last executing test programs: 4.920783629s ago: executing program 0 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) 4.850796048s ago: executing program 2 (id=9): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x440000, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f00000000c0)={0x44, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_usb_connect(0x2, 0x2f3, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000074ae8440f20c5062bd87010203010902e102010000000009"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0xb, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x20000002, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x7, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x3c], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fdf, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x9, 0x5, 0x30, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x3f9, 0x401, 0x6, 0x1, 0xff, 0x5, 0x2, 0x2000000, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x3, 0xffff, 0x2, 0x4, 0x8, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c9368d, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x80, 0x0, 0x1, 0x2, 0xd, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x7, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x1008, 0x7, 0x953a, 0x0, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x4, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x1, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa61d, 0x2, 0x4, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x1, 0x4, 0xc0, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0x0, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0xca80) ppoll(&(0x7f0000000000)=[{r3, 0x100}], 0x1, 0x0, 0x0, 0x0) 4.700349731s ago: executing program 3 (id=11): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f00002f4000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00006d5000/0x1000)=nil) 4.317899148s ago: executing program 3 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)}, 0x804) unshare(0x22020600) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(0x0, 0x108843, 0x55) syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000100)={0x0, 0x34bb, 0x800, 0x2, 0x2e0}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 3.740491788s ago: executing program 0 (id=18): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.585926861s ago: executing program 2 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x6, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x4, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) 3.339429444s ago: executing program 0 (id=21): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 2.880835054s ago: executing program 3 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001f40)=""/4110, 0x100e}, {0x0}, {0x0}], 0x3}, 0x3}], 0x1, 0x20040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002cc0)={0x2020}, 0x2020) 2.604158152s ago: executing program 3 (id=23): syz_emit_ethernet(0x46, 0x0, 0x0) 2.389901663s ago: executing program 0 (id=24): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d00, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x7) syz_open_pts(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xcb}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 2.389501347s ago: executing program 3 (id=25): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000123000/0x4000)=nil, 0x4000, 0x100000b, 0x810, 0xffffffffffffffff, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x89f0, &(0x7f00000029c0)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="a7", 0x1}], 0x1, 0x0, 0x0, 0x17) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80782, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 2.361200597s ago: executing program 2 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x55e1a51c, 0x7d051718, 0x2, @discrete={0x2}}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440), 0x0, 0x84, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@bridge_delvlan={0x24, 0x71, 0x400, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}]}, 0x24}}, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e1d, 0x5, @remote, 0x40}}}, 0x108) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2c, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r6, 0x4000, 0x0}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.217321779s ago: executing program 0 (id=28): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x6, 0x5, @loopback, 0x4}], 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="580c4f68cd51c02baf60820a18a15a0e00bb63db12a6e9002d83ea131efa5f815ebc351492384476a3aca336bcccf47efe4dba23ce0d0bb3da8d6daa64d6518b91578f59405eaff40d56b27ed947e96d137a853459b2e64433779231fd50eda4b485", 0x62, 0x4008050, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x5420, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) 2.214428769s ago: executing program 3 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone3(0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socket$netlink(0x10, 0x3, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) 1.968770423s ago: executing program 1 (id=30): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x2a) 1.599074525s ago: executing program 1 (id=31): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x1d, 0x0, 0x0, 0x8}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 1.552902409s ago: executing program 1 (id=32): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socket(0x15, 