last executing test programs: 2m59.225452665s ago: executing program 1 (id=61): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0xfffffffd, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r6, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) 2m56.367736345s ago: executing program 1 (id=66): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a) 2m55.159747672s ago: executing program 1 (id=68): syz_open_dev$video4linux(0x0, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="65694c40212b71a5585daf3557cafb1b24c7cb861ff8b29c234bfa26a2da5897713a91daab555eec4f1527253582daf2dc97913d100951419ed3a989743c3a3d23750dd953baecbd411c85bed1e3ccfe7495861f91f05a4aa169419e40d1b329d289415e7927f8250f91d639928101d661e3ebc3", 0x74}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000000240)="d8efd13430", 0x5}, {&(0x7f0000000280)="4e2e50c756cd9680ce6968230f935359779a", 0x12}, {0x0}], 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) ioctl$LOOP_SET_STATUS(r0, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xfffffffc, 0x6, 0x80415, 0x1, "4b8b3ea40100dfed0b2f3409000000dd5a9601040049918ae7fd1f0ececfe0f4fcdf997dd52115394d4d0008000000000000020000000000000000000000eaff", "090000041031eaabb9496e4d7e00000000000108000000ecff0200", [0x1000000000000911, 0xc]}) 2m54.70072697s ago: executing program 1 (id=70): ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) 2m53.109493417s ago: executing program 1 (id=72): r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca208", 0xd, 0x0, &(0x7f0000000440)={0x11, 0x0, r1, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005340)=[{{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000180)="368e6734664d4b6c5eb2adc7af40175ebe781b5e72b6aaddbe08a0f106b035c65e95ab3ea80dc56068cd0c18068de554d8c46dbfa7", 0x35}, {&(0x7f00000001c0)="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", 0xe39}], 0x2, 0x0, 0xb0}}], 0x1, 0x4c014) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m51.795310599s ago: executing program 1 (id=76): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000) 2m35.771780932s ago: executing program 32 (id=76): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000) 1m20.989758192s ago: executing program 3 (id=268): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r4, 0x0, 0x0, 0x800) 1m19.630387376s ago: executing program 3 (id=271): read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1m19.49616246s ago: executing program 3 (id=273): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000340)="4700000001003f", 0x7) 1m19.286617819s ago: executing program 3 (id=274): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800010900000000ffdbdf25022b1000ff0000080000904708000500ac1414bbb17c3855b0e53e76a49a447ffd3cb20c1f5b71c72a9e6db606125a5bd4"], 0x24}}, 0x404) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, 0x0, 0x0) unshare(0x40020000) 1m15.184478437s ago: executing program 3 (id=288): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) rseq(0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xb}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0xe15, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, 0x0, 0x341, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x208}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m9.64786197s ago: executing program 3 (id=308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001801000020646c2500000000002020207b1af8ff00000000bfa1000000010000f8ffffffb702000008000000b70300000000000085000000b00000009500"/92], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20008840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd0ffffff}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x48, r10, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x7, 0xf252, 0x7, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x9, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba54, 0x1, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x10000, 0x8, 0x9, 0x2001, 0x199f, 0x8, 0x5, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x23, 0x0, 0x5, 0x7, 0xfffffffc, 0x20, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x100003, 0x1, 0x297, 0x5, 0x0, 0x1981, 0x4, 0x100, 0x2, 0x7, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x5, 0x5, 0x800, 0xffff, 0xa, 0x96, 0x2, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0xffffffff, 0x1, 0x8, 0x5, 0x200, 0x3], [0x9, 0xc584, 0x7, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x7, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf22, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0xfffffff8, 0x100fffd, 0x102005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x1006, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0x80000001, 0x65f413f9, 0x4, 0x8, 0x40008a8, 0x2, 0x40, 0x7, 0x26f, 0x4, 0x4, 0x10, 0x1, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x9, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) 54.440353218s ago: executing program 33 (id=308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001801000020646c2500000000002020207b1af8ff00000000bfa1000000010000f8ffffffb702000008000000b70300000000000085000000b00000009500"/92], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20008840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd0ffffff}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x48, r10, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x7, 0xf252, 0x7, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x9, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba54, 0x1, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x10000, 0x8, 0x9, 0x2001, 0x199f, 0x8, 0x5, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x23, 0x0, 0x5, 0x7, 0xfffffffc, 0x20, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x100003, 0x1, 0x297, 0x5, 0x0, 0x1981, 0x4, 0x100, 0x2, 0x7, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x5, 0x5, 0x800, 0xffff, 0xa, 0x96, 0x2, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0xffffffff, 0x1, 0x8, 0x5, 0x200, 0x3], [0x9, 0xc584, 0x7, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x7, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf22, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0xfffffff8, 0x100fffd, 0x102005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x1006, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0x80000001, 0x65f413f9, 0x4, 0x8, 0x40008a8, 0x2, 0x40, 0x7, 0x26f, 0x4, 0x4, 0x10, 0x1, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x9, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) 12.771018634s ago: executing program 0 (id=405): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x8000000002, 0x0, [0x802f, 0xffffffff, 0x9, 0x1, 0x6], [0x1000000000000002, 0x10000002, 0x1, 0x2, 0x7ffd, 0xffffffffffff99b9, 0x5, 0x8000000000000001, 0x9, 0xffff, 0x9, 0x1, 0xfc5, 0xfffffffffffffff4, 0x8e3f, 0xfffffffffffffffa, 0x100, 0xd, 0xd9, 0x90, 0xf0, 0x800000000002a9, 0x19, 0x0, 0x3, 0x0, 0xa, 0x20000000003, 0xa53, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffffa, 0x80, 0x3, 0x80, 0x931, 0x101, 0x3, 0x8004, 0x19a0, 0x101, 0x1, 0xb, 0x8, 0x1, 0x2, 0x1, 0x400083, 0x538a, 0x8001, 0xda, 0x4, 0x0, 0x803, 0x8000005, 0xb, 0x3, 0x77, 0x4, 0x800, 0x7, 0x7, 0x3, 0xffffffffffffffff, 0x4, 0x8000, 0x12f, 0x8, 0x6, 0xfffffffffffffffc, 0x82c, 0x7ff, 0x3, 0x2, 0x2, 0x4, 0x3, 0x5, 0x100000001, 0x800, 0x1, 0xe773, 0x2, 0x8, 0x10000000, 0x6, 0xe, 0x9, 0x100000001, 0x400004, 0x800000008, 0x7, 0x9, 0x10000, 0x6, 0x1, 0x16d, 0x2, 0x8, 0xffffffffffff43b3, 0x8, 0x5eb, 0x12, 0x0, 0x0, 0x3, 0x4, 0x7, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x2, 0x40, 0x80000001, 0x7, 0x101, 0x1]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="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"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0xee01, &(0x7f0000000840)) 10.681010027s ago: executing program 0 (id=406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0xb86, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 10.249389716s ago: executing program 2 (id=408): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee3, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) 9.570887598s ago: executing program 2 (id=411): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xe1b4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0xf3a, 0x0) tee(r1, r5, 0xf3a, 0x4) write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[], 0x18c6) 8.259323411s ago: executing program 4 (id=412): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1d6) mkdirat(0xffffffffffffff9c, 0x0, 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 8.041247346s ago: executing program 4 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe78, 0x30, 0x1, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0xa796}, {}, {}, {0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x17}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0xfffffffd}, {0x9}, {0x0, 0x0, 0x92d5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4}, {}, {}, {}, {0x1000, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x560e}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe0}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x10000, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x18000, 0x0, 0x0, 0xad}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x2000, 0x0, 0x124c}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {0x81}, {}, {0x0, 0x401, 0x0, 0x0, 0xfffffffe}, {0x0, 0x1}, {}, {0x0, 0x0, 0x400000}, {}, {}, {}, {}, {0xffffffff, 0x7}, {}, {0xd1}, {0x0, 0x9}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8001}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x800004, 0x1666}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x80}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000240)) openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x426401, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r3, r2}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r7 = dup(0xffffffffffffffff) write$UHID_INPUT(r7, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r6, &(0x7f0000004380)={0x2020}, 