last executing test programs: 12.573863368s ago: executing program 1 (id=20): r0 = io_uring_setup(0x37b8, &(0x7f00000003c0)={0x0, 0x400, 0x100, 0x1000}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000ddc2440f413b", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000d840e60018a53663d96984368fcf6380a9d4eafcecc2a7f2382272c75cfe14b609f32c5381be14890230cd828a87e6a73390c52b8fd2964fac3dc0d368fbca3a7225faa4a23e99ef511a5ef743ad5422d73ca3a0b29a25ebf810de417323ac80e626dd05c14626fff81268b238d3876d01b9aefad18fdec21f5aa5776d4b32bc3b157d539d15095c2c4c9f206dc5ebbbe7c40bc391552c3e242fcbd1519a9a7633e1e530d19e3bcd29e07d180c4f55728ca691fdc57c5ed1029f50096549150c3c3a25a52be9af3e0d61374904158f62cba8048edf3d00a801bb8bae63d4dc3064c469e754aa6c904ae93d29c1ce85bc13f53dbf7f06eade3630cd1797ca965c2738788c170e5b806f70ee2311b3bb12b8e49daa5cdcc690218eea52c0bc4649beb10690ecf4ba0674dcf28bdaa77d7a806151cedeb25c803dbb258f13185bff76ce2deae71963c3b675297cc8c271cc201d1aa15d3fec348b2b049297d056d0a397137cc1700fe0dafdedeee36d320d400660fc15b3d59eda21d3ccf53bb1f52488e5efe45b69da32dd066085c7501fccd94e4431c357d8f466d84da77c2be0a22e95794ffd661eeb4e8afa375052bda9ad61d75a35494d09c03113e3b7"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="00000000000000005fbe0000070000007b8af8ff00000000bfa200000000800007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0xffffffffffffff26}}, {{&(0x7f00000002c0)={0xa, 0x4e22, 0x10001, @loopback, 0xffffff01}, 0x1c, 0x0}}], 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(r5, &(0x7f0000000200)=[{&(0x7f000001a900)=""/102391, 0x18ff7}], 0x200000000000001d, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000340)=""/109, 0x6d, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xd) syz_clone(0xb13cc980, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0x3) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) read$usbmon(r8, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r8, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.7446393s ago: executing program 1 (id=29): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x108, 0xe, 0x0, &(0x7f00000002c0)="826ff2a38932974ab361c2e5273b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x4c) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ptrace$peek(0x3, r0, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r4, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x0) getsockopt$rose(r3, 0x104, 0x0, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x100) accept4(r8, 0x0, 0x0, 0x0) shutdown(r8, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r10, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r10, 0x40047454, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000340)) 9.651308922s ago: executing program 2 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 9.502818827s ago: executing program 2 (id=34): bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}, 0x2}}, 0x10) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x35c, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x8, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)}, {&(0x7f0000000180)="96d01480bbb6", 0x6}], 0x2}, 0x810) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/netlink\x00') read$msr(r2, &(0x7f0000000040)=""/59, 0xffb5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) preadv(r2, &(0x7f0000000680), 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYRES64]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbb350b0000000000000000000000119078ffffff"], 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$kcm(0x10, 0x3, 0x10) read$msr(r2, &(0x7f0000000080)=""/202, 0xca) bind$alg(0xffffffffffffffff, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x2c}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 8.936274737s ago: executing program 1 (id=37): socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x165900, 0x42) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xf) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000002700)={0xa, 0x0, 0xffffffff, @mcast2, 0xffff, 0x4}, 0x20) mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRES8=r4, @ANYRES8=r5, @ANYRES8=r0], 0xa0}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) 6.247825495s ago: executing program 1 (id=50): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x2}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 6.136713753s ago: executing program 1 (id=51): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004200000a90200008000000042000000", @ANYRES32, @ANYBLOB="0607000000000000000400"/20, @ANYRES32=0x0, @ANYRES32], 0x48) prlimit64(r1, 0x7, 0x0, &(0x7f0000000180)) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000040)="1002d7d957c9dc8dda937c7b61567297207adb3029e20544ec044c2fbb6bf865c9331165cb94d9fcb78cb57f9b40b11393c0030046c2e390f91dbd9ddf7accf1295f9abfb2b534ba", 0x0, 0x48) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0xfffffffffffffffe, 0x3, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x5d3c, &(0x7f0000000080)={0x0, 0x1715, 0x40, 0x2000010}, 0x0, &(0x7f00000001c0)) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x0) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) close(r4) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0x8, 0x50, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r7, &(0x7f0000006480)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/94, 0x5e}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/97, 0x61}, {&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f0000000000)=""/60, 0x3c}], 0x8}, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1c0000005e007f029ea69801d76a90a272a2a788bab6c95f79e8f0e5", 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x5}}, @NHA_OIF={0x8, 0x5, r8}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, r2, 0xffffd000) 5.999093039s ago: executing program 0 (id=53): ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000015640)=""/102400, 0x19000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61153c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000002c650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) readv(r2, 0x0, 0x0) sched_setaffinity(r3, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\xa4y\x9e>\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\x8dr\xd5\xcd\xf2P\r.