0x5, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) close(r0) 641.658883ms ago: executing program 2 (id=33): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="a7", 0x4194, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 638.885147ms ago: executing program 0 (id=41): io_uring_enter(0xffffffffffffffff, 0x2219, 0x771d, 0xf, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x0) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 559.052122ms ago: executing program 1 (id=34): syz_emit_ethernet(0x46, 0x0, 0x0) 440.237816ms ago: executing program 1 (id=35): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 310.902834ms ago: executing program 1 (id=36): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080)={r0, r1/1000+60000}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x22}], 0x1, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x700) io_setup(0x2007, &(0x7f0000000980)=0x0) r6 = eventfd2(0x3, 0x80000) io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x6, r2, &(0x7f0000000100)="45d294aa112298dee6c00e01d1a2cca2ee53e112a12dfffb15927686364ee784d73a09b276c07d6f971769b42c576b4705f18286f08bc6cf88c46bcdd523fd6f11ed2353495b1f2e84521dbb853be1c624381505f46f80f288d0e17dd63ee8ed65b9087ae2a60d0cdb7c37a782d0f0079479a2227d222b17fa731e9eeb25d66f0a13e2d8869e54e3fff4b0dbe15956e9924d9ba6cb580d7c", 0x98, 0x4}]) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r7, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_open_dev$cec(&(0x7f0000000300), 0x0, 0xa0800) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 105.963896ms ago: executing program 2 (id=37): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="18", 0x1, 0x0, &(0x7f0000000080)={0x11, 0xd, r2, 0x1, 0xfd}, 0x14) 0s ago: executing program 2 (id=38): ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000000)={0x3c, ""/60}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=@delchain={0x2c, 0x65, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {0x10, 0x5}, {0xf, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c040) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000400098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003"], 0x10c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:12343' (ED25519) to the list of known hosts. [ 33.425226][ T5652] cgroup: Unknown subsys name 'net' [ 33.578010][ T5652] cgroup: Unknown subsys name 'cpuset' [ 33.582313][ T5652] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.664033][ T5652] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.646432][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.647822][ T5738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.651250][ T5738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.652220][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.653657][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.682921][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.685243][ T5745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.686460][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.687041][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.688325][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.688734][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.689050][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.689614][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.689716][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.694259][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.694341][ T5745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.695172][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.695806][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.695883][ T5745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.697060][ T5745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.335768][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.335885][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.335953][ T5741] bridge_slave_0: entered allmulticast mode [ 39.337449][ T5741] bridge_slave_0: entered promiscuous mode [ 39.342203][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.342276][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.342383][ T5741] bridge_slave_1: entered allmulticast mode [ 39.343745][ T5741] bridge_slave_1: entered promiscuous mode [ 39.398550][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.409635][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.509270][ T5741] team0: Port device team_slave_0 added [ 39.511348][ T5741] team0: Port device team_slave_1 added [ 39.575108][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.575216][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.575282][ T5736] bridge_slave_0: entered allmulticast mode [ 39.575980][ T5736] bridge_slave_0: entered promiscuous mode [ 39.584893][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.584908][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.584928][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.611886][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.611965][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.612070][ T5736] bridge_slave_1: entered allmulticast mode [ 39.613811][ T5736] bridge_slave_1: entered promiscuous mode [ 39.632930][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.632945][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.632965][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.661360][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.661493][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.661594][ T5742] bridge_slave_0: entered allmulticast mode [ 39.662934][ T5742] bridge_slave_0: entered promiscuous mode [ 39.666366][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.666437][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.666562][ T5742] bridge_slave_1: entered allmulticast mode [ 39.667877][ T5742] bridge_slave_1: entered promiscuous mode [ 39.684591][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.686939][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.694830][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.694952][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.695055][ T5740] bridge_slave_0: entered allmulticast mode [ 39.696439][ T5740] bridge_slave_0: entered promiscuous mode [ 39.699431][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.699507][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.699598][ T5740] bridge_slave_1: entered allmulticast mode [ 39.701030][ T5740] bridge_slave_1: entered promiscuous mode [ 39.773763][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.775485][ T5736] team0: Port device team_slave_0 added [ 39.778237][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.785776][ T5741] hsr_slave_0: entered promiscuous mode [ 39.786600][ T5741] hsr_slave_1: entered promiscuous mode [ 39.789289][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.801849][ T5736] team0: Port device team_slave_1 added [ 39.804549][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.826547][ T5740] team0: Port device team_slave_0 added [ 39.844062][ T5740] team0: Port device team_slave_1 added [ 39.898019][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.898037][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.898058][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.910902][ T5742] team0: Port device team_slave_0 added [ 39.913463][ T5742] team0: Port device team_slave_1 added [ 39.926699][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.926715][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.926735][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.930733][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.930749][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.930771][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.961743][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.961758][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.961779][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.005592][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.005607][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.005627][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.047764][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.047781][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.047803][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.051731][ T5740] hsr_slave_0: entered promiscuous mode [ 40.052165][ T5740] hsr_slave_1: entered promiscuous mode [ 40.052516][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 40.052552][ T5740] Cannot create hsr debugfs directory [ 40.056503][ T5736] hsr_slave_0: entered promiscuous mode [ 40.057006][ T5736] hsr_slave_1: entered promiscuous mode [ 40.057322][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 40.057334][ T5736] Cannot create hsr debugfs directory [ 40.192005][ T5742] hsr_slave_0: entered promiscuous mode [ 40.192830][ T5742] hsr_slave_1: entered promiscuous mode [ 40.193624][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 40.193643][ T5742] Cannot create hsr debugfs directory [ 40.384422][ T5741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.389473][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.390475][ T5741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.394473][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.406416][ T5741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.410987][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.441678][ T5741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.445776][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.498732][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.504136][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.509418][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.514579][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.526726][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.529315][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.530133][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.534188][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.584236][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.591192][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.591693][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.593680][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.604490][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.608086][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.613916][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.630041][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.632813][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.663924][ T66] Bluetooth: hci0: command tx timeout [ 40.667262][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.680447][ T1704] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.680519][ T1704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.697739][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.700803][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.709731][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.709777][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.713979][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.719645][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.724115][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.729940][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.734681][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.741155][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.743274][ T5745] Bluetooth: hci2: command tx timeout [ 40.743290][ T5738] Bluetooth: hci3: command tx timeout [ 40.743583][ T66] Bluetooth: hci1: command tx timeout [ 40.798227][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.845826][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.855065][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.855150][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.865572][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.865656][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.868108][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.905836][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.906792][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.919073][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.919118][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.936862][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.949997][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.950108][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.962280][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.962351][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.974644][ T1704] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.974730][ T1704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.207062][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.235582][ T5741] veth0_vlan: entered promiscuous mode [ 41.239175][ T5741] veth1_vlan: entered promiscuous mode [ 41.260828][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.272552][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.278145][ T5741] veth0_macvtap: entered promiscuous mode [ 41.282586][ T5741] veth1_macvtap: entered promiscuous mode [ 41.306845][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.320970][ T5736] veth0_vlan: entered promiscuous mode [ 41.322087][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.335511][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.341483][ T5736] veth1_vlan: entered promiscuous mode [ 41.356966][ T5740] veth0_vlan: entered promiscuous mode [ 41.362277][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.374801][ T5740] veth1_vlan: entered promiscuous mode [ 41.405376][ T5736] veth0_macvtap: entered promiscuous mode [ 41.423423][ T5736] veth1_macvtap: entered promiscuous mode [ 41.430587][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.430600][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.444835][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.460348][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.461925][ T1704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.461938][ T1704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.462352][ T5742] veth0_vlan: entered promiscuous mode [ 41.466190][ T5740] veth0_macvtap: entered promiscuous mode [ 41.468440][ T5740] veth1_macvtap: entered promiscuous mode [ 41.470827][ T5742] veth1_vlan: entered promiscuous mode [ 41.488671][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.502803][ T5741] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.506488][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.520015][ T5742] veth0_macvtap: entered promiscuous mode [ 41.521807][ T5741] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.524800][ T5742] veth1_macvtap: entered promiscuous mode [ 41.529583][ T5741] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.530562][ T5741] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.545533][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.545580][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.545611][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.545644][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.545677][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.545710][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.545742][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.553611][ T5741] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 41.574966][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.574979][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.598782][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.598825][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.598850][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.673689][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.673711][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.690856][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.709623][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.763938][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.773874][ T1704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.773886][ T1704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.811251][ T1704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.811269][ T1704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.821278][ T1704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.821298][ T1704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.855389][ T1704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.855410][ T1704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.875167][ T5813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.875771][ T5813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.876273][ T5813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.876779][ T5813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.373500][ T5882] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 42.524341][ T5882] usb 7-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 42.526150][ T5882] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.526164][ T5882] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 42.529027][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.529087][ T5882] usb 7-1: Product: syz [ 42.529095][ T5882] usb 7-1: Manufacturer: syz [ 42.529102][ T5882] usb 7-1: SerialNumber: syz [ 42.532445][ T5882] usb 7-1: config 0 descriptor?? [ 42.705355][ T5916] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 42.754898][ T66] Bluetooth: hci0: command tx timeout [ 42.768853][ T5882] usb 7-1: USB disconnect, device number 2 [ 42.823306][ T66] Bluetooth: hci3: command tx timeout [ 42.823328][ T66] Bluetooth: hci1: command tx timeout [ 42.823341][ T66] Bluetooth: hci2: command tx timeout [ 43.694546][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 44.823239][ T5745] Bluetooth: hci0: command tx timeout [ 44.903610][ T5745] Bluetooth: hci2: command tx timeout [ 44.903633][ T5745] Bluetooth: hci1: command tx timeout [ 44.903646][ T5745] Bluetooth: hci3: command tx timeout [ 45.266441][ T5968] Zero length message leads to an empty skb [ 46.627302][ T43] audit: type=1326 audit(1790726489.191:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 46.627655][ T43] audit: type=1326 audit(1790726489.191:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 46.634542][ T43] audit: type=1326 audit(1790726489.191:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 46.634570][ T43] audit: type=1326 audit(1790726489.201:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 46.634590][ T43] audit: type=1326 audit(1790726489.201:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 46.634657][ T43] audit: type=1326 audit(1790726489.191:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 46.640609][ T43] audit: type=1326 audit(1790726489.201:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 46.640920][ T43] audit: type=1326 audit(1790726489.201:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 46.641117][ T43] audit: type=1326 audit(1790726489.201:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.36" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a75ab code=0x7ffc0000 [ 46.641524][ T43] audit: type=1326 audit(1790726489.201:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.36" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 46.839996][ T5986] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 46.840014][ T5986] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 46.898304][ T5986] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 46.898403][ T5986] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 46.958173][ T5986] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 46.958194][ T5986] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ ** replaying previous printk message ** [ 46.982236][ T5986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 46.982334][ T5986] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 46.983306][ C3] ------------[ cut here ]------------ [ 46.983315][ C3] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 46.983343][ C3] WARNING: kernel/workqueue.c:2352 at __queue_work+0xdb7/0x1370, CPU#3: syz.3.29/5962 [ 46.999016][ C3] Modules linked in: [ 47.000865][ C3] CPU: 3 UID: 0 PID: 5962 Comm: syz.3.29 Not tainted syzkaller #0 PREEMPT(full) [ 47.004515][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.008513][ C3] RIP: 0010:__queue_work+0xdbb/0x1370 [ 47.010688][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d 29 43 78 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 47.018059][ C3] RSP: 0018:ffffc900005f8b68 EFLAGS: 00010046 [ 47.020500][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100a35114e [ 47.023669][ C3] RDX: ffff888024ac7970 RSI: ffffffff8ac23ee0 RDI: ffffffff91486f90 [ 47.026831][ C3] RBP: ffff888051a88a58 R08: 0000000000000007 R09: 0000000000000000 [ 47.030007][ C3] R10: 0000000000000100 R11: 0000000000000001 R12: ffff888024ac7800 [ 47.033169][ C3] R13: 1ffff920000bf177 R14: 0000000000000000 R15: ffffffff81d03230 [ 47.036322][ C3] FS: 0000000000000000(0000) GS:ffff888096c55000(0063) knlGS:00000000f5446b40 [ 47.039893][ C3] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 47.042386][ C3] CR2: 0000000057349470 CR3: 000000006dddf000 CR4: 0000000000352ef0 [ 47.045497][ C3] Call Trace: [ 47.046834][ C3] [ 47.048011][ C3] ? lock_acquire+0x1d1/0x380 [ 47.049946][ C3] ? call_timer_fn+0x11d/0x5f0 [ 47.051892][ C3] ? __pfx___queue_work+0x10/0x10 [ 47.053922][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 47.056265][ C3] call_timer_fn+0x198/0x5f0 [ 47.057929][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 