0x2032) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) r9 = eventfd2(0x40, 0x80000) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000000)={0x1, r9}) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f00000005c0)={0x0, r9}) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x48, 0x0, 0xe4}) r11 = socket$kcm(0xa, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f00000013c0)=ANY=[], 0x0) sendmsg$sock(r11, 0x0, 0x4800) 7.871286412s ago: executing program 2 (id=414): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x1e, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r4, 0x0, 0x0, 0x800) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sysfs$2(0x2, 0x817fff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 6.512456646s ago: executing program 2 (id=415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a) 6.380789802s ago: executing program 4 (id=416): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) rseq(0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xb}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0xe15, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 5.0312919s ago: executing program 0 (id=417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) get_robust_list(r0, 0x0, &(0x7f00000006c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) set_robust_list(&(0x7f00000003c0)={&(0x7f0000000280)={&(0x7f0000000100)}, 0xfffff001, &(0x7f0000000340)={&(0x7f0000000300)}}, 0xc) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x3, 0x5002) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 3.537596413s ago: executing program 2 (id=418): socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0x4148, 0x0) 2.500842248s ago: executing program 0 (id=419): chdir(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933205}, 0x10) 1.546130495s ago: executing program 0 (id=420): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="10c32900000000dbdf253700000008005700020000000800342b675bd3758e792c34cc5bf858e26599e2cb3688532661feb890f64900270002000000a75f59d89d3639214e59f560db111da535aced570a3768b9995bbd315f65ad"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') read$FUSE(r2, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x3, 0x10) 1.044847561s ago: executing program 4 (id=421): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1d6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 943.740621ms ago: executing program 4 (id=422): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r4, 0xf3a, 0x4) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) 721.163436ms ago: executing program 2 (id=423): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x1e, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r4, 0x0, 0x0, 0x800) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sysfs$2(0x2, 0x817fff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 277.264036ms ago: executing program 4 (id=424): socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc6, r1, &(0x7f0000000140)="8d12c00100fd647a8a94204961d3035bb4fca0f7192a067e0dce56a7c9dce364667e9c9433d539c7fa3a8a72ec749d5a7dc49331e4d45b67c5513fbd3c03321baa7aba", 0x43, 0x36, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x6, 0x0, 0x1, r1}]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x4008600, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x21) mknod(&(0x7f00000001c0)='./file0\x00', 0x1000, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc5440, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=425): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0xb86, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. [ 81.313832][ T5782] cgroup: Unknown subsys name 'net' [ 81.535436][ T5782] cgroup: Unknown subsys name 'cpuset' [ 81.590769][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.586848][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.995837][ T31] cfg80211: failed to load regulatory.db [ 87.231419][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.235093][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.236096][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.237604][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.238377][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.259175][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.262541][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.264110][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.265617][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.266650][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.352910][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.355382][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.356131][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.380514][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.382952][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.389474][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.401335][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.401505][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.402603][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.408911][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.440574][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.442572][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.446788][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.449109][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.481327][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.270707][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 88.346609][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 88.425158][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 88.436444][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 88.569417][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 88.678052][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.678917][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.679178][ T5798] bridge_slave_0: entered allmulticast mode [ 88.682082][ T5798] bridge_slave_0: entered promiscuous mode [ 88.743989][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.744135][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.744673][ T5798] bridge_slave_1: entered allmulticast mode [ 88.746568][ T5798] bridge_slave_1: entered promiscuous mode [ 88.791588][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.791747][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.791860][ T5796] bridge_slave_0: entered allmulticast mode [ 88.793441][ T5796] bridge_slave_0: entered promiscuous mode [ 88.853028][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.853158][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.853277][ T5796] bridge_slave_1: entered allmulticast mode [ 88.854805][ T5796] bridge_slave_1: entered promiscuous mode [ 88.876859][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.876981][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.877133][ T5801] bridge_slave_0: entered allmulticast mode [ 88.881473][ T5801] bridge_slave_0: entered promiscuous mode [ 88.884437][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.885584][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.886102][ T5802] bridge_slave_0: entered allmulticast mode [ 88.888676][ T5802] bridge_slave_0: entered promiscuous mode [ 88.932900][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.933268][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.934468][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.934951][ T5801] bridge_slave_1: entered allmulticast mode [ 88.937495][ T5801] bridge_slave_1: entered promiscuous mode [ 88.939248][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.939364][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.939861][ T5802] bridge_slave_1: entered allmulticast mode [ 88.944351][ T5802] bridge_slave_1: entered promiscuous mode [ 88.993782][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.037129][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.080445][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.080666][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.080853][ T5807] bridge_slave_0: entered allmulticast mode [ 89.083455][ T5807] bridge_slave_0: entered promiscuous mode [ 89.088606][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.129796][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.243967][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.244211][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.244361][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.244533][ T5807] bridge_slave_1: entered allmulticast mode [ 89.246648][ T5807] bridge_slave_1: entered promiscuous mode [ 89.271182][ T5798] team0: Port device team_slave_0 added [ 89.276122][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.279756][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.303848][ T5798] team0: Port device team_slave_1 added [ 89.322003][ T62] Bluetooth: hci1: command tx timeout [ 89.377151][ T5796] team0: Port device team_slave_0 added [ 89.400734][ T62] Bluetooth: hci0: command tx timeout [ 89.418402][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.438409][ T5796] team0: Port device team_slave_1 added [ 89.446045][ T5801] team0: Port device team_slave_0 added [ 89.448357][ T5802] team0: Port device team_slave_0 added [ 89.462758][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.463738][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.463750][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.463768][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.471640][ T5809] Bluetooth: hci3: command tx timeout [ 89.471803][ T62] Bluetooth: hci2: command tx timeout [ 89.544300][ T5801] team0: Port device team_slave_1 added [ 89.546036][ T5802] team0: Port device team_slave_1 added [ 89.550613][ T62] Bluetooth: hci4: command tx timeout [ 89.564473][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.564490][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.564515][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.640926][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.640945][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.640973][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.679516][ T5807] team0: Port device team_slave_0 added [ 89.703367][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.703379][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.703396][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.704305][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.704315][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.704330][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.705539][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.705552][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.705578][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.708683][ T5807] team0: Port device team_slave_1 added [ 89.727280][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.727296][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.727321][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.730009][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.730023][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.731492][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.847337][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.847353][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.847377][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.874438][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.874456][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.874482][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.888655][ T5798] hsr_slave_0: entered promiscuous mode [ 89.891937][ T5798] hsr_slave_1: entered promiscuous mode [ 89.981990][ T5796] hsr_slave_0: entered promiscuous mode [ 89.983294][ T5796] hsr_slave_1: entered promiscuous mode [ 89.984320][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 89.984412][ T5796] Cannot create hsr debugfs directory [ 90.043651][ T5802] hsr_slave_0: entered promiscuous mode [ 90.045657][ T5802] hsr_slave_1: entered promiscuous mode [ 90.046556][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 90.046579][ T5802] Cannot create hsr debugfs directory [ 90.079592][ T5801] hsr_slave_0: entered promiscuous mode [ 90.081509][ T5801] hsr_slave_1: entered promiscuous mode [ 90.082426][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 90.082449][ T5801] Cannot create hsr debugfs directory [ 90.178140][ T5807] hsr_slave_0: entered promiscuous mode [ 90.179180][ T5807] hsr_slave_1: entered promiscuous mode [ 90.179754][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 90.179771][ T5807] Cannot create hsr debugfs directory [ 91.400679][ T62] Bluetooth: hci1: command tx timeout [ 91.430569][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.469086][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.480375][ T62] Bluetooth: hci0: command tx timeout [ 91.508021][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.561095][ T5809] Bluetooth: hci3: command tx timeout [ 91.561200][ T62] Bluetooth: hci2: command tx timeout [ 91.586291][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.630488][ T62] Bluetooth: hci4: command tx timeout [ 91.714797][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.758714][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.807686][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.847641][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.967745][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.004431][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.039790][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.088963][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.233822][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.284137][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.323287][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.384728][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.428137][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.535228][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.538869][ T5807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.578873][ T5807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.631647][ T5807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.669932][ T5807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.711639][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.711789][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.755912][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.756066][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.814258][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.894782][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.913239][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.939424][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.939568][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.978307][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.978468][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.014119][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.049361][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.055288][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.075626][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.096921][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.097074][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.186499][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.248648][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.248859][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.260755][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.311749][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.311925][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.421512][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.470962][ T62] Bluetooth: hci1: command tx timeout [ 93.489353][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.494803][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.532179][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.532342][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.551763][ T62] Bluetooth: hci0: command tx timeout [ 93.578699][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.638447][ T5809] Bluetooth: hci3: command tx timeout [ 93.638565][ T62] Bluetooth: hci2: command tx timeout [ 93.710367][ T62] Bluetooth: hci4: command tx timeout [ 93.888421][ T5798] veth0_vlan: entered promiscuous mode [ 93.963461][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.972073][ T5798] veth1_vlan: entered promiscuous mode [ 94.027916][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.180477][ T5798] veth0_macvtap: entered promiscuous mode [ 94.209435][ T5798] veth1_macvtap: entered promiscuous mode [ 94.248373][ T5796] veth0_vlan: entered promiscuous mode [ 94.296916][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.309922][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.318497][ T5796] veth1_vlan: entered promiscuous mode [ 94.340768][ T5802] veth0_vlan: entered promiscuous mode [ 94.352344][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.382504][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.399418][ T3643] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.406284][ T5802] veth1_vlan: entered promiscuous mode [ 94.414431][ T3643] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.418951][ T3643] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.425159][ T3643] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.702625][ T5796] veth0_macvtap: entered promiscuous mode [ 94.731400][ T5796] veth1_macvtap: entered promiscuous mode [ 94.802261][ T5802] veth0_macvtap: entered promiscuous mode [ 94.809289][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.809309][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.847727][ T5802] veth1_macvtap: entered promiscuous mode [ 94.874599][ T5807] veth0_vlan: entered promiscuous mode [ 94.894116][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.943116][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.945804][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.945824][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.969372][ T5807] veth1_vlan: entered promiscuous mode [ 94.986841][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.002333][ T3643] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.007754][ T3643] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.030502][ T3643] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.049651][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.049814][ T3643] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.090821][ T5801] veth0_vlan: entered promiscuous mode [ 95.156113][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.173431][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.236191][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.252835][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.316799][ T5801] veth1_vlan: entered promiscuous mode [ 95.449759][ T5807] veth0_macvtap: entered promiscuous mode [ 95.546571][ T5807] veth1_macvtap: entered promiscuous mode [ 95.550870][ T62] Bluetooth: hci1: command tx timeout [ 95.576897][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.576921][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.632434][ T62] Bluetooth: hci0: command tx timeout [ 95.710585][ T62] Bluetooth: hci2: command tx timeout [ 95.710622][ T62] Bluetooth: hci3: command tx timeout [ 95.727856][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.727879][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.728611][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.729496][ T5801] veth0_macvtap: entered promiscuous mode [ 95.790543][ T5809] Bluetooth: hci4: command tx timeout [ 95.827088][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.829442][ T5801] veth1_macvtap: entered promiscuous mode [ 