last executing test programs: 7.609211294s ago: executing program 5 (id=6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1], 0x40}}, 0x0) 7.313326987s ago: executing program 5 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f0000000040)}, 0x27) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x70bd27, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) 6.838560514s ago: executing program 5 (id=8): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@noquota}, {@grpid}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x4) accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002200)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000017c0), 0xfffffffffffffff7, 0x40000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x42000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000600)={[{@user_xattr}, {@nodiscard}, {@resuid}, {@errors_remount}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x5}}, {@noinit_itable}, {@nomblk_io_submit}, {@noload}, {@nogrpid}]}, 0x1, 0x568, &(0x7f0000001c80)="$eJzs3U1rG0cfAPD/ynbenycOhNCWUgw5NCWNHNt9SaGH9Fja0EB7T4W9McFyFCw5xG6gyaG59FJCoZQGSu/tvcfQL9BPEWgDoQTTHnpxWXnlKLFkO4pky+j3g3VmdiTNzM7+J7NaCQUwsMayP4WIlyPimyTiaFPZcOSFY2uPW3l8czrbklhd/fSvJJJ83/oTzq/9czj7k0S8FBG/fRVxurCx3urS8lypXE4X8vx4bf7aeHVp+cyV+dJsOptenZyaOvf21OR7777Ttb6+cfGf7z+5/+G5r0+ufPfLw2N3kzgfR/Kyp/rRuVvNmbEYqx+jiJHGoVk30YXK+kmy2w2gI0N5nI9ENgccjaE86ts5sGMtA3rty4hYBQZUIv5hQDXWAY1r+y5dB+8Zjz5YuwDa2P/htfdG4kD92ujQSvLUlVF2vTvahfqzOn79897dbIvuvQ8BsKVbtyPi7PDwxvkvyee/zp3dxmOercP8Bzvnfrb+ebPV+qewvv6JFuufwy1itxNbx3/hYReqaStb/73fcv27ftNqdCjP/a++5htJLl8pp9nc9v+IOBUj+7P8Zvdzzq08WG1X1rz+y7as/sZaMG/Hw+H9Tz9nplQrvUifmz26HfFKy/Vvsj7+SYvxz47HxW3WcSK991q7sqb+Zy/Zov+9tfpTxOstx//JHa1k8/uT4/XzYbxxVmz0950Tv7erf+vx761s/A9t3v/RpPl+bfX56/jxwL9pu7JOz/99yWf19L58341SrbYwEbEv+Xjj/sknz23kG4/P+n/q5ObzX6vz/2BEfL7N/t85/vOrnfe/t7L+zzzX+D9/4sFHX/zQrv7tjf9b9dSpfM925r/tNvBFjh0AAAAAAAD0m0JEHImkUFxPFwrF4trnO47HoUK5Uq2dvlxZvDoT9e/KjsZIoXGn+2jT5yEm8s/DNvKTz+SnIuJYRHw7dLCeL05XyjO73XkAAAAAAAAAAAAAAAAAAADoE4fbfP8/88fQbrcO6LnNf/J781Jgb9sywrvxS09AX/I/PAwu8Q+DS/zD4BL/MLjEPwwu8Q+DS/zD4BL/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FUXL1zIttWVxzens/zM9aXFucr1MzNpda44vzhdnK4sXCvOViqz5bQ4XZnf6vXKlcq1iclYvDFeS6u18erS8qX5yuLV2qUr86XZ9FI6siO9AgAAAAAAAAAAAAAAAAAAgL2lurQ8VyqX0wUJiY4Sw/3RjF4loj+asfOJ3Z6ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCJ/wIAAP//f/Q1pA==") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) 5.819560585s ago: executing program 1 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) shmdt(0x0) 5.641512738s ago: executing program 3 (id=13): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) memfd_create(&(0x7f0000000140)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca\xc9\xf2/\x13{\x1a\x7f\x00\xea\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xbc\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xff\xe9\x7f\xa4.\xaa!\xd6\x02\xe4\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00gO\x8b3\x97\xbd\x00'/407, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000800006b1132000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/60}, 0x20) 5.526010325s ago: executing program 1 (id=15): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x402c5342, &(0x7f00000000c0)) tkill(r1, 0x7) 4.207105796s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="163e6cce65ffff000000000800395032303030"], 0x15) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r0 = dup(0xffffffffffffffff) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000036c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff19) 4.160506823s ago: executing program 4 (id=5): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001c00000014000180080003000100000008000100", @ANYRES32=r2], 0x28}}, 0x0) 4.05287554s ago: executing program 2 (id=3): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 3.884993641s ago: executing program 4 (id=17): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1], 0x40}}, 0x0) 3.884402839s ago: executing program 0 (id=18): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1}, 0x41) 3.072513456s ago: executing program 3 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f0000000040)}, 0x27) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x70bd27, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) 3.063088633s ago: executing program 1 (id=20): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xa9, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 2.976915446s ago: executing program 0 (id=21): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 2.839103313s ago: executing program 2 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) 2.582034639s ago: executing program 3 (id=23): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0xffffffffffffffff, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2.542501025s ago: executing program 1 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.54168241s ago: executing program 4 (id=25): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) shmdt(0x0) 2.399471104s ago: executing program 0 (id=26): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12021, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.984684846s ago: executing program 4 (id=27): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)}], 0x1}, 0xc000) 1.913842498s ago: executing program 2 (id=28): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b031407e0ff25000200475400f6a13bb1000000080008", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.68746203s ago: executing program 3 (id=29): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000600)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.532668116s ago: executing program 2 (id=30): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x39) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0040040000c1000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="7cac362a431b108c5424958fa2dc270ec94d42f6c831e7ec1bb493a3054692b37beb40840663ce136d749a3ddb86ed3fda8eecbebd4effb086b2461ca280f569ed50ee6fda4e160486b6887a195618e26a0fdcecad1880172faa31631e51ab29062f90df4d488df12d58871df04431bec446a91d2f5f652c83350f280f0460b670"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196bd"], 0x14}}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="6103014fc706bc070206090d01d69d632a7e"], 0x12) 1.532147103s ago: executing program 4 (id=31): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./file0\x00', 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=cp12fi,utf8=1,utf8=1,iocharset=cp869,uni_xlate=1,nonumtail=0,\x00'], 0x1, 0x16f, &(0x7f0000000240)="$eJzs271qFFEABeCzMWrUYrewEosBG6slmycwSARxQVC2UBAUkwXJSMDAghYmnYUv4eNY+ySWKYQrycT8MSkskoHs9zVz4M6Be4v5uQPz9v7HzfWt7emb6c8s9XpZeJQqe70MspB/dgMAXCV7peR3KaXc3M2tHymldD0jAOCief4DwPx5+er1s9XxeO1FVS0l9bfZZDZpjs346jQfUmcjy+nnT/ZfEA41+cnT8dpydWCQ7/XOYX9nNrl2uj9KP4P2/qjpV6f713P7ZH8l/dxt76+09m/k4YMT/WH6+fU+W6mznv3ucf/rqKoePx+f6d85OA8AAACugmF1pHX/PhyeN970/+P7wJn99WLuLXa7dgCYV9ufv2y+q+uNT4IgCEeh6zsTcNGOL/quZwIAAAAAAAAAAAAAAJznMn4n6nqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyfvwEAAP//hLKYFQ==") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16], 0x1, 