last executing test programs: 52.953760232s ago: executing program 0 (id=84): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4084, 0xff4}], 0x1, 0x0, 0x0) 52.356957197s ago: executing program 0 (id=85): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) io_uring_setup(0x1d06, &(0x7f00000003c0)={0x0, 0x4, 0x2, 0x0, 0xa7}) 46.897401644s ago: executing program 0 (id=105): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') read$FUSE(r0, &(0x7f0000001d00)={0x2020}, 0x2020) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1, 0x9, 0x4) 45.470094491s ago: executing program 0 (id=108): mkdir(&(0x7f0000000080)='./file1\x00', 0x5c) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x100000001) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, 0x0, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r7, 0x541b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bb67a153cd0e3e4a1aac449e5ad88b56923d9dfe", "b1610538917aa875e9b6000000007aa56a33d100"}) recvmmsg(r6, &(0x7f0000004300), 0x3a4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ppoll(0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0xc0046209, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100008003000000fcffffff00040000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000200"/28], 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 44.393904649s ago: executing program 0 (id=114): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000340), 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x80, 0x6}, 0x4) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) 40.796830535s ago: executing program 0 (id=123): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7, 0x80, 0x3, 0x4, {{0xd, 0x4, 0x3, 0xe, 0x34, 0x61, 0x0, 0xe5, 0x0, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x5f, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @empty, @multicast1]}]}}}}}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe5, '\x00', r0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) creat(&(0x7f0000000000)='./file1\x00', 0xa6) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x80, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) ioctl$EVIOCGKEYCODE(r3, 0x80084504, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r4, 0x409, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xea8a}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfffff000, 0xd, 0x0, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f2", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 25.045467675s ago: executing program 32 (id=123): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x7, 0x80, 0x3, 0x4, {{0xd, 0x4, 0x3, 0xe, 0x34, 0x61, 0x0, 0xe5, 0x0, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x5f, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @empty, @multicast1]}]}}}}}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe5, '\x00', r0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) creat(&(0x7f0000000000)='./file1\x00', 0xa6) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x80, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) ioctl$EVIOCGKEYCODE(r3, 0x80084504, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r4, 0x409, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xea8a}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfffff000, 0xd, 0x0, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f2", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.66606866s ago: executing program 5 (id=216): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000440)={0x6, @local, 0x0, 0xfffffffc, 'lblc\x00'}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r6, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) 8.74188264s ago: executing program 1 (id=219): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 8.741482668s ago: executing program 3 (id=220): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @remote, 0x9}]}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000280)={r2}, &(0x7f0000000100)=0x8) 8.621264629s ago: executing program 5 (id=223): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'dh\x00', 0x1, 0x2, 0x6f}, 0x2c) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}}, 0x4004) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000080)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x181a}, {@local, 0x4e20, 0x2, 0xc5, 0x12d5c, 0x12d5c}}, 0x44) 8.376669814s ago: executing program 1 (id=224): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) 8.072820334s ago: executing program 3 (id=226): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x556, &(0x7f0000000980)="$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") r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x22020600) r3 = socket(0x1, 0x3, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) setns(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) 7.021288636s ago: executing program 1 (id=227): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x1, @ANYBLOB="04000000000000000000", @ANYBLOB], 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtclass={0x24, 0x28, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xffe0}, {0x7, 0xfff3}, {0xffff, 0x8}}}, 0x24}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x4000, 0x0, @loopback}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x91, '\x00', r3, @fallback=0x32, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0x1, 0x1c66, 0x259}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21}, 0x1c) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000900)=@bpq0, 0x10) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x8000, @empty, 0x3d}, 0x1c) 7.020820967s ago: executing program 4 (id=228): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.987055679s ago: executing program 2 (id=229): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xb}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'geneve1\x00'}]}}]}, 0x48}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.828620013s ago: executing program 5 (id=230): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 5.64775595s ago: executing program 1 (id=231): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000041fd4b5c5b6b658f0b000000050000000800020001000000"], 0x1c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x4004480c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x690a, 0x0, &(0x7f0000000140), 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r4, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000700)=0x12) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7], 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x3, 0x0, @empty}}, 0xfffffffc, 0x3, 0x989, 0x0, 0x84, 0x8000}, 0x9c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) 5.647233238s ago: executing program 4 (id=232): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000001", @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e65746465e2f080166e23ef9300000008000d000500000008"], 0x3c}, 0x1, 0x0, 0x0, 0x44805}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 5.589299515s ago: executing program 3 (id=233): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x101, @default, @rose={'rose', 0x0}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 5.583747535s ago: executing program 5 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x90, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2, 0xff}, @void, @val={0x25, 0x3, {0x0, 0x38, 0x9}}, @void, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x5, 0x0, {0x1, 0x7, 0x0, 0x81, 0x0, 0x1, 0x1, 0x3}, 0x8, 0x10}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x20}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x90}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x1c, r3, 0x801, 0x0, 0x25dfdbfd, {{0x28}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 5.430084449s ago: executing program 4 (id=235): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000440)={0x6, @local, 0x0, 0xfffffffc, 'lblc\x00'}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r6, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) 5.34969067s ago: executing program 2 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) r2 = io_uring_setup(0x1d06, &(0x7f00000003c0)={0x0, 0x4, 0x2, 0x0, 0xa7}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(r2, 0x6252, 0xc09b, 0x0, &(0x7f0000000000)={[0x7ff]}, 0xfffffdfe) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c800, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x1a7, &(0x7f0000000640)="$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") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 4.001264771s ago: executing program 2 (id=237): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x1, @empty, 0xf684}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet6(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004084) 3.949038765s ago: executing program 4 (id=238): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r1], 0x40}}, 0x0) 3.753953924s ago: executing program 2 (id=239): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) 3.276960502s ago: executing program 3 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4003a00) syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000200)='./file0\x00', 0x1100005, &(0x7f0000000240)=ANY=[@ANYBLOB="005bdefa8134"], 0x1, 0x5bd, &(0x7f0000000680)="$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") 2.371764614s ago: executing program 3 (id=241): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000014f9ffffff4e0accec60b300"], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$eJzs3c9qY1UYAPDvpkka7SJZuBLBu5iFG8tkti7MIBXErpQs/AM6ODMwNGGggcCoGGblE7hw4Xu4cy+48Q0EH8CdgxSO3NzbJLZp2rSmlfr7bXo45/vu+U7uabO43NPPXxsePHw6evz869+i1cqi1otevMiiE7U4lioBANwKL1KKPy71/V6vbaomAGCzFr7/G2eEbJ/uenvTZQEAG/ThRx+/f39/f++DPG9FDL8d97Mof5bj9x/HkxjEo7gb7TiaPwtIqWy/+97+XtTzQifuDCfjfpE5/OyXxccGRX432tFZnt/NSwv5k3G/ES9HZFnEk15RyL1oxyun8ovxvXtL8qPfjDda1SKL+XejHb9+EU9jEA+nzzTm83/TzfN30nd/fvVJEVzkZ5Nxf3saN5e2rvveAAAAAAAAAAAAAAAAAAAAAABwe+3mM524Myy6qvN3to6m47v/GJ+er1Objpf5WURz2jhxPtAkxQ/H5+vczfM8ZWX8/Hyferxaj/qNLRwAAAAAAAAAAAAAAAAAAAD+Q0bPvjx4MBg8OvxXGtVL/rPX+i97nd5Cz+uxOnh7rbliqwovaj0Z0/350+Gsp1jEZYofN/KIVTU3TvW8VNRz/pX/SimlLIu42m1qXGSucxo7q2OKD/in73fePHiQnfcZto5v3I+LQ804HD07cU8jW6fCtNb2a66IaVY75kLX2bniL9Fbv5eTVT3ZGqtoVI04a/u11trP1/c3CAAAAAAAAAAAAAAAAAAAKM1f+l0y+Hxlam1jRQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANZv///81GpMqeXlMSmky62nG4eiGlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wN8BAAD//7DYbww=") mkdir(&(0x7f0000000080)='./file0\x00', 0xfffe) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x2000) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) 1.390695165s ago: executing program 3 (id=242): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0x0, 0x3}, 0x1}, 0x18) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="1dbcaf41a40e7f8d47", 0x9}], 0x1) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0xfffe}}, 0x0) 1.143077479s ago: executing program 2 (id=243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 1.142508357s ago: executing program 5 (id=244): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VIDIOC_ENUMINPUT(r4, 0xc04c561a, &(0x7f0000000380)={0x1, "497aa4ec7afa5ae757b46c4184492f8c3de6b2624e208c9905349b9adfc31671", 0x1, 0x9, 0x2, 0x320000, 0x20800, 0x4}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x23d) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000d}) r7 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000200)={0x0, 0x1, 0x2}) 1.141189055s ago: executing program 4 (id=245): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r1, r1) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1d8}}], 0x1, 0x0) 960.711369ms ago: executing program 2 (id=246): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 950.901671ms ago: executing program 1 (id=247): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, &(0x7f00000000c0)) 946.61541ms ago: executing program 4 (id=248): openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x110000, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) chmod(0x0, 0x23f) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r3, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 524.767171ms ago: executing program 1 (id=249): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x8) r1 = socket$inet6(0xa, 0x802, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x46002) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040), 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000700)=ANY=[], 0x6, 0x2ab, &(0x7f0000000b00)="$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") sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505331, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000003c0)={{0x7, 0xf}, {0xee, 0x7}, 0x8, 0x9, 0x7}) io_setup(0x203, 0x0) io_submit(0x0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x36) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 0s ago: executing program 5 (id=250): mkdir(&(0x7f0000000080)='./file1\x00', 0x5c) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x100000001) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xe) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r6, 0x541b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bb67a153cd0e3e4a1aac449e5ad88b56923d9dfe", "b1610538917aa875e9b6000000007aa56a33d100"}) recvmmsg(r5, &(0x7f0000004300), 0x3a4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0xc0046209, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100008003000000fcffff", @ANYRES32=0x1, @ANYBLOB="ff030000000000000000000060e30d380000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000200"/28], 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 71.444154][ T5815] cgroup: Unknown subsys name 'net' [ 71.582765][ T5815] cgroup: Unknown subsys name 'cpuset' [ 71.591229][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.012015][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.669011][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.677149][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.706508][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.718791][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.727696][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.736061][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.743964][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.752881][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.760660][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.768755][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.776402][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.786068][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.792564][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.794652][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.808915][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.809261][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.818017][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.823596][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.831350][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.845939][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.855173][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.863132][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.864830][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.878349][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.890994][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.891347][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.898357][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.906525][ T5846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.914001][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.920770][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.926995][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.944244][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.955979][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.963960][ T5850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.971568][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.979713][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.405179][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 76.458619][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 76.565034][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 76.712155][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.720001][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.727422][ T5827] bridge_slave_0: entered allmulticast mode [ 76.734798][ T5827] bridge_slave_0: entered promiscuous mode [ 76.767712][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 76.782231][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 76.796306][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.806066][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.813508][ T5827] bridge_slave_1: entered allmulticast mode [ 76.820959][ T5827] bridge_slave_1: entered promiscuous mode [ 76.831438][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.838522][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.845836][ T5828] bridge_slave_0: entered allmulticast mode [ 76.852961][ T5828] bridge_slave_0: entered promiscuous mode [ 76.909402][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.916595][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.923911][ T5828] bridge_slave_1: entered allmulticast mode [ 76.931143][ T5828] bridge_slave_1: entered promiscuous mode [ 76.965231][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.973327][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.980600][ T5838] bridge_slave_0: entered allmulticast mode [ 76.987435][ T5838] bridge_slave_0: entered promiscuous mode [ 77.038381][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.045781][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.053419][ T5838] bridge_slave_1: entered allmulticast mode [ 77.060397][ T5838] bridge_slave_1: entered promiscuous mode [ 77.071601][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.129240][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.141037][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.195920][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.205895][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 77.221488][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.228656][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.236007][ T5836] bridge_slave_0: entered allmulticast mode [ 77.243004][ T5836] bridge_slave_0: entered promiscuous mode [ 77.251534][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.258613][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.265949][ T5836] bridge_slave_1: entered allmulticast mode [ 77.272915][ T5836] bridge_slave_1: entered promiscuous mode [ 77.282035][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.303578][ T5827] team0: Port device team_slave_0 added [ 77.364939][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.385542][ T5827] team0: Port device team_slave_1 added [ 77.402753][ T5828] team0: Port device team_slave_0 