95.887350][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.887375][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.969865][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.015903][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.052451][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.058482][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.074226][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.074282][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.156314][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.246111][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.347261][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.390287][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.396128][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.397130][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.405156][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.948297][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.948321][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.530712][ T1540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.530727][ T1540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.697977][ T3636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.698009][ T3636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.332706][ T406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.332731][ T406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.334035][ T5943] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.695783][ T5953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.670256][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 99.950635][ T5956] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 100.330344][ T5958] comedi comedi2: c6xdigio: a I/O base address must be specified [ 101.264380][ T5969] team0 (unregistering): Port device team_slave_0 removed [ 101.323906][ T5969] team0 (unregistering): Port device team_slave_1 removed [ 101.930172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.130738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.130786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.130824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.130860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.130897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.130933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.130969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.131005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.131042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.000492][ T5899] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.410232][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 108.434875][ T5899] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 108.434907][ T5899] usb 1-1: config 0 has no interface number 0 [ 108.434964][ T5899] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 108.434990][ T5899] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 108.435018][ T5899] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.435043][ T5899] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 108.435091][ T5899] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 108.435117][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.536812][ T5899] usb 1-1: config 0 descriptor?? [ 108.624279][ T5899] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 108.819860][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 108.819966][ T5899] usb 1-1: USB disconnect, device number 2 [ 108.888622][ T5899] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 109.342199][ T6016] comedi comedi2: c6xdigio: a I/O base address must be specified [ 115.310245][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 115.468168][ T6052] comedi comedi2: c6xdigio: a I/O base address must be specified [ 116.028073][ T6086] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 116.041715][ T5915] IPVS: starting estimator thread 0... [ 116.130470][ T6087] IPVS: using max 7 ests per chain, 16800 per kthread [ 117.002886][ T6101] 9pnet_virtio: no channels available for device syz [ 117.100265][ T6101] ======================================================= [ 117.100265][ T6101] WARNING: The mand mount option has been deprecated and [ 117.100265][ T6101] and is ignored by this kernel. Remove the mand [ 117.100265][ T6101] option from the mount to silence this warning. [ 117.100265][ T6101] ======================================================= [ 117.159085][ T6101] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 120.603505][ T406] Bluetooth: (null): Invalid header checksum [ 122.365033][ T6126] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 122.368676][ T5899] IPVS: starting estimator thread 0... [ 122.450319][ T6127] IPVS: using max 7 ests per chain, 16800 per kthread [ 122.825803][ T6133] 9pnet_virtio: no channels available for device syz [ 124.037164][ T6149] 9pnet_virtio: no channels available for device syz [ 124.103211][ T6149] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.100496][ T6163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.82'. [ 126.200088][ T6184] binder: BINDER_SET_CONTEXT_MGR already set [ 126.200106][ T6184] binder: 6181:6184 ioctl 4018620d 200000001000 returned -16 [ 127.569805][ T6196] veth1_macvtap: left promiscuous mode [ 127.569831][ T6196] macsec0: entered allmulticast mode [ 129.840219][ T37] audit: type=1326 audit(1771753395.022:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.4.96" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f5ab9c629 code=0x0 [ 132.784228][ T6226] Bluetooth: MGMT ver 1.23 [ 132.854682][ T6225] comedi comedi2: c6xdigio: a I/O base address must be specified [ 133.258116][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.258191][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.474671][ T6228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.105'. [ 137.138214][ T995] IPVS: starting estimator thread 0... [ 137.349611][ T6250] IPVS: using max 13 ests per chain, 31200 per kthread [ 142.176286][ T62] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 142.192860][ T62] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 142.227398][ T62] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 142.228954][ T62] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 142.229753][ T62] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.240222][ T5882] IPVS: starting estimator thread 0... [ 143.340337][ T6293] IPVS: using max 8 ests per chain, 19200 per kthread [ 143.778646][ T6275] chnl_net:caif_netlink_parms(): no params data found [ 144.834265][ T37] audit: type=1326 audit(1771753409.892:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6297 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 144.834323][ T37] audit: type=1326 audit(1771753409.902:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6297 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 144.834367][ T37] audit: type=1326 audit(1771753409.902:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6297 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 144.834409][ T37] audit: type=1326 audit(1771753409.902:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6297 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 144.834453][ T37] audit: type=1326 audit(1771753409.902:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6297 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 144.834495][ T37] audit: type=1326 audit(1771753409.912:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6297 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 144.834539][ T37] audit: type=1326 audit(1771753409.912:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6297 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 144.834581][ T37] audit: type=1326 audit(1771753409.912:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6297 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 144.834624][ T37] audit: type=1326 audit(1771753409.922:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6297 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 144.834669][ T37] audit: type=1326 audit(1771753409.922:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6297 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 144.835995][ T62] Bluetooth: hci5: command tx timeout [ 145.238897][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 145.238930][ T5881] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 145.239856][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 145.239913][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 145.239928][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 145.239948][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 145.239963][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 145.239978][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 145.239992][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 145.240007][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 145.240021][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 145.349734][ T5881] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 146.625029][ T6318] fido_id[6318]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.910439][ T62] Bluetooth: hci5: command tx timeout [ 147.193205][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.193284][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.193452][ T6275] bridge_slave_0: entered allmulticast mode [ 147.197690][ T6275] bridge_slave_0: entered promiscuous mode [ 147.263018][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.263098][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.263252][ T6275] bridge_slave_1: entered allmulticast mode [ 147.270356][ T6275] bridge_slave_1: entered promiscuous mode [ 148.286740][ T6275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.437254][ T6275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.043626][ T62] Bluetooth: hci5: command tx timeout [ 151.715088][ T62] Bluetooth: hci5: command tx timeout [ 151.784474][ T6275] team0: Port device team_slave_0 added [ 151.809137][ T6275] team0: Port device team_slave_1 added [ 