0x2b8, &(0x7f0000001080)="$eJzs3T2LY1UYAOD3JpkkuxZJYSWCF7SwWna2tckgWVhMpaRQCx3cXZAkCLsw4CgGK1sbS3+BINj5J2wEf4DgD7BzioEjN7mXZGbyMUEz48fzFJl37jnvPe85OcwHwz3z4cuT0eM8nn75+a/RbmdR60UvzrLoRi0qKaUUC72vAwD4NztLKX5Pc9dM6RUvWUS091saALAnO3///2HvJQEAe/bOu++9dTQY9N/O83Y8nHx1Mix+sy8+ztuPnsbHMY4ncT86cT7/W0D100Lx+jClNG3khW68NpmeDIvMyQc/lfc/qgY6jE50Z9HF/EeD/mE+t5Q/Leq4W47fK8Z/EJ14ccX4jwb9ByvyY9iM119dqv9edOLnj+KTGMfjWRGL/C8O8/zN9M0fn71flFfkZ9OTYWvWbyHVb+5dAQAAAAAAAAAAAAAAAAAAAADgv+5eeXZOK2bn9xSXyvN36ufFJweRV7oXz+eZ52fVjS6dDzRN8W1KrUbEoH8/z/NUdlzkN+KlRjRuZ9YAAAAAAAAAAAAAAAAAAADwz/L809PR8Xj85NmK4Je7EWua1gTVaQDVY/1bsurrmnpLV16J09Fxa/0Nl5pqZbhh0KhXfbKIjdMpJrHL3P9CcGddzd99v+sN29v7HGxan78nqHbX6DhbvYatqK60q/f0x+U+zbjmWM11TWn79lsKmiubOjvPvfnCLJhu6BPZpsLe+G2+cuWV7PIsmrNVXZl+UAZL6Zf2xk77+erXisxpHQAAAAAAAAAAAAAAAAAAsFeLh36vNN3ZklpLrb2VBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3avH//3cIpmXyNTo349nzW54iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/wN/BgAA//+kKlw+") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6e0ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x0) fanotify_init(0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="008449faf9e216b3215f73873a8a22b749dec16769d72a4f88d2ed6ebb9047d3085972f4aedb63265384ba9c2a9cc50da876a5bdf73a924ed47c825e21fe1732692591c256663ae7efd47c0e1827ab3f5e0cd5fdbcdccec31a1113a330ccfb0f2fd00e32edaec0147a4772ff5ef726b749a638880138941bf9581f309b2f2e6699ed355931ae99cd667f72f2b707c46a77bfb8692995b9ac6291e6b3819b89b0ea5d205e6c8194e5bca8694c5daa02b52914236826eca09395871157567977550fd95600371c427134691534fcccadc49a7cd79d8115", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffe0}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0x0, 0x5]) 1.430058637s ago: executing program 1 (id=32): r0 = io_uring_setup(0x177f, &(0x7f00000002c0)) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="fe", 0x1}, {&(0x7f0000001240)}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.291186892s ago: executing program 3 (id=33): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff27, 0x0) 1.175574631s ago: executing program 1 (id=34): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) memfd_create(&(0x7f0000000140)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca\xc9\xf2/\x13{\x1a\x7f\x00\xea\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xbc\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xff\xe9\x7f\xa4.\xaa!\xd6\x02\xe4\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00gO\x8b3\x97\xbd\x00'/407, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000800006b1132000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/60}, 0x20) 631.37629ms ago: executing program 2 (id=35): socket$kcm(0xa, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./bus\x00', 0x100400e, &(0x7f0000000480)={[{@i_version}, {@init_itable_val={'init_itable', 0x3d, 0x400000000000003}}, {@data_err_ignore}, {@nolazytime}, {@data_writeback}, {@acl}]}, 0x1, 0x44e, &(0x7f0000000940)="$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") socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/29}, 0x20) read$msr(r1, &(0x7f0000001340)=""/102378, 0x7706c522012798af) socket$nl_xfrm(0x10, 0x3, 0x6) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x200000007f, &(0x7f0000000300)=0xa) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x2, 0x10}, 0xc) sendto$inet6(r2, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) 526.633266ms ago: executing program 3 (id=36): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000040)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) 229.432449ms ago: executing program 4 (id=37): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0], 0x20) 95.488087ms ago: executing program 0 (id=38): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x139}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 0s ago: executing program 0 (id=39): syz_usb_connect$hid(0x1, 0xf28b0016, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff006123000000000700"/83], 0xfc}}, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0xb1, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. [ 62.308303][ T5221] cgroup: Unknown subsys name 'net' [ 62.456126][ T5221] cgroup: Unknown subsys name 'cpuset' [ 62.464906][ T5221] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.937143][ T5221] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.399225][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.411097][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.419765][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.430673][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.438753][ T5245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.438824][ T5253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.446225][ T5245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.455101][ T5253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.461095][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.472176][ T5253] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.481659][ T5253] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.482502][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.489574][ T5253] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.496669][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.505445][ T5253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.510421][ T5245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.519427][ T5253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.525987][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.533191][ T5256] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.545762][ T5256] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.553303][ T5256] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.560499][ T5253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.567639][ T5256] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.577466][ T5253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.577476][ T5254] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.577587][ T5254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.599671][ T5256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.613091][ T5256] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.616421][ T5254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.622081][ T5256] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.628194][ T5254] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.636869][ T5256] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.642249][ T5254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.658526][ T5251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.666899][ T5256] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.676002][ T5256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.062304][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 67.219904][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 67.365991][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.373849][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.381189][ T5235] bridge_slave_0: entered allmulticast mode [ 67.388949][ T5235] bridge_slave_0: entered promiscuous mode [ 67.424530][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 67.436251][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 