121][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.477072][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.500727][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.540372][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.672689][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.700292][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.713990][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.725158][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.832986][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.897914][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.955157][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.009488][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.024073][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.031674][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.079907][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.087137][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.123449][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.137989][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.149959][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.166062][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.173201][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.217580][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.224761][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.234825][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.242003][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.276805][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.283962][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.356876][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.368469][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.425711][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.432877][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.460929][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.497864][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.505135][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.523305][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.530600][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.585332][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.592666][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.051423][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.227438][ T54] Bluetooth: hci0: command tx timeout [ 94.308843][ T54] Bluetooth: hci3: command tx timeout [ 94.314413][ T54] Bluetooth: hci4: command tx timeout [ 94.386473][ T5840] Bluetooth: hci2: command tx timeout [ 94.392100][ T54] Bluetooth: hci1: command tx timeout [ 94.410936][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.442310][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.453977][ T5831] veth0_vlan: entered promiscuous mode [ 94.477811][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.504899][ T5831] veth1_vlan: entered promiscuous mode [ 94.569107][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.663901][ T5831] veth0_macvtap: entered promiscuous mode [ 94.728952][ T5831] veth1_macvtap: entered promiscuous mode [ 94.804108][ T5834] veth0_vlan: entered promiscuous mode [ 94.821529][ T5838] veth0_vlan: entered promiscuous mode [ 94.833094][ T5832] veth0_vlan: entered promiscuous mode [ 94.855499][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.901284][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.922056][ T5838] veth1_vlan: entered promiscuous mode [ 94.931445][ T5834] veth1_vlan: entered promiscuous mode [ 94.953712][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.963765][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.972666][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.981636][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.011284][ T5832] veth1_vlan: entered promiscuous mode [ 95.202820][ T5838] veth0_macvtap: entered promiscuous mode [ 95.213741][ T5832] veth0_macvtap: entered promiscuous mode [ 95.235776][ T5834] veth0_macvtap: entered promiscuous mode [ 95.248311][ T5832] veth1_macvtap: entered promiscuous mode [ 95.272231][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.288673][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.292572][ T5838] veth1_macvtap: entered promiscuous mode [ 95.311543][ T5834] veth1_macvtap: entered promiscuous mode [ 95.371908][ T5833] veth0_vlan: entered promiscuous mode [ 95.380357][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.392252][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.404576][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.438967][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.454864][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.473935][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.485017][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.497351][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.510661][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.519613][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.529766][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.538642][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.553699][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.564797][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.574866][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.586126][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.599954][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.618647][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.629219][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.640687][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.652239][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.662920][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.674276][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.691703][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.720760][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.736093][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.747834][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.758676][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.770699][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.783813][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.799802][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.803274][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.810816][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.834162][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.860059][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.870963][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.881358][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.891917][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.901762][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.912556][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.923778][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.932834][ T5833] veth1_vlan: entered promiscuous mode [ 95.971349][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.985202][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.997315][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.012038][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.349388][ T54] Bluetooth: hci0: command tx timeout [ 96.359950][ T5922] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 96.368406][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.386509][ T54] Bluetooth: hci4: command tx timeout [ 96.386838][ T5840] Bluetooth: hci3: command tx timeout [ 96.466624][ T5840] Bluetooth: hci1: command tx timeout [ 96.466667][ T54] Bluetooth: hci2: command tx timeout [ 96.478169][ T5922] batadv0: entered promiscuous mode [ 96.483599][ T5922] batadv0: entered allmulticast mode [ 96.515993][ T5922] bridge0: port 3(batadv0) entered blocking state [ 96.529983][ T5922] bridge0: port 3(batadv0) entered disabled state [ 96.555940][ T5922] bridge0: port 3(batadv0) entered blocking state [ 96.562979][ T5922] bridge0: port 3(batadv0) entered forwarding state [ 96.854079][ T5833] veth0_macvtap: entered promiscuous mode [ 96.904223][ T5833] veth1_macvtap: entered promiscuous mode [ 96.942576][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.975918][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.040134][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.041772][ T1105] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 97.048304][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.066050][ T1105] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 