added [ 77.425483][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.432698][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.440209][ T5826] bridge_slave_0: entered allmulticast mode [ 77.447023][ T5826] bridge_slave_0: entered promiscuous mode [ 77.475322][ T5828] team0: Port device team_slave_1 added [ 77.493028][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.500611][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.526919][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.550258][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.557418][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.565713][ T5826] bridge_slave_1: entered allmulticast mode [ 77.572813][ T5826] bridge_slave_1: entered promiscuous mode [ 77.592470][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.605825][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.628476][ T5838] team0: Port device team_slave_0 added [ 77.651634][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.658639][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.685072][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.730375][ T5838] team0: Port device team_slave_1 added [ 77.736665][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.743764][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.770045][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.784258][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.791551][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.817653][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.836916][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.888950][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.901419][ T5836] team0: Port device team_slave_0 added [ 77.916878][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.928788][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.955459][ T5834] Bluetooth: hci1: command tx timeout [ 77.960968][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.966462][ T5834] Bluetooth: hci2: command tx timeout [ 77.973540][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.983901][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.010139][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.028981][ T5834] Bluetooth: hci3: command tx timeout [ 78.028990][ T5136] Bluetooth: hci0: command tx timeout [ 78.029421][ T5136] Bluetooth: hci4: command tx timeout [ 78.034858][ T5834] Bluetooth: hci5: command tx timeout [ 78.092334][ T5836] team0: Port device team_slave_1 added [ 78.101474][ T5826] team0: Port device team_slave_0 added [ 78.131696][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.139211][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.146376][ T5837] bridge_slave_0: entered allmulticast mode [ 78.153843][ T5837] bridge_slave_0: entered promiscuous mode [ 78.183364][ T5826] team0: Port device team_slave_1 added [ 78.201745][ T5827] hsr_slave_0: entered promiscuous mode [ 78.208225][ T5827] hsr_slave_1: entered promiscuous mode [ 78.221472][ T5828] hsr_slave_0: entered promiscuous mode [ 78.227760][ T5828] hsr_slave_1: entered promiscuous mode [ 78.234441][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.244090][ T5828] Cannot create hsr debugfs directory [ 78.262180][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.269531][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.276684][ T5837] bridge_slave_1: entered allmulticast mode [ 78.283964][ T5837] bridge_slave_1: entered promiscuous mode [ 78.300272][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.307315][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.334072][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.402825][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.410536][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.437145][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.455249][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.462609][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.489685][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.532317][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.557374][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.564690][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.590891][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.612059][ T5838] hsr_slave_0: entered promiscuous mode [ 78.618545][ T5838] hsr_slave_1: entered promiscuous mode [ 78.624946][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.632772][ T5838] Cannot create hsr debugfs directory [ 78.653581][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.696180][ T5836] hsr_slave_0: entered promiscuous mode [ 78.707099][ T5836] hsr_slave_1: entered promiscuous mode [ 78.713504][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.722218][ T5836] Cannot create hsr debugfs directory [ 78.766946][ T5837] team0: Port device team_slave_0 added [ 78.775007][ T5837] team0: Port device team_slave_1 added [ 78.923459][ T5826] hsr_slave_0: entered promiscuous mode [ 78.930446][ T5826] hsr_slave_1: entered promiscuous mode [ 78.936626][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.944300][ T5826] Cannot create hsr debugfs directory [ 78.951129][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.958094][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.984226][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.044791][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.054616][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.081631][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.186354][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.197858][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.208356][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.222680][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.304056][ T5837] hsr_slave_0: entered promiscuous mode [ 79.311125][ T5837] hsr_slave_1: entered promiscuous mode [ 79.317421][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.325231][ T5837] Cannot create hsr debugfs directory [ 79.374616][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.384840][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.426567][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.461986][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.554644][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.591662][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.617095][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.646135][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.694181][ T5838] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.715405][ T5838] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.741659][ T5838] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.774647][ T5838] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.809959][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.829619][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.836506][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.849182][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.864070][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.927494][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.945103][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.961283][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.992562][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.003063][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.017892][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.029278][ T5834] Bluetooth: hci2: command tx timeout [ 80.033963][ T5849] Bluetooth: hci1: command tx timeout [ 80.056098][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.063359][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.094202][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.101331][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.109389][ T5849] Bluetooth: hci5: command tx timeout [ 80.112639][ T5834] Bluetooth: hci4: command tx timeout [ 80.114783][ T5849] Bluetooth: hci3: command tx timeout [ 80.120488][ T5136] Bluetooth: hci0: command tx timeout [ 80.158298][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.176382][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.236417][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.243560][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.254820][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.261932][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.309181][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.365823][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.388351][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.415365][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.422476][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.481248][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.488343][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.498312][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.505428][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.522921][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.530060][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.547000][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.557639][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.623325][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.652276][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.691398][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.698539][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.721781][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.728918][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.748372][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.755496][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.784811][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.833898][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.841155][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.983034][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.043738][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.215546][ T5828] veth0_vlan: entered promiscuous mode [ 81.254916][ T5828] veth1_vlan: entered promiscuous mode [ 81.345556][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.496181][ T5836] veth0_vlan: entered promiscuous mode [ 81.534454][ T5828] veth0_macvtap: entered promiscuous mode [ 81.615076][ T5836] veth1_vlan: entered promiscuous mode [ 81.637643][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.679964][ T5828] veth1_macvtap: entered promiscuous mode [ 81.714175][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.760754][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.855453][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.945053][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.007820][ T5826] veth0_vlan: entered promiscuous mode [ 82.021914][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.049323][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.058099][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.076369][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.088145][ T5836] veth0_macvtap: entered promiscuous mode [ 82.109065][ T5136] Bluetooth: hci1: command tx timeout [ 82.114493][ T5136] Bluetooth: hci2: command tx timeout [ 82.141558][ T5827] veth0_vlan: entered promiscuous mode [ 82.189190][ T5136] Bluetooth: hci4: command tx timeout [ 82.189769][ T5834] Bluetooth: hci3: command tx timeout [ 82.194707][ T5849] Bluetooth: hci0: command tx timeout [ 82.205687][ T5850] Bluetooth: hci5: command tx timeout [ 82.232604][ T5836] veth1_macvtap: entered promiscuous mode [ 82.250398][ T5826] veth1_vlan: entered promiscuous mode [ 82.271758][ T5827] veth1_vlan: entered promiscuous mode [ 82.289600][ T5837] veth0_vlan: entered promiscuous mode [ 82.301655][ T5838] veth0_vlan: entered promiscuous mode [ 82.336631][ T5838] veth1_vlan: entered promiscuous mode [ 82.360845][ T5826] veth0_macvtap: entered promiscuous mode [ 82.370553][ T5826] veth1_macvtap: entered promiscuous mode [ 82.392862][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.404100][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.415781][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.427692][ T5837] veth1_vlan: entered promiscuous mode [ 82.454457][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.467639][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.480076][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.503694][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.516693][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.525974][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.535582][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.552692][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.562527][ T5827] veth0_macvtap: entered promiscuous mode [ 82.573226][ T5827] veth1_macvtap: entered promiscuous mode [ 82.582973][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.609518][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.620180][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.630814][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.641595][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.652899][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.701672][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.713937][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.724535][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.735032][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.746161][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.760055][ T5838] veth0_macvtap: entered promiscuous mode [ 82.770728][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.775608][ T5837] veth0_macvtap: entered promiscuous mode [ 82.784515][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.793405][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.804443][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.814499][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.825047][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.843621][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.854364][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.865389][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.877555][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.886503][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.895649][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.904612][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.929627][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.940474][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.950989][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.961529][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.971588][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.982179][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.994394][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.028934][ T5837] veth1_macvtap: entered promiscuous mode [ 83.041591][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.048449][ T5838] veth1_macvtap: entered promiscuous mode [ 83.067660][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.078741][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.087548][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.096587][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.126585][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.148711][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.165763][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.176739][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.193505][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.204103][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.214119][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.224782][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.237490][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.330134][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.341104][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.351153][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.362656][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.372677][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.383688][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.394043][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.405126][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.416253][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.466751][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.475654][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.485829][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.498257][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.523086][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.532645][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.595497][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.614038][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.625383][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.637211][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.647827][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.658561][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.668916][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.679750][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.689689][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.700212][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.710199][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.720691][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.731927][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.741711][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.752563][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.762715][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.773284][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.783250][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.794026][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.804099][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.814607][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.824474][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.835085][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.846952][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.912930][ T5838] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.921985][ T5838] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.934048][ T5838] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.944066][ T5838] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.973709][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.987837][ T5941] loop1: detected capacity change from 0 to 512 [ 84.011468][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.072859][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.090280][ T5941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.101003][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.168148][ T5941] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.187525][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.195485][ T5850] Bluetooth: hci1: command tx timeout [ 84.198868][ T5850] Bluetooth: hci2: command tx timeout [ 84.245613][ T5941] EXT4-fs (loop1): shut down requested (0) [ 84.254603][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.267058][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.275181][ T5850] Bluetooth: hci3: command tx timeout [ 84.278977][ T5850] Bluetooth: hci5: command tx timeout [ 84.286081][ T5136] Bluetooth: hci4: command tx timeout [ 84.291571][ T5849] Bluetooth: hci0: command tx timeout [ 84.296380][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.371999][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.397267][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.561891][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.595175][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.604362][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.644046][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.732352][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.832224][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.846523][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.018923][ T5893] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.071755][ T5961] loop1: detected capacity change from 0 to 512 [ 85.182468][ T5961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.224177][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.254687][ T5961] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.681573][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.236854][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.246906][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.259885][ T5893] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.269572][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.811085][ T46] cfg80211: failed to load regulatory.db [ 87.873175][ T5893] usb 3-1: config 0 descriptor?? [ 87.919708][ T5893] usb 3-1: can't set config #0, error -71 [ 88.349559][ T5893] usb 3-1: USB disconnect, device number 2 [ 88.495077][ T5990] loop2: detected capacity change from 0 to 512 [ 88.531264][ T5990] ======================================================= [ 88.531264][ T5990] WARNING: The mand mount option has been deprecated and [ 88.531264][ T5990] and is ignored by this kernel. Remove the mand [ 88.531264][ T5990] option from the mount to silence this warning. [ 88.531264][ T5990] ======================================================= [ 88.973600][ T5990] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.18: Invalid inode bitmap blk 4 in block_group 0 [ 88.989343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.269869][ T5990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.541837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 89.698590][ T6012] loop4: detected capacity change from 0 to 512 [ 89.754859][ T6012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.779025][ T6012] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.150449][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.153981][ T29] audit: type=1800 audit(1733335229.713:2): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.22" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 90.199047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 90.516122][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25'. [ 90.933129][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.004984][ T6030] binder: 6029:6030 ioctl c0306201 200003c0 returned -14 [ 93.591975][ T5136] Bluetooth: hci5: command 0x0405 tx timeout [ 93.750269][ T6045] tty tty29: ldisc open failed (-12), clearing slot 28 [ 93.759987][ T6056] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 94.050402][ T6052] warning: `syz.1.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.239475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.294842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.054921][ T6075] loop1: detected capacity change from 0 to 128 [ 96.090490][ T6075] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.224296][ T6075] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.445151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.777847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 96.786734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.796598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.919778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.995799][ T6084] loop4: detected capacity change from 0 to 512 [ 97.039852][ T6084] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.082734][ T6084] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.152798][ T6084] EXT4-fs (loop4): 1 truncate cleaned up [ 97.204948][ T6084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.250611][ T6084] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.45: corrupted in-inode xattr: overlapping e_value [ 97.285856][ T6084] EXT4-fs (loop4): Remounting filesystem read-only [ 97.293739][ T6084] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1772: inode #15: comm syz.4.45: unable to update i_inline_off [ 97.425768][ T6084] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.701575][ T6101] loop2: detected capacity change from 0 to 1024 [ 98.975289][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.975060][ T6111] loop1: detected capacity change from 0 to 128 [ 101.010991][ T6111] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.053341][ T6111] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.077279][ T6115] Illegal XDP return value 4294967274 on prog (id 10) dev N/A, expect packet loss! [ 101.511224][ T6123] loop3: detected capacity change from 0 to 1024 [ 101.530128][ T6123] EXT4-fs: Ignoring removed orlov option [ 101.568852][ T6123] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.589953][ T6126] loop2: detected capacity change from 0 to 128 [ 101.787862][ T6126] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.822234][ T6123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.868887][ T6126] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.198335][ T6126] fscrypt (loop2, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 102.307510][ T5836] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.871768][ T6148] Zero length message leads to an empty skb [ 105.767423][ T6174] binder: 6164:6174 ioctl c0046209 0 returned -22 [ 106.108881][ T5889] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.331513][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.398999][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.513194][ T5889] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 106.538794][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.570567][ T5889] usb 2-1: config 0 descriptor?? [ 106.798753][ T6189] netlink: 60 bytes leftover after parsing attributes in process `syz.4.75'. [ 106.890616][ T6188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.76'. [ 107.214108][ T6189] unsupported nlmsg_type 40 [ 107.459961][ T5889] samsung 0003:0419:0001.0001: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 107.650499][ T5889] usb 2-1: USB disconnect, device number 2 [ 108.606468][ T6201] loop4: detected capacity change from 0 to 512 [ 108.637969][ T6201] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 108.754490][ T6201] EXT4-fs (loop4): orphan cleanup on readonly fs [ 108.779313][ T6201] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.78: bad orphan inode 15 [ 108.928169][ T6201] ext4_test_bit(bit=14, block=18) = 1 [ 108.946189][ T6201] is_bad_inode(inode)=0 [ 108.956356][ T6201] NEXT_ORPHAN(inode)=1023 [ 108.966514][ T6201] max_ino=32 [ 108.970902][ T6201] i_nlink=0 [ 108.999062][ T6201] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.78: corrupted xattr block 19: e_value size too large [ 109.071405][ T6201] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 109.109187][ T6201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 109.180391][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.805601][ T6201] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.78: path /11/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0 [ 109.825890][ T6216] loop3: detected capacity change from 0 to 128 [ 109.989900][ T6216] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.006499][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.161560][ T6216] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.418732][ T29] audit: type=1326 audit(1733335250.023:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff838d7ff19 code=0x7ffc0000 [ 110.658830][ T29] audit: type=1326 audit(1733335250.023:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7ff838d7ff19 code=0x7ffc0000 [ 110.698745][ T29] audit: type=1326 audit(1733335250.023:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff838d7ff19 code=0x7ffc0000 [ 110.703867][ T6216] fscrypt: Error allocating hmac(sha512): -2 [ 110.745320][ T29] audit: type=1326 audit(1733335250.023:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff838d7ff19 code=0x7ffc0000 [ 110.854318][ T6236] loop2: detected capacity change from 0 to 512 [ 110.888950][ T6236] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.991597][ T5837] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.001978][ T6236] EXT4-fs (loop2): 1 truncate cleaned up [ 111.021079][ T6236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.144535][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.101965][ T6254] binder: 