last executing test programs: 16.454188807s ago: executing program 1 (id=975): sigaltstack(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x6, r2, r1}) sigaltstack(&(0x7f0000001400)={0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r3, 0x0, 0x25, 0x16, @val=@kprobe_multi=@addrs={0x1, 0x2, 0x0, &(0x7f0000000040)=[0x1e7f, 0x4], 0x2}}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = io_uring_setup(0x5, &(0x7f00000002c0)={0x0, 0x20000}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_l2cap(r7, &(0x7f0000000080), 0xe) listen(r7, 0x0) accept4$vsock_stream(r7, 0x0, 0x58, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 14.671682851s ago: executing program 1 (id=980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x9, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)=0x80000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, 0x0, 0x3, 0x5, 0x0, 0x0, {}, [@generic="92"]}, 0x18}}, 0x0) 13.432650117s ago: executing program 1 (id=985): sigaltstack(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x6, r2, r1}) sigaltstack(&(0x7f0000001400)={0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r3, 0x0, 0x25, 0x16, @val=@kprobe_multi=@addrs={0x1, 0x2, 0x0, &(0x7f0000000040)=[0x1e7f, 0x4], 0x2}}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = io_uring_setup(0x5, &(0x7f00000002c0)={0x0, 0x20000}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_l2cap(r7, &(0x7f0000000080), 0xe) listen(r7, 0x0) accept4$vsock_stream(r7, 0x0, 0x58, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 11.894580079s ago: executing program 3 (id=986): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close(r0) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)={[&(0x7f00000000c0)='(\x00', &(0x7f0000000100)='\x00', &(0x7f0000000200)='\'.\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00']}, &(0x7f0000000580)={[&(0x7f0000000400)='\x00', &(0x7f0000000440)='syzkaller\x00', &(0x7f0000000480)=')\'-!-[\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='$[:\x00', &(0x7f0000000540)='syzkaller\x00']}, 0x9fb72c55612f344e) close(r1) unshare(0x60400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x8, 0x0, 0x0}}, 0x10) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r3, 0x10000000) 11.227941018s ago: executing program 4 (id=988): setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 10.960190872s ago: executing program 3 (id=990): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce01028297090212000100000000090400000002"], 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mremap(&(0x7f0000934000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000063c000/0x3000)=nil) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000934000/0x4000)=nil, 0x4000}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x259, r2) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x7d, &(0x7f0000000000)=[@in={0x2, 0x4e24, @empty}], 0x10) syz_usb_connect$cdc_ecm(0x1, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x6, 0x0, 0xd, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, 'G]'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x2, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x2, 0x6, 0xc7}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x2, 0x9, 0xf9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x4, 0x8}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x8, 0x5, 0x8, 0x15}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0xad, &(0x7f0000000140)=@string={0xad, 0x3, "b707435d4ef778f6c2a04901c81dbf38be19dfd5d06f70731a233d4022b3370744cd9e324609b58f3e150af7e67b45fd6c491c0f32262709fa13a797a886f238480bcf4796323babfdc0dfc8455240031212c0abbfd11be915973455aa97bc28d27ca9a612eafa38e1c1f6a9ab18ab5340cf93d273163b62f1f5aa9edff38d8fd68214784c4fc4bea24ba17db60e5d793357fab3d77be8190575503b42cfb12dc7ee02bdb1d593d2ea3d0f"}}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce01028297090212000100000000090400000002"], 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) mremap(&(0x7f0000934000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000063c000/0x3000)=nil) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000934000/0x4000)=nil, 0x4000}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) add_key$user(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000009c0)="c218b8fb4f2711662cda19348d3cb55586a0b8af4c8b0e15dd9b6a54e2b1949a11fd43529b6d7178ad1bca2c14db39ff5a5cc5653035257088bc4796d6ee8733d014bdff64c5adb64d1df761b14bf856875d2ccbe1d4559c3a7600ffffff237a5aa929be91720d0bf73b3edd5a16ce80c2d474cff4fabd20cfa00fdc867ccd24521a769b61fd609b55a3672c221fc7ad9d29bb5a826e9e7fc46139e19bd49c2528fdfba998dd047e8115c02807698c6c824a940100000000000000636c88246f7df2ea55c356a3f2ff7136e701d9b54cf5f1cc7dc8a6500d08b554a0932784e083692004220e9d7109cee984e6c620739f594cd4e06742cad50cc162b30348ab2082176734522f00f9b1baec7e6aeed020c10affa1d20a79dde91f42882b766be08d1a9b39060af788a357b05120948857f8dde09dbde139ec000000000000177c19e9d794dbc1fedae6b4fe888eb81797573ce906000000000000000882bf91b9dca924ce486e689efc06414ae6cd74587fe44f82969f4958e835253a6cfe0e35da29333b3999f1dc472fd82e3e6d40e43a08003b0f24989f800ffc2f4b9b19455bd8590921a9b460c69c05d662a275ae207c4eb0dd9acf59ddf6cae11c35314755dd135abc0b53c766c8c387bd99dc761e516af8954c80c7a9f00b0ba4374ec2c0c6ae8974a9cd6416a825d9b1529f01e379f81bf6c2d07516ffe3f4e447a6b50c94421ce5eeda2b8f9eb049bb3baf19fa6d03314e05990f1f51e8b29f86888265b2203d000000000000000000000000000000ec46278f56049bdfd9bf693f69c32deaa4f224bcfd2768f4c2d7508d13a91e7f27527fe1e7", 0x259, r2) (async) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x7d, &(0x7f0000000000)=[@in={0x2, 0x4e24, @empty}], 0x10) (async) syz_usb_connect$cdc_ecm(0x1, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x6, 0x0, 0xd, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, 'G]'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x2, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x2, 0x6, 0xc7}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x2, 0x9, 0xf9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x4, 0x8}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x8, 0x5, 0x8, 0x15}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0xad, &(0x7f0000000140)=@string={0xad, 0x3, "b707435d4ef778f6c2a04901c81dbf38be19dfd5d06f70731a233d4022b3370744cd9e324609b58f3e150af7e67b45fd6c491c0f32262709fa13a797a886f238480bcf4796323babfdc0dfc8455240031212c0abbfd11be915973455aa97bc28d27ca9a612eafa38e1c1f6a9ab18ab5340cf93d273163b62f1f5aa9edff38d8fd68214784c4fc4bea24ba17db60e5d793357fab3d77be8190575503b42cfb12dc7ee02bdb1d593d2ea3d0f"}}]}) (async) 10.336655516s ago: executing program 4 (id=991): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x2, 0x4) 9.318489777s ago: executing program 0 (id=992): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$tun(0xffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) pipe2$9p(0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) timer_gettime(0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x2}], 0x1, 0x0, &(0x7f00000006c0)='u'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 9.278809924s ago: executing program 1 (id=993): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9a}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x11, 0xa, 0x0) ioctl$sock_ifreq(r3, 