152.020819][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.020838][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.020866][ T6275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.105787][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.105807][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.105837][ T6275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.167886][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 153.167910][ T37] audit: type=1326 audit(1771753418.272:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6354 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 153.167967][ T37] audit: type=1326 audit(1771753418.272:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6354 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 153.168014][ T37] audit: type=1326 audit(1771753418.272:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6354 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 153.168060][ T37] audit: type=1326 audit(1771753418.282:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6354 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 153.168105][ T37] audit: type=1326 audit(1771753418.282:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6354 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 153.168151][ T37] audit: type=1326 audit(1771753418.282:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6354 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 153.168197][ T37] audit: type=1326 audit(1771753418.292:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6354 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 153.168243][ T37] audit: type=1326 audit(1771753418.292:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6354 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 153.168289][ T37] audit: type=1326 audit(1771753418.302:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6354 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 153.168338][ T37] audit: type=1326 audit(1771753418.302:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6354 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 154.648211][ T6358] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 154.721519][ T5899] hid_parser_main: 12 callbacks suppressed [ 154.721543][ T5899] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 154.721570][ T5899] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 154.725051][ T5899] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.727360][ T5899] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.727387][ T5899] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.727410][ T5899] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.727433][ T5899] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.727456][ T5899] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.727479][ T5899] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.727501][ T5899] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.727524][ T5899] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 154.777092][ T6360] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 154.914864][ T5899] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 155.531760][ T6275] hsr_slave_0: entered promiscuous mode [ 155.546945][ T6275] hsr_slave_1: entered promiscuous mode [ 155.549673][ T6275] debugfs: 'hsr0' already exists in 'hsr' [ 155.549700][ T6275] Cannot create hsr debugfs directory [ 155.621629][ T6379] netlink: 36 bytes leftover after parsing attributes in process `syz.0.143'. [ 155.704087][ T6375] fido_id[6375]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.866744][ T6385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.148'. [ 157.970803][ T6397] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 159.236454][ T6408] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 159.506519][ T6407] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 160.028757][ T6417] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.045521][ T6417] netlink: 'syz.4.158': attribute type 25 has an invalid length. [ 160.045545][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.158'. [ 160.075157][ T6417] netlink: 44 bytes leftover after parsing attributes in process `syz.4.158'. [ 160.121154][ T6413] netlink: 36 bytes leftover after parsing attributes in process `syz.0.156'. [ 160.197699][ T6417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.158'. [ 160.224364][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.807232][ T6427] fuse: Bad value for 'fd' [ 163.112654][ T6431] 9pnet_virtio: no channels available for device syz [ 165.792331][ T6435] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 166.745843][ T6448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.166'. [ 167.190296][ T6275] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.300601][ T6275] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.875907][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.967726][ T6275] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.737588][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 169.737609][ T37] audit: type=1326 audit(1771753434.942:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 169.738261][ T37] audit: type=1326 audit(1771753434.942:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 169.738762][ T37] audit: type=1326 audit(1771753434.942:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 169.739140][ T37] audit: type=1326 audit(1771753434.942:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 169.739585][ T37] audit: type=1326 audit(1771753434.942:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 169.907106][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.950438][ T37] audit: type=1326 audit(1771753434.942:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 169.950485][ T37] audit: type=1326 audit(1771753434.982:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 169.950519][ T37] audit: type=1326 audit(1771753434.982:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 169.950552][ T37] audit: type=1326 audit(1771753434.992:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 169.950594][ T37] audit: type=1326 audit(1771753435.072:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6457 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 170.030207][ T6275] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.019790][ T6475] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 171.147653][ T6478] Zero length message leads to an empty skb [ 172.682656][ T6493] 9pnet_virtio: no channels available for device syz [ 174.386625][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.881129][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.180'. [ 176.105421][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.228373][ T6511] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 178.192205][ T6521] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 178.883947][ T6527] sp0: Synchronizing with TNC [ 179.550340][ T6533] veth1_macvtap: left promiscuous mode [ 179.550373][ T6533] macsec0: entered allmulticast mode [ 179.593333][ T43] bridge_slave_1: left allmulticast mode [ 179.593429][ T43] bridge_slave_1: left promiscuous mode [ 179.595587][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.763717][ T43] bridge_slave_0: left allmulticast mode [ 179.763749][ T43] bridge_slave_0: left promiscuous mode [ 179.764031][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.975907][ T62] Bluetooth: hci0: unexpected cc 0x203d length: 9 > 1 [ 180.765655][ T6555] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 181.512610][ T49] hid_parser_main: 12 callbacks suppressed [ 181.512638][ T49] hid-generic 0000:0000:0000.0003: unknown main item tag 0x7 [ 181.512667][ T49] hid-generic 0000:0000:0000.0003: ignoring exceeding usage max [ 181.514158][ T49] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.514266][ T49] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.514291][ T49] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.514314][ T49] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.514337][ T49] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.514359][ T49] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.514382][ T49] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.514405][ T49] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 181.514428][ T49] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 182.350311][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 182.350329][ T37] audit: type=1326 audit(1771753447.372:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6560 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30cf24c629 code=0x7ffc0000 [ 182.350375][ T37] audit: type=1326 audit(1771753447.372:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6560 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30cf24c629 code=0x7ffc0000 [ 182.350414][ T37] audit: type=1326 audit(1771753447.372:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6560 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30cf24c629 code=0x7ffc0000 [ 182.350453][ T37] audit: type=1326 audit(1771753447.372:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6560 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30cf24c629 code=0x7ffc0000 [ 182.350500][ T37] audit: type=1326 audit(1771753447.372:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6560 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30cf24c629 code=0x7ffc0000 [ 182.350540][ T37] audit: type=1326 audit(1771753447.382:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6560 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30cf24c629 code=0x7ffc0000 [ 182.350580][ T37] audit: type=1326 audit(1771753447.382:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6560 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30cf24c629 code=0x7ffc0000 [ 182.350618][ T37] audit: type=1326 audit(1771753447.382:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6560 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30cf24c629 