6245:6254 ioctl c0046209 0 returned -22 [ 113.176910][ T6252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.92'. [ 113.325599][ T6259] loop5: detected capacity change from 0 to 16 [ 113.374773][ T6259] erofs (device loop5): mounted with root inode @ nid 36. [ 113.542334][ T6262] loop2: detected capacity change from 0 to 1024 [ 113.549961][ T6262] EXT4-fs: Ignoring removed orlov option [ 113.555647][ T6262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.649208][ T6264] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.674669][ T6264] IPv6: Can't replace route, no match found [ 113.682288][ T6262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.390799][ T6273] loop3: detected capacity change from 0 to 512 [ 114.419938][ T6273] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.910801][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.060892][ T6273] EXT4-fs (loop3): 1 truncate cleaned up [ 115.139797][ T6273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.189536][ T6273] bridge0: port 3(erspan0) entered blocking state [ 115.196075][ T6273] bridge0: port 3(erspan0) entered disabled state [ 115.233528][ T6280] loop4: detected capacity change from 0 to 128 [ 115.286931][ T6273] erspan0: entered allmulticast mode [ 115.294783][ T6273] erspan0: entered promiscuous mode [ 115.295496][ T6273] bridge0: port 3(erspan0) entered blocking state [ 115.296164][ T6273] bridge0: port 3(erspan0) entered forwarding state [ 116.817403][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.971920][ T6301] loop2: detected capacity change from 0 to 1024 [ 116.992900][ T6301] EXT4-fs: Ignoring removed orlov option [ 117.105269][ T6307] loop5: detected capacity change from 0 to 8 [ 117.511322][ T6307] SQUASHFS error: lzo decompression failed, data probably corrupt [ 117.519356][ T6307] SQUASHFS error: Failed to read block 0x91: -5 [ 117.525612][ T6307] SQUASHFS error: Unable to read metadata cache entry [8f] [ 117.532896][ T6307] SQUASHFS error: Unable to read inode 0x11f [ 117.576101][ T6306] binder: 6298:6306 ioctl c0046209 0 returned -22 [ 117.597629][ T6303] loop3: detected capacity change from 0 to 128 [ 117.666470][ T6301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.740525][ T6303] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 117.864907][ T6301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.375908][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.5.111'. [ 118.571753][ T6319] loop4: detected capacity change from 0 to 1024 [ 118.594725][ T6319] EXT4-fs: Ignoring removed orlov option [ 118.623397][ T6319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.688507][ T6331] loop1: detected capacity change from 0 to 256 [ 119.783120][ T6319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.531806][ T6331] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 121.198919][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.305848][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.334363][ T6365] loop5: detected capacity change from 0 to 1024 [ 123.343676][ T6365] EXT4-fs: Ignoring removed orlov option [ 123.349438][ T6365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.581655][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.130'. [ 124.891792][ T6372] binder: 6362:6372 ioctl c0046209 0 returned -22 [ 124.962036][ T6365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.266908][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 125.878125][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.229243][ T6396] loop4: detected capacity change from 0 to 1024 [ 126.271916][ T6402] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.297562][ T6396] EXT4-fs: Ignoring removed orlov option [ 126.330953][ T6396] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.399603][ T2855] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.430888][ T6396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.658570][ T6422] loop2: detected capacity change from 0 to 512 [ 129.769004][ T6422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.730355][ T6422] EXT4-fs (loop2): 1 truncate cleaned up [ 131.737079][ T6422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.958388][ T6422] syz.2.142 (pid 6422) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 132.002774][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.272895][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.289260][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.481305][ T6439] binder: 6433:6439 ioctl c0046209 0 returned -22 [ 133.146537][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.432253][ T6443] loop1: detected capacity change from 0 to 1024 [ 134.608995][ T5894] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.765476][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.798259][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.838845][ T5894] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 134.869458][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.919490][ T5894] usb 4-1: config 0 descriptor?? [ 135.928619][ T5894] samsung 0003:0419:0001.0002: unbalanced delimiter at end of report description [ 136.021156][ T5894] samsung 0003:0419:0001.0002: parse failed [ 136.027292][ T5894] samsung 0003:0419:0001.0002: probe with driver samsung failed with error -22 [ 136.296142][ T5894] usb 4-1: USB disconnect, device number 2 [ 137.382426][ T6466] loop5: detected capacity change from 0 to 1024 [ 137.418263][ T6466] EXT4-fs: Ignoring removed orlov option [ 137.476347][ T6466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.484500][ T6469] netlink: 'syz.1.159': attribute type 1 has an invalid length. [ 137.550485][ T6469] netlink: 'syz.1.159': attribute type 1 has an invalid length. [ 137.818802][ T6466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.685506][ T5136] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 138.705928][ T5136] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 138.716759][ T5894] hid-generic 0005:16C0:0058.0003: item fetching failed at offset 0/1 [ 138.726055][ T5894] hid-generic 0005:16C0:0058.0003: probe with driver hid-generic failed with error -22 [ 138.740924][ T6491] binder: 6485:6491 ioctl c0046209 0 returned -22 [ 138.851549][ T5136] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 138.874831][ T5136] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 139.358152][ T5136] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 139.379390][ T5136] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 139.388358][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.699635][ T6493] loop3: detected capacity change from 0 to 1024 [ 140.298773][ T5892] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.613321][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 140.664825][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.672697][ T6482] chnl_net:caif_netlink_parms(): no params data found [ 140.803650][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.878856][ T5892] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.902573][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.926550][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.012724][ T6501] dccp_close: ABORT with 60 bytes unread [ 141.139711][ T5892] usb 2-1: config 0 descriptor?? [ 141.233385][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.259488][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.266890][ T6482] bridge_slave_0: entered allmulticast mode [ 141.284320][ T6513] loop5: detected capacity change from 0 to 512 [ 141.348066][ T6482] bridge_slave_0: entered promiscuous mode [ 141.382046][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.399136][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 141.405432][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 141.425310][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.453340][ T6482] bridge_slave_1: entered allmulticast mode [ 141.480437][ T6482] bridge_slave_1: entered promiscuous mode [ 141.496669][ T5850] Bluetooth: hci6: command tx timeout [ 141.650049][ T5892] usb 2-1: USB disconnect, device number 3 [ 141.656438][ T6513] Quota error (device loop5): v2_read_file_info: Can't read info structure [ 141.720761][ T6513] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 142.481553][ T6513] EXT4-fs (loop5): mount failed [ 143.623856][ T5850] Bluetooth: hci6: command tx timeout [ 144.273296][ T6538] loop5: detected capacity change from 0 to 1024 [ 144.390237][ T6541] loop2: detected capacity change from 0 to 1024 [ 144.409618][ T6541] EXT4-fs: Ignoring removed orlov option [ 144.415295][ T6541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.602123][ T6541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.642411][ T6482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.691321][ T6540] binder: 6539:6540 ioctl c0046209 0 returned -22 [ 145.088042][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.724220][ T5850] Bluetooth: hci6: command tx timeout [ 145.745855][ T6482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.823830][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.226047][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.315574][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 146.458542][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.563435][ T6482] team0: Port device team_slave_0 added [ 146.574589][ T6482] team0: Port device team_slave_1 added [ 147.151555][ T5891] IPVS: starting estimator thread 0... [ 147.159014][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.189'. [ 