0x8919, &(0x7f0000000200)={'lo\x00', @ifru_mtu=0x2}) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r5, 0x0, 0x0, 0x3, 0x0, 0x5c, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2={0xff, 0x5}}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={r8}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r9, 0x8, 0xfffeffff, 0xfffffffa}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty20(0xc, 0x4, 0x1) setrlimit(0x7, &(0x7f0000000500)={0x9, 0xf91}) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0xc0086202, &(0x7f0000000440)=0x2) 9.261450621s ago: executing program 4 (id=995): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x88, 0x33, 0x0, 0x0) 8.30314423s ago: executing program 0 (id=997): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x408402, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xe6445995d9064ed7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d8}, 0x4000040) openat$dsp(0xffffff9c, &(0x7f0000000040), 0x6240, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 8.218605123s ago: executing program 2 (id=998): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000240)={0xbc, 0x0, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb}}, 0x0, 0xd2cb, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xa6, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f911240685", 0x14}], 0x1}, 0x0) 8.040253202s ago: executing program 0 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r6, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000280)=0x40) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYRES32=r5, @ANYRESDEC=r2, @ANYRES16=r4, @ANYRESDEC=r8], 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x200000}) 7.996323734s ago: executing program 3 (id=1000): bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @private, 0x0}, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = gettid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x29, 0x5, 0x0) splice(r5, 0x0, r4, 0x0, 0x20000004, 0x0) tkill(r3, 0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}}, 0x1c}}, 0x0) setsockopt$inet6_int(r9, 0x29, 0x33, 0x0, 0x0) 6.904493508s ago: executing program 1 (id=1001): setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6.310864787s ago: executing program 2 (id=1002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x3, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000640), 0x0}, 0x20) 5.296026538s ago: executing program 4 (id=1003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="98e5000000000000000000000400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0xf9b7, 0x0, 0xa0, 0x80, 0x1d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010102}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socket$isdn(0x22, 0x2, 0x25) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 5.282202265s ago: executing program 1 (id=1004): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd=r1, 0x1cd1, {}, 0x400, 0x2, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) syz_clone(0x1108, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000730118000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x542e}}, {0x4, &(0x7f0000000000)=@lang_id={0x4}}, {0x0, 0x0}, {0x0, 0x0}, {0xd4, &(0x7f0000000240)=@string={0xd4, 0x3, "12a69844b05361a6dba974997d420d71bb2d5f0355e2cfc9c73aabff29381ccfb0ba17fe0254292cb5a8f97b7ec74998acfa7b2f4c648eae44da3b2073654f9204a2819aa713c614269701ba40ece62071eacf40734e5eb793da613189caf2c5e3c4debd41a4148351b2f3a0221d41b47fa14ddd76c5d11aac24d8d4350e494ad6bb167b5146647508f2acbb6b647918add48f726d09f8c66c60669612bce33b20d0a241a3d3127564e045b2a308db627eeaf0752a35a64965b1d66bd868133b88ad12d91798194e66fe0a08ae1d3420b90d"}}]}) ioctl$HIDIOCSREPORT(r6, 0xc038480a, &(0x7f0000000080)={0x2, 0x100, 0x7fff}) 4.200764724s ago: executing program 2 (id=1005): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fefffeff00000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1008, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.832975274s ago: executing program 0 (id=1006): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={&(0x7f0000000040)=[r6], 0x1, r3, r4, 0x0, 0x0, 0x0, 0x10800, {0x4, 0x1, 0x2, 0x69, 0x200, 0xfffd, 0x2, 0x2, 0x4cab, 0xe157, 0x0, 0x0, 0x25, 0x0, "fe1d00003413000000000000000caa000004b42718001000"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r7 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) fcntl$setstatus(r7, 0x4, 0x42400) open(&(0x7f0000000000)='./file0\x00', 0x46402, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x220) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) 3.404257406s ago: executing program 3 (id=1007): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$tun(0xffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) pipe2$9p(0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) timer_gettime(0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x2}], 0x1, 0x0, &(0x7f00000006c0)='u'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.350308615s ago: executing program 4 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x9, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') fchdir(r2) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)=0x80000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, 0x0, 0x3, 0x5, 0x0, 0x0, {}, [@generic="92"]}, 0x18}}, 0x0) 3.293258797s ago: executing program 2 (id=1009): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r6) close(r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7f5b, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585668, &(0x7f0000000200)={0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)) 3.280574692s ago: executing program 0 (id=1010): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0xe66, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x5, 0x0, 0x4, 0x0, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x6c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}], @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x2, 0x0, 0x2, 0x0, {0x49, 0x9, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x7, 0x2}}]}]}, 0x6c}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x8) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000340)=0xfffffffe) 2.029346876s ago: executing program 2 (id=1011): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f00000003c0), 0x401, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r4) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fedbdf2512000000080015000200000008000100"], 0x24}, 0x1, 0x0, 0x0, 0xc8c7}, 0x20048010) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@loopback}, &(0x7f0000000340)=0x14) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) move_pages(r1, 0x3, &(0x7f0000000100)=[&(0x7f0000169000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000726000/0x1000)=nil], 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x4) openat$vimc1(0xffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={0x0}) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004085}, 0x1) 2.028730605s ago: executing program 3 (id=1012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="98e5000000000000000000000400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0xf9b7, 0x0, 0xa0, 0x80, 0x1d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010102}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socket$isdn(0x22, 0x2, 