last executing test programs: 1m10.453670743s ago: executing program 2 (id=14): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xe) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4001}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x500, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 1m9.79090054s ago: executing program 2 (id=16): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280"], 0xfc}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffff}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000180500000ad672983c000000090a011b00000000000000000a00f949cfd7ca986ca784b9abb7ad4800040900010073797a31eaff0000080005400000002b0900020073797a310000000008000a40fffffffc14000000040044a7b4906021a6f7ed7b78bf4540bff95b2587540a09850403e646604f9e3c475cb77e213ec22089417706aa144fcc068283a2fcb9fe4a2006c746d7783f1ca8fdb1ef7619a6e10de85d689fea8a6aac2f11b96bd881ace45e1f55d191eb2023af010afdb9bde9929ff6a297a7838ec5a37970cb"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) unshare(0x22020600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00'}, 0x18) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) 1m8.40688416s ago: executing program 2 (id=24): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000006000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) 1m7.877908427s ago: executing program 2 (id=26): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="18070000000000000000000000000000181200003b74c1ce0c3b97374c2481fabc3f29800b47090396413c34e4e7a35e1766e5a546d5ad3aec596515a2292db9873140cad16d260e19855c322afc6f005a967c6925588fb56f43ad24350f430000000000000000", @ANYRES32=r3, @ANYBLOB="00000000fcff0400b7030000ec000000850000001b000000b7fd00000000005dfa"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xe) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(0xffffffffffffffff, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) 59.896618403s ago: executing program 5 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0x4) 57.808662097s ago: executing program 5 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x2, 0x4, 0x5, 0x143, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 57.451489801s ago: executing program 5 (id=71): ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0x4) unshare(0x62040200) 48.839974299s ago: executing program 32 (id=35): r0 = socket$unix(0x1, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r1}, &(0x7f0000001cc0), &(0x7f0000001d00)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$SG_SET_COMMAND_Q(r5, 0x2271, &(0x7f0000000040)=0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpid() process_madvise(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2, 0x8, 0x0) 41.008194504s ago: executing program 33 (id=71): ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0x4) unshare(0x62040200) 9.481021506s ago: executing program 4 (id=156): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10c00, &(0x7f00000001c0)=ANY=[], 0x3, 0x1527, &(0x7f0000003200)="$eJzs3AuYTlX7MPD7XmttxjR4muS81ro3TxoskyQ5JMkhSZIkOSckTZIkJIackpCEHCfJYQhNDhOTnM+nnJI0eSVJEhJyWt9FvN73q/9V/6v+n+//zv27rn09+56977XX2vc8z97Pmnme77sMq9GoZtUGRAR/Cf76kAwAMQAwEAByA0AAAGXjy8Zf3J5DYvJfOwj7ez2Seq17wK4lrn/WxvXP2rj+WRvXP2vj+mdtXP8sRP32R1z/rI3rz1hWtmVGget5ybrLX5//j/n1gef//xfi63/WxvX/T3Mix39nb67/f5IL3vv/XgbXP8v4ndkfrn9Wx/XP2rj+WRvXP2vj+jOWlV3r+Wde/trSpNm0uL+Sf61//xhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ2n/VUKAK6sX+t+McYYY4wxxhhj7O/js1/rHjDGGGOMMcYYY+x/HoIACQoCyAbZIQZyQCxcB3GQE3JBbojA9RAPN0AeuBHyQj7IDwWgIBSCwqDBgAWCEIpAUYjCTVAMboYEKA4loCQ4KAWJcAuUhluhDNwGZeF2KAd3QHmoABWhEtwJleEuqAJ3Q1W4B6pBdagBNeFeqAX3QW24H+rAA1AXHoR68BDUh4ehATwCDeFRaASPQWNoAk2hGTSHFtDyX/Jj/nT+S9ADXoae0AuSoTf0gVegL/SD/jAABsKrMAheg8HwOgyBoTAM3oDh8CaMgLdgJIyC0fA2jIGxMA7GwwSYCCnwDkyCd2EyvAdTYCpMg+mQCjNgJrwPs2A2zIEPIA0+hLkwD+bDAkiHj2AhLIIM+BgWwyewBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFPoWtsA22ww7YCZ/BLvgcdsMXsAe+hEz46lJ+APAn80/9e/4F7z0CChSoUGE2zIYxGIOxGItxGIe5MBdGMILxGI95MA/mxbyYH/NjQSyIhbEwGjRISFgEi2AUo1gMi2ECJmAJLIEOHSZiIpbGW7EMlsGyWBbLYTksjxUQsBJWwsoIUAWrYFWsitWwGtbAGngv3ov3YW2sjXWwDtbFulgP62F9rI8NsAE2xIbYCBthY2yMTbEpNsfm2BJbYitsha2xNbZVgO2wHbbH9piESdgBO2BH7IidsBN2xs7YBbtgV+yG3fAlfAlfxpexF1YTvbEP9sG+2Bf74wAcgK/iIHwNX8PXcQgOxWH4Br6Bb+IIPIkjcRSOxtFYWYzFcTgeSUzEFEzBSTgJJ+NknIJTcSpOx1ScgTNxJs7C2TgbP8A0/BA/xHk4DxdgOqbjQlyEGZiBi/EULsGluAyXB1eejGtwNa7D9bgON+JG3Iyb8VP8FLfhNtyBO/Az/Aw/x8/xC/wCh2AmZuJe3Iv7cB/ux/14AA/gQTyIh/AQHsbDeASP4FE8hsfxGJ7AE3gST+FpPI1n8Ayew3N4AS9cfPKLi5RQIpvIJmJEjIgVsSJOxIlcIpeIiIiIF/Eij8gj8oq8Ir/ILwqKgqKwKCyMMIJEKIqIIiIqoqKYKCYSRIIoIUoIJ5xIFImitCgtyogyoqy4XZQTd4jyooJo4yqJSqKyaOuqiLtFVVFVVBPVRQ1RU9QUtUQtUVvUFnVEHVFX1BX1xEOi/m0xl8/OIGwkhmJjMQybimaiuWgh3sTHRSsxAluLNqKteFKMwpHYXrRySeIZ0UGMw47iOTEenxedxUTsIl4UXUU30V28JHqI1q6n6CWmYG/RR0zHvqKf6C8GiFlYXVysWA3xuhgihoph4g2xAN8UI8RbYqQYJUaLt8UYMVaME+PFBDFRpIh3xCTxrpgs3hNTxFQxTUwXqWKGmCneF7PEbDFHfCDSxIdirpgn5osFIl18JBaKRSJDfCwWi0/EErFULBPLxQqxUqwSq8UasVasE+vFBrFRbBKbxRbxqdgqtontYofYKcSVF22xR3wpMsVXYq/4h9gnvhb7xTfigPhWHBTfiUPie3FY/CCOiB/FUXFMHBc/iRPiZ3FSnBKnxS/ijDgrzonz4oLwAnoDgJRSyUBmk9lljMwhY+V1Mk7mlLlkbhmR18t4eYPMI2+UeWU+mV8WkAVlIVlYammklSRDWUQWlVF5kywmb5YJsrgsIUtKJ0vJRHmLLC1vlWXkbbKsvF2Wk3fI8rKCrCgryTtlZXmXrCLvllXlPbKarC5ryJryXllL3idry/tlHfmArCsflPXkQ7K+fFg2kI/IhvJR2Ug+JhvLJrKpbCabyxaypXxctpJPyNayjWwrn5Tt5FOyvXxaJslnZAf5rOwon5Od5POys3xBdpEvyq6ym+wuz8sL0suespdMlr1lH/mK7Cv7yf5ygBwoX5WD5GtysHxdDpFD5TD5hhwu35Qj5FtypBwlR8u35Rg5Vo6T4+UEOVGmyHfkJPmunCzfk1PkVDlNTpepcobsf7mlOX8i/93fyR986eib5Rb5qdwqt8ntcofcKT+Tu+QuuVvulnvkHpkpM+VeuVfuk/vkfrlfHpAH5EF5UB6Sh+RheVgekUfkUXlM/iJ/kifkz/KkPCVPyV/kGXlGnrt8DkChEkoqpQKVTWVXMSqHilXXqTiVU+VSuVVEXa/i1Q0qj7pR5VX5VH5VQBVUhVRhpZVRVpEKVRFVVEXVTaqYulklqOKqhCqpnCqlEtUtfzn/j/rXUrVUrVQr1Vq1Vm1VW9VOtVPtVXuVpJJUB9VBdVQdVSfVSXVWnVUX1UV1VV1Vd9Vd9VA9lAeAZJWs+qhXVF/VT/VXA9RA9aoapAapwWqwGqKGqGFqmBquhqsRaoQaqUaq0Wq0GqPGqHFqnJqgJqgUlaImqUlqspqspqgpapqaplJVqpqpZqpZapaao+aoNJWm5qq5ar6ar9JVulqoFqoMlaEWq8VqiVqqlqrlarlaqVaq1bharVVr1Xq1Xm1UG9USdeUfNLer7Wqn2ql2qV1qt9qt9qg9KlNlqr1qr9qn9qn9ar86oA6og+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqjzqhz6py6oC5cvO0LRCACFaggW5AtiAligtggNogL4oJcQa4gEkSC+CA+yBPcGOQN8gX5gwJBwaBQUDjQgQlsQEEYFAmKBtHgpqBYcHOQEBQPSgQlAxeUChKDW4LSwa1BmeC2oGxwe1AuuCMoH1QIKgaVgjuDysFdQZXg7qBqcE9QLage1AhqBvcGtYL7gtrB/UGd4IGgbvBgUC94KKgfPBw0CB4JGgaPBo2Cx4LGQZOgadAsaB60CFr+re17fzLfE66n7qWTdW/dR7+i++p+ur8eoAfqV/Ug/ZoerF/XQ/RQPUy/oYfrN/UI/ZYeqUfp0fptPUaP1eP0eD1BT9Qp+h09Sb+rJ+v39BQ9VU/T03WqnqFn6vf1LD1bz9Ef6DT9oZ6r5+n5eoFO1x/phXqRztAf68X6E71EL9XL9HK9Qq/Uq/RqvUav1ev0er1Bb9Sb9Ga9RX+qt+pterveoXfqz/Qu/bnerb/Qe/SXOlN/pffqf+h9+mu9X3+jD+hv9UH9nT6kv9eH9Q/6iP5RH9XH9HH9kz6hf9Yn9Sl9Wv+iz+iz+pw+ry9of/Hm/uLl3SijTDaTzcSYGBNrYk2ciTO5TC4TMRETb+JNHpPH5DV5TX6T3xQ0BU1hU9hcRIZMEVPERE3UFDPFTIJJMCVMCeOMM4km0ZQ2pU0ZU8aUNWVNOVPOlDflTUVz8dJ2p7nL3GXuNnebe8w9prqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpqlpapqb5qalaWlamVamtWlt2pq2pp1pZ9qb9ibJJJkOpoPpaDqaTqaT6Ww6my6mi+lqupruprvpYXqYnqanSTbJpo/pY/qavqa/6W8GmoFmkBlkBpvBZogZYoaZYWa4GW5GmBFmpBllRpu3zRgz1owz480EM9GkmBQzyUwyk81kM8VMMdPMNJNqUs1MM9PMMrPMHDPHpJk0M9fMNfPNfJNu0s1Cs9BkmAyz2Cw2S8wSs8wsMyvMCrPKrDJrzBqzzqwzG8wGs8lsMtlhi9lqtprtZrvZaXaaXWaX2W12mz1mj8k0mWav2Wv2mX1mv9lvDpgD5qA5aA6ZQ+awOWyOmCPmqDmKx81xc8KcMCfNSXPanDZnzFlzzpw3F4w3MTaHjbXX2Tib0+ayuW2MzdELAP4Z57cFbEFbyBa22ua1+f4tNtbaBFvclrAlrbOlbKK95TdxeVvBVrSV7J3ZLt/RXIltZXuXrWJr2ftsbXu/rWMfsDXtvf8W17UP2nr2MVvfNrENbDPb0LawjexjtrFtYpvaZra5bWHb2adse/u0TbLP2A722d/EC+0iu8autevservbfmFP21/sIfu9PWPP2p62lx1oX7WD7Gt2sH3dDrFDfxOPtm/bMXasHWfH2wl24m/iaXa6TbUz7Ez7vp1lZ/8mTrcf2TSbYefaeXa+XXApvtinDPuxXWw/sUvsUrvMLrcr7Eq7yq7+Z1+X2412k91sd9nP7Va7zW63O+xO+9ml+OI49tgvbab9yh6039l99mu73x62B+y3l+KL4ztsf7BH7I/2qD1mj9uf7An7sz1pT10a/8Wx/2TP2wvWWyAkQZIUBZSNslMM5aBYuo7iKCflotwUoespnm6gPHQj5aV8lJ8KUEEqRIVJkyFLRCEVoaIULZqTitHNlEDFqQSVJEelKJFuodJ0K5Wh26gs3U7l6A4qTxWoIlWiO6ky3UVV6G6qSvdQNapONagm3Uu16D6qTfdTHXqA6tKDVI8eovr0MDWgR6ghPUqN6DFqTE2oKTWj5tSCWtLj1IqeoNbUhtrSk9SOnqL29DQl0TPUgZ6ljvQcdaLnqTO9QF3oRepK3ag7vUQ96GXqSb0omXpTH3qF+lI/6k8DaCC9SoPoNRpMr9MQGkrD6A0aTm/SCHqLRtIoGk1v0xgaS+NoPE2giZRC79Akepcm03s0habSNJpOqTSDZtL7NItm0xz6gNLoQ5pL82g+LaB0+ogW0iLKoI9pMX1CS2gpLaPltIJW0ipaTWtoLa2j9bSBNtIm2kxb6FPaSttoO+2gnfQZ7aLPaTd9QXvoS8qkr2gv/YP20de0n76hA/QtHaTv6BB9T4fpBzpCP9JROkbH6Sc6QT/TSTpFp+kXOkNn6RydpwvkCUIMRShDFQZhtjB7GBPmCGPD68K4MGeYK8wdRsLrw/jwhjBPeGOYN8wX5g8LhAXDQmHhUIcmtCGFYVgkLBpGw5vCYuHNYUJYPCwRlgxdWCpMDG8JS4e3hmXC28Ky4e1hufCOsHxYIawYVgrvDCuHd4VVwrvDquE9YbWwelgjrBneG9YK7wtrh/eHdcIHwjLhg2G98KGwfvhw2CB8JGwYPho2Ch8LG4dNwqZhs7B52CJsGT4etgqfCFuHbcK24ZNhu/CpsH34dJgUPhN2CJ/9w+3JYe+wT/hK+Ero/f1yfnRBNP37WIDoomhG9OPo4ugn0SXRpdFl0eXRFdGV0VXR1dE10bXRddH10Q3RjdFN0c1R72tmB4dOOOmUC1w2l93FuBwu1l3n4lxOl8vldhF3vYt3N7g87kaX1+Vz+V0BV9AVcoWddsZZRy50RVxRF3U3uWLuZpfgirsSrqRzrpRLdC1cS9fStXJPuNaujWvrnnRPuqfcU+5p97R7xnVwz7qO7jnXyT3vOrsX3AvuRdfVdXPd3Uuuh3vZ9XS9XLJLdn1cH9fX9XX9XX830A10g9wgN9gNdkPcEDfMDXPD3XA3wo1wI91IN9qNdmPcGDfOjXMT3ASX4lLcJDfJTXaT3RQ3xU1z01yqS3Uz3Uw3y81yc9wcl+bS3Fw318138126S3cL3UKX4TLcYrfYxbglbplb5la4FW6VW+XWuDVunVvnNrgNbpPb5La4LW6r2+q2u+1up9vpdrldbrfY7fa4PS7TZbq9bq/b5/a5/e4bd8B96w6679wh97077H5wR9yP7qg75o67n9wJ97M76U650+4Xd8addefceXfBeZcSeScyKfJuZHLkvciUyNTItMj0SGpkRmRm5P3IrMjsyJzIB5G0yIeRuZF5kfmRBZH0yEeRhZFFkYzIx5HFkU8iSyJLI8siyyMrIisj3he6eC3zRX3U3+SL+Zt9gi/uS/iS3vlSPtHf4kv7W30Zf5sv62/35fwdvryv4Cv6Jr6pb+ab+xa+pX/ct/JP+Na+jW/rn/Tt/FO+vX/aJ/lnfAf/rO/on/Od/PO+s3/Bd/Ev+q6+m+/uX/I9/Mu+p+/lk31v38e/4vv6fr6/H+AH+lf9IP+aH+xf90P8UD/Mv+GH+zf9CP+WH+lH+dH+bT/Gj/Xj/Hg/wU/0Kf4dP8m/6yf79/wUP9VP89N9qp/hZ/r3/Sw/28/xH/g0/6Gf6+f5+X6BT/cf+YV+kc/wH/vF/hO/xC/1y/xyv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8V/6rf6bX673+F3+s/8Lv+53+2/8Hv8lz7Tf+X3+n/4ff5rv99/4w/4b/1B/50/5L/3h/0P/oj/0R/1x/xx/5M/4X/2J/0pf9r/4s/4s/6cP+8v8GfWGGOMMcb+FPkH23v/FzlX/hLVBwBybitw4P/eviEvwNnL3yUQAYBnenV55MpSrVpycvLlfZdICIrOA4DI1fxLU0KX46XQFp6CJGgDpf+5PeZfjtVPdDtDf9B+9HaA2H/JiRFX16+2f+vvjr+fGJv2++3jlV2C6DyAhKJXc3LA1fhq+2X+i/bztfqD/uf4OgWg9b/kxMHV+Gr7ifAEPAtJ/7YnY4wxxhhjjDH2q36iYif4E+/PC6qrOdnhavx7788ZY4wxxhhjjDH2/5fnu3V/+vGkpDad/vetqL+twbSev56MP7MzAlyaG4lc/sj2Hx/C5/51z2t/xniFV/70yjV7SWKMMcYYY4z9D7l60//bbcOvRYcYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEs6P/F14n9eiS81kNljDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGrpn/EwAA//+U3Cqx") 