147.278921][ T6584] IPVS: using max 19 ests per chain, 45600 per kthread [ 147.327882][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.887711][ T5850] Bluetooth: hci6: command tx timeout [ 148.108268][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.121721][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.188820][ T6482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.290554][ T6592] netlink: 'syz.3.195': attribute type 11 has an invalid length. [ 148.298335][ T6592] netlink: 224 bytes leftover after parsing attributes in process `syz.3.195'. [ 148.346333][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.353393][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.380812][ T6482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.599703][ T6482] hsr_slave_0: entered promiscuous mode [ 148.657840][ T6482] hsr_slave_1: entered promiscuous mode [ 148.714168][ T6482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.739590][ T6482] Cannot create hsr debugfs directory [ 148.766047][ T6610] loop1: detected capacity change from 0 to 1024 [ 148.884452][ T6605] tipc: Started in network mode [ 148.925512][ T6605] tipc: Node identity 3a4988c15742, cluster identity 4711 [ 148.959387][ T6605] tipc: Enabled bearer , priority 0 [ 149.149830][ T6621] syz.4.203 uses obsolete (PF_INET,SOCK_PACKET) [ 149.166925][ T6601] tipc: Disabling bearer [ 149.218920][ T5850] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 149.811495][ T11] bridge_slave_1: left allmulticast mode [ 149.817403][ T11] bridge_slave_1: left promiscuous mode [ 149.842436][ T6632] loop3: detected capacity change from 0 to 1024 [ 149.871083][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.970046][ T11] bridge_slave_0: left allmulticast mode [ 149.975749][ T11] bridge_slave_0: left promiscuous mode [ 149.998948][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.049936][ T29] audit: type=1800 audit(1733335289.693:7): pid=6638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.205" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 150.269623][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.673868][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.797091][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.049369][ T11] bond0 (unregistering): Released all slaves [ 153.083463][ T5929] IPVS: starting estimator thread 0... [ 153.280368][ T6672] IPVS: using max 20 ests per chain, 48000 per kthread [ 153.550422][ T6482] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 153.691383][ T6482] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 153.770346][ T6482] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 153.878224][ T6684] loop4: detected capacity change from 0 to 1024 [ 154.242407][ T6482] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 154.445722][ T6698] loop2: detected capacity change from 0 to 512 [ 155.302777][ T6701] loop3: detected capacity change from 0 to 512 [ 155.432901][ T6701] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 155.463245][ T6701] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 155.496573][ T6701] EXT4-fs (loop3): mount failed [ 158.122877][ T6740] loop2: detected capacity change from 0 to 8 [ 158.144034][ T6740] SQUASHFS error: lzo decompression failed, data probably corrupt [ 158.151949][ T6740] SQUASHFS error: Failed to read block 0x91: -5 [ 158.158202][ T6740] SQUASHFS error: Unable to read metadata cache entry [8f] [ 158.165579][ T6740] SQUASHFS error: Unable to read inode 0x11f [ 158.196112][ T11] hsr_slave_0: left promiscuous mode [ 158.549029][ T11] hsr_slave_1: left promiscuous mode [ 158.724227][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.733086][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.751943][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.763581][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.806943][ T11] veth1_macvtap: left promiscuous mode [ 158.819628][ T11] veth0_macvtap: left promiscuous mode [ 158.834712][ T11] veth1_vlan: left promiscuous mode [ 158.840810][ T11] veth0_vlan: left promiscuous mode [ 159.214245][ T6760] loop3: detected capacity change from 0 to 512 [ 160.316578][ T6764] loop3: detected capacity change from 0 to 256 [ 160.328566][ T6764] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.507274][ T11] team0 (unregistering): Port device team_slave_1 removed [ 160.577267][ T11] team0 (unregistering): Port device team_slave_0 removed [ 161.262244][ T6768] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 161.300042][ T6482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.552434][ T6482] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.689812][ T6781] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.742677][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.750024][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.815194][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.822377][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.885751][ T6781] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.950748][ T6792] loop1: detected capacity change from 0 to 1024 [ 162.015488][ T6792] EXT4-fs: Ignoring removed orlov option [ 162.025562][ T6781] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.036345][ T6792] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.072203][ T6792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.259108][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031efec00: rx timeout, send abort [ 162.268621][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031efec00: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 162.284237][ C0] ------------[ cut here ]------------ [ 162.289751][ C0] refcount_t: underflow; use-after-free. [ 162.296335][ C0] WARNING: CPU: 0 PID: 5942 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 162.305800][ C0] Modules linked in: [ 162.309771][ C0] CPU: 0 UID: 0 PID: 5942 Comm: kworker/u8:8 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 162.320695][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.330830][ C0] Workqueue: bat_events batadv_nc_worker [ 162.336520][ C0] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 162.342772][ C0] Code: e0 1e 5f 8c e8 87 c5 95 fc 90 0f 0b 90 90 eb 99 e8 2b 1e d5 fc c6 05 6d 2c 39 0b 01 90 48 c7 c7 40 1f 5f 8c e8 67 c5 95 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 08 1e d5 fc c6 05 47 2c 39 0b 01 90 [ 162.362537][ C0] RSP: 0018:ffffc90000007680 EFLAGS: 00010246 [ 162.368642][ C0] RAX: 644c42515eb44d00 RBX: ffff88801cb07d64 RCX: ffff888025a91e00 [ 162.376690][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.384715][ C0] RBP: 0000000000000003 R08: ffffffff81601c02 R09: fffffbfff1cfa210 [ 162.392748][ C0] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff888031efec68 [ 162.400778][ C0] R13: ffff88801cb07d64 R14: 1ffff110063dfd98 R15: ffff888031efec00 [ 162.408821][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 162.417779][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.424429][ C0] CR2: 00007ff08c50b678 CR3: 000000000e736000 CR4: 0000000000350ef0 [ 162.432466][ C0] Call Trace: [ 162.435764][ C0] [ 162.438627][ C0] ? __warn+0x165/0x4d0 [ 162.442869][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 162.448463][ C0] ? report_bug+0x2b3/0x500 [ 162.453059][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 162.458656][ C0] ? handle_bug+0x60/0x90 [ 162.463082][ C0] ? exc_invalid_op+0x1a/0x50 [ 162.467803][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 162.472923][ C0] ? __warn_printk+0x292/0x360 [ 162.477730][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 162.483463][ C0] j1939_session_put+0x1ed/0x440 [ 162.488449][ C0] j1939_tp_recv+0x92a/0x1050 [ 162.493206][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.498904][ C0] j1939_can_recv+0x732/0xb20 [ 162.503626][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 162.508984][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.514663][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.520366][ C0] ? __lock_acquire+0x1397/0x2100 [ 162.525434][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 162.530730][ C0] can_rcv_filter+0x35b/0x7f0 [ 162.535454][ C0] can_receive+0x327/0x480 [ 162.539951][ C0] ? can_receive+0x1c9/0x480 [ 162.544600][ C0] can_rcv+0x144/0x260 [ 162.548743][ C0] ? __pfx_can_rcv+0x10/0x10 [ 162.553368][ C0] __netif_receive_skb+0x2e2/0x650 [ 162.558523][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 162.563890][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 162.569590][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 162.575604][ C0] ? __pfx_lock_release+0x10/0x10 [ 162.580715][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 162.585880][ C0] process_backlog+0x662/0x15b0 [ 162.590828][ C0] ? process_backlog+0x33b/0x15b0 [ 162.595906][ C0] ? __pfx_process_backlog+0x10/0x10 [ 162.601283][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 162.607302][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.613715][ C0] ? invoke_rcu_core+0xbc/0x260 [ 162.618641][ C0] __napi_poll+0xcd/0x490 [ 162.623068][ C0] net_rx_action+0x89b/0x1240 [ 162.627810][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 162.633015][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.638708][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 162.644744][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.651163][ C0] handle_softirqs+0x2d6/0x9b0 [ 162.655973][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.661696][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 