67.447761][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.455890][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.465938][ T5235] bridge_slave_1: entered allmulticast mode [ 67.473310][ T5235] bridge_slave_1: entered promiscuous mode [ 67.481084][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 67.553020][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 67.582904][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.638486][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.645984][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.653942][ T5233] bridge_slave_0: entered allmulticast mode [ 67.660768][ T5233] bridge_slave_0: entered promiscuous mode [ 67.700782][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.727760][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.735019][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.742519][ T5233] bridge_slave_1: entered allmulticast mode [ 67.749578][ T5233] bridge_slave_1: entered promiscuous mode [ 67.874931][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.886980][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.894453][ T5239] bridge_slave_0: entered allmulticast mode [ 67.901270][ T5239] bridge_slave_0: entered promiscuous mode [ 67.910136][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.917421][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.925762][ T5239] bridge_slave_1: entered allmulticast mode [ 67.933427][ T5239] bridge_slave_1: entered promiscuous mode [ 67.958497][ T5235] team0: Port device team_slave_0 added [ 67.964756][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.972125][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.979478][ T5248] bridge_slave_0: entered allmulticast mode [ 67.986941][ T5248] bridge_slave_0: entered promiscuous mode [ 68.006708][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.040838][ T5235] team0: Port device team_slave_1 added [ 68.047038][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.054877][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.062366][ T5248] bridge_slave_1: entered allmulticast mode [ 68.069273][ T5248] bridge_slave_1: entered promiscuous mode [ 68.099726][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.163876][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.171079][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.178990][ T5232] bridge_slave_0: entered allmulticast mode [ 68.186697][ T5232] bridge_slave_0: entered promiscuous mode [ 68.195118][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.202660][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.209800][ T5232] bridge_slave_1: entered allmulticast mode [ 68.217105][ T5232] bridge_slave_1: entered promiscuous mode [ 68.236518][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.255540][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.264907][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.272358][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.279509][ T5234] bridge_slave_0: entered allmulticast mode [ 68.286749][ T5234] bridge_slave_0: entered promiscuous mode [ 68.295017][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.302427][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.328819][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.343745][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.363531][ T5233] team0: Port device team_slave_0 added [ 68.389454][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.397402][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.404837][ T5234] bridge_slave_1: entered allmulticast mode [ 68.412079][ T5234] bridge_slave_1: entered promiscuous mode [ 68.429457][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.436480][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.462819][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.477309][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.501408][ T5233] team0: Port device team_slave_1 added [ 68.515574][ T5239] team0: Port device team_slave_0 added [ 68.538209][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.561761][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.595551][ T5239] team0: Port device team_slave_1 added [ 68.614070][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.642439][ T5237] Bluetooth: hci2: command tx timeout [ 68.647094][ T5251] Bluetooth: hci5: command tx timeout [ 68.657955][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.676756][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.686324][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.713021][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.724124][ T5251] Bluetooth: hci1: command tx timeout [ 68.724164][ T5237] Bluetooth: hci3: command tx timeout [ 68.729788][ T5251] Bluetooth: hci0: command tx timeout [ 68.740927][ T5256] Bluetooth: hci4: command tx timeout [ 68.750131][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.757488][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.784041][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.804914][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.812029][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.838292][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.862188][ T5248] team0: Port device team_slave_0 added [ 68.890943][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.898126][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.924920][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.943902][ T5234] team0: Port device team_slave_0 added [ 68.951437][ T5248] team0: Port device team_slave_1 added [ 68.959542][ T5232] team0: Port device team_slave_0 added [ 68.979756][ T5235] hsr_slave_0: entered promiscuous mode [ 68.987193][ T5235] hsr_slave_1: entered promiscuous mode [ 69.016603][ T5234] team0: Port device team_slave_1 added [ 69.049546][ T5232] team0: Port device team_slave_1 added [ 69.121538][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.128522][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.154654][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.167337][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.174435][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.201146][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.233294][ T5233] hsr_slave_0: entered promiscuous mode [ 69.239757][ T5233] hsr_slave_1: entered promiscuous mode [ 69.246447][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.254374][ T5233] Cannot create hsr debugfs directory [ 69.279547][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.291547][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.318293][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.338407][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.345454][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.372053][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.386073][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.393129][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.419169][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.455442][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.463029][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.489544][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.511151][ T5239] hsr_slave_0: entered promiscuous mode [ 69.517626][ T5239] hsr_slave_1: entered promiscuous mode [ 69.528641][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.536467][ T5239] Cannot create hsr debugfs directory [ 69.632862][ T5248] hsr_slave_0: entered promiscuous mode [ 69.639317][ T5248] hsr_slave_1: entered promiscuous mode [ 69.650992][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.658752][ T5248] Cannot create hsr debugfs directory [ 69.738763][ T5234] hsr_slave_0: entered promiscuous mode [ 69.746615][ T5234] hsr_slave_1: entered promiscuous mode [ 69.753249][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.760931][ T5234] Cannot create hsr debugfs directory [ 69.775317][ T5232] hsr_slave_0: entered promiscuous mode [ 69.781960][ T5232] hsr_slave_1: entered promiscuous mode [ 69.788259][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.796194][ T5232] Cannot create hsr debugfs directory [ 70.097586][ T5235] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.108510][ T5235] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.140844][ T5235] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.164593][ T5235] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.262330][ T5233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.285025][ T5233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.311947][ T5233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.335851][ T5239] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.346528][ T5233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.364856][ T5239] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.392309][ T5239] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.412888][ T5239] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.482086][ T5248] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.493124][ T5248] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.522692][ T5248] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.536500][ T5248] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.573485][ T5232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.585244][ T5232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.615610][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.626694][ T5232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.638083][ T5232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.701261][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.723029][ T5256] Bluetooth: hci2: command tx timeout [ 70.728552][ T5237] Bluetooth: hci5: command tx timeout [ 70.751130][ T5234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.766263][ T5234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.785850][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.793202][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.801837][ T5256] Bluetooth: hci4: command tx timeout [ 70.803047][ T5254] Bluetooth: hci0: command tx timeout [ 70.807250][ T5256] Bluetooth: hci1: command tx timeout [ 70.818304][ T5237] Bluetooth: hci3: command tx timeout [ 70.834482][ T5234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.847310][ T5234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.884654][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.891112][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.892682][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.904507][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.963981][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.024791][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.050866][ T5235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.139719][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.160423][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.177897][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.226151][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.233326][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.249572][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.256743][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.297173][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.304395][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.327285][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.354260][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.361597][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.383034][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.390180][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.416092][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.435483][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.442631][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.465009][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.551176][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.616942][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.624111][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.695426][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.703087][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.769399][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.895345][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.962977][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.970100][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.018741][ T5235] veth0_vlan: entered promiscuous mode [ 72.061256][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.068432][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.174994][ T5235] veth1_vlan: entered promiscuous mode [ 72.232732][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.257641][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.285154][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.298637][ T5234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.427718][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.444531][ T5235] veth0_macvtap: entered promiscuous mode [ 72.494265][ T5239] veth0_vlan: entered promiscuous mode [ 72.504102][ T5235] veth1_macvtap: entered promiscuous mode [ 72.573837][ T5239] veth1_vlan: entered promiscuous mode [ 72.625277][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.668526][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.685961][ T5248] veth0_vlan: entered promiscuous mode [ 72.721089][ T5235] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.733979][ T5235] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.742912][ T5235] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.752163][ T5235] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.780447][ T5248] veth1_vlan: entered promiscuous mode [ 72.813279][ T5237] Bluetooth: hci2: command tx timeout [ 72.818792][ T5256] Bluetooth: hci5: command tx timeout [ 72.837823][ T5239] veth0_macvtap: entered promiscuous mode [ 72.873987][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.886185][ T5248] veth0_macvtap: entered promiscuous mode [ 72.888487][ T5256] Bluetooth: hci1: command tx timeout [ 72.892455][ T5254] Bluetooth: hci0: command tx timeout [ 72.898013][ T5256] Bluetooth: hci4: command tx timeout [ 72.903574][ T5237] Bluetooth: hci3: command tx timeout [ 72.918811][ T5232] veth0_vlan: entered promiscuous mode [ 72.934819][ T5233] veth0_vlan: entered promiscuous mode [ 72.943533][ T5239] veth1_macvtap: entered promiscuous mode [ 72.977711][ T5248] veth1_macvtap: entered promiscuous mode [ 72.994275][ T5233] veth1_vlan: entered promiscuous mode [ 73.040738][ T5232] veth1_vlan: entered promiscuous mode [ 73.065930][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.077573][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.089584][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.101228][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.113191][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.155294][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.168831][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.180325][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.207854][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.218560][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.228944][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.240115][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.252227][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.272503][ T5239] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.281252][ T5239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.291981][ T5239] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.300701][ T5239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.320832][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.329115][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.336621][ T5233] veth0_macvtap: entered promiscuous mode [ 73.340595][ T5233] veth1_macvtap: entered promiscuous mode [ 73.371411][ T5232] veth0_macvtap: entered promiscuous mode [ 73.385060][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.395742][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.406521][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.416999][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.428542][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.446050][ T5248] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.455701][ T5248] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.466021][ T5248] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.475342][ T5248] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.491366][ T5234] veth0_vlan: entered promiscuous mode [ 73.502000][ T5232] veth1_macvtap: entered promiscuous mode [ 73.556163][ T5234] veth1_vlan: entered promiscuous mode [ 73.576348][ T5235] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.607996][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.619784][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.630100][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.641185][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.652519][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.663050][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.675352][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.691154][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.703302][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.713546][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.724275][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.734500][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.745228][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.755410][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.766786][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.779730][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.828518][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.849982][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.861335][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.879466][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.889397][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.900719][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.914224][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.945079][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.955739][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.966256][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.976848][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.987624][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.998839][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.009162][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.020064][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.035747][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.044588][ T5342] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6'. [ 74.066287][ T5234] veth0_macvtap: entered promiscuous mode [ 74.088097][ T5234] veth1_macvtap: entered promiscuous mode [ 74.099603][ T5232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.110935][ T5232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.122207][ T5232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.131101][ T5232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.157397][ T2565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.178948][ T5233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.189094][ T2565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.191700][ T5233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.207698][ T5233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.216537][ T5233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.260672][ T5344] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 74.274236][ T5344] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 74.317292][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.335276][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.388854][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.399778][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.412933][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.424348][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.435144][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.445804][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.455711][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.466240][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.477963][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.501543][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.514106][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.533645][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.545379][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.558159][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.569120][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.611600][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.629004][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.635876][ T5347] loop5: detected capacity change from 0 to 512 [ 74.638939][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.656773][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.662686][ T5347] ======================================================= [ 74.662686][ T5347] WARNING: The mand mount option has been deprecated and [ 74.662686][ T5347] and is ignored by this kernel. Remove the mand [ 74.662686][ T5347] option from the mount to silence this warning. [ 74.662686][ T5347] ======================================================= [ 