\"\x03\xa9\xab\xfa#\x01\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\x1a\x80=\xa72)\xd2\x00'/276, &(0x7f0000000000)='/\x00\x9b\x1d\x00\x96', 0x0) tkill(r3, 0xb) 5.504843378s ago: executing program 2 (id=55): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESDEC=r0]) 5.351932072s ago: executing program 3 (id=56): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x30}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0xc8, 0x0, &(0x7f0000000dc0)=""/200, 0xbddf, 0x0, 0x9b, 0x84, &(0x7f0000000800)="cb937ab6553f71e16de0f1b94ee4d7355dc590eb68dc3384a6721f7d32af86d6eb12c970f726bbc42eb453dbecfc693873e91f842e0139df1309fceb0cd890e47e1b7f347beefd05ea4c67ff3c8adf793c28271ffb538d6e5eddb236738c32abbf22caa6d03e92d5fcc6feae19842b37b74100aad4d3a93d31ed69ee07b5dc022eb712939ed98e520f0ddbef336acc1edc98f40160ab585531ce69", &(0x7f0000000480)="b0d83e0aa5b0be9bd653948c12e42a41559ffbf50aa1f1dadeffa849f73c8c424d68010cbc3082943caf16047c9c014ab6dcb9d238bf32c5e5db670e5494dfe8aede5644098f2023a06c23e9356329fa9ad5d4ada4c33bbf36f01a49e8c735c356530ccbd5a0ffbb55a995e9450d1d9744e84b6c294e5b9ca8311b889f90674a16abe915", 0x7, 0x0, 0x7}, 0x4c) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x75, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000011ff03000001"], 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000001480)="195d70fb7ba99c46291c3a1b32f0d1cb20", 0xfffffdef, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec0000001c0001000000000000000000ac1414bb000000000000000000000000fe80000000000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000000003c000000fe8000"/144], 0xec}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000100), 0xfef0) splice(r1, 0x0, r5, 0x0, 0x80000001, 0x0) 5.14748417s ago: executing program 3 (id=57): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) 5.142440469s ago: executing program 2 (id=58): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x80, "0062ba7d90000039000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x3) 5.034435038s ago: executing program 0 (id=59): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17c) timer_create(0x3, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{r2, r3+10000000}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) dup(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) read$FUSE(r1, &(0x7f0000000f00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r1, &(0x7f0000000180)={0x28, 0x0, r6, {{0xfffffffffffffffe, 0x0, 0x2}}}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7c, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='G\x00\x00'}]}, 0x18}], 0x1}, 0x0) 4.203904013s ago: executing program 2 (id=62): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x92, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x5c, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x7, 0xf989, "3bbc83"}, @timestamp={0x8, 0xa}, @sack={0x5, 0x1a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @exp_fastopen={0xfe, 0x4}, @window={0x3, 0x3, 0x8}, @mptcp=@capable={0x1e, 0x14, 0x7, 0x8, 0xa, 0x1ff, [0x5]}]}}}}}}}}, 0x0) 4.12843552s ago: executing program 0 (id=63): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x21) 4.12819263s ago: executing program 3 (id=64): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005a00), 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000480)={0x0, 0x0, "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", "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"}) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/141, 0x8d}], 0x1) 4.018813302s ago: executing program 2 (id=65): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f0000000340)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x7, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4c800) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014009d000000000000008c590288ffffcf3d3474ff00e7e5d3c2c983f9d503753f68", 0x26}], 0x1) bind$alg(r4, &(0x7f0000000740)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x101, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a6970"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, 0xfffffffffffffffe, 0x11) 3.808124471s ago: executing program 0 (id=66): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) 3.48225708s ago: executing program 0 (id=67): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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") 3.059768822s ago: executing program 3 (id=71): close(0xffffffffffffffff) userfaultfd(0x80001) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 2.911349889s ago: executing program 3 (id=72): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@bloom_filter={0x1e, 0x9, 0x9, 0x9, 0x20000, 0x1, 0x5ab00000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0xa, @void, @value, @void, @value}, 0x50) ioctl$TIOCSETD(r0, 0x5423, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x1, 0x8, 0x100c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000010c0)={r1, 0x0, 0x0}, 0x20) 2.697095069s ago: executing program 0 (id=74): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0xc018480b, &(0x7f0000000080)={0x2, 0x100}) 2.644790663s ago: executing program 3 (id=75): openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0xffffffff) r1 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x6, [0x311, 0x7, 0xbb, 0x5, 0x4, 0x98]}, &(0x7f0000000180)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000000ead}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000300)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r3, 0xc004510e, &(0x7f0000001280)) r4 = io_uring_setup(0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) bind$bt_l2cap(r6, 0x0, 0x0) listen(r6, 0x0) accept4$vsock_stream(r6, 0x0, 0x58, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000200)={'ah\x00'}, &(0x7f0000000240)=0x1e) shutdown(r6, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40086303}], 0x0, 0x0, 0x0}) 2.644628112s ago: executing program 4 (id=76): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) 2.596906086s ago: executing program 4 (id=77): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000500), 0xfc, 0x57c, &(0x7f0000000680)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='ext4_da_release_space\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fdatasync(r1) 1.700263958s ago: executing program 1 (id=78): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c4e9b8b7ec073462d9d30ee98395269c17fb04000000000000008ef9549d20557c8fdb20fe3463bf0253bf685c86ed7cb20bb9b205ea68d5539ce61b0be472"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0x34324152, 