code=0x7ffc0000 [ 182.350657][ T37] audit: type=1326 audit(1771753447.382:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6560 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f30cf24c629 code=0x7ffc0000 [ 182.350697][ T37] audit: type=1326 audit(1771753447.392:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6560 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30cf24c629 code=0x7ffc0000 [ 182.705419][ T49] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 182.877598][ T6572] fido_id[6572]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.091002][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.130951][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.155056][ T43] bond0 (unregistering): Released all slaves [ 183.227966][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 186.333118][ T6579] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 186.341611][ T6579] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 188.771486][ T6275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.748162][ T6275] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.826197][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.838026][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.051767][ T43] hsr_slave_0: left promiscuous mode [ 191.091398][ T43] hsr_slave_1: left promiscuous mode [ 191.098810][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.098886][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.150271][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.150303][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.534249][ T43] veth1_macvtap: left promiscuous mode [ 191.534514][ T43] veth0_macvtap: left promiscuous mode [ 191.534829][ T43] veth1_vlan: left promiscuous mode [ 191.535168][ T43] veth0_vlan: left promiscuous mode [ 193.339057][ T43] team0 (unregistering): Port device team_slave_1 removed [ 193.452004][ T43] team0 (unregistering): Port device team_slave_0 removed [ 194.533340][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.533423][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.556494][ T6654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.216'. [ 194.813269][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.813419][ T3643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.835875][ T6637] veth1_macvtap: left promiscuous mode [ 194.835905][ T6637] macsec0: entered allmulticast mode [ 196.218955][ T6275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.188313][ T6275] veth0_vlan: entered promiscuous mode [ 197.216546][ T6275] veth1_vlan: entered promiscuous mode [ 197.366665][ T6275] veth0_macvtap: entered promiscuous mode [ 197.385407][ T6275] veth1_macvtap: entered promiscuous mode [ 197.537765][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.565390][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.698575][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.701318][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.703337][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.703384][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.206273][ T6723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.228'. [ 199.232247][ T6728] capability: warning: `syz.2.229' uses deprecated v2 capabilities in a way that may be insecure [ 200.955679][ T6756] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 201.101293][ T6755] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 201.169328][ T43] IPVS: stop unused estimator thread 0... [ 201.548737][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.582571][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.584976][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.586399][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.587308][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.787138][ T6759] chnl_net:caif_netlink_parms(): no params data found [ 203.790224][ T5809] Bluetooth: hci2: command tx timeout [ 203.893225][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.244'. [ 205.895925][ T5809] Bluetooth: hci2: command tx timeout [ 206.210607][ T43] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.824447][ T6828] 9pnet_virtio: no channels available for device syz [ 207.950947][ T5809] Bluetooth: hci2: command tx timeout [ 210.098648][ T5805] Bluetooth: hci2: command tx timeout [ 211.325495][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.353611][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.974461][ T5805] Bluetooth: hci0: command 0x0406 tx timeout [ 211.974506][ T5805] Bluetooth: hci1: command 0x0406 tx timeout [ 211.974533][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 211.974559][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 212.576728][ T6860] 9pnet_virtio: no channels available for device syz [ 216.042146][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.099820][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.371128][ T5882] hid_parser_main: 12 callbacks suppressed [ 216.371158][ T5882] hid-generic 0000:0000:0000.0004: unknown main item tag 0x7 [ 216.371189][ T5882] hid-generic 0000:0000:0000.0004: ignoring exceeding usage max [ 216.377316][ T5882] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 216.377457][ T5882] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 216.377484][ T5882] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 216.377510][ T5882] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 216.377535][ T5882] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 216.377560][ T5882] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 216.377585][ T5882] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 216.377611][ T5882] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 216.377636][ T5882] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 216.583714][ T5882] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 217.476615][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 217.476638][ T37] audit: type=1326 audit(1771753482.042:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 217.476689][ T37] audit: type=1326 audit(1771753482.042:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 217.476735][ T37] audit: type=1326 audit(1771753482.042:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 217.476779][ T37] audit: type=1326 audit(1771753482.052:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 217.476824][ T37] audit: type=1326 audit(1771753482.052:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 217.476869][ T37] audit: type=1326 audit(1771753482.052:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 217.476915][ T37] audit: type=1326 audit(1771753482.052:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 217.476961][ T37] audit: type=1326 audit(1771753482.052:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 217.477015][ T37] audit: type=1326 audit(1771753482.052:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 217.477061][ T37] audit: type=1326 audit(1771753482.062:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529bcbc629 code=0x7ffc0000 [ 217.497926][ T6890] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 217.595604][ T6888] fido_id[6888]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 218.311012][ T1046] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.343408][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.363984][ T6815] syz.0.251 (6815) used greatest stack depth: 18528 bytes left [ 218.463281][ T43] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.561599][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.628838][ T142] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.012390][ T43] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.047295][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.047560][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.047818][ T6759] bridge_slave_0: entered allmulticast mode [ 219.075966][ T6759] bridge_slave_0: entered promiscuous mode [ 219.092895][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.093035][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.093279][ T6759] bridge_slave_1: entered allmulticast mode [ 219.096211][ T6759] bridge_slave_1: entered promiscuous mode [ 220.628167][ T43] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.689532][ T6759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.788200][ T6759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.234301][ T6945] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 223.322498][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.326463][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.474090][ T6937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.493176][ T6937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.883484][ T5809] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 225.951625][ T1046] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.974098][ T6759] team0: Port device team_slave_0 added [ 225.980959][ T1046] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.995024][ T6759] team0: Port device team_slave_1 added [ 225.995147][ T1046] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.003425][ T1046] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.304487][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.304507][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.304537][ T6759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.313962][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.313981][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.314010][ T6759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.582935][ T6759] hsr_slave_0: entered promiscuous mode [ 226.620957][ T6759] hsr_slave_1: entered promiscuous mode [ 226.623080][ T6759] debugfs: 'hsr0' already exists in 'hsr' [ 226.623107][ T6759] Cannot create hsr debugfs directory [ 230.147188][ T43] bridge_slave_1: left allmulticast mode [ 230.147224][ T43] bridge_slave_1: left promiscuous mode [ 230.149010][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.275766][ T7014] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 234.276066][ T7014] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 234.283497][ T7014] vhci_hcd vhci_hcd.0: Device attached [ 234.682442][ T43] bridge_slave_0: left allmulticast mode [ 234.687340][ T7015] vhci_hcd: connection closed [ 234.757460][ T43] bridge_slave_0: left promiscuous mode [ 234.783532][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.863308][ T158] vhci_hcd vhci_hcd.2: stop threads [ 234.916299][ T158] vhci_hcd vhci_hcd.2: release socket [ 234.916519][ T158] vhci_hcd vhci_hcd.2: disconnect device [ 238.437071][ T5882] hid_parser_main: 12 callbacks suppressed [ 238.437098][ T5882] hid-generic 0000:0000:0000.0005: unknown main item tag 0x7 [ 238.437127][ T5882] hid-generic 0000:0000:0000.0005: ignoring exceeding usage max [ 238.438968][ T5882] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 238.439082][ T5882] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 238.439109][ T5882] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 238.439135][ T5882] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 238.439160][ T5882] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 238.439186][ T5882] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 238.439212][ T5882] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 238.439238][ T5882] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 238.439263][ T5882] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 238.529472][ T5882] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 239.268738][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 239.268786][ T37] audit: type=1326 audit(1771753504.112:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 239.269253][ T37] audit: type=1326 audit(1771753504.112:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 239.269491][ T37] audit: type=1326 audit(1771753504.122:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 239.269750][ T37] audit: type=1326 audit(1771753504.122:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 239.271201][ T37] audit: type=1326 audit(1771753504.122:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 239.271422][ T37] audit: type=1326 audit(1771753504.122:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 239.271654][ T37] audit: type=1326 audit(1771753504.132:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 239.271897][ T37] audit: type=1326 audit(1771753504.132:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 239.272122][ T37] audit: type=1326 audit(1771753504.132:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7f5ab9c629 code=0x7ffc0000 [ 239.981141][ T7033] fido_id[7033]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 240.103599][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.161635][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.187162][ T43] bond0 (unregistering): Released all slaves [ 241.561068][ T62] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.626793][ T62] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.637836][ T62] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.639063][ T62] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.647176][ T62] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.529255][ T43] hsr_slave_0: left promiscuous mode [ 243.730804][ T62] Bluetooth: hci5: command tx timeout [ 243.783832][ T43] hsr_slave_1: left promiscuous mode [ 243.877110][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.877141][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.934141][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.934171][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.120172][ T43] veth1_macvtap: left promiscuous mode [ 244.120291][ T43] veth0_macvtap: left promiscuous mode [ 244.120632][ T43] veth1_vlan: left promiscuous mode [ 244.122678][ T43] veth0_vlan: left promiscuous mode [ 245.790104][ T62] Bluetooth: hci5: command tx timeout [ 245.901823][ T43] team0 (unregistering): Port device team_slave_1 removed [ 245.942707][ T43] team0 (unregistering): Port device team_slave_0 removed [ 248.981147][ T62] Bluetooth: hci5: command tx timeout [ 251.224515][ T62] Bluetooth: hci5: command tx timeout [ 251.736812][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 252.512451][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.533498][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.770241][ T7166] process 'syz.0.349' launched './file1' with NULL argv: empty string added [ 252.815011][ T7166] comedi comedi2: c6xdigio: a I/O base address must be specified [ 254.614572][ T7145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.629736][ T7145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.515377][ T7179] overlayfs: failed to resolve './file0': -2 [ 255.600667][ T7056] chnl_net:caif_netlink_parms(): no params data found [ 255.695920][ T5899] syz0: Port: 1 Link DOWN [ 255.696218][ T142] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.736162][ T142] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.785968][ T142] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.910941][ T6759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 255.958014][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.958092][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.000167][ T142] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.455331][ T6759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 257.284171][ T6759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.338333][ T6759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 259.052397][ T7056] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.052543][ T7056] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.053186][ T7056] bridge_slave_0: entered allmulticast mode [ 259.056211][ T7056] bridge_slave_0: entered promiscuous mode [ 259.120992][ T7056] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.121211][ T7056] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.121460][ T7056] bridge_slave_1: entered allmulticast mode [ 259.128838][ T7056] bridge_slave_1: entered promiscuous mode [ 259.487521][ T7056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.557953][ T7056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.109609][ T7243] overlayfs: failed to resolve './file0': -2 [ 260.128702][ T7056] team0: Port device team_slave_0 added [ 260.152311][ T7056] team0: Port device team_slave_1 added [ 260.571542][ T7056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.571562][ T7056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.571592][ T7056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.619071][ T7056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.619088][ T7056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.619113][ T7056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.154622][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.181951][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.183293][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.184495][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.185382][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.476260][ T7056] hsr_slave_0: entered promiscuous mode [ 261.787277][ T7056] hsr_slave_1: entered promiscuous mode [ 261.823467][ T7056] debugfs: 'hsr0' already exists in 'hsr' [ 261.823536][ T7056] Cannot create hsr debugfs directory [ 262.045633][ T43] bridge_slave_1: left allmulticast mode [ 262.045662][ T43] bridge_slave_1: left promiscuous mode [ 262.045940][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.319949][ T43] bridge_slave_0: left allmulticast mode [ 262.320477][ T43] bridge_slave_0: left promiscuous mode [ 262.329734][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.430945][ T62] Bluetooth: hci1: command tx timeout [ 263.783414][ T7278] ceph: No mds server is up or the cluster is laggy [ 263.786059][ T36] libceph: connect (1)[c::]:6789 error -101 [ 263.786828][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 264.398733][ T7289] overlayfs: failed to resolve './file0': -2 [ 264.490923][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.580915][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.908322][ T43] bond0 (unregistering): Released all slaves [ 264.945680][ T7279] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 266.035886][ T62] Bluetooth: hci1: command tx timeout [ 266.980104][ T810] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 267.135490][ T810] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 267.135516][ T810] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 267.135541][ T810] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.135554][ T810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.200346][ T7310] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.249785][ T810] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.798895][ T810] usb 5-1: USB disconnect, device number 2 [ 267.933654][ T43] hsr_slave_0: left promiscuous mode [ 267.986132][ T43] hsr_slave_1: left promiscuous mode [ 267.989233][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.033498][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.110362][ T62] Bluetooth: hci1: command tx timeout [ 269.087522][ T7325] overlayfs: failed to resolve './file0': -2 [ 269.437497][ T7328] overlayfs: failed to resolve './file0': -2 [ 269.931037][ T43] team0 (unregistering): Port device team_slave_1 removed [ 270.191248][ T62] Bluetooth: hci1: command tx timeout [ 270.926666][ T43] team0 (unregistering): Port device team_slave_0 removed [ 271.808795][ T7345] tipc: Failed to remove unknown binding: 66,0,0/0:3538967229/3538967230 [ 271.810269][ T7345] tipc: Failed to remove unknown binding: 66,0,0/0:3538967229/3538967230 [ 271.975564][ T7056] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 272.103510][ T7056] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 272.165943][ T7056] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 272.253237][ T7056] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 