162.666509][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 162.671891][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.677556][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 162.682842][ C0] __irq_exit_rcu+0xf7/0x220 [ 162.687476][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 162.694055][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.694096][ C0] irq_exit_rcu+0x9/0x30 [ 162.694139][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 162.709785][ C0] [ 162.712733][ C0] [ 162.715682][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.721745][ C0] RIP: 0010:lock_acquire+0x18c/0x550 [ 162.727068][ C0] Code: eb 03 42 80 3c 2b 00 74 08 4c 89 ff e8 1d ae 8f 00 48 c7 84 24 80 00 00 00 00 00 00 00 9c 8f 84 24 80 00 00 00 42 80 3c 2b 00 <74> 08 4c 89 ff e8 0a ad 8f 00 48 8d 5c 24 60 4c 8b bc 24 80 00 00 [ 162.746747][ C0] RSP: 0018:ffffc900044c79e0 EFLAGS: 00000246 [ 162.752886][ C0] RAX: 0000000000000000 RBX: 1ffff92000898f4c RCX: ffffffff817aac24 [ 162.760927][ C0] RDX: 0000000000000000 RSI: ffffffff8c5f63c0 RDI: ffffffff8c5f6380 [ 162.768960][ C0] RBP: ffffc900044c7b40 R08: ffffffff901945f7 R09: 1ffffffff20328be [ 162.776964][ C0] R10: dffffc0000000000 R11: fffffbfff20328bf R12: 1ffff92000898f44 [ 162.785021][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900044c7a60 [ 162.793071][ C0] ? lock_acquire+0xd4/0x550 [ 162.797715][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 162.802826][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.808491][ C0] ? batadv_nc_worker+0xcb/0x610 [ 162.813504][ C0] ? __pfx_lock_release+0x10/0x10 [ 162.818564][ C0] ? preempt_schedule+0xe1/0xf0 [ 162.823503][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.829209][ C0] batadv_nc_worker+0xec/0x610 [ 162.833998][ C0] ? batadv_nc_worker+0xcb/0x610 [ 162.839048][ C0] ? batadv_nc_worker+0xcb/0x610 [ 162.844033][ C0] ? process_scheduled_works+0x976/0x1840 [ 162.849829][ C0] process_scheduled_works+0xa68/0x1840 [ 162.855432][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 162.861504][ C0] ? assign_work+0x364/0x3d0 [ 162.866136][ C0] worker_thread+0x870/0xd30 [ 162.870811][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.876481][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.882184][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 162.888121][ C0] ? __kthread_parkme+0x169/0x1d0 [ 162.893216][ C0] ? __pfx_worker_thread+0x10/0x10 [ 162.898356][ C0] kthread+0x2f2/0x390 [ 162.902498][ C0] ? __pfx_worker_thread+0x10/0x10 [ 162.907641][ C0] ? __pfx_kthread+0x10/0x10 [ 162.912301][ C0] ret_from_fork+0x4d/0x80 [ 162.916744][ C0] ? __pfx_kthread+0x10/0x10 [ 162.921404][ C0] ret_from_fork_asm+0x1a/0x30 [ 162.926218][ C0] [ 162.929285][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 162.936581][ C0] CPU: 0 UID: 0 PID: 5942 Comm: kworker/u8:8 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 162.947447][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.957523][ C0] Workqueue: bat_events batadv_nc_worker [ 162.963195][ C0] Call Trace: [ 162.966492][ C0] [ 162.969354][ C0] dump_stack_lvl+0x241/0x360 [ 162.974074][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.979311][ C0] ? __pfx__printk+0x10/0x10 [ 162.983928][ C0] ? _printk+0xd5/0x120 [ 162.988113][ C0] ? __init_begin+0x41000/0x41000 [ 162.993175][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.998830][ C0] ? vscnprintf+0x5d/0x90 [ 163.003187][ C0] panic+0x349/0x880 [ 163.007114][ C0] ? __warn+0x174/0x4d0 [ 163.011304][ C0] ? __pfx_panic+0x10/0x10 [ 163.015767][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 163.020738][ C0] __warn+0x344/0x4d0 [ 163.024749][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 163.030340][ C0] report_bug+0x2b3/0x500 [ 163.034704][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 163.040293][ C0] handle_bug+0x60/0x90 [ 163.044485][ C0] exc_invalid_op+0x1a/0x50 [ 163.049029][ C0] asm_exc_invalid_op+0x1a/0x20 [ 163.053914][ C0] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 163.060123][ C0] Code: e0 1e 5f 8c e8 87 c5 95 fc 90 0f 0b 90 90 eb 99 e8 2b 1e d5 fc c6 05 6d 2c 39 0b 01 90 48 c7 c7 40 1f 5f 8c e8 67 c5 95 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 08 1e d5 fc c6 05 47 2c 39 0b 01 90 [ 163.079753][ C0] RSP: 0018:ffffc90000007680 EFLAGS: 00010246 [ 163.085850][ C0] RAX: 644c42515eb44d00 RBX: ffff88801cb07d64 RCX: ffff888025a91e00 [ 163.093843][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.101835][ C0] RBP: 0000000000000003 R08: ffffffff81601c02 R09: fffffbfff1cfa210 [ 163.109836][ C0] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff888031efec68 [ 163.117829][ C0] R13: ffff88801cb07d64 R14: 1ffff110063dfd98 R15: ffff888031efec00 [ 163.125828][ C0] ? __warn_printk+0x292/0x360 [ 163.130631][ C0] j1939_session_put+0x1ed/0x440 [ 163.135607][ C0] j1939_tp_recv+0x92a/0x1050 [ 163.140317][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.145973][ C0] j1939_can_recv+0x732/0xb20 [ 163.150782][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 163.156007][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.161673][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.167332][ C0] ? __lock_acquire+0x1397/0x2100 [ 163.172392][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 163.177623][ C0] can_rcv_filter+0x35b/0x7f0 [ 163.182334][ C0] can_receive+0x327/0x480 [ 163.186775][ C0] ? can_receive+0x1c9/0x480 [ 163.191395][ C0] can_rcv+0x144/0x260 [ 163.195493][ C0] ? __pfx_can_rcv+0x10/0x10 [ 163.200110][ C0] __netif_receive_skb+0x2e2/0x650 [ 163.205254][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 163.210309][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 163.215976][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 163.221992][ C0] ? __pfx_lock_release+0x10/0x10 [ 163.227055][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 163.232207][ C0] process_backlog+0x662/0x15b0 [ 163.237105][ C0] ? process_backlog+0x33b/0x15b0 [ 163.242169][ C0] ? __pfx_process_backlog+0x10/0x10 [ 163.247484][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 163.253519][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.259868][ C0] ? invoke_rcu_core+0xbc/0x260 [ 163.264755][ C0] __napi_poll+0xcd/0x490 [ 163.269134][ C0] net_rx_action+0x89b/0x1240 [ 163.273896][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 163.279042][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.284699][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 163.290720][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.297088][ C0] handle_softirqs+0x2d6/0x9b0 [ 163.301893][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.307563][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 163.312367][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 163.317695][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.323353][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 163.328582][ C0] __irq_exit_rcu+0xf7/0x220 [ 163.333208][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 163.338450][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.344111][ C0] irq_exit_rcu+0x9/0x30 [ 163.348386][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 163.354048][ C0] [ 163.357009][ C0] [ 163.359954][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 163.365978][ C0] RIP: 0010:lock_acquire+0x18c/0x550 [ 163.371299][ C0] Code: eb 03 42 80 3c 2b 00 74 08 4c 89 ff e8 1d ae 8f 00 48 c7 84 24 80 00 00 00 00 00 00 00 9c 8f 84 24 80 00 00 00 42 80 3c 2b 00 <74> 08 4c 89 ff e8 0a ad 8f 00 48 8d 5c 24 60 4c 8b bc 24 80 00 00 [ 163.390925][ C0] RSP: 0018:ffffc900044c79e0 EFLAGS: 00000246 [ 163.397024][ C0] RAX: 0000000000000000 RBX: 1ffff92000898f4c RCX: ffffffff817aac24 [ 163.405019][ C0] RDX: 0000000000000000 RSI: ffffffff8c5f63c0 RDI: ffffffff8c5f6380 [ 163.413014][ C0] RBP: ffffc900044c7b40 R08: ffffffff901945f7 R09: 1ffffffff20328be [ 163.421010][ C0] R10: dffffc0000000000 R11: fffffbfff20328bf R12: 1ffff92000898f44 [ 163.429005][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900044c7a60 [ 163.437003][ C0] ? lock_acquire+0xd4/0x550 [ 163.441812][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 163.446869][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.452529][ C0] ? batadv_nc_worker+0xcb/0x610 [ 163.457492][ C0] ? __pfx_lock_release+0x10/0x10 [ 163.462547][ C0] ? preempt_schedule+0xe1/0xf0 [ 163.467429][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.473091][ C0] batadv_nc_worker+0xec/0x610 [ 163.477878][ C0] ? batadv_nc_worker+0xcb/0x610 [ 163.482837][ C0] ? batadv_nc_worker+0xcb/0x610 [ 163.487804][ C0] ? process_scheduled_works+0x976/0x1840 [ 163.493543][ C0] process_scheduled_works+0xa68/0x1840 [ 163.499139][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 163.505148][ C0] ? assign_work+0x364/0x3d0 [ 163.509743][ C0] worker_thread+0x870/0xd30 [ 163.514336][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.519970][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.525601][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 163.531589][ C0] ? __kthread_parkme+0x169/0x1d0 [ 163.536617][ C0] ? __pfx_worker_thread+0x10/0x10 [ 163.541728][ C0] kthread+0x2f2/0x390 [ 163.545802][ C0] ? __pfx_worker_thread+0x10/0x10 [ 163.550913][ C0] ? __pfx_kthread+0x10/0x10 [ 163.555505][ C0] ret_from_fork+0x4d/0x80 [ 163.559919][ C0] ? __pfx_kthread+0x10/0x10 [ 163.564513][ C0] ret_from_fork_asm+0x1a/0x30 [ 163.569289][ C0] [ 163.572411][ C0] Kernel Offset: disabled [ 163.576731][ C0] Rebooting in 86400 seconds..