97.226664][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.329176][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.406811][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.490288][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.503814][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.518586][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.536761][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.589927][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.646854][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.771119][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.780674][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.811181][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.822978][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.833748][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.844329][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.854242][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.864950][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.874820][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.885450][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.897620][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.963284][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.987505][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.005683][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.014844][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.052173][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.061762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.070703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.083855][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.106295][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.120776][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.322186][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.343292][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.627749][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.674505][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.775555][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.793010][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.979634][ T5936] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 99.976158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.979137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.985241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.993601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.009848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.148995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.251233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.353706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.402157][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9'. [ 103.411034][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9'. [ 104.015813][ T5973] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 104.023799][ T5973] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 104.032874][ T5973] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 104.041134][ T5973] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 104.065873][ T5973] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 104.073603][ T5973] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13'. [ 104.546513][ T29] audit: type=1326 audit(1738981892.955:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 104.653077][ T29] audit: type=1326 audit(1738981892.955:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 104.805014][ T29] audit: type=1326 audit(1738981892.955:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 104.921596][ T5979] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.970514][ T29] audit: type=1326 audit(1738981892.965:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 104.994039][ T29] audit: type=1326 audit(1738981892.965:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 105.401116][ T5984] Bluetooth: MGMT ver 1.23 [ 107.309835][ T6003] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 108.271231][ T6009] /dev/nullb0: Can't open blockdev [ 108.341849][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'. [ 109.211129][ T6017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.258221][ T6017] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 111.867397][ T6027] tty tty29: ldisc open failed (-12), clearing slot 28 [ 112.167062][ T6035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.31'. [ 113.355346][ T6046] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.435012][ T6046] kvm: pic: single mode not supported [ 113.435121][ T6046] kvm: pic: level sensitive irq not supported [ 113.442239][ T6046] kvm: pic: single mode not supported [ 113.448685][ T6046] kvm: pic: single mode not supported [ 113.454084][ T6046] kvm: pic: level sensitive irq not supported [ 113.459804][ T6046] kvm: pic: single mode not supported [ 113.466422][ T6046] kvm: pic: level sensitive irq not supported [ 114.679744][ T6060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.39'. [ 114.897826][ T51] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.107050][ T51] usb 2-1: device descriptor read/64, error -71 [ 115.511762][ T51] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.001136][ T51] usb 2-1: device descriptor read/64, error -71 [ 116.277187][ T51] usb usb2-port1: attempt power cycle [ 116.350290][ T6076] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 117.200193][ T51] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.258620][ T51] usb 2-1: device not accepting address 4, error -71 [ 119.872475][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.51'. [ 120.365903][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 121.126085][ T6114] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 122.013065][ T6132] tipc: Started in network mode [ 122.018987][ T6132] tipc: Node identity 1, cluster identity 4711 [ 122.025363][ T6132] tipc: Node number set to 1 [ 123.256716][ T6144] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 124.781946][ T6156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.66'. [ 126.076906][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 127.977706][ T6188] tipc: Started in network mode [ 128.009605][ T6188] tipc: Node identity 1, cluster identity 4711 [ 128.083437][ T6183] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 128.339346][ T6188] tipc: Node number set to 1 [ 129.169044][ T6200] can0: slcan on ttyS3. [ 130.058409][ T6197] can0 (unregistered): slcan off ttyS3. [ 133.190569][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.225722][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.766871][ T6247] hfs: unable to load iocharset "io#harset" [ 136.367961][ T6244] syz.3.88 (6244): drop_caches: 2 [ 136.514872][ T6261] can0: slcan on ttyS3. [ 137.416808][ T6258] can0 (unregistered): slcan off ttyS3. [ 137.519302][ T6269] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.589865][ T6268] ntfs3(nullb0): Primary boot signature is not NTFS. [ 138.668119][ T6268] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 138.735097][ T6272] Zero length message leads to an empty skb [ 139.379723][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 139.474859][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 140.102401][ T6283] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 144.626334][ T6317] ntfs3: Unknown parameter '' [ 144.975189][ T6305] syz.1.105 (6305): drop_caches: 2 [ 145.429376][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.109'. [ 147.098301][ T6334] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 152.069359][ T6360] : entered promiscuous mode [ 152.423727][ T6369] ntfs3: Unknown parameter '' [ 152.502838][ T6372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.126'. [ 155.453123][ T6396] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 158.052539][ T6420] ntfs3: Unknown parameter '' [ 159.025751][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 161.626077][ T6443] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 161.633926][ T6443] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 161.643357][ T6443] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 161.651417][ T6443] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 161.756923][ T6443] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 161.764705][ T6443] netlink: 224 bytes leftover after parsing attributes in process `syz.1.145'. [ 162.178552][ T29] audit: type=1326 audit(1738981950.685:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b698cde9 code=0x7ffc0000 [ 162.277139][ T29] audit: type=1326 audit(1738981950.695:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b698cde9 code=0x7ffc0000 [ 162.485908][ T8] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 162.504134][ T29] audit: type=1326 audit(1738981950.705:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f19b698cde9 code=0x7ffc0000 [ 162.583143][ T29] audit: type=1326 audit(1738981950.705:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b698cde9 code=0x7ffc0000 [ 162.650402][ T29] audit: type=1326 audit(1738981950.715:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b698cde9 code=0x7ffc0000 [ 163.508357][ T8] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 163.526082][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.659242][ T6461] can0: slcan on ttyS3. [ 164.222875][ T8] usb 3-1: config 0 has no interface number 0 [ 164.265720][ T8] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 164.275105][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.305180][ T8] usb 3-1: Product: syz [ 164.531220][ T8] usb 3-1: Manufacturer: syz [ 164.570998][ T8] usb 3-1: SerialNumber: syz [ 164.616616][ T6454] can0 (unregistered): slcan off ttyS3. [ 165.455678][ T6467] lo speed is unknown, defaulting to 1000 [ 165.500017][ T6467] lo speed is unknown, defaulting to 1000 [ 165.502607][ T6466] »»»»»»: renamed from lo (while UP) [ 165.550342][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 165.570563][ T6467] »»»»»» speed is unknown, defaulting to 1000 [ 165.570618][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 165.590596][ T8] usb 3-1: config 0 descriptor?? [ 165.784291][ T6467] infiniband sz1: set active [ 165.791016][ T8] usb 3-1: can't set config #0, error -71 [ 165.799064][ T6467] infiniband sz1: added »»»»»» [ 165.807235][ T6467] sz1: rxe_create_cq: returned err = -12 [ 165.813568][ T6467] infiniband sz1: Couldn't create ib_mad CQ [ 165.819969][ T6467] infiniband sz1: Couldn't open port 1 [ 165.847579][ T8] usb 3-1: USB disconnect, device number 2 [ 165.877058][ T51] »»»»»» speed is unknown, defaulting to 1000 [ 165.947788][ T6467] RDS/IB: sz1: added [ 165.952491][ T6467] smc: adding ib device sz1 with port count 1 [ 165.959060][ T6467] smc: ib device sz1 port 1 has pnetid [ 165.969657][ T6467] »»»»»» speed is unknown, defaulting to 1000 [ 166.239141][ T6467] »»»»»» speed is unknown, defaulting to 1000 [ 167.695418][ T6477] ntfs3: Unknown parameter '' [ 168.975299][ T5912] »»»»»» speed is unknown, defaulting to 1000 [ 169.083539][ T6467] »»»»»» speed is unknown, defaulting to 1000 [ 169.837735][ T6467] »»»»»» speed is unknown, defaulting to 1000 [ 170.607594][ T6467] »»»»»» speed is unknown, defaulting to 1000 [ 171.490231][ T6504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.163'. [ 172.159154][ T6521] delete_channel: no stack [ 172.909645][ T6536] ntfs3: Unknown parameter '' [ 174.122634][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'. [ 175.065680][ T6549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.178'. [ 175.296195][ T6551] rdma_rxe: rxe_newlink: failed to add lo [ 175.326049][ T6551] »»»»»»: renamed from lo (while UP) [ 175.780957][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 177.157564][ T6567] can0: slcan on ttyS3. [ 177.926450][ T6558] can0 (unregistered): slcan off ttyS3. [ 178.349195][ T6575] ntfs3: Unknown parameter '' [ 180.440316][ T6584] rdma_rxe: rxe_newlink: failed to add lo [ 180.448514][ T6584] »»»»»»: renamed from lo (while UP) [ 180.482959][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 181.124188][ T6598] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 183.182831][ T6613] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 183.189803][ T6613] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 183.198863][ T6613] vhci_hcd vhci_hcd.0: Device attached [ 183.664670][ T6614] vhci_hcd: connection closed [ 183.668762][ T12] vhci_hcd: stop threads [ 183.689466][ T12] vhci_hcd: release socket [ 183.694691][ T12] vhci_hcd: disconnect device [ 184.895303][ T6622] »»»»»» speed is unknown, defaulting to 1000 [ 185.476339][ T6626] ntfs3: Unknown parameter '' [ 189.207082][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 189.899158][ T6654] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 191.458248][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 191.470687][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 191.641376][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.779073][ T6666] hfs: unable to load iocharset "io#harset" [ 192.917615][ T6681] ntfs3: Unknown parameter '' [ 193.787960][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.798704][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.821471][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.830788][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.839659][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 193.851252][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.267035][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.666432][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.674635][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.125791][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 195.906168][ T5840] Bluetooth: hci4: command tx timeout [ 196.005036][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.134493][ T6687] »»»»»» speed is unknown, defaulting to 1000 [ 197.163823][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.987088][ T5840] Bluetooth: hci4: command tx timeout [ 198.610722][ T6725] mmap: syz.0.227 (6725) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 199.408633][ T1105] bridge_slave_1: left allmulticast mode [ 199.414624][ T1105] bridge_slave_1: left promiscuous mode [ 199.442700][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.066027][ T1105] bridge_slave_0: left allmulticast mode [ 200.072117][ T1105] bridge_slave_0: left promiscuous mode [ 200.085746][ T5840] Bluetooth: hci4: command tx timeout [ 200.102351][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.481315][ T6749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.233'. [ 202.172959][ T5840] Bluetooth: hci4: command tx timeout [ 206.118502][ T6796] ntfs3(nullb0): Primary boot signature is not NTFS. [ 206.125381][ T6796] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 206.408165][ T6800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.245'. [ 206.612559][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.719013][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.809177][ T1105] bond0 (unregistering): Released all slaves [ 208.093322][ T1105] tipc: Left network mode [ 209.293469][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.251'. [ 209.791248][ T6687] chnl_net:caif_netlink_parms(): no params data found [ 210.022878][ T6842] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 210.872320][ T6854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.255'. [ 211.112036][ T1105] hsr_slave_0: left promiscuous mode [ 211.132894][ T1105] hsr_slave_1: left promiscuous mode [ 211.139441][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.147057][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.159793][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.167859][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.201462][ T1105] veth1_macvtap: left promiscuous mode [ 211.216471][ T1105] veth0_macvtap: left promiscuous mode [ 211.226322][ T1105] veth1_vlan: left promiscuous mode [ 211.243060][ T1105] veth0_vlan: left promiscuous mode [ 212.095148][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 212.101792][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 212.109371][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 212.117283][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 213.041533][ T6875] ntfs3: Unknown parameter '' [ 214.880419][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 214.935125][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 215.978875][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 216.005986][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 219.096764][ T6909] : entered promiscuous mode [ 219.106968][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.120961][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.179746][ T6687] bridge_slave_0: entered allmulticast mode [ 219.237298][ T6687] bridge_slave_0: entered promiscuous mode [ 219.320898][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.369970][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.377376][ T6687] bridge_slave_1: entered allmulticast mode [ 219.385012][ T6687] bridge_slave_1: entered promiscuous mode [ 220.243191][ T6687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.424588][ T6687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.248329][ T6687] team0: Port device team_slave_0 added [ 221.284143][ T6687] team0: Port device team_slave_1 added [ 221.614292][ T6932] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 222.671778][ T6933] bridge0: port 3(hsr_slave_1) entered blocking state [ 222.681522][ T6933] bridge0: port 3(hsr_slave_1) entered disabled state [ 222.689026][ T6933] hsr_slave_1: entered allmulticast mode [ 222.697747][ T6933] hsr_slave_1: left allmulticast mode [ 222.836975][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.845457][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.885219][ T6687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.916294][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.952391][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.180261][ T6687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.094303][ T6958] rdma_rxe: rxe_newlink: failed to add lo [ 225.634676][ T6687] hsr_slave_0: entered promiscuous mode [ 225.679961][ T6687] hsr_slave_1: entered promiscuous mode [ 226.010801][ T6958] »»»»»»: renamed from lo (while UP) [ 226.029981][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 226.774259][ T6968] block device autoloading is deprecated and will be removed. [ 227.486964][ T6974] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 228.257933][ T29] audit: type=1326 audit(1738982017.125:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 228.344152][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 228.404732][ T29] audit: type=1326 