74.667388][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.722971][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.734899][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.769166][ T5347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.786020][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.799142][ T5347] EXT4-fs (loop5): orphan cleanup on readonly fs [ 74.814681][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.829664][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.829896][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.853515][ T5234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.863151][ T5347] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8: bg 0: block 248: padding at end of block bitmap is not set [ 74.864380][ T5234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.889424][ T5234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.891667][ T5237] Bluetooth: hci5: command tx timeout [ 74.898393][ T5256] Bluetooth: hci2: command tx timeout [ 74.909793][ T5234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.914189][ T5347] Quota error (device loop5): write_blk: dquota write failed [ 74.926972][ T5347] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 74.938308][ T5347] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.8: Failed to acquire dquot type 1 [ 74.960474][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.969171][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.977346][ T5256] Bluetooth: hci3: command tx timeout [ 74.977577][ T5237] Bluetooth: hci0: command tx timeout [ 74.984554][ T5256] Bluetooth: hci1: command tx timeout [ 74.994765][ T5256] Bluetooth: hci4: command tx timeout [ 75.007535][ T5347] EXT4-fs (loop5): 1 truncate cleaned up [ 75.045673][ T5347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.234775][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.266429][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.373328][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.381346][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.547197][ T5358] syz.5.8[5358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.547314][ T5358] syz.5.8[5358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.611113][ T5358] syz.5.8[5358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.679534][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.768521][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.915350][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.949433][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.970509][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.018996][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.291980][ T5329] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.404336][ T5377] 9pnet_fd: Insufficient options for proto=fd [ 78.608283][ T5386] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17'. [ 78.663260][ T5392] siw: device registration error -23 [ 79.071924][ T5401] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.645655][ T5409] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.109947][ T5417] loop4: detected capacity change from 0 to 128 [ 80.276565][ T5424] loop3: detected capacity change from 0 to 1024 [ 80.428893][ T5424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.609112][ T5424] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 80.631678][ T5345] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.806299][ T5345] usb 2-1: config index 0 descriptor too short (expected 43306, got 18) [ 80.846047][ T5345] usb 2-1: config 153 has too many interfaces: 250, using maximum allowed: 32 [ 80.917376][ T5345] usb 2-1: config 153 has an invalid descriptor of length 62, skipping remainder of the config [ 80.968020][ T5239] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.997343][ T5345] usb 2-1: config 153 has 0 interfaces, different from the descriptor's value: 250 [ 81.059239][ T5345] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 81.069114][ T5437] loop2: detected capacity change from 0 to 512 [ 81.103189][ T5437] EXT4-fs: Ignoring removed i_version option [ 81.109248][ T5437] ext2: Bad value for 'init_itable' [ 81.188053][ T5345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.199518][ T47] cfg80211: failed to load regulatory.db [ 81.352315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.431760][ T5345] usb 2-1: string descriptor 0 read error: -71 [ 81.454646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.556992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.575736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.601929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.761684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 82.165201][ T5450] netlink: 68 bytes leftover after parsing attributes in process `syz.0.39'. [ 82.975872][ T5345] usb 2-1: USB disconnect, device number 2 [ 83.772774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 83.842905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.912143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.082913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.431610][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.921624][ T9] usb 1-1: device descriptor read/64, error -110 [ 101.926079][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.891567][ T9] usb 1-1: device descriptor read/64, error -32 [ 106.850308][ T9] usb usb1-port1: attempt power cycle [ 112.912392][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.873277][ T9] usb 1-1: device descriptor read/8, error -32 [ 119.897792][ T9] raw-gadget.0 gadget.0: failed to queue reset event [ 123.929861][ T9] raw-gadget.0 gadget.0: failed to queue resume event [ 125.971803][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.012413][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 126.019736][ T9] usb 1-1: device descriptor read/8, error -32 [ 127.977033][ T9] raw-gadget.0 gadget.0: failed to queue suspend event [ 127.992543][ T9] usb usb1-port1: unable to enumerate USB device [ 139.921813][ T5440] sched: DL replenish lagged too much [ 142.892191][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.899194][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.221994][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.228349][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.344229][ T5245] Bluetooth: hci1: command tx timeout [ 234.349651][ T5245] Bluetooth: hci4: command tx timeout [ 235.352684][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 235.358818][ T55] Bluetooth: hci3: command tx timeout [ 237.354838][ T4616] Bluetooth: hci2: command 0x0406 tx timeout [ 243.295980][ T4616] Bluetooth: hci0: command tx timeout [ 271.653025][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.659473][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.741763][ T5444] raw-gadget.0 gadget.0: failed to queue disconnect event [ 280.831678][ T30] INFO: task kworker/1:5:5329 blocked for more than 143 seconds. [ 280.839614][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 281.121581][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.171489][ T30] task:kworker/1:5 state:D stack:23736 pid:5329 tgid:5329 ppid:2 flags:0x00004000 [ 281.351611][ T30] Workqueue: events_power_efficient crda_timeout_work [ 281.531509][ T30] Call Trace: [ 281.621646][ T30] [ 281.624661][ T30] __schedule+0x1895/0x4b30 [ 281.629241][ T30] ? __pfx___schedule+0x10/0x10 [ 283.509994][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 283.577432][ T30] ? __pfx_lock_release+0x10/0x10 [ 283.631595][ T30] ? kick_pool+0x45c/0x620 [ 283.636110][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 283.641323][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.091489][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 284.096741][ T30] ? schedule+0x90/0x320 [ 284.100991][ T30] schedule+0x14b/0x320 [ 284.391443][ T30] srso_alias_return_thunk+0x5/0xfbef5 [ 284.481658][ T30] ? __schedule+0x1852/0x4b30 [ 284.486427][ T30] ? __pfx_lock_release+0x10/0x10 [ 284.570154][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 284.734239][ T30] ? __schedule+0x1895/0x4b30 [ 284.761864][ T30] ? __pfx___schedule+0x10/0x10 [ 284.766781][ T30] ? __pfx_lock_release+0x10/0x10 [ 284.831474][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 284.837878][ T30] ? schedule+0x90/0x320 [ 284.970690][ T30] ? wq_worker_sleeping+0x66/0x240 SYZFAIL: failed to send rpc fd=3 want=9480 sent=0 n=-1 (errno 32: Broken pipe) [ 285.151699][ T30] ? schedule+0x90/0x320 [ 285.156000][ T30] ? schedule+0x14b/0x320 [ 285.160429][ T30] ? worker_thread+0xa30/0xd30 [ 285.234613][ T5245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 285.261992][ T5245] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 285.269790][ T5245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 285.277959][ T5245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 285.291912][ T5245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 285.299666][ T5245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 285.371680][ T30] ? __kthread_parkme+0x169/0x1d0 [ 285.376784][ T30] ? __pfx_worker_thread+0x10/0x10 [ 285.478925][ T30] ? kthread+0x2f2/0x390 [ 285.483409][ T30] ? __pfx_worker_thread+0x10/0x10 [ 285.488547][ T30] ? __pfx_kthread+0x10/0x10 [ 285.493243][ T30] ? ret_from_fork+0x4d/0x80 [ 285.497881][ T30] ? __pfx_kthread+0x10/0x10 [ 285.502619][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 285.507615][ T30] [ 285.510754][ T30] [ 285.510754][ T30] Showing all locks held in the system: [ 285.520571][ T30] 1 lock held by khungtaskd/30: [ 285.525568][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 285.535686][ T30] 5 locks held by kworker/u8:3/53: [ 285.579561][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 285.640297][ T5235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.711688][ T30] #1: ffffc90000bd7d00 ((work_completion)(&(&krcp->krw_arr[i].rcu_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 285.798272][ T30] #2: ffffffff8e937ea0 (rcu_callback){....}-{0:0}, at: kvfree_rcu_bulk+0x101/0x4e0 [ 286.001967][ T30] #3: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 286.051528][ T30] #4: ffff8880b873ec18 (&cfs_rq->removed.lock){-.-.}-{2:2}, at: update_load_avg+0x1fb/0x1a00 [ 286.101434][ T30] 4 locks held by kworker/u9:0/55: [ 286.106583][ T30] #0: ffff888053b77948 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 286.201519][ T30] #1: ffffc9000120fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 286.231476][ T30] #2: ffff88807d9b0078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 286.271560][ T30] #3: ffffffff8fe3e2e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 286.287527][ T30] 3 locks held by kworker/u8:8/2955: [ 286.292901][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 286.302971][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 286.314534][ T30] #2: ffff8880b862a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 286.324188][ T30] 2 locks held by getty/4986: [ 286.331544][ T30] #0: ffff88802e27c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.341509][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 286.356820][ T30] 5 locks held by kworker/u9:2/5237: [ 286.362938][ T30] #0: ffff88802b190148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 286.373906][ T30] #1: ffffc900049e7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 286.386558][ T30] #2: ffff88807df34d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 286.396547][ T30] #3: ffff88807df34078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 286.406353][ T30] #4: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 286.417379][ T30] 5 locks held by kworker/u9:3/5240: [ 286.422870][ T30] #0: ffff888027ee2948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 286.441617][ T30] #1: ffffc900049d7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 286.454300][ T30] #2: ffff8880291b8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 286.471571][ T30] #3: ffff8880291b8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 286.482253][ T30] #4: ffffffff8fe3e2e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 286.501567][ T30] 5 locks held by kworker/u9:6/5251: [ 286.506958][ T30] #0: ffff888027ee4148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 286.518457][ T30] #1: ffffc900044bfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 286.534606][ T30] #2: ffff8880291bcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 286.556489][ T30] #3: ffff8880291bc078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 286.567525][ T30] #4: ffffffff8fe3e2e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 286.581618][ T30] 5 locks held by kworker/u9:8/5254: [ 286.587113][ T30] #0: ffff88802b195148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 286.617462][ T30] #1: ffffc9000455fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 286.641524][ T30] #2: ffff888029620d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 286.652015][ T30] #3: ffff888029620078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 286.693147][ T30] #4: ffffffff8fe3e2e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 286.721978][ T30] 5 locks held by kworker/u9:9/5256: [ 286.727373][ T30] #0: ffff88802b193148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 286.759452][ T30] #1: ffffc90004937d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 286.791503][ T30] #2: ffff888011af4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 286.821560][ T30] #3: ffff888011af4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 286.863736][ T30] #4: ffffffff8fe3e2e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 286.891965][ T30] 5 locks held by kworker/u9:10/5257: [ 286.897452][ T30] #0: ffff888027ee5948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 286.941573][ T30] #1: ffffc9000456fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 286.974356][ T30] #2: ffff88807e4d0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 287.001365][ T30] #3: ffff88807e4d0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 287.052179][ T30] #4: ffffffff8fe3e2e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 287.062866][ T30] 2 locks held by kworker/0:6/5300: [ 287.068165][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 287.111493][ T30] #1: ffffc90004927d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 287.147012][ T30] 1 lock