0x0, 0x0, [{0x3}, {}, {0x1}], 0x0, 0x0, 0x7, 0x0, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xffffffff, 0x400, 0x0, 0x2000}, &(0x7f0000000080)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x28, 0x0, @fd_index=0x3}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) socket$inet6(0xa, 0x80003, 0xff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_EXPBUF(r8, 0xc0405610, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x3, 0x0, @loopback}, 0x1c) r9 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r10 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x6, 0x7, r2, 0x0, 0x0, 0x0, 0x10042}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socketpair(0x1, 0x3, 0x80000, &(0x7f0000000400)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x2, {0x1c, 0x0, 0x0, r9, 0x0, 0x2, 0x6}, [@NDA_IFINDEX={0x8, 0x8, r9}]}, 0x24}}, 0x0) r10 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x1, 0x0, 0x0, r11}) 116.957712ms ago: executing program 4 (id=81): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000bc0)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000900)}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)='\\', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="644bc70b5137bd270a7827f12d5c8e58783d93a355b538e9ce68dd037a1cbe8ff0c3ce552efffd9153aaf9176e604131e20b96009fa0958ca60c7c854fa8067751dba6a67cad0a2a89287e155e54430daa2905cc4d041afb5fb46b74868187f7afdb66363ac19ddc634d163a6b6ff6099ec529f0af084afd1c9fa54fc127aa7964a90b00b09a88e63174e5354ac66b99862033b6b5fdd69e03d13ac73d1b598c45bf7ca3819fb9470899ce7a7a638253c84850a6", 0xb4}, {&(0x7f0000000440)="b59ab5b5605cfd10e340419732036259ca30dbb7bcdd58192e7733f24e6f3f6d10a9a08583a54e6f4a249b34f1d1865353927c9a5e9abd5dedaf1b67c9315604e2ddb9a19fcfa1d7c3576e39378562bf3b5d57d46059409638f8a66e74e5fbb8612e082186448e06e0b1eedea331b6bc7a799d2c6005924c6bae59e26a728bd320fe1fbd52de02f162b71e0a49de26c2f62ddf9c0c35c6a41dcc3b0143a90b4e999a5881", 0xa4}, {&(0x7f0000000000)="ff5a10bff751c0e64622c518b038b9fe9e7e2e49be789db6eb4e446778c0428a78c1b8835ed47062723849a7d6cd27dc099739b22449181c42601f9194e3f702", 0x40}, {&(0x7f0000000500)="45adafaa4c01", 0x6}, {&(0x7f0000000600)="db59bf0a78b09a827d74a48a13c1c3dba25e7771856dcaba99b04406794a28a3b022352cd4f85a2d0babc1f0d169a19f13484be3cf5a95a65efb0126936e72935bd7458eec3e6e9b391820d0f27e715044ec3a4059c4ebf4a82000b1b30f7a41b44a5cd006dfe05b8052d357ab37b0b97f5f9096729a44460fd7198ffa7a0924a3d0c18e37267317", 0x88}], 0x5}}], 0x3, 0x4000014) 0s ago: executing program 4 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x22000c0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000300)='./file0\x00', 0x143042, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) lstat(0x0, &(0x7f00000003c0)) openat$audio1(0xffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) syz_usbip_server_init(0x4) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) unshare(0x20020680) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 66.789564][ T5223] cgroup: Unknown subsys name 'net' [ 66.937354][ T5223] cgroup: Unknown subsys name 'cpuset' [ 66.946353][ T5223] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.497508][ T5223] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.903715][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.927523][ T5250] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.934481][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.937259][ T5250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.943989][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.950505][ T5250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.956907][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.970765][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.979487][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.986843][ T5250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.988030][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.003371][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.008969][ T5252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.011524][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.023800][ T5252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.031358][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.032777][ T5252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.040063][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.054309][ T5252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.055428][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.068750][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.076419][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.076740][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.084586][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.102548][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.107689][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.110991][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.125133][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.134001][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.141734][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.593650][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 71.662589][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 71.677059][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.688281][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.698838][ T5240] chnl_net:caif_netlink_parms(): no params data found [ 71.768830][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 71.814972][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 71.866282][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.874934][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.882335][ T5233] bridge_slave_0: entered allmulticast mode [ 71.890082][ T5233] bridge_slave_0: entered promiscuous mode [ 71.940436][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.947881][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.955291][ T5233] bridge_slave_1: entered allmulticast mode [ 71.962413][ T5233] bridge_slave_1: entered promiscuous mode [ 71.986329][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.993746][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.001018][ T5243] bridge_slave_0: entered allmulticast mode [ 72.008022][ T5243] bridge_slave_0: entered promiscuous mode [ 72.026104][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.033890][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.041102][ T5240] bridge_slave_0: entered allmulticast mode [ 72.051956][ T5240] bridge_slave_0: entered promiscuous mode [ 72.078063][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.085332][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.092555][ T5243] bridge_slave_1: entered allmulticast mode [ 72.099549][ T5243] bridge_slave_1: entered promiscuous mode [ 72.128251][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.135468][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.142628][ T5240] bridge_slave_1: entered allmulticast mode [ 72.153921][ T5240] bridge_slave_1: entered promiscuous mode [ 72.199852][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.212601][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.231899][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.245220][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.263035][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.271058][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.278648][ T5246] bridge_slave_0: entered allmulticast mode [ 72.286123][ T5246] bridge_slave_0: entered promiscuous mode [ 72.335359][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.342528][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.350254][ T5246] bridge_slave_1: entered allmulticast mode [ 72.357135][ T5246] bridge_slave_1: entered promiscuous mode [ 72.372122][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.379357][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.387103][ T5234] bridge_slave_0: entered allmulticast mode [ 72.394053][ T5234] bridge_slave_0: entered promiscuous mode [ 72.401829][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.409339][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.416689][ T5234] bridge_slave_1: entered allmulticast mode [ 72.423835][ T5234] bridge_slave_1: entered promiscuous mode [ 72.440865][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.453344][ T5233] team0: Port device team_slave_0 added [ 72.480686][ T5243] team0: Port device team_slave_0 added [ 72.491401][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.510752][ T5233] team0: Port device team_slave_1 added [ 72.535132][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.554077][ T5243] team0: Port device team_slave_1 added [ 72.579745][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.591879][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.604600][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.622712][ T5240] team0: Port device team_slave_0 added [ 72.630774][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.638406][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.665552][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.706856][ T5240] team0: Port device team_slave_1 added [ 72.713090][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.720473][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.746573][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.758757][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.766282][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.792356][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.838430][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.845565][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.871733][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.901027][ T5246] team0: Port device team_slave_0 added [ 72.914237][ T5234] team0: Port device team_slave_0 added [ 72.940162][ T5246] team0: Port device team_slave_1 added [ 72.951888][ T5234] team0: Port device team_slave_1 added [ 72.959360][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.970342][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.996707][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.010061][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.017666][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.044499][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.067087][ T5233] hsr_slave_0: entered promiscuous mode [ 73.074719][ T5233] hsr_slave_1: entered promiscuous mode [ 73.104558][ T5247] Bluetooth: hci2: command tx timeout [ 73.110300][ T5238] Bluetooth: hci0: command tx timeout [ 73.122401][ T5243] hsr_slave_0: entered promiscuous mode [ 73.132242][ T5243] hsr_slave_1: entered promiscuous mode [ 73.139440][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.150620][ T5243] Cannot create hsr debugfs directory [ 73.167019][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.174159][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.200562][ T5238] Bluetooth: hci3: command tx timeout [ 73.206142][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.217290][ T5247] Bluetooth: hci4: command tx timeout [ 73.217348][ T54] Bluetooth: hci1: command tx timeout [ 73.232406][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.242764][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.270893][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.284439][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.291434][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.317630][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.329418][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.336500][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.362775][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.469612][ T5240] hsr_slave_0: entered promiscuous mode [ 73.479910][ T5240] hsr_slave_1: entered promiscuous mode [ 73.486215][ T5240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.494126][ T5240] Cannot create hsr debugfs directory [ 73.551092][ T5246] hsr_slave_0: entered promiscuous mode [ 73.558105][ T5246] hsr_slave_1: entered promiscuous mode [ 73.564499][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.572087][ T5246] Cannot create hsr debugfs directory [ 73.598175][ T5234] hsr_slave_0: entered promiscuous mode [ 73.605699][ T5234] hsr_slave_1: entered promiscuous mode [ 73.611834][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.620042][ T5234] Cannot create hsr debugfs directory [ 73.888762][ T5233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.911913][ T5233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.923849][ T5233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.965914][ T5233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.005503][ T5243] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.018074][ T5243] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.039133][ T5243] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.058084][ T5243] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.098930][ T5240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.130483][ T5240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.141520][ T5240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.152058][ T5240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.235836][ T5246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.266166][ T5246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.279088][ T5246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.289121][ T5246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.351738][ T5234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.367151][ T5234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.378511][ T5234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.397421][ T5234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.438429][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.494724][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.510797][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.545384][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.568323][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.580709][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.588089][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.629555][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.636694][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.650596][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.657764][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.685378][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.702144][ T1835] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.709330][ T1835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.745909][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.753025][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.789593][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.796757][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.896115][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.912888][ T5240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.953902][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.966616][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.019647][ T5243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.039757][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.046958][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.129453][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.136749][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.174915][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.185705][ T5238] Bluetooth: hci0: command tx timeout [ 75.191183][ T5238] Bluetooth: hci2: command tx timeout [ 75.237672][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.244967][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.262995][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.270217][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.273986][ T5238] Bluetooth: hci3: command tx timeout [ 75.283197][ T5238] Bluetooth: hci4: command tx timeout [ 75.289483][ T5238] Bluetooth: hci1: command tx timeout [ 75.407037][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.467209][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.569319][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.627969][ T5233] veth0_vlan: entered promiscuous mode [ 75.641531][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.698534][ T5233] veth1_vlan: entered promiscuous mode [ 75.740169][ T5240] veth0_vlan: entered promiscuous mode [ 75.778632][ T5240] veth1_vlan: entered promiscuous mode [ 75.855417][ T5246] veth0_vlan: entered promiscuous mode [ 75.868950][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.896918][ T5233] veth0_macvtap: entered promiscuous mode [ 75.910949][ T5240] veth0_macvtap: entered promiscuous mode [ 75.928324][ T5246] veth1_vlan: entered promiscuous mode [ 75.951111][ T5240] veth1_macvtap: entered promiscuous mode [ 75.960143][ T5233] veth1_macvtap: entered promiscuous mode [ 76.044962][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.057871][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.069783][ T5240] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.079264][ T5240] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.088513][ T5240] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.097356][ T5240] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.114730][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.126115][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.139882][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.155043][ T5246] veth0_macvtap: entered promiscuous mode [ 76.183310][ T5246] veth1_macvtap: entered promiscuous mode [ 76.192555][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.205167][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.219239][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.245542][ T5234] veth0_vlan: entered promiscuous mode [ 76.255196][ T5233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.265332][ T5233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.275223][ T5233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.285402][ T5233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.369438][ T5234] veth1_vlan: entered promiscuous mode [ 76.380347][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.392309][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.402488][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.413034][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.425152][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.464311][ T5243] veth0_vlan: entered promiscuous mode [ 76.475850][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.490776][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.500724][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.511464][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.522506][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.563080][ T5246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.576913][ T5246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.586220][ T5246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.595438][ T5246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.611190][ T5234] veth0_macvtap: entered promiscuous mode [ 76.630125][ T5234] veth1_macvtap: entered promiscuous mode [ 76.654422][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.663110][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.667220][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.680517][ T5243] veth1_vlan: entered promiscuous mode [ 76.689279][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.742107][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.753961][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.768033][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.778575][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.789012][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.800259][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.812425][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.842708][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.853800][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.872621][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.886216][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.896274][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.906929][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.918346][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.929786][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.938372][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.983116][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.984126][ T5234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.991950][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.008118][ T5234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.017238][ T5234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.026407][ T5234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.057797][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.070872][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.144826][ T5243] veth0_macvtap: entered promiscuous mode [ 77.150613][ T5233] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.166470][ T1835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.180679][ T1835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.202644][ T5243] veth1_macvtap: entered promiscuous mode [ 77.264062][ T5247] Bluetooth: hci0: command tx timeout [ 77.273848][ T5247] Bluetooth: hci2: command tx timeout [ 77.347097][ T5247] Bluetooth: hci1: command tx timeout [ 77.347123][ T5238] Bluetooth: hci4: command tx timeout [ 77.352585][ T54] Bluetooth: hci3: command tx timeout [ 77.384443][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.392327][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.613125][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.613178][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.613192][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.613209][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.613223][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.613238][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.634149][ T5323] mmap: syz.3.4 (5323) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.721320][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.891391][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.977203][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.166542][ T5324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.254588][ T1835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.257321][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.262442][ T1835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.301005][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.312446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.321168][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.332310][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.342255][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.352997][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.362877][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.373421][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.386034][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.433826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.444937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 78.479727][ T5243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.498362][ T5243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.520830][ T5243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.564742][ T5243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.963671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.972006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.980570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.989167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.997713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.318172][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.327841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.338176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.344224][ T5247] Bluetooth: hci2: command tx timeout [ 79.352522][ T54] Bluetooth: hci0: command tx timeout [ 79.414026][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.430293][ T5247] Bluetooth: hci4: command tx timeout [ 79.437229][ T54] Bluetooth: hci1: command tx timeout [ 79.442701][ T54] Bluetooth: hci3: command tx timeout [ 79.468699][ T5332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.553571][ T5349] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET) [ 79.858537][ T2470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.906394][ T2470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.094061][ T25] libceph: connect (1)[c::]:6789 error -101 [ 80.100411][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 80.241139][ T5351] ceph: No mds server is up or the cluster is laggy [ 80.393137][ T5364] 9pnet_virtio: no channels available for device syz [ 81.742149][ T5238] Bluetooth: hci2: unexpected cc 0x2007 length: 100 > 2 [ 81.756901][ T5383] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 81.763742][ T5383] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 81.914073][ T5383] vhci_hcd vhci_hcd.0: Device attached [ 81.920580][ T5388] netlink: 216 bytes leftover after parsing attributes in process `syz.2.18'. [ 81.950429][ T5384] vhci_hcd: connection closed [ 81.957736][ T2470] vhci_hcd: stop threads [ 82.025050][ T2470] vhci_hcd: release socket [ 82.068587][ T2470] vhci_hcd: disconnect device [ 82.218663][ T5395] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.630509][ T5400] warning: `syz.2.