0x25) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 2.028215655s ago: executing program 4 (id=1013): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$smackfs_netlabel(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x31) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000580)={0x0, r3, 0x100000001, 0xe, 0xbec4, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) 464.242639ms ago: executing program 0 (id=1014): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 461.893264ms ago: executing program 2 (id=1015): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x4140, 0x120) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffe42) r4 = syz_open_dev$video(&(0x7f0000000000), 0x8003, 0x1cb900) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000080)={0x5, 0x30324c4a, 0x3, @discrete={0xf80b, 0x6}}) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) sendmsg$sock(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="69906effd6915238bddc2115d1bd428682f110437a9af68b5147ff7c97a3eea0f22b9cc27d0bfac4468c1c47bedbc8a954ccdff90882520842e040e07eebdbc31cf7e48a08e13c97f968862422a0c35052db252957b9e85df9698d90d80234c354a683b3e65d76fcac06a4f3d3c2ce9bff4deedd33081dc9781fc98defa92692a98a381903a3e67f974b8cf2c7c6eeb9f46973e50804e39de3e90cbacbde475f6699b923a0d470da64e7766fe50154e0f628f303b0db01cea5b3168f01bd65eaf2dabf94f68f7232152ada43f12c717eab24e440bffde35b7f3f840578f7e6033b65759141a5637171101b5fd4bddc622b3e493c6a97517b6ec83a77536f72acb52b2c3ee87150679e69eb5e517580b19ddaa7b7a69b75e520f7587628b32e5a18b67157336b7c1dd71fd1f8cdfd03f563996d9adb2db3396dc68695edc7339cca5ba05c6640e4b9866d610757c73bc2a2c67a9550f8932e30a41bad4b678aafa1814bddb96f341ddb168d4ff831164a35c7458ad95febc9e0c61800ca83f69e705c2ce9e6340b2611e18ba689b60dc37fc26458be57a2dd89e13ee763125f9069c771d181c1f0af15fa43250c8367a0b49419c79ee49d2f7803d5c6162a65b5c4dfa6f3987513cd95300be38fa315671dfa5f43a9b3ac9f85a4af8aa4790e9ddd0215da61dc71cb498df7dc3bc85e5ff4a240b1c0e3e0a49cd9639f100fa8dede198d48aac0a1330b58ac07711aee9ec10c1ace627381e996240636a5a095df60d92ec8669138d43b82cb74ef43dff5d85a5ca3f5a1c27430d7a058308e0e04d20fecf5e0edcff41a0c4165fc882d367b3d35d6433327afe6a09430f2c1ada45310c55027a230500a51b9ec6b8dee0da0b2c4c678affa8665da9224f2e7d20875d289c396d3243155fc0dd7db922d4a6a5056356b383d4d0651c10991657929ba634d6d39faee9c45100660882763b16b8ff1c98b691eea19a38a1b274147bb473848ff2515e149361df7a989e5c56503b2bddafcb53f8bec5fbdfa8db635bff2551363e6903243eb129676509232030751e81ede457a54b45547c2bb8328c5f9aec6e08630bd448c134849a164ef9e07d21c3d23ac8f47e621e8aec5d605e17980a0105dd4a596137068f862161f40044419eec54aedb813c087436cd5461a5b4eeb9e49591234854c3775160cf03a421c4b578d31693dbd558494d56f35e262a77b1e47949bc519d2ffe5a672734a7ffbc86cec9d87514862c7e2a099e707c31209f732f4cdd2a536d26021f5dd35a2e36d65f049", 0x396}], 0x1, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x100080c0) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 3 (id=1016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r6, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000280)=0x40) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYRES32=r5, @ANYRESDEC=r2, @ANYRES16=r4, @ANYRESDEC=r8], 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x200000}) kernel console output (not intermixed with test programs): ridge0: port 1(bridge_slave_0) entered disabled state [ 592.259420][ T8616] bridge_slave_0: entered allmulticast mode [ 592.266305][ T8616] bridge_slave_0: entered promiscuous mode [ 592.299603][ T8616] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.307554][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.314769][ T8616] bridge_slave_1: entered allmulticast mode [ 592.322275][ T8616] bridge_slave_1: entered promiscuous mode [ 592.396981][ T8616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.432923][ T8616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.485346][ T8616] team0: Port device team_slave_0 added [ 592.492348][ T8625] chnl_net:caif_netlink_parms(): no params data found [ 592.517223][ T8616] team0: Port device team_slave_1 added [ 592.545347][ T1121] bridge_slave_1: left allmulticast mode [ 592.551041][ T1121] bridge_slave_1: left promiscuous mode [ 592.561175][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.570873][ T1121] bridge_slave_0: left allmulticast mode [ 592.576911][ T8559] Bluetooth: hci4: command tx timeout [ 592.583293][ T1121] bridge_slave_0: left promiscuous mode [ 592.589151][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.598824][ T1121] bridge_slave_1: left allmulticast mode [ 592.604669][ T1121] bridge_slave_1: left promiscuous mode [ 592.610389][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.622148][ T1121] bridge_slave_0: left allmulticast mode [ 592.627842][ T1121] bridge_slave_0: left promiscuous mode [ 592.633768][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.643465][ T1121] bridge_slave_1: left allmulticast mode [ 592.650852][ T1121] bridge_slave_1: left promiscuous mode [ 592.656621][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.665665][ T1121] bridge_slave_0: left allmulticast mode [ 592.671610][ T1121] bridge_slave_0: left promiscuous mode [ 592.677463][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.687458][ T1121] bridge_slave_1: left allmulticast mode [ 592.693136][ T1121] bridge_slave_1: left promiscuous mode [ 592.699045][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.709217][ T1121] bridge_slave_0: left allmulticast mode [ 592.714906][ T1121] bridge_slave_0: left promiscuous mode [ 592.721748][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.731162][ T1121] bridge_slave_1: left allmulticast mode [ 592.736951][ T1121] bridge_slave_1: left promiscuous mode [ 592.742672][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.752418][ T1121] bridge_slave_0: left allmulticast mode [ 592.758679][ T1121] bridge_slave_0: left promiscuous mode [ 592.764507][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.776755][ T1121] bridge_slave_1: left allmulticast mode [ 592.783107][ T1121] bridge_slave_1: left promiscuous mode [ 592.788863][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.799380][ T1121] bridge_slave_0: left allmulticast mode [ 592.805518][ T1121] bridge_slave_0: left promiscuous mode [ 592.811510][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.824268][ T1121] bridge_slave_1: left allmulticast mode [ 592.830325][ T1121] bridge_slave_1: left promiscuous mode [ 592.836048][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.845754][ T1121] bridge_slave_0: left allmulticast mode [ 592.851975][ T1121] bridge_slave_0: left promiscuous mode [ 592.857658][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.640158][ T8559] Bluetooth: hci3: command tx timeout [ 593.935224][ T8559] Bluetooth: hci1: command tx timeout [ 594.235478][ T1121] bond0 (unregistering): Released all slaves [ 594.385050][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.398255][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.410302][ T1121] bond0 (unregistering): Released all slaves [ 594.424580][ T1121] bond0 (unregistering): Released all slaves [ 594.442204][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.458929][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.472210][ T1121] bond0 (unregistering): Released all slaves [ 594.545322][ T8559] Bluetooth: hci4: command tx timeout [ 594.646551][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.662004][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.673299][ T1121] bond0 (unregistering): Released all slaves [ 594.817709][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.828906][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.840867][ T1121] bond0 (unregistering): Released all slaves [ 594.980885][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.995512][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.007312][ T1121] bond0 (unregistering): Released all slaves [ 595.114377][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.141780][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.196484][ T8616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.280204][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.287296][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.313807][ T8616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.532371][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.540253][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.548536][ T8625] bridge_slave_0: entered allmulticast mode [ 595.556069][ T8625] bridge_slave_0: entered promiscuous mode [ 595.611752][ T8559] Bluetooth: hci3: command tx timeout [ 595.625801][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.633191][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.640661][ T8625] bridge_slave_1: entered allmulticast mode [ 595.648642][ T8625] bridge_slave_1: entered promiscuous mode [ 595.698322][ T8616] hsr_slave_0: entered promiscuous mode [ 595.705199][ T8616] hsr_slave_1: entered promiscuous mode [ 595.711731][ T8616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.719436][ T8616] Cannot create hsr debugfs directory [ 595.753998][ T8625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.794469][ T8625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.889881][ T8625] team0: Port device team_slave_0 added [ 595.916482][ T8559] Bluetooth: hci1: command tx timeout [ 595.924189][ T8625] team0: Port device team_slave_1 added [ 596.060485][ T8589] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 596.071266][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.078865][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.105346][ T8625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.141932][ T8589] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 596.199836][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.206918][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.235108][ T8625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.252104][ T8589] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 596.304672][ T8589] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 596.397293][ T8625] hsr_slave_0: entered promiscuous mode [ 596.406232][ T8625] hsr_slave_1: entered promiscuous mode [ 596.414445][ T8625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.422357][ T8625] Cannot create hsr debugfs directory [ 596.527454][ T8559] Bluetooth: hci4: command tx timeout [ 596.681919][ T1121] hsr_slave_0: left promiscuous mode [ 596.694267][ T1121] hsr_slave_1: left promiscuous mode [ 596.712850][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.721348][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.732714][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.741206][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.753907][ T1121] hsr_slave_0: left promiscuous mode [ 596.760543][ T1121] hsr_slave_1: left promiscuous mode [ 596.767012][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.775376][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.783524][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.790960][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.804447][ T1121] hsr_slave_0: left promiscuous mode [ 596.810410][ T1121] hsr_slave_1: left promiscuous mode [ 596.818881][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.826518][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.839543][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.847153][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.864337][ T1121] hsr_slave_0: left promiscuous mode [ 596.875040][ T1121] hsr_slave_1: left promiscuous mode [ 596.882140][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.890509][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.898632][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.906239][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.976280][ T1121] veth1_macvtap: left promiscuous mode [ 596.981865][ T1121] veth0_macvtap: left promiscuous mode [ 596.988513][ T1121] veth1_vlan: left promiscuous mode [ 596.994029][ T1121] veth0_vlan: left promiscuous mode [ 597.002096][ T1121] veth1_macvtap: left promiscuous mode [ 597.007645][ T1121] veth0_macvtap: left promiscuous mode [ 597.013469][ T1121] veth1_vlan: left promiscuous mode [ 597.018794][ T1121] veth0_vlan: left promiscuous mode [ 597.025532][ T1121] veth1_macvtap: left promiscuous mode [ 597.031434][ T1121] veth0_macvtap: left promiscuous mode [ 597.037046][ T1121] veth1_vlan: left promiscuous mode [ 597.042515][ T1121] veth0_vlan: left promiscuous mode [ 597.048869][ T1121] veth1_macvtap: left promiscuous mode [ 597.054673][ T1121] veth0_macvtap: left promiscuous mode [ 597.060517][ T1121] veth1_vlan: left promiscuous mode [ 597.065858][ T1121] veth0_vlan: left promiscuous mode [ 597.593276][ T8559] Bluetooth: hci3: command tx timeout [ 598.017777][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 598.067327][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 598.507421][ T8559] Bluetooth: hci4: command tx timeout [ 598.707079][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 598.759074][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 599.324490][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 599.379372][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 600.226808][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 600.272202][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 601.129583][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 601.177614][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 601.777159][ T8589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.809079][ T8589] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.839704][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.846829][ T5603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.873048][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.880219][ T5603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.255598][ T8589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.332906][ T8616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 602.359079][ T8616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 602.369439][ T8616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 602.393654][ T8616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 602.553012][ T8587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 602.593243][ T8587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 602.635627][ T8587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 602.652465][ T8587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 