8.883241951s ago: executing program 1 (id=158): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 8.778216743s ago: executing program 4 (id=159): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_buf(r1, 0x0, 0x10, 0x0, &(0x7f0000000240)=0x5d) 8.011754261s ago: executing program 4 (id=160): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xfffffffffffffffb]}, &(0x7f0000000bc0), 0x0, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x8, 0x0, 0x5}, 0x10}, 0x94) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x328}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000271000/0x5000)=nil, 0x5000}, 0x1}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, &(0x7f0000002240), 0x0, 0x4000, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000600)={0x0, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900"}) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180a000000000000000000000000000085000000b4b6000025000000ffffff809500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xa3, &(0x7f0000000080)=""/163}, 0x80) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, 0x0) 7.383486188s ago: executing program 4 (id=161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0x4, 0x4000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0xfd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 7.364824082s ago: executing program 1 (id=162): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000a40)={0x1, {&(0x7f0000000500)=""/82, 0xfffffea4, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000009c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000440)=""/184, 0xfe53, 0x0, 0x3, 0x3}}, 0x48) 7.249891023s ago: executing program 0 (id=163): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000001840)=""/141, 0x8d, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000a40)={0x1, {&(0x7f0000000500)=""/82, 0xfffffea4, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000009c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000440)=""/184, 0xfe53, 0x0, 0x3, 0x3}}, 0x48) 7.081178096s ago: executing program 3 (id=164): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.068946081s ago: executing program 1 (id=165): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000980)=""/102400, 0x19000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xff) 6.769691685s ago: executing program 3 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf00) 6.688516002s ago: executing program 0 (id=167): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) socket(0x10, 0x3, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r3, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) pipe2(0x0, 0x80c80) rt_sigprocmask(0x3, 0x0, &(0x7f0000000240), 0xfea4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r7, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0137013710ff"}) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000080)={0xd, 0x8, 0x2, 0x0, 0x0, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) 5.858832629s ago: executing program 3 (id=168): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x40001) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 5.621702807s ago: executing program 0 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf00) 4.562696169s ago: executing program 1 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0x5e, 0x3, {0x20}}, {0xc}}}]}]}, 0x60}}, 0x0) 4.434121694s ago: executing program 0 (id=171): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) read$msr(r0, &(0x7f00000003c0)=""/203, 0xcb) 4.04423807s ago: executing program 3 (id=172): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x1108, &(0x7f0000000140)={0x0, 0x9e52, 0x80, 0x2000002, 0x21c}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187014, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2010000, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2f, 0x357, &(0x7f0000000240)="$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") ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x880) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000000c0)={0xf9, 0x4, 0x0, 'queue1\x00'}) 2.75253456s ago: executing program 4 (id=173): recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) io_setup(0x7, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r5, r4, &(0x7f0000002700)=0x23, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x2d}, @empty, @private=0xa010101}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f00000009c0)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") 2.249996525s ago: executing program 3 (id=174): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000400), &(0x7f0000000440)=0x40) 1.676090845s ago: executing program 0 (id=175): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000a40)={0x1, {&(0x7f0000000500)=""/82, 0xfffffea4, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000009c0)={0x2, 0x0, {&(0x7f00000007c0)=""/225, 0xe1, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, 0x0, 0x0) 1.603421386s ago: executing program 1 (id=176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x6}, 0x18) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfc9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x4, r8, 0x30, r4}, 0x10) bind$inet(r3, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x15, 0x88, 0xc000067}, 0x2c) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@rnullb, r1, &(0x7f00000001c0)={0x3, 0xe20, 0x3, 0x1, 0xfff, 0x100000000, 0x7, 0x1, 0x7}) 1.325935171s ago: executing program 0 (id=177): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.218344418s ago: executing program 4 (id=178): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x1f00}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_mount_image$udf(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00bb7fd1ca55450af989acdd31def4fb"], 0x1, 0x5c6, &(0x7f00000006c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpgrp(0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 78.681115ms ago: executing program 3 (id=179): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x83, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 1 (id=180): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.24' (ED25519) to the list of known hosts. [ 97.195318][ T5850] cgroup: Unknown subsys name 'net' [ 97.348535][ T5850] cgroup: Unknown subsys name 'cpuset' [ 97.358439][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.077679][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 101.454872][ T9] cfg80211: failed to load regulatory.db [ 102.021965][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.031049][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.040938][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.046834][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.055846][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.063896][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.064563][ T5874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.079136][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.088699][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.089499][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.101260][ T5880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 102.123659][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.131524][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.136152][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.145261][ T5884] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.155460][ T5888] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.162834][ T5884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.170704][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.171316][ T5888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.178192][ T5880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 102.186758][ T5884] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.193548][ T5886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.200448][ T5888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.215547][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.223399][ T5885] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.226609][ T5888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.232788][ T5885] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 102.245221][ T5181] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.274636][ T5885] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 102.282833][ T5885] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 103.128147][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 103.144481][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 103.301873][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 103.355673][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 103.586530][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.593908][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.601283][ T5863] bridge_slave_0: entered allmulticast mode [ 103.609795][ T5863] bridge_slave_0: entered promiscuous mode [ 103.637253][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 103.650276][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.657442][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.664818][ T5869] bridge_slave_0: entered allmulticast mode [ 103.672310][ T5869] bridge_slave_0: entered promiscuous mode [ 103.689314][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.696551][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.703921][ T5863] bridge_slave_1: entered allmulticast mode [ 103.711459][ T5863] bridge_slave_1: entered promiscuous mode [ 103.718774][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 103.746978][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.754197][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.761544][ T5869] bridge_slave_1: entered allmulticast mode [ 103.769848][ T5869] bridge_slave_1: entered promiscuous mode [ 103.910621][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.936495][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.943913][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.951078][ T5862] bridge_slave_0: entered allmulticast mode [ 103.958743][ T5862] bridge_slave_0: entered promiscuous mode [ 103.998448][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.005935][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.013605][ T5873] bridge_slave_0: entered allmulticast mode [ 104.021143][ T5873] bridge_slave_0: entered promiscuous mode [ 104.053796][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.076932][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.087498][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.095099][ T5862] bridge_slave_1: entered allmulticast mode [ 104.102632][ T5862] bridge_slave_1: entered promiscuous mode [ 104.131170][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.144090][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.154749][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.162115][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.169530][ T5873] bridge_slave_1: entered allmulticast mode [ 104.177736][ T5873] bridge_slave_1: entered promiscuous mode [ 104.254266][ T5885] Bluetooth: hci0: command tx timeout [ 104.325770][ T5883] Bluetooth: hci1: command tx timeout [ 104.325792][ T5868] Bluetooth: hci2: command tx timeout [ 104.326154][ T5868] Bluetooth: hci3: command tx timeout [ 104.331590][ T5883] Bluetooth: hci4: command tx timeout [ 104.340624][ T5863] team0: Port device team_slave_0 added [ 104.342663][ T5885] Bluetooth: hci5: command tx timeout [ 104.387047][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.400310][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.429047][ T5869] team0: Port device team_slave_0 added [ 104.438477][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.466067][ T5863] team0: Port device team_slave_1 added [ 104.472182][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.479971][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.487316][ T5867] bridge_slave_0: entered allmulticast mode [ 104.495456][ T5867] bridge_slave_0: entered promiscuous mode [ 104.502852][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.510374][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.517896][ T5864] bridge_slave_0: entered allmulticast mode [ 104.526008][ T5864] bridge_slave_0: entered promiscuous mode [ 104.552032][ T5869] team0: Port device team_slave_1 added [ 104.578523][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.604654][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.611798][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.623586][ T5867] bridge_slave_1: entered allmulticast mode [ 104.631119][ T5867] bridge_slave_1: entered promiscuous mode [ 104.655043][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.662180][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.669602][ T5864] bridge_slave_1: entered allmulticast mode [ 104.677182][ T5864] bridge_slave_1: entered promiscuous mode [ 104.812501][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.826387][ T5862] team0: Port device team_slave_0 added [ 104.843780][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.850816][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.877316][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.891406][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.898887][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.925251][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.943613][ T5873] team0: Port device team_slave_0 added [ 104.960279][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.968301][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.995329][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.010761][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.025244][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.051296][ T5862] team0: Port device team_slave_1 added [ 105.059315][ T5873] team0: Port device team_slave_1 added [ 105.081465][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.088773][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.115373][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.138378][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.280182][ T5867] team0: Port device team_slave_0 added [ 105.289930][ T5864] team0: Port device team_slave_0 added [ 105.296761][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.304609][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.330897][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.367792][ T5869] hsr_slave_0: entered promiscuous mode [ 105.374837][ T5869] hsr_slave_1: entered promiscuous mode [ 105.405212][ T5867] team0: Port device team_slave_1 added [ 105.430524][ T5864] team0: Port device team_slave_1 added [ 105.456350][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.463467][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.489485][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.501555][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.508879][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.535193][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.570790][ T5863] hsr_slave_0: entered promiscuous mode [ 105.577672][ T5863] hsr_slave_1: entered promiscuous mode [ 105.584182][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 105.589983][ T5863] Cannot create hsr debugfs directory [ 105.620752][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.627730][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.653717][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.667025][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.674047][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.700016][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.736305][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.743934][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.770140][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.784204][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.791156][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.817518][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.881957][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.889097][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.915033][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.064835][ T5864] hsr_slave_0: entered promiscuous mode [ 106.071363][ T5864] hsr_slave_1: entered promiscuous mode [ 106.077938][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 106.083744][ T5864] Cannot create hsr debugfs directory [ 106.101554][ T5873] hsr_slave_0: entered promiscuous mode [ 106.108458][ T5873] hsr_slave_1: entered promiscuous mode [ 106.115055][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 106.120781][ T5873] Cannot create hsr debugfs directory [ 106.173184][ T5862] hsr_slave_0: entered promiscuous mode [ 106.179669][ T5862] hsr_slave_1: entered promiscuous mode [ 106.186643][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 106.192366][ T5862] Cannot create hsr debugfs directory [ 106.333641][ T5885] Bluetooth: hci0: command tx timeout [ 106.392641][ T5867] hsr_slave_0: entered promiscuous mode [ 106.399215][ T5867] hsr_slave_1: entered promiscuous mode [ 106.403571][ T5885] Bluetooth: hci3: command tx timeout [ 106.405272][ T5883] Bluetooth: hci1: command tx timeout [ 106.410158][ T5181] Bluetooth: hci5: command tx timeout [ 106.416052][ T5883] Bluetooth: hci4: command tx timeout [ 106.421154][ T5868] Bluetooth: hci2: command tx timeout [ 106.428905][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 106.437855][ T5867] Cannot create hsr debugfs directory [ 107.015865][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.039134][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.059961][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.080918][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.134974][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.169762][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.182031][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.209810][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.272557][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.295766][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.312024][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.339796][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.466895][ T5873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.479005][ T5873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.492628][ T5873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.514376][ T5873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.598852][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.652068][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.668014][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.681016][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.713621][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.824472][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.832084][ T5864] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.877914][ T5864] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.908894][ T5864] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.926801][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.934211][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.960289][ T5864] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.990165][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.015849][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.022984][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.130494][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.176917][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.195740][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.202963][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.241858][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.264159][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.271377][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.339504][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.387708][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.394906][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.406155][ T5868] Bluetooth: hci0: command tx timeout [ 108.440456][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.447612][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.466467][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.485467][ T5868] Bluetooth: hci2: command tx timeout [ 108.490886][ T5868] Bluetooth: hci4: command tx timeout [ 108.496548][ T5181] Bluetooth: hci5: command tx timeout [ 108.503330][ T5181] Bluetooth: hci3: command tx timeout [ 108.503657][ T5883] Bluetooth: hci1: command tx timeout [ 108.539774][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.546932][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.609275][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.647962][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.659327][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.666512][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.790054][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.851071][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.858279][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.891249][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.922374][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.929553][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.999922][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.007106][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.045259][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.052406][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.197075][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.236643][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.350828][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.375659][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.599291][ T5869] veth0_vlan: entered promiscuous mode [ 109.690170][ T5869] veth1_vlan: entered promiscuous mode [ 109.718368][ T5863] veth0_vlan: entered promiscuous mode [ 109.807062][ T5863] veth1_vlan: entered promiscuous mode [ 109.879427][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.010133][ T5863] veth0_macvtap: entered promiscuous mode [ 110.087427][ T5863] veth1_macvtap: entered promiscuous mode [ 110.108143][ T5869] veth0_macvtap: entered promiscuous mode [ 110.199608][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.213484][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.221123][ T5869] veth1_macvtap: entered promiscuous mode [ 110.236687][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.299850][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.362054][ T2967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.372705][ T2967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.416274][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.440978][ T2967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.450355][ T2967] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.467163][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.484018][ T5883] Bluetooth: hci0: command tx timeout [ 110.563121][ T5883] Bluetooth: hci1: command tx timeout [ 110.563958][ T5885] Bluetooth: hci4: command tx timeout [ 110.568553][ T5883] Bluetooth: hci3: command tx timeout [ 110.574151][ T5868] Bluetooth: hci5: command tx timeout [ 110.579340][ T5883] Bluetooth: hci2: command tx timeout [ 110.619707][ T5862] veth0_vlan: entered promiscuous mode [ 110.631736][ T2967] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.643089][ T5873] veth0_vlan: entered promiscuous mode [ 110.668877][ T2967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.686632][ T5867] veth0_vlan: entered promiscuous mode [ 110.695288][ T2967] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.737979][ T5862] veth1_vlan: entered promiscuous mode [ 110.757791][ T5873] veth1_vlan: entered promiscuous mode [ 110.772185][ T2967] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.844415][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.852345][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.917452][ T5867] veth1_vlan: entered promiscuous mode [ 110.952307][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.962817][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.985468][ T5862] veth0_macvtap: entered promiscuous mode [ 111.102732][ T5873] veth0_macvtap: entered promiscuous mode [ 111.116179][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 111.120831][ T5862] veth1_macvtap: entered promiscuous mode [ 111.154253][ T5864] veth0_vlan: entered promiscuous mode [ 111.172475][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.184441][ T5873] veth1_macvtap: entered promiscuous mode [ 111.193862][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.208411][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.280390][ T5867] veth0_macvtap: entered promiscuous mode [ 111.311620][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.352252][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.371384][ T5864] veth1_vlan: entered promiscuous mode [ 111.380130][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.392288][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.408244][ T5867] veth1_macvtap: entered promiscuous mode [ 111.437160][ T2967] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.498553][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.512445][ T1162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.532877][ T1162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.555215][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.582026][ T1162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.708914][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.745845][ T2967] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.758124][ T2967] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.781858][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 111.812056][ T6018] 9pnet_fd: Insufficient options for proto=fd [ 111.827297][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.922492][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.938432][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007799][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.015511][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.039057][ T5864] veth0_macvtap: entered promiscuous mode [ 112.043236][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.071070][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.100187][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.161081][ T5864] veth1_macvtap: entered promiscuous mode [ 112.334127][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.344050][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.382883][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.450938][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.478179][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.498850][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.613617][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.628760][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.651764][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.819212][ T6030] loop4: detected capacity change from 0 to 2048 [ 112.871411][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.933412][ T6030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.974722][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.010956][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.039488][ T30] audit: type=1800 audit(1757956411.737:2): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 113.150837][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.152071][ T6037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14'. [ 113.191776][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.271240][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.304381][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 113.326733][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.708876][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.757281][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.794898][ T5862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.939273][ T30] audit: type=1326 audit(1757956412.647:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2198eba9 code=0x7ffc0000 [ 114.032389][ T30] audit: type=1326 audit(1757956412.677:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7efc2198eba9 code=0x7ffc0000 [ 114.107916][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 114.169991][ T30] audit: type=1326 audit(1757956412.677:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2198eba9 code=0x7ffc0000 [ 114.178806][ T6045] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.363154][ T30] audit: type=1326 audit(1757956412.677:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7efc2198eba9 code=0x7ffc0000 [ 114.363169][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.363236][ T30] audit: type=1326 audit(1757956412.677:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2198eba9 code=0x7ffc0000 [ 114.417943][ T30] audit: type=1326 audit(1757956412.697:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc2198eba9 code=0x7ffc0000 [ 114.458080][ T30] audit: type=1326 audit(1757956412.697:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2198eba9 code=0x7ffc0000 [ 114.528014][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.615311][ T30] audit: type=1326 audit(1757956412.697:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc2198eba9 code=0x7ffc0000 [ 114.646118][ T6056] pim6reg: entered allmulticast mode [ 114.736192][ T30] audit: type=1326 