audit(1738982017.165:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 228.439989][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 228.459502][ T29] audit: type=1326 audit(1738982017.165:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 228.622831][ T29] audit: type=1326 audit(1738982017.175:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 228.697549][ T6985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.715838][ T29] audit: type=1326 audit(1738982017.175:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 228.825827][ T29] audit: type=1326 audit(1738982017.175:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 228.880029][ T29] audit: type=1326 audit(1738982017.175:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 228.914850][ T6987] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 229.860442][ T29] audit: type=1326 audit(1738982017.185:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 230.027619][ T29] audit: type=1326 audit(1738982017.185:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 230.270937][ T29] audit: type=1326 audit(1738982017.185:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 230.570876][ T6687] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.920773][ T6687] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 231.191314][ T6687] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.706488][ T6687] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.188572][ T6687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.521898][ T6687] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.853849][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.861059][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.248477][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.255758][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.875318][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 237.356030][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 241.227494][ T6687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.145625][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 243.813221][ T7107] ntfs3: Unknown parameter '' [ 244.638191][ T7112] netlink: 96 bytes leftover after parsing attributes in process `syz.0.310'. [ 244.652960][ T7112] vlan2: entered allmulticast mode [ 244.658203][ T7112] gretap0: entered allmulticast mode [ 245.463168][ T6687] veth0_vlan: entered promiscuous mode [ 245.482662][ T6687] veth1_vlan: entered promiscuous mode [ 247.323967][ T6687] veth0_macvtap: entered promiscuous mode [ 247.353436][ T6687] veth1_macvtap: entered promiscuous mode [ 247.458358][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.626043][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.636116][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.646941][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.656989][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.667781][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.677775][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.688395][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.850548][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.954174][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.965297][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.975724][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.986395][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.996376][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.007809][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.021804][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.032697][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.054786][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.134982][ T6687] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.151363][ T6687] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.163091][ T6687] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.262895][ T6687] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.466132][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 248.763779][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.784358][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.978819][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.020419][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.048095][ T7171] ntfs3(nullb0): Primary boot signature is not NTFS. [ 250.054960][ T7171] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 252.294337][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.306474][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.317764][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.517889][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.534900][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 252.542640][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.640955][ T7197] can0: slcan on ttyS3. [ 253.693063][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 254.216349][ T7192] can0 (unregistered): slcan off ttyS3. [ 254.669952][ T7209] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 254.698889][ T5847] Bluetooth: hci4: command tx timeout [ 255.199673][ T1007] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.381128][ T7188] »»»»»» speed is unknown, defaulting to 1000 [ 256.097040][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.105064][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.476036][ T5887] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 256.684806][ T1007] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.786188][ T5847] Bluetooth: hci4: command tx timeout [ 257.359286][ T1007] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.545639][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 257.558948][ T5887] usb 2-1: unable to get BOS descriptor or descriptor too short [ 257.579334][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.946742][ T1007] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.234095][ T5887] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 258.248465][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 258.319287][ T7240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.335'. [ 258.571488][ T5887] usb 2-1: Product: syz [ 258.805646][ T5887] usb 2-1: Manufacturer: syz [ 258.810365][ T5887] usb 2-1: SerialNumber: syz [ 258.867846][ T5847] Bluetooth: hci4: command tx timeout [ 258.904131][ T5887] usb 2-1: config 0 descriptor?? [ 259.017128][ T5887] usb 2-1: can't set config #0, error -71 [ 259.079256][ T5887] usb 2-1: USB disconnect, device number 6 [ 259.339103][ T1007] bridge_slave_1: left allmulticast mode [ 259.364922][ T1007] bridge_slave_1: left promiscuous mode [ 259.372117][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.429627][ T1007] bridge_slave_0: left allmulticast mode [ 260.072328][ T1007] bridge_slave_0: left promiscuous mode [ 260.090915][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.955692][ T54] Bluetooth: hci4: command tx timeout [ 262.727599][ T7275] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 263.167222][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 266.804441][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.887585][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.924391][ T1007] bond0 (unregistering): Released all slaves [ 267.065839][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 267.073869][ T7292] »»»»»» speed is unknown, defaulting to 1000 [ 269.909186][ T7188] chnl_net:caif_netlink_parms(): no params data found [ 270.687760][ T7325] bridge0: port 3(hsr_slave_1) entered blocking state [ 270.694715][ T7325] bridge0: port 3(hsr_slave_1) entered disabled state [ 270.703043][ T7325] hsr_slave_1: entered allmulticast mode [ 270.712352][ T7325] hsr_slave_1: left allmulticast mode [ 271.084843][ T7327] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 273.859938][ T1007] hsr_slave_0: left promiscuous mode [ 273.867349][ T1007] hsr_slave_1: left promiscuous mode [ 273.873292][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.905875][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.121268][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.146436][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.210871][ T1007] veth1_macvtap: left promiscuous mode [ 274.223041][ T1007] veth0_macvtap: left promiscuous mode [ 274.261242][ T1007] veth1_vlan: left promiscuous mode [ 274.267129][ T1007] veth0_vlan: left promiscuous mode [ 277.314930][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 277.385165][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 278.280632][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 278.550406][ T7188] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.560177][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.568282][ T7188] bridge_slave_0: entered allmulticast mode [ 278.576389][ T7188] bridge_slave_0: entered promiscuous mode [ 278.604766][ T7188] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.644935][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.685058][ T7188] bridge_slave_1: entered allmulticast mode [ 278.731667][ T7188] bridge_slave_1: entered promiscuous mode [ 279.954802][ T7188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.032180][ T7188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.276403][ T7188] team0: Port device team_slave_0 added [ 282.322644][ T7188] team0: Port device team_slave_1 added [ 282.452288][ T7188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.471254][ T7188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.554919][ T7188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.787005][ T7188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.895620][ T7188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.968418][ T7188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.380939][ T7188] hsr_slave_0: entered promiscuous mode [ 284.396015][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.486053][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.517501][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.526418][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.535469][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 284.543490][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.617687][ T7188] hsr_slave_1: entered promiscuous mode [ 284.803910][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 285.051200][ T7419] »»»»»» speed is unknown, defaulting to 1000 [ 286.626939][ T5847] Bluetooth: hci5: command tx timeout [ 289.047657][ T5847] Bluetooth: hci5: command tx timeout [ 290.877663][ T974] kernel write not supported for file /cpu/0/msr (pid: 974 comm: kworker/0:2) [ 291.106338][ T5847] Bluetooth: hci5: command tx timeout [ 291.493094][ T7419] chnl_net:caif_netlink_parms(): no params data found [ 291.940686][ T7479] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 291.950358][ T7479] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 291.961227][ T7479] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 291.969574][ T7479] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 291.981396][ T7479] netlink: 'syz.0.380': attribute type 1 has an invalid length. [ 291.990016][ T7479] netlink: 224 bytes leftover after parsing attributes in process `syz.0.380'. [ 292.117737][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 292.117755][ T29] audit: type=1326 audit(1738982080.965:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 292.163555][ T29] audit: type=1326 audit(1738982080.965:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 292.280677][ T7188] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.295439][ T29] audit: type=1326 audit(1738982080.965:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 292.381203][ T7188] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.385589][ T29] audit: type=1326 audit(1738982080.965:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33a158cde9 code=0x7ffc0000 [ 292.421793][ T7188] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.443122][ T7419] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.462202][ T7419] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.492779][ T7419] bridge_slave_0: entered allmulticast mode [ 292.504592][ T7419] bridge_slave_0: entered promiscuous mode [ 292.533128][ T7188] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 292.593487][ T7419] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.617949][ T7419] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.635295][ T7419] bridge_slave_1: entered allmulticast mode [ 292.643276][ T7419] bridge_slave_1: entered promiscuous mode [ 292.975128][ T7419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.034564][ T7419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.208896][ T5847] Bluetooth: hci5: command tx timeout [ 293.782055][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 295.291761][ T7419] team0: Port device team_slave_0 added [ 295.950090][ T7419] team0: Port device team_slave_1 added [ 296.073711][ T7419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.116089][ T7419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.179431][ T7419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.213388][ T7419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.225243][ T7419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.529578][ T7419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.064469][ T7419] hsr_slave_0: entered promiscuous mode [ 298.436815][ T7419] hsr_slave_1: entered promiscuous mode [ 298.460670][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 298.515450][ T7419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.529297][ T7419] Cannot create hsr debugfs directory [ 298.560583][ T7517] can0: slcan on ttyS3. [ 298.606544][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 298.660009][ T7513] can0 (unregistered): slcan off ttyS3. [ 300.041493][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 300.402763][ T7188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.356795][ T7419] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 302.806268][ T7419] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 302.822988][ T7419] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.790595][ T7188] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.804750][ T7419] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 304.001509][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.008796][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.094359][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.101610][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.420471][ T7419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.744670][ T7419] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.777041][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 306.942025][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.949315][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.014770][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.022080][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.379075][ T7635] syz.0.414 (7635): drop_caches: 2 [ 308.386107][ T7635] syz.0.414 (7635): drop_caches: 2 [ 308.576835][ T7188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.950389][ T7419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.976702][ T7655] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 310.007130][ T7655] netlink: 40 bytes leftover after parsing attributes in process `syz.2.416'. [ 310.128996][ T7655] batadv0: entered promiscuous mode [ 310.205986][ T7655] batadv0: entered allmulticast mode [ 310.294397][ T7655] bridge0: port 3(batadv0) entered blocking state [ 310.326605][ T7655] bridge0: port 3(batadv0) entered disabled state [ 310.444749][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.417'. [ 310.723113][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 310.732685][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 310.949929][ T7655] bridge0: port 3(batadv0) entered blocking state [ 310.956566][ T7655] bridge0: port 3(batadv0) entered forwarding state [ 311.063174][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 313.440867][ T7695] syz.4.421: attempt to access beyond end of device [ 313.440867][ T7695] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 313.456446][ T7695] SQUASHFS error: Failed to read block 0x0: -5 [ 313.988186][ T7695] unable to read squashfs_super_block [ 314.001099][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.014406][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.024483][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.036767][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.047651][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 314.055256][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.057049][ T7693] »»»»»» speed is unknown, defaulting to 1000 [ 315.069279][ T7419] veth0_vlan: entered promiscuous mode [ 315.760274][ T7713] syz.4.426 (7713): drop_caches: 2 [ 315.771976][ T7713] syz.4.426 (7713): drop_caches: 2 [ 315.792109][ T7419] veth1_vlan: entered promiscuous mode [ 316.585023][ T54] Bluetooth: hci0: command tx timeout [ 317.596684][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.648758][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.145910][ T7745] ntfs3(nullb0): Primary boot signature is not NTFS. [ 318.232421][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 318.301189][ T7745] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 318.642995][ T5847] Bluetooth: hci0: command tx timeout [ 318.711126][ T7749] netlink: 'syz.2.431': attribute type 17 has an invalid length. [ 318.729087][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 318.749526][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.431'. [ 319.368205][ T7419] veth0_macvtap: entered promiscuous mode [ 319.507992][ T7419] veth1_macvtap: entered promiscuous mode [ 319.573218][ T7693] chnl_net:caif_netlink_parms(): no params data found [ 319.923832][ T7768] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 320.135844][ T5945] bridge_slave_1: left allmulticast mode [ 320.187109][ T5945] bridge_slave_1: left promiscuous mode [ 320.205952][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.250821][ T5945] bridge_slave_0: left allmulticast mode [ 320.264223][ T5945] bridge_slave_0: left promiscuous mode [ 