272.482722][ T7261] chnl_net:caif_netlink_parms(): no params data found [ 273.064300][ T7377] binder_alloc: 7376: binder_alloc_buf, no vma [ 273.266829][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.267058][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.267294][ T7261] bridge_slave_0: entered allmulticast mode [ 273.273280][ T7261] bridge_slave_0: entered promiscuous mode [ 273.305692][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.305831][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.306075][ T7261] bridge_slave_1: entered allmulticast mode [ 273.312509][ T7261] bridge_slave_1: entered promiscuous mode [ 274.069773][ T7261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.826100][ T7261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.138664][ T36] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 275.268230][ T7407] 9pnet_virtio: no channels available for device syz [ 276.136757][ T36] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 276.136823][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.138652][ T36] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 276.138683][ T36] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 276.138704][ T36] usb 1-1: Manufacturer: syz [ 277.014983][ T36] usb 1-1: config 0 descriptor?? [ 277.737608][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 277.756949][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 278.054085][ T7415] ceph: No mds server is up or the cluster is laggy [ 278.143684][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 278.143912][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 278.455874][ T36] rc_core: IR keymap rc-hauppauge not found [ 278.455897][ T36] Registered IR keymap rc-empty [ 278.526706][ T7417] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 278.541301][ T7261] team0: Port device team_slave_0 added [ 278.656050][ T7261] team0: Port device team_slave_1 added [ 278.727406][ T36] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 278.756054][ T36] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 278.863224][ T7056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.956268][ T36] usb 1-1: USB disconnect, device number 3 [ 279.289337][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.289352][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.289369][ T7261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.404600][ T7429] binder_alloc: 7428: binder_alloc_buf, no vma [ 279.567539][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.567558][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.567587][ T7261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.729159][ T7056] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.063805][ T7261] hsr_slave_0: entered promiscuous mode [ 280.065275][ T7261] hsr_slave_1: entered promiscuous mode [ 280.087834][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.110906][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.443186][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.443382][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.543026][ T43] bridge_slave_1: left allmulticast mode [ 281.543050][ T43] bridge_slave_1: left promiscuous mode [ 281.543210][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.629110][ T43] bridge_slave_0: left allmulticast mode [ 281.629133][ T43] bridge_slave_0: left promiscuous mode [ 281.629318][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.102498][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.266717][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.324529][ T43] bond0 (unregistering): Released all slaves [ 283.011748][ T43] hsr_slave_0: left promiscuous mode [ 283.031305][ T43] hsr_slave_1: left promiscuous mode [ 283.033418][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.058388][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.130430][ T7458] 9pnet_virtio: no channels available for device syz [ 285.437650][ T7466] overlayfs: failed to resolve './file0': -2 [ 286.001036][ T43] team0 (unregistering): Port device team_slave_1 removed [ 287.294382][ T43] team0 (unregistering): Port device team_slave_0 removed [ 287.435881][ T7477] overlayfs: failed to resolve './file1': -2 [ 288.934826][ T7489] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 289.993532][ T7498] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.610091][ T49] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 292.770200][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 292.773084][ T49] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 292.773115][ T49] usb 3-1: config 0 has no interface number 0 [ 292.773162][ T49] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 292.773188][ T49] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 292.773211][ T49] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 292.773258][ T49] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 292.773284][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.058430][ T49] usb 3-1: config 0 descriptor?? [ 293.119914][ T49] ldusb 3-1:0.55: Interrupt in endpoint not found [ 293.322261][ T5882] usb 3-1: USB disconnect, device number 2 [ 293.387262][ T7498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.403419][ T7498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.734051][ T1046] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.851871][ T1046] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.909039][ T1046] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.935310][ T1046] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.089485][ T7056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.642243][ T5809] ================================================================== [ 295.642260][ T5809] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 295.642302][ T5809] Read of size 8 at addr ffffc9000ef69008 by task kworker/u9:4/5809 [ 295.642320][ T5809] [ 295.642332][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 295.642356][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.642369][ T5809] Workqueue: hci2 hci_rx_work [ 295.642396][ T5809] Call Trace: [ 295.642404][ T5809] [ 295.642412][ T5809] dump_stack_lvl+0xe8/0x150 [ 295.642445][ T5809] print_report+0xba/0x230 [ 295.642472][ T5809] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 295.642501][ T5809] kasan_report+0x117/0x150 [ 295.642530][ T5809] ? rt_spin_lock+0x20e/0x400 [ 295.642551][ T5809] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 295.642586][ T5809] __list_del_entry_valid_or_report+0xb5/0x190 [ 295.642617][ T5809] kcov_remote_start+0x2af/0x710 [ 295.642643][ T5809] hci_rx_work+0x10f/0x1030 [ 295.642668][ T5809] ? process_scheduled_works+0xa25/0x1830 [ 295.642698][ T5809] process_scheduled_works+0xb02/0x1830 [ 295.642738][ T5809] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.642769][ T5809] ? assign_work+0x3d5/0x5e0 [ 295.642799][ T5809] worker_thread+0xa50/0xfc0 [ 295.642838][ T5809] kthread+0x388/0x470 [ 295.642870][ T5809] ? __pfx_worker_thread+0x10/0x10 [ 295.642899][ T5809] ? __pfx_kthread+0x10/0x10 [ 295.642920][ T5809] ret_from_fork+0x51e/0xb90 [ 295.642951][ T5809] ? __pfx_ret_from_fork+0x10/0x10 [ 295.642978][ T5809] ? __switch_to+0xc7d/0x1450 [ 295.643005][ T5809] ? __pfx_kthread+0x10/0x10 [ 295.643027][ T5809] ret_from_fork_asm+0x1a/0x30 [ 295.643054][ T5809] [ 295.643061][ T5809] [ 295.643067][ T5809] The buggy address belongs to a vmalloc virtual mapping [ 295.643084][ T5809] Memory state around the buggy address: [ 295.643095][ T5809] ffffc9000ef68f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 295.643110][ T5809] ffffc9000ef68f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 295.643123][ T5809] >ffffc9000ef69000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 295.643133][ T5809] ^ [ 295.643144][ T5809] ffffc9000ef69080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 295.643156][ T5809] ffffc9000ef69100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 295.643166][ T5809] ================================================================== [ 295.643179][ T5809] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 295.643194][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 295.643218][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.643231][ T5809] Workqueue: hci2 hci_rx_work [ 295.643253][ T5809] Call Trace: [ 295.643260][ T5809] [ 295.643267][ T5809] vpanic+0x56c/0xa60 [ 295.643300][ T5809] ? __pfx_vpanic+0x10/0x10 [ 295.643334][ T5809] panic+0xc5/0xd0 [ 295.643362][ T5809] ? __pfx_panic+0x10/0x10 [ 295.643394][ T5809] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 295.643429][ T5809] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 295.643458][ T5809] check_panic_on_warn+0x89/0xb0 [ 295.643480][ T5809] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 295.643510][ T5809] end_report+0x73/0x180 [ 295.643538][ T5809] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 295.643567][ T5809] kasan_report+0x128/0x150 [ 295.643594][ T5809] ? rt_spin_lock+0x20e/0x400 [ 295.643614][ T5809] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 295.643647][ T5809] __list_del_entry_valid_or_report+0xb5/0x190 [ 295.643676][ T5809] kcov_remote_start+0x2af/0x710 [ 295.643699][ T5809] hci_rx_work+0x10f/0x1030 [ 295.643724][ T5809] ? process_scheduled_works+0xa25/0x1830 [ 295.643751][ T5809] process_scheduled_works+0xb02/0x1830 [ 295.643790][ T5809] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.643820][ T5809] ? assign_work+0x3d5/0x5e0 [ 295.643848][ T5809] worker_thread+0xa50/0xfc0 [ 295.643897][ T5809] kthread+0x388/0x470 [ 295.643918][ T5809] ? __pfx_worker_thread+0x10/0x10 [ 295.643944][ T5809] ? __pfx_kthread+0x10/0x10 [ 295.643965][ T5809] ret_from_fork+0x51e/0xb90 [ 295.643993][ T5809] ? __pfx_ret_from_fork+0x10/0x10 [ 295.644020][ T5809] ? __switch_to+0xc7d/0x1450 [ 295.644043][ T5809] ? __pfx_kthread+0x10/0x10 [ 295.644066][ T5809] ret_from_fork_asm+0x1a/0x30 [ 295.644094][ T5809] [ 295.644729][ T5809] Kernel Offset: disabled