602.835241][ T8625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 602.865417][ T8625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 602.902131][ T8589] veth0_vlan: entered promiscuous mode [ 602.919879][ T8625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 602.952474][ T8625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 602.999256][ T8589] veth1_vlan: entered promiscuous mode [ 603.030257][ T8616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.106507][ T8601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 603.140496][ T8601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 603.153933][ T8601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 603.188880][ T8616] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.220201][ T8601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 603.252635][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.259779][ T6805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.349021][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.356212][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.386465][ T8589] veth0_macvtap: entered promiscuous mode [ 603.435643][ T8589] veth1_macvtap: entered promiscuous mode [ 603.460021][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.535300][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.588775][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.622039][ T8589] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.632233][ T8589] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.640978][ T8589] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.649990][ T8589] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.687120][ T8587] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.710630][ T8625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.767592][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.774866][ T6805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.824988][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.832359][ T5603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.847091][ T8601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.939489][ T8625] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.967063][ T5603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.975557][ T5603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.991228][ T8601] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.011637][ T6814] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.018804][ T6814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.058795][ T6814] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.066081][ T6814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.088743][ T6814] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.095975][ T6814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.145067][ T8616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.160644][ T6814] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.167890][ T6814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.212083][ T6805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.235653][ T6805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.265828][ T8587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.435471][ T8616] veth0_vlan: entered promiscuous mode [ 604.472662][ T1121] bridge_slave_1: left allmulticast mode [ 604.488036][ T1121] bridge_slave_1: left promiscuous mode [ 604.508949][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.667512][ T1121] bridge_slave_0: left allmulticast mode [ 604.708186][ T1121] bridge_slave_0: left promiscuous mode [ 604.717613][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.834489][ T1121] bridge_slave_1: left allmulticast mode [ 604.847022][ T1121] bridge_slave_1: left promiscuous mode [ 604.872116][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.976276][ T1121] bridge_slave_0: left allmulticast mode [ 604.982159][ T1121] bridge_slave_0: left promiscuous mode [ 605.080648][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.301931][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.319016][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.334353][ T1121] bond0 (unregistering): Released all slaves [ 605.346860][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.358375][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.378136][ T1121] bond0 (unregistering): Released all slaves [ 605.437722][ T8616] veth1_vlan: entered promiscuous mode [ 605.617569][ T1121] hsr_slave_0: left promiscuous mode [ 605.735484][ T1121] hsr_slave_1: left promiscuous mode [ 605.822547][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.882307][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.970307][ T1121] hsr_slave_0: left promiscuous mode [ 605.993678][ T1121] hsr_slave_1: left promiscuous mode [ 606.029349][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.070231][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.420142][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 606.460037][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 606.724559][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 606.760006][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 606.945612][ T8625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.017187][ T8616] veth0_macvtap: entered promiscuous mode [ 607.086942][ T8587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.112893][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 607.125299][ T8601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.146357][ T8673] overlayfs: conflicting lowerdir path [ 607.153395][ T8616] veth1_macvtap: entered promiscuous mode [ 607.236514][ T8625] veth0_vlan: entered promiscuous mode [ 607.292673][ T8625] veth1_vlan: entered promiscuous mode [ 607.313189][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.324246][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.335956][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.392939][ T8587] veth0_vlan: entered promiscuous mode [ 607.424778][ T8616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.442119][ T8616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.454616][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.488961][ T8601] veth0_vlan: entered promiscuous mode [ 607.515416][ T8587] veth1_vlan: entered promiscuous mode [ 607.549099][ T8616] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.558974][ T8616] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.568703][ T8616] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.578147][ T8616] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.612371][ T8625] veth0_macvtap: entered promiscuous mode [ 607.626930][ T8625] veth1_macvtap: entered promiscuous mode [ 607.656095][ T8601] veth1_vlan: entered promiscuous mode [ 607.773093][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.785553][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.795641][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.806603][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.818051][ T8625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.831848][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.842713][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.852866][ T8625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.863393][ T8625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.874515][ T8625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.889087][ T8625] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.897908][ T8625] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.906945][ T8625] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.915793][ T8625] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.978753][ T8587] veth0_macvtap: entered promiscuous mode [ 608.010696][ T5603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.028692][ T5603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.030569][ T8587] veth1_macvtap: entered promiscuous mode [ 608.098476][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.156006][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.171113][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.181788][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.197588][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.212376][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.247599][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.295522][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.304469][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.318278][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.327978][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.356627][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.372519][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.382559][ T8587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.397005][ T8587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.415364][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.444506][ T8601] veth0_macvtap: entered promiscuous mode [ 608.485974][ T8587] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.499360][ T8587] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.508123][ T8587] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.529497][ T8587] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.827799][ T8601] veth1_macvtap: entered promiscuous mode [ 609.194959][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.202840][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.288291][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.305540][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.315566][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.326282][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.337531][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.355061][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.365646][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.382337][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.415113][ T8601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.423271][ T6814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.432154][ T6814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.460711][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.479808][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.500544][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.551001][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.564165][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.581086][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.592867][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.622739][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.650689][ T8601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.726495][ T6805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.757298][ T6805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.781318][ T5603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.804274][ T5603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.674158][ T8601] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.708538][ T8601] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.737927][ T8601] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.759518][ T8601] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.482630][ T6814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.591015][ T6814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.955795][ T5603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.988708][ T5603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.338611][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 612.471568][ T25] usb 4-1: device descriptor read/64, error -71 [ 612.700209][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 612.854185][ T25] usb 4-1: device descriptor read/64, error -71 [ 612.912215][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 612.952090][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 613.252740][ T5279] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 613.414671][ T5279] usb 3-1: device descriptor read/64, error -71 [ 613.731211][ T25] usb usb4-port1: attempt power cycle [ 613.766621][ T8713] program syz.1.726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.777450][ T5279] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 614.644801][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 614.673904][ T25] usb 4-1: device descriptor read/8, error -71 [ 614.742334][ T8674] coredump: 12(syz.4.730): written to core: VMAs: 33, size 99438592; core: 62026638 bytes, pos 99446784 [ 614.757704][ T5279] usb 3-1: device descriptor read/64, error -71 [ 614.872731][ T8724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 614.880200][ T5279] usb usb3-port1: attempt power cycle [ 615.731767][ T8721] delete_channel: no stack [ 615.929629][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 615.967445][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 615.983260][ T25] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 615.987793][ T8378] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 615.992540][ T25] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 615.999216][ T5279] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 616.050382][ T25] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 616.076171][ T25] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 616.151821][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 616.186658][ T8378] usb 2-1: Using ep0 maxpacket: 32 [ 616.205471][ T25] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 616.217855][ T5279] usb 3-1: device not accepting address 17, error -71 [ 616.218249][ T25] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 616.229310][ T8378] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 616.233660][ T25] usb 4-1: Product: syz [ 616.396161][ T8378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.460404][ T25] usb 4-1: Manufacturer: syz [ 616.535741][ T25] usb 4-1: SerialNumber: syz [ 616.537601][ T8378] usb 2-1: config 0 descriptor?? [ 616.857087][ T25] usb 4-1: config 0 descriptor?? [ 616.884126][ T25] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 618.092559][ T25] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 618.429915][ T8378] usb 2-1: string descriptor 0 read error: -71 [ 618.438081][ T8378] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 618.456568][ T8378] gspca_nw80x: reg_w err -71 [ 618.461410][ T8378] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 618.512499][ T8378] usb 2-1: USB disconnect, device number 39 [ 618.522227][ T8329] usb 4-1: USB disconnect, device number 15 [ 618.534441][ T8329] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 620.453268][ T8756] overlay: ./file0 is not a directory [ 621.235009][ T8765] program syz.1.750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.688768][ T8774] mmap: syz.3.753 (8774) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 625.171145][ T8785] xt_hashlimit: overflow, try lower: 0/0 [ 625.284966][ T8796] FAULT_INJECTION: forcing a failure. [ 625.284966][ T8796] name failslab, interval 1, probability 0, space 0, times 0 [ 625.346720][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.1.757 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 625.357053][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 625.367163][ T8796] Call Trace: [ 625.370485][ T8796] [ 625.373448][ T8796] dump_stack_lvl+0x241/0x360 [ 625.378179][ T8796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.383427][ T8796] ? __pfx__printk+0x10/0x10 [ 625.388124][ T8796] ? fs_reclaim_acquire+0x93/0x140 [ 625.393285][ T8796] ? __pfx___might_resched+0x10/0x10 [ 625.398632][ T8796] should_fail_ex+0x3b0/0x4e0 [ 625.403457][ T8796] ? tomoyo_encode+0x26f/0x540 [ 625.408267][ T8796] should_failslab+0xac/0x100 [ 625.412995][ T8796] ? tomoyo_encode+0x26f/0x540 [ 625.417823][ T8796] __kmalloc_noprof+0xd8/0x400 [ 625.422628][ T8796] tomoyo_encode+0x26f/0x540 [ 625.427271][ T8796] tomoyo_realpath_from_path+0x59e/0x5e0 [ 625.432967][ T8796] tomoyo_path_perm+0x2b7/0x740 [ 625.437952][ T8796] ? terminate_walk+0x365/0x430 [ 625.442866][ T8796] ? tomoyo_path_perm+0x287/0x740 [ 625.447963][ T8796] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 625.453432][ T8796] security_inode_getattr+0x130/0x330 [ 625.458857][ T8796] vfs_getattr+0x45/0x430 [ 625.463259][ T8796] vfs_statx+0x199/0x490 [ 625.467566][ T8796] ? __pfx_vfs_statx+0x10/0x10 [ 625.472384][ T8796] ? getname_flags+0x1e3/0x540 [ 625.477206][ T8796] vfs_fstatat+0x145/0x190 [ 625.481681][ T8796] __x64_sys_newfstatat+0x11d/0x1a0 [ 625.486946][ T8796] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 625.492726][ T8796] ? __secure_computing+0x125/0x370 [ 625.497998][ T8796] do_syscall_64+0xf3/0x230 [ 625.502564][ T8796] ? clear_bhb_loop+0x35/0x90 [ 625.507286][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.513224][ T8796] RIP: 0033:0x7f355157df39 [ 625.517680][ T8796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.537351][ T8796] RSP: 002b:00007f35522db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 625.546424][ T8796] RAX: ffffffffffffffda RBX: 00007f3551735f80 RCX: 00007f355157df39 [ 625.554442][ T8796] RDX: 0000000020000040 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 625.562545][ T8796] RBP: 00007f35522db090 R08: 0000000000000000 R09: 0000000000000000 [ 625.570570][ T8796] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 625.578626][ T8796] R13: 0000000000000000 R14: 00007f3551735f80 R15: 00007ffc777b9358 [ 625.586668][ T8796] [ 625.604992][ T8800] FAULT_INJECTION: forcing a failure. [ 625.604992][ T8800] name failslab, interval 1, probability 0, space 0, times 0 [ 625.619979][ T8796] ERROR: Out of memory at tomoyo_realpath_from_path. [ 625.678054][ T8800] CPU: 1 UID: 0 PID: 8800 Comm: syz.2.759 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 625.688379][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 625.698474][ T8800] Call Trace: [ 625.701781][ T8800] [ 625.704920][ T8800] dump_stack_lvl+0x241/0x360 [ 625.709647][ T8800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.714889][ T8800] ? __pfx__printk+0x10/0x10 [ 625.719529][ T8800] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 625.725545][ T8800] ? __pfx___might_resched+0x10/0x10 [ 625.730878][ T8800] should_fail_ex+0x3b0/0x4e0 [ 625.735626][ T8800] should_failslab+0xac/0x100 [ 625.740356][ T8800] ? __alloc_skb+0x1c3/0x440 [ 625.744996][ T8800] kmem_cache_alloc_node_noprof+0x71/0x320 [ 625.750952][ T8800] __alloc_skb+0x1c3/0x440 [ 625.755518][ T8800] ? kasan_quarantine_put+0xdc/0x230 [ 625.760863][ T8800] ? __pfx___alloc_skb+0x10/0x10 [ 625.765846][ T8800] ? mpls_dev_sysctl_unregister+0x93/0xc0 [ 625.771626][ T8800] ? mpls_dev_sysctl_unregister+0x93/0xc0 [ 625.777396][ T8800] mpls_netconf_notify_devconf+0x42/0xf0 [ 625.783182][ T8800] mpls_dev_notify+0x563/0x7a0 [ 625.788002][ T8800] notifier_call_chain+0x19f/0x3e0 [ 625.793256][ T8800] unregister_netdevice_many_notify+0xedd/0x1da0 [ 625.799643][ T8800] ? __mutex_trylock_common+0x183/0x2e0 [ 625.805233][ T8800] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 625.812050][ T8800] ? __pfx___mutex_trylock_common+0x10/0x10 [ 625.818000][ T8800] ? rcu_is_watching+0x15/0xb0 [ 625.822814][ T8800] ? trace_contention_end+0x3c/0x120 [ 625.828182][ T8800] unregister_netdevice_queue+0x303/0x370 [ 625.833973][ T8800] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 625.840272][ T8800] ? do_raw_spin_lock+0x14f/0x370 [ 625.845348][ T8800] ppp_release+0xed/0x1f0 [ 625.849732][ T8800] ? __pfx_ppp_release+0x10/0x10 [ 625.854719][ T8800] __fput+0x23f/0x880 [ 625.858751][ T8800] __x64_sys_close+0x7f/0x110 [ 625.863477][ T8800] do_syscall_64+0xf3/0x230 [ 625.868038][ T8800] ? clear_bhb_loop+0x35/0x90 [ 625.872772][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.878735][ T8800] RIP: 0033:0x7f8bc617df39 [ 625.883206][ T8800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.902954][ T8800] RSP: 002b:00007f8bc6f92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 625.911428][ T8800] RAX: ffffffffffffffda RBX: 00007f8bc6335f80 RCX: 00007f8bc617df39 [ 625.919453][ T8800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 625.928017][ T8800] RBP: 00007f8bc6f92090 R08: 0000000000000000 R09: 0000000000000000 [ 625.936039][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.944237][ T8800] R13: 0000000000000000 R14: 00007f8bc6335f80 R15: 00007ffc1be55d98 [ 625.952278][ T8800] [ 627.630989][ T8817] program syz.1.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 630.084386][ T25] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 630.286697][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 630.404652][ T25] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 630.529338][ T25] usb 2-1: config 0 has no interface number 0 [ 630.582328][ T25] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 630.595375][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.675292][ T25] usb 2-1: Product: syz [ 630.697901][ T25] usb 2-1: Manufacturer: syz [ 630.702918][ T25] usb 2-1: SerialNumber: syz [ 630.755757][ T25] usb 2-1: config 0 descriptor?? [ 630.809847][ T25] smsc95xx v2.0.0 [ 632.067026][ T25] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 632.077932][ T25] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 632.105125][ T8855] program syz.4.776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 633.404463][ T25] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 633.415664][ T25] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 633.430601][ T25] usb 2-1: USB disconnect, device number 40 [ 637.468612][ T8904] program syz.3.791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 637.600586][ T8907] netlink: 72 bytes leftover after parsing attributes in process `syz.1.790'. [ 