320.274193][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.716426][ T5847] Bluetooth: hci0: command tx timeout [ 322.290800][ T5945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.331837][ T5945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.364218][ T5945] bond0 (unregistering): Released all slaves [ 322.480475][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 322.762449][ T7790] can0: slcan on ttyS3. [ 322.787721][ T5847] Bluetooth: hci0: command tx timeout [ 323.056573][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.104296][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.195615][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.279065][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.327894][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.406163][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.445553][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.493660][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.540506][ T7419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.765945][ T7789] can0 (unregistered): slcan off ttyS3. [ 324.628753][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.664767][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.678282][ T7693] bridge_slave_0: entered allmulticast mode [ 324.916114][ T7823] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 324.936295][ T7693] bridge_slave_0: entered promiscuous mode [ 325.034393][ T5945] hsr_slave_0: left promiscuous mode [ 325.045886][ T5945] hsr_slave_1: left promiscuous mode [ 325.072846][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.103292][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.513805][ T7840] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 329.530186][ T5945] team0 (unregistering): Port device team_slave_1 removed [ 329.637662][ T5945] team0 (unregistering): Port device team_slave_0 removed [ 330.929180][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.940013][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.950749][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.963219][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.973637][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.984565][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.998504][ T7419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.009171][ T7419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.022150][ T7419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.033493][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.041733][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.049678][ T7693] bridge_slave_1: entered allmulticast mode [ 331.059621][ T7693] bridge_slave_1: entered promiscuous mode [ 331.098294][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 331.113403][ T7852] can0: slcan on ttyS3. [ 331.334347][ T7419] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.360411][ T7419] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.402169][ T7419] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.435034][ T7419] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.597907][ T7851] can0 (unregistered): slcan off ttyS3. [ 331.645982][ T7693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.717561][ T7693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.960136][ T7693] team0: Port device team_slave_0 added [ 332.703720][ T7693] team0: Port device team_slave_1 added [ 333.193162][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.432674][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.460977][ T7693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.570698][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.597061][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.668277][ T7693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.698625][ T7883] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 334.834477][ T7889] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 336.213795][ T7693] hsr_slave_0: entered promiscuous mode [ 336.241428][ T7693] hsr_slave_1: entered promiscuous mode [ 337.315447][ T6761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.324195][ T6761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.482821][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 338.133386][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.467'. [ 338.641955][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.657246][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.649983][ T7950] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 341.311489][ T7956] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 343.669099][ T7964] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 344.194280][ T7979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.477'. [ 345.176718][ T5933] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 346.236507][ T5933] usb 3-1: config 0 has an invalid interface number: 182 but max is 0 [ 346.244727][ T5933] usb 3-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 346.258143][ T5933] usb 3-1: config 0 has no interface number 0 [ 346.264310][ T5933] usb 3-1: config 0 interface 182 altsetting 0 endpoint 0x7 has invalid maxpacket 2047, setting to 64 [ 346.276731][ T7693] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 346.298283][ T5933] usb 3-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=29.01 [ 346.363391][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.574648][ T7693] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 346.605706][ T5933] usb 3-1: config 0 descriptor?? [ 346.769875][ T7999] warning: `syz.0.482' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 346.935023][ T5933] usb 3-1: string descriptor 0 read error: -71 [ 346.965166][ T5933] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 346.977370][ T7693] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 346.997123][ T8006] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 347.000692][ T5933] gspca_sonixj: reg_w1 err -71 [ 347.017131][ T7693] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 347.034347][ T5933] sonixj 3-1:0.182: probe with driver sonixj failed with error -71 [ 347.915632][ T5933] usb 3-1: USB disconnect, device number 3 [ 348.505083][ T7693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.572008][ T8020] netlink: 'syz.6.485': attribute type 10 has an invalid length. [ 348.580631][ T8020] netlink: 40 bytes leftover after parsing attributes in process `syz.6.485'. [ 348.580890][ T8021] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 348.599910][ T8020] batadv0: entered promiscuous mode [ 348.605874][ T8020] batadv0: entered allmulticast mode [ 348.666652][ T8020] bridge0: port 3(batadv0) entered blocking state [ 348.681242][ T8020] bridge0: port 3(batadv0) entered disabled state [ 349.729492][ T8020] bridge0: port 3(batadv0) entered blocking state [ 349.736128][ T8020] bridge0: port 3(batadv0) entered forwarding state [ 349.825554][ T5946] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 349.834813][ T5946] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 349.864832][ T7693] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.327400][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.334722][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.355609][ T8034] rdma_rxe: rxe_newlink: failed to add lo [ 351.027500][ T8034] »»»»»»: renamed from lo (while UP) [ 351.109805][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.490'. [ 351.206690][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.213953][ T5946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.670228][ T7693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.736696][ T8060] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 354.300553][ T8073] netlink: 'syz.4.497': attribute type 3 has an invalid length. [ 354.309004][ T8073] netlink: 666 bytes leftover after parsing attributes in process `syz.4.497'. [ 354.319161][ T8073] @: renamed from vlan0 (while UP) [ 354.351537][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.497'. [ 354.400997][ T7693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.416797][ T8089] netlink: 'syz.4.499': attribute type 10 has an invalid length. [ 355.424701][ T8089] netlink: 40 bytes leftover after parsing attributes in process `syz.4.499'. [ 355.434609][ T8089] batadv0: entered promiscuous mode [ 355.439913][ T8089] batadv0: entered allmulticast mode [ 355.446080][ T8089] bridge0: port 3(batadv0) entered blocking state [ 355.452673][ T8089] bridge0: port 3(batadv0) entered disabled state [ 355.462381][ T8089] bridge0: port 3(batadv0) entered blocking state [ 355.469014][ T8089] bridge0: port 3(batadv0) entered forwarding state [ 355.634283][ T1089] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 355.644909][ T1089] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 356.097406][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 356.923021][ T8106] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 357.452277][ T7693] veth0_vlan: entered promiscuous mode [ 357.502850][ T8119] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 357.521840][ T7693] veth1_vlan: entered promiscuous mode [ 357.743108][ T7693] veth0_macvtap: entered promiscuous mode [ 357.802599][ T7693] veth1_macvtap: entered promiscuous mode [ 357.999267][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.024563][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.047858][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.070421][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.094944][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.124054][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.160829][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.189983][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.212977][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.911799][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.935737][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.953990][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.028214][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.049968][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.065906][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.085600][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.104734][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.155736][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.175610][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.196593][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.215857][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.289533][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.502869][ T7693] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.533414][ T7693] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.241832][ T7693] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.260990][ T7693] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.285617][ T977] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 360.577434][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 360.602206][ T977] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 360.868408][ T977] usb 5-1: config 0 has no interface number 0 [ 360.891281][ T977] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 361.475643][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.502103][ T977] usb 5-1: Product: syz [ 361.555622][ T977] usb 5-1: Manufacturer: syz [ 361.579825][ T977] usb 5-1: SerialNumber: syz [ 361.637295][ T977] usb 5-1: config 0 descriptor?? [ 361.677478][ T977] smsc95xx v2.0.0 [ 361.795209][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.513'. [ 361.900264][ T5949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.951864][ T5949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.046050][ T977] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 362.079396][ T977] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 362.151611][ T977] usb 5-1: USB disconnect, device number 2 [ 362.206385][ T8168] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 362.437538][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.579080][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.732949][ T8176] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 366.866079][ T8211] syzkaller1: entered promiscuous mode [ 366.871601][ T8211] syzkaller1: entered allmulticast mode [ 368.698182][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 369.863431][ T8244] xt_nfacct: accounting object `syz1' does not exists [ 371.606229][ T8253] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 375.356246][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 375.763786][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 378.086240][ T8306] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 378.963236][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.975840][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.351413][ T8333] ntfs3(nullb0): Primary boot signature is not NTFS. [ 381.359422][ T8333] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 382.688267][ T8336] xt_nfacct: accounting object `syz1' does not exists [ 384.653478][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 384.699167][ T8356] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 385.314196][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.561'. [ 387.824285][ T8373] can0: slcan on ttyS3. [ 388.474023][ T8365] can0 (unregistered): slcan off ttyS3. [ 390.673027][ T8389] xt_nfacct: accounting object `syz1' does not exists [ 393.274106][ T8410] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 393.975569][ T29] audit: type=1326 audit(1738982182.825:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.4.576" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a0ab8cde9 code=0x0 [ 394.525670][ T8421] can0: slcan on ttyS3. [ 395.512675][ T8418] can0 (unregistered): slcan off ttyS3. [ 400.354971][ T8458] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 401.432974][ T8466] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 401.708902][ T8471] can0: slcan on ttyS3. [ 402.350050][ T8464] can0 (unregistered): slcan off ttyS3. [ 404.711418][ T8497] netlink: 'syz.2.596': attribute type 10 has an invalid length. [ 404.725238][ T8497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.596'. [ 405.981905][ T8507] ntfs3(nullb0): Primary boot signature is not NTFS. [ 406.031115][ T8507] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 408.360157][ T8538] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 408.368246][ T8538] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 408.379284][ T8538] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 408.389355][ T8538] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 408.413540][ T8538] netlink: 'syz.5.604': attribute type 1 has an invalid length. [ 408.421394][ T8538] netlink: 224 bytes leftover after parsing attributes in process `syz.5.604'. [ 408.505415][ T29] audit: type=1326 audit(1738982197.305:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.5.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bed58cde9 code=0x7ffc0000 [ 408.867731][ T29] audit: type=1326 audit(1738982197.305:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.5.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bed58cde9 code=0x7ffc0000 [ 408.958049][ T29] audit: type=1326 audit(1738982197.305:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.5.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f7bed58cde9 code=0x7ffc0000 [ 408.994523][ T29] audit: type=1326 audit(1738982197.305:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.5.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bed58cde9 code=0x7ffc0000 [ 409.028086][ T8541] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 409.065989][ T29] audit: type=1326 audit(1738982197.305:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.5.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bed58cde9 code=0x7ffc0000 [ 411.748922][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 412.110715][ T8569] kvm: pic: level sensitive irq not supported [ 412.795683][ T8579] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 413.308793][ T8580] ntfs3(nullb0): Primary boot signature is not NTFS. [ 413.316216][ T8580] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 417.545559][ T8617] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 422.475921][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 422.486840][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 428.662754][ T8707] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 428.670967][ T8707] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 428.679794][ T8707] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 428.687813][ T8707] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 428.711682][ T8707] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 428.719562][ T8707] netlink: 224 bytes leftover after parsing attributes in process `syz.2.655'. [ 428.765508][ T29] audit: type=1326 audit(1738982217.605:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544ef8cde9 code=0x7ffc0000 [ 429.366702][ T29] audit: type=1326 audit(1738982217.605:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544ef8cde9 code=0x7ffc0000 [ 429.746360][ T29] audit: type=1326 audit(1738982217.605:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f544ef8cde9 code=0x7ffc0000 [ 430.535532][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'. [ 430.554706][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'. [ 430.571493][ T29] audit: type=1326 audit(1738982217.605:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544ef8cde9 code=0x7ffc0000 [ 431.630111][ T29] audit: type=1326 audit(1738982217.605:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f544ef8cde9 code=0x7ffc0000 [ 436.963127][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.672'. [ 437.121251][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 437.346428][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 440.766738][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.773278][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.504325][ T8782] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 445.055742][ T8800] xt_nfacct: accounting object `syz1' does not exists [ 445.585742][ T8803] netlink: 'syz.5.684': attribute type 10 has an