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.841875][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 83.882816][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 84.338678][ T5424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 84.348224][ T5424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.365574][ T5424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.386740][ T5424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.394546][ T5424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.412296][ T5425] netlink: 628 bytes leftover after parsing attributes in process `syz.4.27'. [ 84.557513][ T5425] process 'syz.4.27' launched './file0' with NULL argv: empty string added [ 84.753543][ T25] libceph: connect (1)[c::]:6789 error -101 [ 84.779644][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 84.858298][ T5443] netlink: 'syz.3.32': attribute type 10 has an invalid length. [ 84.928831][ T5445] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.044753][ T5318] libceph: connect (1)[c::]:6789 error -101 [ 85.051095][ T5318] libceph: mon0 (1)[c::]:6789 connect error [ 85.106005][ T5443] overlay: filesystem on ./bus not supported [ 85.344406][ T5238] Bluetooth: hci2: command 0x0406 tx timeout [ 85.408019][ T5434] ceph: No mds server is up or the cluster is laggy [ 85.825155][ T5238] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 85.833802][ T5238] Bluetooth: hci2: Injecting HCI hardware error event [ 85.842030][ T54] Bluetooth: hci2: hardware error 0x00 [ 87.439926][ T2851] cfg80211: failed to load regulatory.db [ 87.728348][ T5478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.778133][ T5480] netlink: 216 bytes leftover after parsing attributes in process `syz.3.45'. [ 88.130453][ T5318] libceph: connect (1)[c::]:6789 error -101 [ 88.137786][ T5318] libceph: mon0 (1)[c::]:6789 connect error [ 88.308961][ T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 88.406224][ T5318] libceph: connect (1)[c::]:6789 error -101 [ 88.412354][ T5318] libceph: mon0 (1)[c::]:6789 connect error [ 88.695605][ T5482] ceph: No mds server is up or the cluster is laggy [ 88.820788][ T5507] No control pipe specified [ 89.034546][ T5291] libceph: connect (1)[c::]:6789 error -101 [ 89.083752][ T5291] libceph: mon0 (1)[c::]:6789 connect error [ 89.131394][ T5508] ceph: No mds server is up or the cluster is laggy [ 89.385319][ T5519] netlink: 216 bytes leftover after parsing attributes in process `syz.3.56'. [ 89.456077][ T5505] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 89.692465][ T5526] 9pnet_virtio: no channels available for device syz [ 91.026049][ T5318] libceph: connect (1)[c::]:6789 error -101 [ 91.033867][ T5318] libceph: mon0 (1)[c::]:6789 connect error [ 91.304294][ T25] libceph: connect (1)[c::]:6789 error -101 [ 91.356493][ T5554] netlink: 216 bytes leftover after parsing attributes in process `syz.4.69'. [ 91.380108][ T5550] loop0: detected capacity change from 0 to 1024 [ 91.383579][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 91.474358][ T5550] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.485934][ T5537] ceph: No mds server is up or the cluster is laggy [ 91.572263][ T5550] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 91.620851][ T5550] EXT4-fs (loop0): orphan cleanup on readonly fs [ 91.670024][ T5550] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.67: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.749139][ T5550] EXT4-fs (loop0): 1 orphan inode deleted [ 91.811332][ T5550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.956464][ T5240] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.062552][ T5568] loop4: detected capacity change from 0 to 1024 [ 92.209832][ T5568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.322425][ T5578] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 92.352823][ T5578] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 444 with error 28 [ 92.367518][ T5578] EXT4-fs (loop4): This should not happen!! Data will be lost [ 92.367518][ T5578] [ 92.378032][ T5578] EXT4-fs (loop4): Total free blocks count 0 [ 92.385147][ T5578] EXT4-fs (loop4): Free/Dirty block details [ 92.391580][ T5578] EXT4-fs (loop4): free_blocks=68451041280 [ 92.398437][ T5578] EXT4-fs (loop4): dirty_blocks=512 [ 92.416401][ T5578] EXT4-fs (loop4): Block reservation details [ 92.422952][ T5578] EXT4-fs (loop4): i_reserved_data_blocks=37 [ 92.474137][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.646916][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.732305][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 92.904195][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.932879][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.010703][ T2963] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 444 with max blocks 2048 with error 28 [ 93.014815][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.193393][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.327596][ T25] usb 1-1: config 0 descriptor?? [ 93.336221][ T5575] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 93.359255][ T5581] loop7: detected capacity change from 0 to 16384 [ 93.448030][ T5583] 9pnet_fd: Insufficient options for proto=fd [ 94.371457][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.411664][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.460620][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.488093][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.495864][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.503415][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.511123][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.518622][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.526257][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.533783][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.541266][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.549006][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.556607][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.564156][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.571614][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.580917][ T25] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 94.668933][ T5591] ======================================================= [ 94.668933][ T5591] WARNING: The mand mount option has been deprecated and [ 94.668933][ T5591] and is ignored by this kernel. Remove the mand [ 94.668933][ T5591] option from the mount to silence this warning. [ 94.668933][ T5591] ======================================================= [ 94.763142][ T25] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 94.807036][ T5592] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 94.813629][ T5592] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 94.822883][ T5592] vhci_hcd vhci_hcd.0: Device attached [ 94.851133][ T5592] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 94.863761][ T5592] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 94.872183][ T5592] CPU: 0 UID: 0 PID: 5592 Comm: syz.4.82 Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 94.882246][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.892312][ T5592] RIP: 0010:strlen+0x2c/0x70 [ 94.897126][ T5592] Code: 1e fa 41 57 41 56 41 54 53 49 89 fe 48 c7 c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 94.916758][ T5592] RSP: 0018:ffffc9000c9978a8 EFLAGS: 00010246 [ 94.922871][ T5592] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 94.930932][ T5592] RDX: ffffc9000a77d000 RSI: 0000000000000293 RDI: 0000000000000000 [ 94.939250][ T5592] RBP: 0000000000000000 R08: ffffffff942e3937 R09: 1ffffffff285c726 [ 94.947221][ T5592] R10: dffffc0000000000 R11: fffffbfff285c727 R12: ffffffffffffffff [ 94.955197][ T5592] R13: ffff8881437ea000 R14: 0000000000000000 R15: dffffc0000000000 [ 94.963166][ T5592] FS: 00007f8c0ae0b6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 94.972103][ T5592] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.978691][ T5592] CR2: 0000000000000000 CR3: 0000000022bd8000 CR4: 00000000003526f0 [ 94.986661][ T5592] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.994651][ T5592] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.002655][ T5592] Call Trace: [ 95.005937][ T5592] [ 95.008868][ T5592] ? __die_body+0x5f/0xb0 [ 95.013201][ T5592] ? die_addr+0xb0/0xe0 [ 95.017356][ T5592] ? exc_general_protection+0x3dd/0x5d0 [ 95.022909][ T5592] ? asm_exc_general_protection+0x26/0x30 [ 95.028640][ T5592] ? strlen+0x2c/0x70 [ 95.032629][ T5592] ? __kasan_kmalloc+0x98/0xb0 [ 95.037413][ T5592] getname_kernel+0x1d/0x2f0 [ 95.042096][ T5592] kern_path+0x1d/0x50 [ 95.046185][ T5592] btrfs_scan_one_device+0x19e/0xd90 [ 95.051465][ T5592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.057557][ T5592] ? __pfx_btrfs_scan_one_device+0x10/0x10 [ 95.063447][ T5592] ? __pfx___mutex_lock+0x10/0x10 [ 95.068474][ T5592] btrfs_get_tree+0x30e/0x1920 [ 95.073246][ T5592] ? lockdep_init_map_type+0xa1/0x910 [ 95.078633][ T5592] ? __pfx_btrfs_get_tree+0x10/0x10 [ 95.083835][ T5592] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 95.089653][ T5592] ? rcu_is_watching+0x15/0xb0 [ 95.094464][ T5592] vfs_get_tree+0x90/0x2b0 [ 95.098981][ T5592] fc_mount+0x1b/0xb0 [ 95.102968][ T5592] btrfs_get_tree+0x652/0x1920 [ 95.107743][ T5592] ? irqentry_exit+0x63/0x90 [ 95.112339][ T5592] ? __pfx_btrfs_get_tree+0x10/0x10 [ 95.117571][ T5592] ? __pfx_btrfs_get_tree+0x10/0x10 [ 95.122877][ T5592] vfs_get_tree+0x90/0x2b0 [ 95.127297][ T5592] vfs_cmd_create+0xa0/0x1f0 [ 95.131984][ T5592] ? __se_sys_fsconfig+0xa15/0xf70 [ 95.137099][ T5592] __se_sys_fsconfig+0xa1f/0xf70 [ 95.142048][ T5592] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 95.147513][ T5592] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 95.153510][ T5592] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 95.159871][ T5592] ? do_syscall_64+0x100/0x230 [ 95.164734][ T5592] ? __x64_sys_fsconfig+0x20/0xc0 [ 95.169791][ T5592] do_syscall_64+0xf3/0x230 [ 95.174371][ T5592] ? clear_bhb_loop+0x35/0x90 [ 95.179499][ T5592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.185495][ T5592] RIP: 0033:0x7f8c09f7dff9 [ 95.189916][ T5592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.209528][ T5592] RSP: 002b:00007f8c0ae0b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 95.217943][ T5592] RAX: ffffffffffffffda RBX: 00007f8c0a136058 RCX: 00007f8c09f7dff9 [ 95.225918][ T5592] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 95.233888][ T5592] RBP: 00007f8c09ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 95.242032][ T5592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.250001][ T5592] R13: 0000000000000000 R14: 00007f8c0a136058 R15: 00007ffe5651e1c8 [ 95.257977][ T5592] [ 95.261010][ T5592] Modules linked in: [ 95.268216][ T5592] ---[ end trace 0000000000000000 ]--- [ 95.273933][ T5592] RIP: 0010:strlen+0x2c/0x70 [ 95.278684][ T5592] Code: 1e fa 41 57 41 56 41 54 53 49 89 fe 48 c7 c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 95.298700][ T5592] RSP: 0018:ffffc9000c9978a8 EFLAGS: 00010246 [ 95.306447][ T5592] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 95.314661][ T5592] RDX: ffffc9000a77d000 RSI: 0000000000000293 RDI: 0000000000000000 [ 95.322715][ T5592] RBP: 0000000000000000 R08: ffffffff942e3937 R09: 1ffffffff285c726 [ 95.330982][ T5592] R10: dffffc0000000000 R11: fffffbfff285c727 R12: ffffffffffffffff [ 95.339142][ T5592] R13: ffff8881437ea000 R14: 0000000000000000 R15: dffffc0000000000 [ 95.348501][ T5592] FS: 00007f8c0ae0b6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 95.357810][ T5592] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.364530][ T5592] CR2: 0000000000000000 CR3: 0000000022bd8000 CR4: 00000000003526f0 [ 95.372593][ T5592] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.380803][ T5592] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.389052][ T5592] Kernel panic - not syncing: Fatal exception [ 95.395469][ T5592] Kernel Offset: disabled [ 95.399794][ T5592] Rebooting in 86400 seconds..