47.059865][ C3] ? lock_acquire+0x1d1/0x380 [ 47.061793][ C3] ? __run_timers+0x560/0xb00 [ 47.063714][ C3] ? __run_timers+0x560/0xb00 [ 47.065642][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 47.067999][ C3] __run_timers+0x570/0xb00 [ 47.069888][ C3] ? __pfx___run_timers+0x10/0x10 [ 47.071938][ C3] ? clockevents_program_event+0x1bf/0x820 [ 47.074302][ C3] ? lock_acquire+0x1d1/0x380 [ 47.076226][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 47.078266][ C3] run_timer_base+0x114/0x190 [ 47.080087][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 47.082179][ C3] run_timer_softirq+0x1a/0x50 [ 47.084131][ C3] handle_softirqs+0x1e6/0x9d0 [ 47.086085][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 47.087967][ C3] ? _raw_spin_unlock+0x28/0x50 [ 47.089819][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 47.092079][ C3] __irq_exit_rcu+0x16a/0x210 [ 47.094024][ C3] irq_exit_rcu+0x9/0x30 [ 47.095747][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 47.098042][ C3] [ 47.099253][ C3] [ 47.100461][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 47.102898][ C3] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 47.105547][ C3] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 13 93 fc 09 e8 5e 20 3d 00 fb 48 8d bb 18 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 47.112850][ C3] RSP: 0018:ffffc900069bf720 EFLAGS: 00000202 [ 47.115212][ C3] RAX: 0000000000014d73 RBX: ffff888023e2cb00 RCX: 0000000000000000 [ 47.118365][ C3] RDX: 0000000000000001 RSI: ffffffff8e391eab RDI: ffff888023e2e218 [ 47.121519][ C3] RBP: ffffc900069bf778 R08: 0000000000000001 R09: 0000000000000000 [ 47.124672][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880244e8000 [ 47.127824][ C3] R13: 0000000000000001 R14: ffffffff9145b9e4 R15: ffff88802b53c040 [ 47.131030][ C3] __schedule+0x1261/0x6920 [ 47.132916][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 47.135058][ C3] ? __pfx___schedule+0x10/0x10 [ 47.137040][ C3] ? find_held_lock+0x2b/0x80 [ 47.138911][ C3] ? schedule+0x225/0x2c0 [ 47.140326][ C3] schedule+0xdd/0x2c0 [ 47.141968][ C3] schedule_timeout+0x1b2/0x280 [ 47.143964][ C3] ? __pfx_schedule_timeout+0x10/0x10 [ 47.146186][ C3] ? __wait_for_common+0x2da/0x4c0 [ 47.148263][ C3] ? rcu_is_watching+0x13/0xc0 [ 47.149875][ C3] __wait_for_common+0x2e7/0x4c0 [ 47.151769][ C3] ? __pfx_schedule_timeout+0x10/0x10 [ 47.153969][ C3] ? __pfx___wait_for_common+0x10/0x10 [ 47.156111][ C3] ? preempt_schedule_common+0x3c/0xb0 [ 47.157943][ C3] ? generic_exec_single+0xbb/0x400 [ 47.160042][ C3] rdmsrq_safe_on_cpu+0x195/0x1b0 [ 47.162084][ C3] ? __pfx_rdmsrq_safe_on_cpu+0x10/0x10 [ 47.164341][ C3] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 47.166596][ C3] ? lock_acquire+0x1d1/0x380 [ 47.168533][ C3] ? _copy_to_user+0xaf/0xd0 [ 47.170425][ C3] msr_read+0x18e/0x240 [ 47.171822][ C3] ? __pfx_msr_read+0x10/0x10 [ 47.173484][ C3] ? bpf_lsm_file_permission+0x9/0x10 [ 47.175655][ C3] ? security_file_permission+0x76/0x210 [ 47.177942][ C3] ? rw_verify_area+0xce/0x6d0 [ 47.179880][ C3] ? __pfx_msr_read+0x10/0x10 [ 47.181787][ C3] vfs_read+0x1e4/0xb40 [ 47.183522][ C3] ? lock_acquire+0x1d1/0x380 [ 47.185462][ C3] ? __fget_files+0x34/0x3d0 [ 47.187337][ C3] ? __pfx_vfs_read+0x10/0x10 [ 47.189283][ C3] ? find_held_lock+0x2b/0x80 [ 47.191181][ C3] ? __fget_files+0x215/0x3d0 [ 47.192842][ C3] ? __fget_files+0x215/0x3d0 [ 47.194548][ C3] ? __fget_files+0x21f/0x3d0 [ 47.196456][ C3] ksys_read+0x12a/0x250 [ 47.198201][ C3] ? __pfx_ksys_read+0x10/0x10 [ 47.200145][ C3] __do_fast_syscall_32+0x13a/0x8b0 [ 47.202235][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 47.204359][ C3] do_fast_syscall_32+0x32/0x70 [ 47.206352][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 47.208920][ C3] RIP: 0023:0xf7f82fec [ 47.210582][ C3] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 47.213154][ C3] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 47.216485][ C3] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080032680 [ 47.219623][ C3] RDX: 0000000000019000 RSI: 0000000000000000 RDI: 0000000000000000 [ 47.222589][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.225763][ C3] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 47.228447][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.231044][ C3] [ 47.232010][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 47.234266][ C3] CPU: 3 UID: 0 PID: 5962 Comm: syz.3.29 Not tainted syzkaller #0 PREEMPT(full) [ 47.236975][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.239975][ C3] Call Trace: [ 47.241009][ C3] [ 47.241926][ C3] dump_stack_lvl+0x100/0x190 [ 47.243449][ C3] vpanic+0x553/0x970 [ 47.244674][ C3] ? __pfx_vpanic+0x10/0x10 [ 47.246113][ C3] panic+0xd1/0xe0 [ 47.247273][ C3] ? __pfx_panic+0x10/0x10 [ 47.248662][ C3] check_panic_on_warn.cold+0x19/0x34 [ 47.250284][ C3] ? __queue_work+0xdb7/0x1370 [ 47.251757][ C3] __warn.cold+0x191/0x318 [ 47.253199][ C3] __report_bug+0x30f/0x440 [ 47.254649][ C3] ? __queue_work+0xdb7/0x1370 [ 47.256165][ C3] ? __pfx___report_bug+0x10/0x10 [ 47.257756][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 47.259433][ C3] report_bug_entry+0xe2/0x290 [ 47.260956][ C3] ? __queue_work+0xdbb/0x1370 [ 47.262466][ C3] handle_bug+0x1cd/0x2a0 [ 47.263849][ C3] exc_invalid_op+0x17/0x50 [ 47.265297][ C3] asm_exc_invalid_op+0x1a/0x20 [ 47.266824][ C3] RIP: 0010:__queue_work+0xdbb/0x1370 [ 47.268516][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d 