audit(1757956412.697:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc2198d510 code=0x7ffc0000 [ 114.813173][ T6059] pim6reg: left allmulticast mode [ 115.545739][ T6070] loop3: detected capacity change from 0 to 2048 [ 115.669732][ T6070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.759621][ T6080] loop2: detected capacity change from 0 to 1024 [ 115.776645][ T6080] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 115.800101][ T6080] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 115.869257][ T6080] JBD2: no valid journal superblock found [ 115.936014][ T6080] EXT4-fs (loop2): Could not load journal inode [ 116.033893][ T6075] bond1: entered promiscuous mode [ 116.077988][ T6075] bond1: entered allmulticast mode [ 116.121915][ T6075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.465551][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29'. [ 116.600689][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 116.685939][ T5873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.817342][ T6075] bond1 (unregistering): Released all slaves [ 117.092690][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33'. [ 117.789688][ T6100] syz.4.29 (6100) used greatest stack depth: 19752 bytes left [ 118.425731][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.39'. [ 118.606089][ T6127] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.613470][ T6127] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 118.661885][ T6127] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 118.750718][ T6127] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.756969][ T6127] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 118.779780][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 118.779803][ T30] audit: type=1326 audit(1757956417.487:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6818eba9 code=0x7ffc0000 [ 118.835166][ T6127] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 118.898037][ T6137] loop0: detected capacity change from 0 to 512 [ 118.906269][ T30] audit: type=1326 audit(1757956417.517:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f1b6818eba9 code=0x7ffc0000 [ 118.962365][ T30] audit: type=1326 audit(1757956417.517:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6818eba9 code=0x7ffc0000 [ 119.045338][ T6127] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.051353][ T6127] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.112199][ T30] audit: type=1326 audit(1757956417.517:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6818eba9 code=0x7ffc0000 [ 119.163859][ T30] audit: type=1326 audit(1757956417.517:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1b6818eba9 code=0x7ffc0000 [ 119.195057][ T6127] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.245188][ T30] audit: type=1326 audit(1757956417.517:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6818eba9 code=0x7ffc0000 [ 119.299528][ T6127] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 119.305632][ T6127] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 119.341053][ T6137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.358223][ T6127] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 119.366790][ T6137] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.421199][ T6127] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.427857][ T6127] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.464445][ T6127] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.501543][ T6127] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 119.507567][ T6127] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 119.532141][ T6137] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.43: bg 0: block 328: padding at end of block bitmap is not set [ 119.566031][ T6113] infiniband syz!: set active [ 119.572275][ T6127] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 119.597159][ T6113] infiniband syz!: added team_slave_0 [ 119.611640][ T6113] syz!: rxe_create_cq: returned err = -12 [ 119.667236][ T6113] infiniband syz!: Couldn't create ib_mad CQ [ 119.724436][ T6113] infiniband syz!: Couldn't open port 1 [ 119.847152][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.026496][ T6113] RDS/IB: syz!: added [ 120.030995][ T6113] smc: adding ib device syz! with port count 1 [ 120.083622][ T6113] smc: ib device syz! port 1 has pnetid [ 120.213729][ T6152] loop0: detected capacity change from 0 to 1024 [ 120.245383][ T6152] EXT4-fs: Ignoring removed orlov option [ 120.389234][ T6152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.576660][ T30] audit: type=1800 audit(1757956419.287:113): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.47" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 120.610036][ T6162] loop4: detected capacity change from 0 to 512 [ 120.646107][ T5883] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.674307][ T30] audit: type=1804 audit(1757956419.317:114): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.47" name="/newroot/15/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 120.697078][ T6162] EXT4-fs: Ignoring removed oldalloc option [ 120.703304][ T6162] EXT4-fs: Ignoring removed bh option [ 120.723857][ T6158] syzkaller0: entered promiscuous mode [ 120.729543][ T6158] syzkaller0: entered allmulticast mode [ 120.764427][ T6162] EXT4-fs error (device loop4): ext4_iget_extra_inode:5103: inode #15: comm syz.4.52: corrupted in-inode xattr: e_value size too large [ 120.803724][ T5883] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.857584][ T6162] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.52: couldn't read orphan inode 15 (err -117) [ 120.931568][ T6162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.089044][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.126213][ T5883] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.366961][ T5883] Bluetooth: hci4: command 0x0c1a tx timeout [ 121.445702][ T5883] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.546120][ T5883] Bluetooth: hci5: command 0x0c1a tx timeout [ 122.442322][ T6170] syz.5.56: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 122.471109][ T6170] CPU: 1 UID: 0 PID: 6170 Comm: syz.5.56 Not tainted syzkaller #0 PREEMPT(full) [ 122.471151][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.471172][ T6170] Call Trace: [ 122.471183][ T6170] [ 122.471196][ T6170] dump_stack_lvl+0x16c/0x1f0 [ 122.471256][ T6170] warn_alloc+0x248/0x3a0 [ 122.471321][ T6170] ? __pfx_warn_alloc+0x10/0x10 [ 122.471386][ T6170] ? hash_netport4_resize+0x1d8/0x1c50 [ 122.471420][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.471453][ T6170] ? __vmalloc_node_noprof+0xad/0xf0 [ 122.471496][ T6170] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 122.471532][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.471576][ T6170] ? hash_netport4_resize+0x1d8/0x1c50 [ 122.471621][ T6170] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.471663][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.471695][ T6170] ? ___kmalloc_large_node+0xed/0x160 [ 122.471728][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.471771][ T6170] __kvmalloc_node_noprof+0x30a/0x620 [ 122.471812][ T6170] ? hash_netport4_resize+0x1d8/0x1c50 [ 122.471845][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.471881][ T6170] ? __kmalloc_noprof+0x242/0x510 [ 122.471920][ T6170] ? hash_netport4_resize+0x1d8/0x1c50 [ 122.471953][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.471993][ T6170] ? hash_netport4_resize+0x1d8/0x1c50 [ 122.472026][ T6170] hash_netport4_resize+0x1d8/0x1c50 [ 122.472062][ T6170] ? __pfx_hash_netport4_add+0x10/0x10 [ 122.472097][ T6170] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 122.472126][ T6170] ? __pfx___mutex_lock+0x10/0x10 [ 122.472156][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.472202][ T6170] ? __pfx_hash_netport4_resize+0x10/0x10 [ 122.472238][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.472276][ T6170] call_ad.constprop.0+0x36d/0x940 [ 122.472311][ T6170] ? __pfx_hash_netport4_resize+0x10/0x10 [ 122.472350][ T6170] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 122.472384][ T6170] ? __pfx___nla_validate_parse+0x10/0x10 [ 122.472420][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.472454][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.472495][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.472527][ T6170] ? __nla_parse+0x40/0x60 [ 122.472563][ T6170] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 122.472608][ T6170] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 122.472646][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.472678][ T6170] ? call_rcu_tasks_generic+0x400/0x920 [ 122.472758][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.472790][ T6170] ? find_held_lock+0x2b/0x80 [ 122.472831][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.472871][ T6170] nfnetlink_rcv_msg+0x9fc/0x1200 [ 122.472920][ T6170] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 122.472960][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.472992][ T6170] ? consume_skb+0xcc/0x100 [ 122.473066][ T6170] ? __pfx___dev_queue_xmit+0x10/0x10 [ 122.473126][ T6170] netlink_rcv_skb+0x158/0x420 [ 122.473161][ T6170] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 122.473211][ T6170] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.473243][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.473309][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.473352][ T6170] ? ns_capable+0xd7/0x110 [ 122.473402][ T6170] nfnetlink_rcv+0x1b3/0x430 [ 122.473448][ T6170] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 122.473491][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.473534][ T6170] ? netlink_deliver_tap+0x1ae/0xd30 [ 122.473602][ T6170] netlink_unicast+0x5aa/0x870 [ 122.473643][ T6170] ? __pfx_netlink_unicast+0x10/0x10 [ 122.473704][ T6170] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 122.473769][ T6170] ? __lock_acquire+0xb97/0x1ce0 [ 122.473840][ T6170] netlink_sendmsg+0x8d1/0xdd0 [ 122.473883][ T6170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.473914][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.473964][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.474006][ T6170] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 122.474055][ T6170] ____sys_sendmsg+0xa98/0xc70 [ 122.474097][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.474140][ T6170] ? copy_msghdr_from_user+0x10a/0x160 [ 122.474196][ T6170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.474249][ T6170] ? __pfx_futex_wake_mark+0x10/0x10 [ 122.474298][ T6170] ___sys_sendmsg+0x134/0x1d0 [ 122.474358][ T6170] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.474439][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.474519][ T6170] __sys_sendmsg+0x16d/0x220 [ 122.474577][ T6170] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.474631][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.474674][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.474744][ T6170] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.474798][ T6170] do_syscall_64+0xcd/0x4e0 [ 122.474835][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.474871][ T6170] RIP: 0033:0x7f92a538eba9 [ 122.474899][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.474933][ T6170] RSP: 002b:00007f92a62c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.474966][ T6170] RAX: ffffffffffffffda RBX: 00007f92a55d5fa0 RCX: 00007f92a538eba9 [ 122.474989][ T6170] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 000000000000000c [ 122.475010][ T6170] RBP: 00007f92a5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 122.475032][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.475054][ T6170] R13: 00007f92a55d6038 R14: 00007f92a55d5fa0 R15: 00007ffece8ce7f8 [ 122.475103][ T6170] [ 123.038241][ T5883] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.044461][ T5883] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.058166][ T6170] Mem-Info: [ 123.061359][ T6170] active_anon:6553 inactive_anon:0 isolated_anon:0 [ 123.061359][ T6170] active_file:3556 inactive_file:40171 isolated_file:0 [ 123.061359][ T6170] unevictable:768 dirty:972 writeback:0 [ 123.061359][ T6170] slab_reclaimable:10814 slab_unreclaimable:101903 [ 123.061359][ T6170] mapped:34904 shmem:1417 pagetables:1256 [ 123.061359][ T6170] sec_pagetables:0 bounce:0 [ 123.061359][ T6170] kernel_misc_reclaimable:0 [ 123.061359][ T6170] free:1295133 free_pcp:23109 free_cma:0 [ 123.107737][ T6170] Node 0 active_anon:26212kB inactive_anon:0kB active_file:14224kB inactive_file:160484kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139616kB dirty:3884kB writeback:0kB shmem:4132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12568kB pagetables:4892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 123.141425][ T6170] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 123.171784][ T6170] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 123.201403][ T6170] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 123.214467][ T6170] Node 0 DMA32 free:1289216kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26168kB inactive_anon:0kB active_file:14224kB inactive_file:159156kB unevictable:1536kB writepending:3884kB present:3129332kB managed:2539452kB mlocked:0kB bounce:0kB free_pcp:62852kB local_pcp:32812kB free_cma:0kB [ 123.216603][ T5885] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.262707][ T6170] lowmem_reserve[]: 0 0 1 1 1 [ 123.268018][ T6170] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 123.298876][ T6170] lowmem_reserve[]: 0 0 0 0 0 [ 123.303961][ T6170] Node 1 Normal free:3881608kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24960kB local_pcp:9312kB free_cma:0kB [ 123.342618][ T6170] lowmem_reserve[]: 0 0 0 0 0 [ 123.348000][ T6170] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 123.360917][ T6170] Node 0 DMA32: 276*4kB (UME) 135*8kB (UM) 57*16kB (UM) 33*32kB (UME) 18*64kB (UME) 21*128kB (UME) 12*256kB (UME) 6*512kB (UM) 5*1024kB (UM) 2*2048kB (M) 309*4096kB (M) = 1289016kB [ 123.386897][ T6170] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 123.399040][ T6170] Node 1 Normal: 210*4kB (UE) 54*8kB (UME) 55*16kB (UME) 55*32kB (UME) 19*64kB (UME) 7*128kB (UME) 3*256kB (ME) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3881608kB [ 123.417573][ T6170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.429717][ T6170] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 123.439176][ T6170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.448832][ T5885] Bluetooth: hci4: command 0x0c1a tx timeout [ 123.455363][ T6170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 123.472343][ T6170] 45140 total pagecache pages [ 123.477217][ T6170] 0 pages in swap cache [ 123.481385][ T6170] Free swap = 124996kB [ 123.485846][ T6170] Total swap = 124996kB [ 123.490031][ T6170] 2097051 pages RAM [ 123.496667][ T6170] 0 pages HighMem/MovableOnly [ 123.501391][ T6170] 430226 pages reserved [ 123.505863][ T6170] 0 pages cma reserved [ 123.524038][ T5885] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.603294][ T5885] Bluetooth: hci5: command 0x0c1a tx timeout [ 123.890070][ T6162] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.967386][ T6179] bridge_slave_0: left allmulticast mode [ 123.975441][ T6162] Zero length message leads to an empty skb [ 123.983609][ T6179] bridge_slave_0: left promiscuous mode [ 124.006560][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.661548][ T6179] bridge_slave_1: left allmulticast mode [ 124.683192][ T6179] bridge_slave_1: left promiscuous mode [ 124.689520][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.721556][ T5862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.792521][ T6179] bond0: (slave bond_slave_0): Releasing backup interface [ 124.919643][ T6179] bond0: (slave bond_slave_1): Releasing backup interface [ 125.014746][ T6179] team0: Port device team_slave_0 removed [ 125.061045][ T6179] team0: Port device team_slave_1 removed [ 125.094935][ T6179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.102336][ T6179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.125867][ T5885] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.128922][ T5883] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.172581][ T6179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.201558][ T6179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.219367][ T6192] loop4: detected capacity change from 0 to 1024 [ 125.238441][ T6192] EXT4-fs: Ignoring removed bh option [ 125.260751][ T6192] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 125.283400][ T5883] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.338361][ T6192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.436636][ T6183] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.443344][ T6183] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.449448][ T6183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.455686][ T6183] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.461795][ T6183] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.467958][ T6183] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 125.629451][ T30] audit: type=1804 audit(1757956424.227:115): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.63" name="/newroot/8/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 127.266246][ T6222] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 127.273971][ T6222] netlink: 17 bytes leftover after parsing attributes in process `syz.3.70'. [ 127.530149][ T5883] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.536459][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.542600][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.553419][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.559852][ T5885] Bluetooth: hci5: command 0x0c1a tx timeout [ 127.593239][ T5868] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.736211][ T6217] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 127.742450][ T6217] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.748572][ T6217] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.754693][ T6217] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 127.760780][ T6217] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.766947][ T6217] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 128.740584][ T5862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.764555][ T5868] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.844327][ T5868] Bluetooth: hci5: command 0x0c1a tx timeout [ 129.850380][ T5868] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.856860][ T5181] Bluetooth: hci4: command 0x0c1a tx timeout [ 129.862879][ T5181] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.863128][ T5885] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.077500][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.416694][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.423385][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.688243][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.668602][ T6291] trusted_key: encrypted_key: insufficient parameters specified [ 145.344606][ T6296] loop3: detected capacity change from 0 to 128 [ 145.358481][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.416873][ T6296] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 145.728414][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.740457][ T5883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.754426][ T5883] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.768285][ T5883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.777687][ T5883] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.790910][ T5883] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.362684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.653459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 146.700552][ T5883] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.713389][ T5883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.741937][ T5883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.761302][ T5883] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.771768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.785773][ T5883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.873379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 146.885623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 146.976915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 147.926320][ T5885] Bluetooth: hci3: command tx timeout [ 148.963142][ T5885] Bluetooth: hci4: command tx timeout [ 150.125490][ T5885] Bluetooth: hci3: command tx timeout [ 151.043110][ T5885] Bluetooth: hci4: command tx timeout [ 151.163611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 151.172427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 151.181679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 151.353399][ T36] bridge_slave_1: left allmulticast mode [ 151.359208][ T36] bridge_slave_1: left promiscuous mode [ 151.414578][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.492811][ T36] bridge_slave_0: left allmulticast mode [ 151.511476][ T36] bridge_slave_0: left promiscuous mode [ 151.535750][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.163793][ T5885] Bluetooth: hci3: command tx timeout [ 152.307206][ T6332] 9pnet_fd: p9_fd_create_tcp (6332): problem connecting socket to 127.0.0.1 [ 152.643409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 153.129525][ T5885] Bluetooth: hci4: command tx timeout [ 153.960678][ T6344] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.244056][ T5885] Bluetooth: hci3: command tx timeout [ 154.534075][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.626729][ T6358] loop1: detected capacity change from 0 to 1764 [ 154.631424][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.653925][ T36] bond0 (unregistering): Released all slaves [ 154.687106][ T6358] process 'syz.1.114' launched './file0' with NULL argv: empty string added [ 154.914058][ T6341] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.920832][ T6341] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.927110][ T6341] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.933249][ T6341] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 154.939345][ T6341] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.945558][ T6341] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 155.034858][ T6341] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 155.099598][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 155.121980][ T6341] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.132043][ T6341] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 155.171107][ T6341] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 155.178328][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 157.373123][ T5885] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.379850][ T5883] Bluetooth: hci5: command 0x0c1a tx timeout [ 157.380175][ T5181] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.389384][ T5885] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.393275][ T5868] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.398321][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 157.620359][ T6392] loop1: detected capacity change from 0 to 256 [ 157.632023][ T6385] loop0: detected capacity change from 0 to 4096 [ 157.788776][ T6385] EXT4-fs (loop0): Test dummy encryption mode enabled [ 157.895814][ T6385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.216066][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.991648][ T5885] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.993896][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 161.003467][ T6297] chnl_net:caif_netlink_parms(): no params data found [ 161.877204][ T36] hsr_slave_0: left promiscuous mode [ 161.953483][ T36] hsr_slave_1: left promiscuous mode [ 161.959766][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.025450][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.076075][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.112295][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.190308][ T36] veth1_macvtap: left promiscuous mode [ 162.216855][ T36] veth0_macvtap: left promiscuous mode [ 162.234585][ T36] veth1_vlan: left promiscuous mode [ 162.246470][ T36] veth0_vlan: left promiscuous mode [ 162.316387][ T51] Bluetooth: hci1: unexpected event for opcode 0x2007 [ 163.190487][ T6432] loop0: detected capacity change from 0 to 1024 [ 163.373329][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.379635][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 164.284480][ T6436] loop1: detected capacity change from 0 to 4096 [ 164.504188][ T6436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.675638][ T5867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.348705][ T6455] loop0: detected capacity change from 0 to 2048 [ 167.377398][ T6456] loop1: detected capacity change from 0 to 256 [ 167.397933][ T6456] ======================================================= [ 167.397933][ T6456] WARNING: The mand mount option has been deprecated and [ 167.397933][ T6456] and is ignored by this kernel. Remove the mand [ 167.397933][ T6456] option from the mount to silence this warning. [ 167.397933][ T6456] ======================================================= [ 167.475680][ T6455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.678574][ T36] team0 (unregistering): Port device team_slave_1 removed [ 167.767029][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.831378][ T36] team0 (unregistering): Port device team_slave_0 removed [ 167.870852][ T1162] smc: removing ib device syz! [ 168.449519][ T5181] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 174.136241][ T6297] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.184082][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.205227][ T6297] bridge_slave_0: entered allmulticast mode [ 174.222873][ T6514] loop4: detected capacity change from 0 to 256 [ 174.224846][ T6297] bridge_slave_0: entered promiscuous mode [ 174.267908][ T6303] chnl_net:caif_netlink_parms(): no params data found [ 174.291903][ T6514] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119ebd0) [ 174.346412][ T6514] exFAT-fs (loop4): invalid boot region [ 174.352091][ T6514] exFAT-fs (loop4): failed to recognize exfat type [ 174.527580][ T6297] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.573187][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.580448][ T6297] bridge_slave_1: entered allmulticast mode [ 174.691032][ T6297] bridge_slave_1: entered promiscuous mode [ 175.195675][ T6520] input: syz1 as /devices/virtual/input/input5 [ 175.446282][ T6523] loop0: detected capacity change from 0 to 512 [ 175.574383][ T6523] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: comm syz.0.157: error while reading EA inode 32 err=-116 [ 175.820892][ T6523] EXT4-fs (loop0): Remounting filesystem read-only [ 175.841040][ T6523] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 175.876077][ T6523] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 175.897539][ T6523] EXT4-fs (loop0): 1 orphan inode deleted [ 175.920563][ T6523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.259046][ T5863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.647001][ T6297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.337862][ T6297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.123329][ T6571] loop0: detected capacity change from 0 to 128 [ 181.146856][ T6571] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 181.311955][ T6571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.474607][ T6570] loop4: detected capacity change from 0 to 512 [ 181.581614][ T6297] team0: Port device team_slave_0 added [ 181.595517][ T6570] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.173: error while reading EA inode 32 err=-116 [ 181.626211][ T6297] team0: Port device team_slave_1 added [ 181.666381][ T6570] EXT4-fs (loop4): Remounting filesystem read-only [ 181.685292][ T6570] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 181.732212][ T6570] EXT4-fs (loop4): 1 orphan inode deleted [ 181.761381][ T6570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.784269][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 181.795232][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 181.804040][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.170'. [ 182.055651][ T6578] loop1: detected capacity change from 0 to 2048 [ 182.076833][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.126329][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.180785][ T6297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.254062][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.265394][ T6065] loop1: p2 p3 p7 [ 182.270891][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.272505][ T5862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.288114][ T6303] bridge_slave_0: entered allmulticast mode [ 182.295100][ T6582] loop0: detected capacity change from 0 to 512 [ 182.306910][ T6303] bridge_slave_0: entered promiscuous mode [ 182.328107][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.354232][ T6582] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 182.401923][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.453592][ T6582] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 182.488327][ T6578] loop1: p2 p3 p7 [ 182.503034][ T6297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.528904][ T24] IPVS: starting estimator thread 0... [ 182.589956][ T6582] EXT4-fs (loop0): 1 truncate cleaned up [ 182.602113][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.613966][ T6589] loop4: detected capacity change from 0 to 512 [ 182.620818][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.636005][ T6589] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 182.643806][ T6589] UDF-fs: Scanning with blocksize 512 failed [ 182.650776][ T6589] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 182.653775][ T6303] bridge_slave_1: entered allmulticast mode [ 182.658283][ T6589] UDF-fs: Scanning with blocksize 1024 failed [ 182.670857][ T6588] IPVS: using max 23 ests per chain, 55200 per kthread [ 182.680491][ T6589] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 182.685342][ T6582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.687961][ T6589] UDF-fs: Scanning with blocksize 2048 failed [ 182.711515][ T6589] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 182.733452][ T6303] bridge_slave_1: entered promiscuous mode [ 182.747989][ T6589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.519767][ T6595] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.560819][ T6597] ------------[ cut here ]------------ [ 183.566906][ T6597] verifier bug: scc exit: no visit info for call chain (1)(1) [ 183.599698][ T6597] WARNING: CPU: 0 PID: 6597 at kernel/bpf/verifier.c:1949 maybe_exit_scc+0x768/0x8d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 183.609837][ T6597] Modules linked in: [ 183.614076][ T6597] CPU: 0 UID: 0 PID: 6597 Comm: syz.3.179 Not tainted syzkaller #0 PREEMPT(full) [ 183.623588][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.634060][ T6597] RIP: 0010:maybe_exit_scc+0x768/0x8d0 [ 183.640623][ T6597] Code: ff ff e8 6b 82 e8 ff c6 05 83 e2 c0 0e 01 90 48 89 ee 48 89 df e8 f8 47 fb ff 48 c7 c7 00 95 b5 8b 48 89 c6 e8 a9 27 a7 ff 90 <0f> 0b 90 90 e9 4e ff ff ff e8 6a ec 4d 00 e9 7f f9 ff ff 4c 8b 4c [ 183.661296][ T6597] RSP: 0018:ffffc90003a6f500 EFLAGS: 00010282 [ 183.667728][ T6597] RAX: 0000000000000000 RBX: ffff888055318000 RCX: ffffc9000c79d000 [ 183.676061][ T6597] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 183.684172][ T6597] RBP: ffff88805531e328 R08: 0000000000000001 R09: 0000000000000000 [ 183.692157][ T6597] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200074dea7 [ 183.700215][ T6597] R13: 0000000000000000 R14: ffff8880330c2900 R15: dffffc0000000000 [ 183.708352][ T6597] FS: 00007f86861b46c0(0000) GS:ffff8881246b3000(0000) knlGS:0000000000000000 [ 183.717349][ T6597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.724063][ T6597] CR2: 0000200000003000 CR3: 0000000053a08000 CR4: 0000000000350ef0 [ 183.732051][ T6597] Call Trace: [ 183.735394][ T6597] [ 183.739144][ T6597] ? __pfx_maybe_exit_scc+0x10/0x10 [ 183.745087][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.750750][ T6597] ? check_atomic_rmw+0xa26/0x1100 [ 183.755971][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.761644][ T6597] ? check_atomic_rmw+0x81/0x1100 [ 183.766991][ T6597] do_check_common+0x20cc/0xb410 [ 183.772033][ T6597] ? __pfx_do_check_common+0x10/0x10 [ 183.777407][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.783175][ T6597] ? lockdep_hardirqs_on+0x51/0x110 [ 183.788416][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.794103][ T6597] ? kfree+0x2b4/0x4d0 [ 183.798186][ T6597] ? bpf_check+0x7cf8/0xc4d0 [ 183.802810][ T6597] bpf_check+0x8763/0xc4d0 [ 183.807322][ T6597] ? __pfx_bpf_check+0x10/0x10 [ 183.812126][ T6597] ? __lock_acquire+0xb97/0x1ce0 [ 183.817125][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.822765][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.828482][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.834145][ T6597] ? __asan_memset+0x23/0x50 [ 183.838747][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.845289][ T6597] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 183.850331][ T6597] bpf_prog_load+0xe41/0x2490 [ 183.855540][ T6597] ? __pfx_bpf_prog_load+0x10/0x10 [ 183.860687][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.866353][ T6597] __sys_bpf+0x4a3f/0x4de0 [ 183.870776][ T6597] ? __pfx___sys_bpf+0x10/0x10 [ 183.875574][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.881214][ T6597] ? cap_capable+0xb3/0x250 [ 183.885749][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.891418][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.897109][ T6597] ? do_futex+0x122/0x350 [ 183.901463][ T6597] ? __pfx_do_futex+0x10/0x10 [ 183.906241][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.911884][ T6597] ? xfd_validate_state+0x61/0x180 [ 183.917064][ T6597] __x64_sys_bpf+0x78/0xc0 [ 183.921492][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.927478][ T6597] ? lockdep_hardirqs_on+0x7c/0x110 [ 183.932695][ T6597] do_syscall_64+0xcd/0x4e0 [ 183.937275][ T6597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.943986][ T6597] RIP: 0033:0x7f868538eba9 [ 183.949119][ T6597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.967774][ T6303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.968892][ T6597] RSP: 002b:00007f86861b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.986432][ T6597] RAX: ffffffffffffffda RBX: 00007f86855d5fa0 RCX: 00007f868538eba9 [ 183.994535][ T6597] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 184.002520][ T6597] RBP: 00007f8685411e19 R08: 0000000000000000 R09: 0000000000000000 [ 184.010975][ T6597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.019171][ T6597] R13: 00007f86855d6038 R14: 00007f86855d5fa0 R15: 00007fff7e7df728 [ 184.027245][ T6597] [ 184.030274][ T6597] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.037559][ T6597] CPU: 0 UID: 0 PID: 6597 Comm: syz.3.179 Not tainted syzkaller #0 PREEMPT(full) [ 184.046773][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.056845][ T6597] Call Trace: [ 184.060392][ T6597] [ 184.063326][ T6597] dump_stack_lvl+0x3d/0x1f0 [ 184.067935][ T6597] vpanic+0x6e8/0x7a0 [ 184.071939][ T6597] ? __pfx_vpanic+0x10/0x10 [ 184.076457][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.082100][ T6597] ? maybe_exit_scc+0x768/0x8d0 [ 184.087049][ T6597] panic+0xca/0xd0 [ 184.090786][ T6597] ? __pfx_panic+0x10/0x10 [ 184.095235][ T6597] check_panic_on_warn+0xab/0xb0 [ 184.100173][ T6597] __warn+0xf6/0x3c0 [ 184.104088][ T6597] ? preempt_schedule_notrace+0x62/0xe0 [ 184.109648][ T6597] ? maybe_exit_scc+0x768/0x8d0 [ 184.114508][ T6597] report_bug+0x3c3/0x580 [ 184.118849][ T6597] ? maybe_exit_scc+0x768/0x8d0 [ 184.123708][ T6597] handle_bug+0x184/0x210 [ 184.128050][ T6597] exc_invalid_op+0x17/0x50 [ 184.132549][ T6597] asm_exc_invalid_op+0x1a/0x20 [ 184.137396][ T6597] RIP: 0010:maybe_exit_scc+0x768/0x8d0 [ 184.142865][ T6597] Code: ff ff e8 6b 82 e8 ff c6 05 83 e2 c0 0e 01 90 48 89 ee 48 89 df e8 f8 47 fb ff 48 c7 c7 00 95 b5 8b 48 89 c6 e8 a9 27 a7 ff 90 <0f> 0b 90 90 e9 4e ff ff ff e8 6a ec 4d 00 e9 7f f9 ff ff 4c 8b 4c [ 184.162468][ T6597] RSP: 0018:ffffc90003a6f500 EFLAGS: 00010282 [ 184.168535][ T6597] RAX: 0000000000000000 RBX: ffff888055318000 RCX: ffffc9000c79d000 [ 184.176499][ T6597] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 184.184461][ T6597] RBP: ffff88805531e328 R08: 0000000000000001 R09: 0000000000000000 [ 184.192425][ T6597] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200074dea7 [ 184.200387][ T6597] R13: 0000000000000000 R14: ffff8880330c2900 R15: dffffc0000000000 [ 184.208359][ T6597] ? __warn_printk+0x1a5/0x350 [ 184.213157][ T6597] ? __pfx_maybe_exit_scc+0x10/0x10 [ 184.218387][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.224021][ T6597] ? check_atomic_rmw+0xa26/0x1100 [ 184.229138][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.234771][ T6597] ? check_atomic_rmw+0x81/0x1100 [ 184.239830][ T6597] do_check_common+0x20cc/0xb410 [ 184.244824][ T6597] ? __pfx_do_check_common+0x10/0x10 [ 184.250127][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.255783][ T6597] ? lockdep_hardirqs_on+0x51/0x110 [ 184.261015][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.266652][ T6597] ? kfree+0x2b4/0x4d0 [ 184.270735][ T6597] ? bpf_check+0x7cf8/0xc4d0 [ 184.275344][ T6597] bpf_check+0x8763/0xc4d0 [ 184.279808][ T6597] ? __pfx_bpf_check+0x10/0x10 [ 184.284581][ T6597] ? __lock_acquire+0xb97/0x1ce0 [ 184.289548][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.295185][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.300829][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.306460][ T6597] ? __asan_memset+0x23/0x50 [ 184.311099][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.316750][ T6597] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 184.321811][ T6597] bpf_prog_load+0xe41/0x2490 [ 184.326518][ T6597] ? __pfx_bpf_prog_load+0x10/0x10 [ 184.331708][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.337355][ T6597] __sys_bpf+0x4a3f/0x4de0 [ 184.341783][ T6597] ? __pfx___sys_bpf+0x10/0x10 [ 184.346553][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.352194][ T6597] ? cap_capable+0xb3/0x250 [ 184.356714][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.362353][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.367987][ T6597] ? do_futex+0x122/0x350 [ 184.372335][ T6597] ? __pfx_do_futex+0x10/0x10 [ 184.377047][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.382678][ T6597] ? xfd_validate_state+0x61/0x180 [ 184.387831][ T6597] __x64_sys_bpf+0x78/0xc0 [ 184.392249][ T6597] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.397880][ T6597] ? lockdep_hardirqs_on+0x7c/0x110 [ 184.403096][ T6597] do_syscall_64+0xcd/0x4e0 [ 184.407617][ T6597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.413508][ T6597] RIP: 0033:0x7f868538eba9 [ 184.417926][ T6597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.437531][ T6597] RSP: 002b:00007f86861b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.445944][ T6597] RAX: ffffffffffffffda RBX: 00007f86855d5fa0 RCX: 00007f868538eba9 [ 184.453911][ T6597] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 184.461886][ T6597] RBP: 00007f8685411e19 R08: 0000000000000000 R09: 0000000000000000 [ 184.469847][ T6597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.477820][ T6597] R13: 00007f86855d6038 R14: 00007f86855d5fa0 R15: 00007fff7e7df728 [ 184.486149][ T6597] [ 184.489386][ T6597] Kernel Offset: disabled [ 184.493703][ T6597] Rebooting in 86400 seconds..