held by syz.0.39/5444: [ 287.176511][ T30] #0: ffff88807afc0e08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 287.221579][ T30] 1 lock held by syz-executor/5461: [ 287.226813][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 287.447277][ T30] [ 287.449660][ T30] ============================================= [ 287.449660][ T30] [ 287.465710][ T30] NMI backtrace for cpu 0 [ 287.470063][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 287.481184][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.491244][ T30] Call Trace: [ 287.494527][ T30] [ 287.497460][ T30] dump_stack_lvl+0x241/0x360 [ 287.502154][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.507362][ T30] ? __pfx__printk+0x10/0x10 [ 287.511990][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.516946][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.522526][ T30] ? _printk+0xd5/0x120 [ 287.526703][ T30] ? __pfx__printk+0x10/0x10 [ 287.531309][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.536195][ T30] ? __pfx__printk+0x10/0x10 [ 287.540807][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.546449][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 287.551503][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.557528][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.563525][ T30] watchdog+0xff4/0x1040 [ 287.567786][ T30] ? watchdog+0x1ea/0x1040 [ 287.572225][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.576921][ T30] kthread+0x2f2/0x390 [ 287.580997][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.585690][ T30] ? __pfx_kthread+0x10/0x10 [ 287.590634][ T30] ret_from_fork+0x4d/0x80 [ 287.595073][ T30] ? __pfx_kthread+0x10/0x10 [ 287.599681][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.604561][ T30] [ 287.608574][ T30] Sending NMI from CPU 0 to CPUs 1: [ 287.614347][ C1] NMI backtrace for cpu 1 [ 287.614362][ C1] CPU: 1 UID: 0 PID: 5330 Comm: kworker/1:6 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 287.614388][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.614403][ C1] Workqueue: events free_obj_work [ 287.614441][ C1] RIP: 0010:__phys_addr+0x26/0x170 [ 287.614468][ C1] Code: 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 49 89 fe e8 6f e8 51 00 48 bf ff ff ff 7f ff ff ff ff 4c 89 f6 e8 3d ed 51 00 4c 89 f3 <48> 81 eb 00 00 00 80 0f 83 94 00 00 00 48 b8 00 00 00 00 80 77 00 [ 287.614487][ C1] RSP: 0018:ffffc90004907a00 EFLAGS: 00000293 [ 287.614506][ C1] RAX: 0000000000000000 RBX: ffff88805a4960a8 RCX: ffff88802c581e00 [ 287.614522][ C1] RDX: 0000000000000000 RSI: ffff88805a4960a8 RDI: ffffffff7fffffff [ 287.614539][ C1] RBP: 0000000000213800 R08: ffffffff8142ee13 R09: ffffffff84c27b9f [ 287.614555][ C1] R10: dffffc0000000000 R11: fffffbfff2858b0f R12: ffff88801ac4f8dc [ 287.614573][ C1] R13: ffffea0001692580 R14: ffff88805a4960a8 R15: ffff88801ac4f8c0 [ 287.614593][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 287.614613][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.614629][ C1] CR2: 0000000020045000 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 287.614646][ C1] Call Trace: [ 287.614654][ C1] [ 287.614667][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 287.614698][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 287.614737][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.614765][ C1] ? nmi_handle+0x2a/0x5a0 [ 287.614799][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.614832][ C1] ? nmi_handle+0x151/0x5a0 [ 287.614856][ C1] ? nmi_handle+0x2a/0x5a0 [ 287.614882][ C1] ? __phys_addr+0x26/0x170 [ 287.614904][ C1] ? default_do_nmi+0x63/0x160 [ 287.614934][ C1] ? exc_nmi+0x123/0x1f0 [ 287.614962][ C1] ? end_repeat_nmi+0xf/0x53 [ 287.614987][ C1] ? free_obj_work+0x4ff/0x6d0 [ 287.615020][ C1] ? __phys_addr+0x23/0x170 [ 287.615045][ C1] ? __phys_addr+0x26/0x170 [ 287.615068][ C1] ? __phys_addr+0x26/0x170 [ 287.615093][ C1] ? __phys_addr+0x26/0x170 [ 287.615116][ C1] [ 287.615124][ C1] [ 287.615132][ C1] ? free_obj_work+0x4ff/0x6d0 [ 287.615165][ C1] check_slab_allocation+0x16/0x110 [ 287.615192][ C1] ? free_obj_work+0x4ff/0x6d0 [ 287.615226][ C1] kmem_cache_free+0x14c/0x420 [ 287.615259][ C1] ? free_obj_work+0x4ff/0x6d0 [ 287.615296][ C1] free_obj_work+0x4ff/0x6d0 [ 287.615332][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.615355][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.615392][ C1] ? __pfx_free_obj_work+0x10/0x10 [ 287.615431][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.615474][ C1] ? process_scheduled_works+0x976/0x1850 [ 287.615509][ C1] process_scheduled_works+0xa65/0x1850 [ 287.615559][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.615598][ C1] ? assign_work+0x364/0x3d0 [ 287.615633][ C1] worker_thread+0x870/0xd30 [ 287.615673][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.615698][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.615722][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 287.615759][ C1] ? __kthread_parkme+0x169/0x1d0 [ 287.615796][ C1] ? __pfx_worker_thread+0x10/0x10 [ 287.615831][ C1] kthread+0x2f2/0x390 [ 287.615853][ C1] ? __pfx_worker_thread+0x10/0x10 [ 287.615886][ C1] ? __pfx_kthread+0x10/0x10 [ 287.615909][ C1] ret_from_fork+0x4d/0x80 [ 287.615944][ C1] ? __pfx_kthread+0x10/0x10 [ 287.615966][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.616010][ C1] [ 287.681801][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.681822][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 287.681852][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.681869][ T30] Call Trace: [ 287.681879][ T30] [ 287.681890][ T30] dump_stack_lvl+0x241/0x360 [ 287.681925][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.681952][ T30] ? __pfx__printk+0x10/0x10 [ 287.681990][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.682040][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.682070][ T30] ? vscnprintf+0x5d/0x90 [ 287.682104][ T30] panic+0x349/0x880 [ 287.682142][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.682172][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.682207][ T30] ? __pfx_panic+0x10/0x10 [ 287.682243][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 287.682274][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.682302][ T30] ? __irq_work_queue_local+0x137/0x410 [ 287.682340][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.682368][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 287.682397][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.682435][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 287.682470][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.682498][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 288.104390][ T30] watchdog+0x1033/0x1040 [ 288.108751][ T30] ? watchdog+0x1ea/0x1040 [ 288.113188][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.117883][ T30] kthread+0x2f2/0x390 [ 288.121958][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.126647][ T30] ? __pfx_kthread+0x10/0x10 [ 288.131247][ T30] ret_from_fork+0x4d/0x80 [ 288.135685][ T30] ? __pfx_kthread+0x10/0x10 [ 288.140281][ T30] ret_from_fork_asm+0x1a/0x30 [ 288.145074][ T30] [ 288.148303][ T30] Kernel Offset: disabled [ 288.152623][ T30] Rebooting in 86400 seconds..