29 43 78 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 47.274511][ C3] RSP: 0018:ffffc900005f8b68 EFLAGS: 00010046 [ 47.276454][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100a35114e [ 47.278934][ C3] RDX: ffff888024ac7970 RSI: ffffffff8ac23ee0 RDI: ffffffff91486f90 [ 47.281408][ C3] RBP: ffff888051a88a58 R08: 0000000000000007 R09: 0000000000000000 [ 47.283884][ C3] R10: 0000000000000100 R11: 0000000000000001 R12: ffff888024ac7800 [ 47.286365][ C3] R13: 1ffff920000bf177 R14: 0000000000000000 R15: ffffffff81d03230 [ 47.288854][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 47.290701][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 47.292354][ C3] ? __queue_work+0xd89/0x1370 [ 47.293903][ C3] ? lock_acquire+0x1d1/0x380 [ 47.295359][ C3] ? call_timer_fn+0x11d/0x5f0 [ 47.296995][ C3] ? __pfx___queue_work+0x10/0x10 [ 47.298615][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 47.300526][ C3] call_timer_fn+0x198/0x5f0 [ 47.302047][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 47.303588][ C3] ? lock_acquire+0x1d1/0x380 [ 47.305140][ C3] ? __run_timers+0x560/0xb00 [ 47.306675][ C3] ? __run_timers+0x560/0xb00 [ 47.308183][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 47.310295][ C3] __run_timers+0x570/0xb00 [ 47.312268][ C3] ? __pfx___run_timers+0x10/0x10 [ 47.314380][ C3] ? clockevents_program_event+0x1bf/0x820 [ 47.316611][ C3] ? lock_acquire+0x1d1/0x380 [ 47.318351][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 47.320032][ C3] run_timer_base+0x114/0x190 [ 47.321602][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 47.323753][ C3] run_timer_softirq+0x1a/0x50 [ 47.325303][ C3] handle_softirqs+0x1e6/0x9d0 [ 47.326867][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 47.328604][ C3] ? _raw_spin_unlock+0x28/0x50 [ 47.330179][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 47.332424][ C3] __irq_exit_rcu+0x16a/0x210 [ 47.334058][ C3] irq_exit_rcu+0x9/0x30 [ 47.335554][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 47.337492][ C3] [ 47.338556][ C3] [ 47.339818][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 47.341886][ C3] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 47.344652][ C3] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 13 93 fc 09 e8 5e 20 3d 00 fb 48 8d bb 18 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 47.351896][ C3] RSP: 0018:ffffc900069bf720 EFLAGS: 00000202 [ 47.354125][ C3] RAX: 0000000000014d73 RBX: ffff888023e2cb00 RCX: 0000000000000000 [ 47.357029][ C3] RDX: 0000000000000001 RSI: ffffffff8e391eab RDI: ffff888023e2e218 [ 47.359909][ C3] RBP: ffffc900069bf778 R08: 0000000000000001 R09: 0000000000000000 [ 47.362633][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880244e8000 [ 47.365637][ C3] R13: 0000000000000001 R14: ffffffff9145b9e4 R15: ffff88802b53c040 [ 47.368519][ C3] __schedule+0x1261/0x6920 [ 47.369989][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 47.371602][ C3] ? __pfx___schedule+0x10/0x10 [ 47.373205][ C3] ? find_held_lock+0x2b/0x80 [ 47.374786][ C3] ? schedule+0x225/0x2c0 [ 47.376653][ C3] schedule+0xdd/0x2c0 [ 47.378276][ C3] schedule_timeout+0x1b2/0x280 [ 47.380382][ C3] ? __pfx_schedule_timeout+0x10/0x10 [ 47.382550][ C3] ? __wait_for_common+0x2da/0x4c0 [ 47.384760][ C3] ? rcu_is_watching+0x13/0xc0 [ 47.386384][ C3] __wait_for_common+0x2e7/0x4c0 [ 47.388064][ C3] ? __pfx_schedule_timeout+0x10/0x10 [ 47.390022][ C3] ? __pfx___wait_for_common+0x10/0x10 [ 47.392059][ C3] ? preempt_schedule_common+0x3c/0xb0 [ 47.393974][ C3] ? generic_exec_single+0xbb/0x400 [ 47.395739][ C3] rdmsrq_safe_on_cpu+0x195/0x1b0 [ 47.397390][ C3] ? __pfx_rdmsrq_safe_on_cpu+0x10/0x10 [ 47.399244][ C3] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 47.401226][ C3] ? lock_acquire+0x1d1/0x380 [ 47.403208][ C3] ? _copy_to_user+0xaf/0xd0 [ 47.405310][ C3] msr_read+0x18e/0x240 [ 47.407110][ C3] ? __pfx_msr_read+0x10/0x10 [ 47.409076][ C3] ? bpf_lsm_file_permission+0x9/0x10 [ 47.411354][ C3] ? security_file_permission+0x76/0x210 [ 47.413454][ C3] ? rw_verify_area+0xce/0x6d0 [ 47.415121][ C3] ? __pfx_msr_read+0x10/0x10 [ 47.417152][ C3] vfs_read+0x1e4/0xb40 [ 47.418708][ C3] ? lock_acquire+0x1d1/0x380 [ 47.420269][ C3] ? __fget_files+0x34/0x3d0 [ 47.421900][ C3] ? __pfx_vfs_read+0x10/0x10 [ 47.423477][ C3] ? find_held_lock+0x2b/0x80 [ 47.425082][ C3] ? __fget_files+0x215/0x3d0 [ 47.426724][ C3] ? __fget_files+0x215/0x3d0 [ 47.428370][ C3] ? __fget_files+0x21f/0x3d0 [ 47.429981][ C3] ksys_read+0x12a/0x250 [ 47.431510][ C3] ? __pfx_ksys_read+0x10/0x10 [ 47.433230][ C3] __do_fast_syscall_32+0x13a/0x8b0 [ 47.435033][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 47.437261][ C3] do_fast_syscall_32+0x32/0x70 [ 47.439334][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 47.442012][ C3] RIP: 0023:0xf7f82fec [ 47.443561][ C3] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 47.446023][ C3] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 47.448921][ C3] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080032680 [ 47.451540][ C3] RDX: 0000000000019000 RSI: 0000000000000000 RDI: 0000000000000000 [ 47.454225][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.456935][ C3] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 47.459593][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.462302][ C3] [ 47.464092][ C3] Kernel Offset: disabled [ 47.465790][ C3] Rebooting in 86400 seconds..