invalid length. [ 445.593881][ T8803] netlink: 40 bytes leftover after parsing attributes in process `syz.5.684'. [ 445.603649][ T8803] batadv0: entered promiscuous mode [ 445.609915][ T8803] batadv0: entered allmulticast mode [ 445.665564][ T8803] bridge0: port 3(batadv0) entered blocking state [ 445.680903][ T8803] bridge0: port 3(batadv0) entered disabled state [ 447.117480][ T8803] bridge0: port 3(batadv0) entered blocking state [ 447.124101][ T8803] bridge0: port 3(batadv0) entered forwarding state [ 447.628149][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 448.204295][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 448.214871][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 448.484913][ T8823] netlink: 48 bytes leftover after parsing attributes in process `syz.4.690'. [ 448.851525][ T8832] loop4: detected capacity change from 0 to 128 [ 448.942976][ T8834] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 449.597239][ T8832] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 449.680214][ T8832] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.766435][ T8832] EXT4-fs (loop4): shut down requested (2) [ 450.084534][ T8840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.695'. [ 450.336379][ T5833] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 450.549204][ T8844] can0: slcan on ttyS3. [ 452.865766][ T8855] xt_nfacct: accounting object `syz1' does not exists [ 453.036755][ T8824] can0 (unregistered): slcan off ttyS3. [ 454.423692][ T8867] netlink: 'syz.2.701': attribute type 10 has an invalid length. [ 454.432133][ T8867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.701'. [ 457.639881][ T8892] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 458.476198][ T8895] loop5: detected capacity change from 0 to 1024 [ 460.267584][ T8906] xt_nfacct: accounting object `syz1' does not exists [ 460.607499][ T8894] syz.2.706 (8894): drop_caches: 2 [ 460.671078][ T8909] loop5: detected capacity change from 0 to 1024 [ 461.100902][ T8909] EXT4-fs (loop5): Test dummy encryption mode enabled [ 461.145731][ T8909] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 462.457835][ T8909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.601584][ T8909] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.710: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 463.477228][ T7693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.754418][ T8940] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 465.427128][ T8954] xt_nfacct: accounting object `syz1' does not exists [ 467.309902][ T8968] loop2: detected capacity change from 0 to 16 [ 467.435590][ T8968] erofs (device loop2): mounted with root inode @ nid 36. [ 467.552412][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 469.932943][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 470.766915][ T9004] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 471.626097][ T8992] non-paged memory [ 471.686920][ T8992] list_del corruption, ffff888077732200->prev is LIST_POISON2 (dead000000000122) [ 471.745323][ T8992] ------------[ cut here ]------------ [ 471.751546][ T8992] kernel BUG at lib/list_debug.c:61! [ 471.777692][ T8992] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 471.784700][ T8992] CPU: 0 UID: 0 PID: 8992 Comm: syz.6.729 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 471.794789][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 471.804872][ T8992] RIP: 0010:__list_del_entry_valid_or_report+0x12c/0x190 [ 471.811912][ T8992] Code: 8c 4c 89 fe 48 89 da e8 a2 63 36 fc 90 0f 0b 48 89 df e8 27 e0 13 fd 48 c7 c7 60 ce 60 8c 4c 89 fe 48 89 da e8 85 63 36 fc 90 <0f> 0b 4c 89 e7 e8 0a e0 13 fd 42 80 3c 2b 00 74 08 4c 89 e7 e8 db [ 471.831515][ T8992] RSP: 0018:ffffc9000396f878 EFLAGS: 00010246 [ 471.837581][ T8992] RAX: 000000000000004e RBX: dead000000000122 RCX: 8e975caa8296d200 [ 471.845547][ T8992] RDX: ffffc9000da71000 RSI: 00000000000050c2 RDI: 00000000000050c3 [ 471.853512][ T8992] RBP: dffffc0000000000 R08: ffffffff819f3f6c R09: 1ffff9200072deac [ 471.861478][ T8992] R10: dffffc0000000000 R11: fffff5200072dead R12: dead000000000122 [ 471.869449][ T8992] R13: dffffc0000000000 R14: ffff88802b8f08d8 R15: ffff888077732200 [ 471.877417][ T8992] FS: 00007f4dccd9e6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 471.886369][ T8992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.892945][ T8992] CR2: 00007f7bee2d56c0 CR3: 000000002515a000 CR4: 00000000003526f0 [ 471.900909][ T8992] DR0: 0000000000007000 DR1: 0000000000000000 DR2: 0000000000000000 [ 471.908866][ T8992] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 471.916825][ T8992] Call Trace: [ 471.920096][ T8992] [ 471.923016][ T8992] ? __die_body+0x5f/0xb0 [ 471.927351][ T8992] ? die+0x9e/0xc0 [ 471.931060][ T8992] ? do_trap+0x15a/0x3a0 [ 471.935301][ T8992] ? __list_del_entry_valid_or_report+0x12c/0x190 [ 471.941712][ T8992] ? do_error_trap+0x1dc/0x2c0 [ 471.946468][ T8992] ? __list_del_entry_valid_or_report+0x12c/0x190 [ 471.952878][ T8992] ? __pfx_do_error_trap+0x10/0x10 [ 471.957988][ T8992] ? handle_invalid_op+0x34/0x40 [ 471.962943][ T8992] ? __list_del_entry_valid_or_report+0x12c/0x190 [ 471.969369][ T8992] ? exc_invalid_op+0x38/0x50 [ 471.974048][ T8992] ? asm_exc_invalid_op+0x1a/0x20 [ 471.979076][ T8992] ? __wake_up_klogd+0xcc/0x110 [ 471.983923][ T8992] ? __list_del_entry_valid_or_report+0x12c/0x190 [ 471.990344][ T8992] ? __list_del_entry_valid_or_report+0x12b/0x190 [ 471.996766][ T8992] hci_chan_del+0x70/0x1b0 [ 472.001182][ T8992] l2cap_conn_put+0x70/0xe0 [ 472.005683][ T8992] l2cap_sock_shutdown+0xa8a/0x1020 [ 472.010878][ T8992] ? l2cap_sock_release+0x6c/0x1d0 [ 472.015983][ T8992] ? __pfx_lock_release+0x10/0x10 [ 472.021003][ T8992] ? __pfx_l2cap_sock_shutdown+0x10/0x10 [ 472.026628][ T8992] ? bt_accept_dequeue+0x3ac/0x570 [ 472.031753][ T8992] l2cap_sock_release+0x79/0x1d0 [ 472.036687][ T8992] sock_close+0xbc/0x240 [ 472.040920][ T8992] ? __pfx_sock_close+0x10/0x10 [ 472.045763][ T8992] __fput+0x3e9/0x9f0 [ 472.049741][ T8992] task_work_run+0x24f/0x310 [ 472.054326][ T8992] ? __pfx_task_work_run+0x10/0x10 [ 472.059437][ T8992] get_signal+0x15f7/0x1750 [ 472.063934][ T8992] ? __pfx_task_work_add+0x10/0x10 [ 472.069041][ T8992] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 472.074582][ T8992] ? __pfx_get_signal+0x10/0x10 [ 472.079429][ T8992] arch_do_signal_or_restart+0x96/0x860 [ 472.084974][ T8992] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 472.091119][ T8992] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 472.097098][ T8992] ? syscall_exit_to_user_mode+0xa3/0x340 [ 472.102811][ T8992] syscall_exit_to_user_mode+0xce/0x340 [ 472.108351][ T8992] do_syscall_64+0x100/0x230 [ 472.112935][ T8992] ? clear_bhb_loop+0x35/0x90 [ 472.117609][ T8992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.123511][ T8992] RIP: 0033:0x7f4dcbf8cde9 [ 472.127920][ T8992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.147518][ T8992] RSP: 002b:00007f4dccd9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 472.155958][ T8992] RAX: fffffffffffffffc RBX: 00007f4dcc1a5fa0 RCX: 00007f4dcbf8cde9 [ 472.163921][ T8992] RDX: 000000000000000e RSI: 0000200000000000 RDI: 0000000000000005 [ 472.171900][ T8992] RBP: 00007f4dcc00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 472.179880][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.187851][ T8992] R13: 0000000000000000 R14: 00007f4dcc1a5fa0 R15: 00007ffdc46ad8c8 [ 472.195827][ T8992] [ 472.198835][ T8992] Modules linked in: [ 472.203780][ T8992] ---[ end trace 0000000000000000 ]--- [ 472.824878][ T9013] tipc: Started in network mode [ 472.829940][ T9013] tipc: Node identity 1, cluster identity 4711 [ 472.836315][ T9013] tipc: Node number set to 1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 473.137939][ T8992] RIP: 0010:__list_del_entry_valid_or_report+0x12c/0x190 [ 473.235578][ T8992] Code: 8c 4c 89 fe 48 89 da e8 a2 63 36 fc 90 0f 0b 48 89 df e8 27 e0 13 fd 48 c7 c7 60 ce 60 8c 4c 89 fe 48 89 da e8 85 63 36 fc 90 <0f> 0b 4c 89 e7 e8 0a e0 13 fd 42 80 3c 2b 00 74 08 4c 89 e7 e8 db [ 473.299750][ T8992] RSP: 0018:ffffc9000396f878 EFLAGS: 00010246 [ 473.314919][ T8992] RAX: 000000000000004e RBX: dead000000000122 RCX: 8e975caa8296d200 [ 473.324954][ T8992] RDX: ffffc9000da71000 RSI: 00000000000050c2 RDI: 00000000000050c3 [ 473.364347][ T8992] RBP: dffffc0000000000 R08: ffffffff819f3f6c R09: 1ffff9200072deac [ 473.399042][ T8992] R10: dffffc0000000000 R11: fffff5200072dead R12: dead000000000122 [ 473.447605][ T8992] R13: dffffc0000000000 R14: ffff88802b8f08d8 R15: ffff888077732200 [ 473.497448][ T8992] FS: 00007f4dccd9e6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 473.555588][ T8992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.562213][ T8992] CR2: 0000200000032000 CR3: 000000002515a000 CR4: 00000000003526f0 [ 473.606667][ T8992] DR0: 0000000000007000 DR1: 0000000000000000 DR2: 0000000000000000 [ 473.626322][ T8992] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 473.634384][ T8992] Kernel panic - not syncing: Fatal exception [ 473.640699][ T8992] Kernel Offset: disabled [ 473.645011][ T8992] Rebooting in 86400 seconds..