638.085448][ T8917] netlink: 44 bytes leftover after parsing attributes in process `syz.3.797'. [ 638.097365][ T8917] netlink: 'syz.3.797': attribute type 3 has an invalid length. [ 638.210758][ T8925] binder: BINDER_SET_CONTEXT_MGR already set [ 638.237594][ T8917] netlink: 'syz.3.797': attribute type 3 has an invalid length. [ 638.686738][ T8925] binder: 8916:8925 ioctl 4018620d 20000000 returned -16 [ 642.080652][ T8954] program syz.3.804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.020646][ T5282] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 644.031071][ T25] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 644.163107][ T5282] usb 5-1: device descriptor read/64, error -71 [ 644.203015][ T25] usb 2-1: config 0 has no interfaces? [ 644.212211][ T25] usb 2-1: language id specifier not provided by device, defaulting to English [ 644.259961][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 644.270587][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.284679][ T25] usb 2-1: Product: syz [ 644.289142][ T25] usb 2-1: Manufacturer: 靰ﻥ傖ᅅ㞴岼먊ߧᚨ筨鴴㝮렃舊陌睬ٶ寥淴駖켧ἲ㯩譅㯂֫凑ᶜ鎣䟒ᣇ邛྽ⰨꢅŦꂙ섾倞ࡢᅗ힋䒺⿰挱 [ 644.318203][ T25] usb 2-1: SerialNumber: syz [ 644.328278][ T25] usb 2-1: config 0 descriptor?? [ 644.392103][ T5282] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 644.516215][ T5282] usb 5-1: device descriptor read/64, error -71 [ 644.620620][ T5282] usb usb5-port1: attempt power cycle [ 645.635427][ T8989] netlink: 72 bytes leftover after parsing attributes in process `syz.3.818'. [ 645.821040][ T1166] usb 2-1: USB disconnect, device number 41 [ 646.424593][ T8996] FAULT_INJECTION: forcing a failure. [ 646.424593][ T8996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.463159][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 646.684854][ T8996] CPU: 0 UID: 0 PID: 8996 Comm: syz.3.821 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 646.695267][ T8996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 646.705375][ T8996] Call Trace: [ 646.708683][ T8996] [ 646.711637][ T8996] dump_stack_lvl+0x241/0x360 [ 646.716360][ T8996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.721594][ T8996] ? __pfx__printk+0x10/0x10 [ 646.726228][ T8996] ? snprintf+0xda/0x120 [ 646.730511][ T8996] should_fail_ex+0x3b0/0x4e0 [ 646.735241][ T8996] _copy_to_user+0x2f/0xb0 [ 646.739695][ T8996] simple_read_from_buffer+0xca/0x150 [ 646.745107][ T8996] proc_fail_nth_read+0x1e9/0x250 [ 646.750174][ T8996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 646.755781][ T8996] ? rw_verify_area+0x55e/0x6f0 [ 646.760760][ T8996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 646.766374][ T8996] vfs_read+0x201/0xbc0 [ 646.770586][ T8996] ? __pfx_lock_release+0x10/0x10 [ 646.775688][ T8996] ? __pfx_vfs_read+0x10/0x10 [ 646.780489][ T8996] ? __fget_files+0x3f3/0x470 [ 646.785224][ T8996] ? fdget_pos+0x24e/0x320 [ 646.789699][ T8996] ksys_read+0x183/0x2b0 [ 646.793978][ T8996] ? __pfx_ksys_read+0x10/0x10 [ 646.798772][ T8996] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 646.805266][ T8996] ? do_syscall_64+0xb6/0x230 [ 646.809985][ T8996] do_syscall_64+0xf3/0x230 [ 646.814525][ T8996] ? clear_bhb_loop+0x35/0x90 [ 646.819235][ T8996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.825161][ T8996] RIP: 0033:0x7f733a17c97c [ 646.829607][ T8996] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 646.849263][ T8996] RSP: 002b:00007f733af3e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 646.857733][ T8996] RAX: ffffffffffffffda RBX: 00007f733a335f80 RCX: 00007f733a17c97c [ 646.865740][ T8996] RDX: 000000000000000f RSI: 00007f733af3e0a0 RDI: 0000000000000005 [ 646.873743][ T8996] RBP: 00007f733af3e090 R08: 0000000000000000 R09: 0000000000000000 [ 646.881831][ T8996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.889993][ T8996] R13: 0000000000000000 R14: 00007f733a335f80 R15: 00007ffffa410db8 [ 646.898019][ T8996] [ 646.951618][ T9002] program syz.4.822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.231292][ T5280] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 651.468980][ T5280] usb 2-1: config 0 has no interfaces? [ 651.512682][ T5280] usb 2-1: language id specifier not provided by device, defaulting to English [ 651.702124][ T5280] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 651.862470][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.997240][ T5280] usb 2-1: Product: syz [ 652.048347][ T5280] usb 2-1: Manufacturer: 靰ﻥ傖ᅅ㞴岼먊ߧᚨ筨鴴㝮렃舊陌睬ٶ寥淴駖켧ἲ㯩譅㯂֫凑ᶜ鎣䟒ᣇ邛྽ⰨꢅŦꂙ섾倞ࡢᅗ힋䒺⿰挱 [ 652.152566][ T5280] usb 2-1: SerialNumber: syz [ 652.160683][ T5280] usb 2-1: config 0 descriptor?? [ 653.234829][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 655.318281][ T5282] usb 2-1: USB disconnect, device number 42 [ 655.491975][ T9068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.506236][ T9068] netlink: 68 bytes leftover after parsing attributes in process `syz.0.844'. [ 655.523725][ T9068] bridge0: port 3(hsr_slave_1) entered blocking state [ 655.531269][ T9068] bridge0: port 3(hsr_slave_1) entered disabled state [ 655.539678][ T9068] hsr_slave_1: entered allmulticast mode [ 655.546902][ T9068] hsr_slave_1: left allmulticast mode [ 655.989394][ T9076] fuse: Bad value for 'fd' [ 658.729664][ T9091] netlink: 64 bytes leftover after parsing attributes in process `syz.0.850'. [ 660.107074][ T9100] delete_channel: no stack [ 666.583687][ T9149] overlay: ./file0 is not a directory [ 666.929634][ T5280] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 668.036889][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.126058][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.136031][ T5280] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 668.145185][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.183987][ T5280] usb 4-1: config 0 descriptor?? [ 669.100855][ T5280] usbhid 4-1:0.0: can't add hid device: -71 [ 669.107140][ T5280] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 669.116952][ T5280] usb 4-1: USB disconnect, device number 16 [ 669.420794][ T9163] delete_channel: no stack [ 671.160647][ T9191] FAULT_INJECTION: forcing a failure. [ 671.160647][ T9191] name failslab, interval 1, probability 0, space 0, times 0 [ 671.206921][ T9191] CPU: 1 UID: 0 PID: 9191 Comm: syz.1.874 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 671.217483][ T9191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 671.227575][ T9191] Call Trace: [ 671.230875][ T9191] [ 671.233822][ T9191] dump_stack_lvl+0x241/0x360 [ 671.238531][ T9191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.243849][ T9191] ? __pfx__printk+0x10/0x10 [ 671.248562][ T9191] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 671.254222][ T9191] ? __pfx___might_resched+0x10/0x10 [ 671.259541][ T9191] ? kmem_cache_free+0x1a2/0x420 [ 671.264505][ T9191] should_fail_ex+0x3b0/0x4e0 [ 671.269211][ T9191] ? getname_flags+0xb7/0x540 [ 671.273914][ T9191] should_failslab+0xac/0x100 [ 671.278623][ T9191] ? getname_flags+0xb7/0x540 [ 671.283323][ T9191] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 671.288718][ T9191] getname_flags+0xb7/0x540 [ 671.293252][ T9191] user_path_at+0x24/0x60 [ 671.297598][ T9191] __x64_sys_umount+0xf1/0x170 [ 671.302380][ T9191] ? __pfx___x64_sys_umount+0x10/0x10 [ 671.307782][ T9191] ? do_syscall_64+0x100/0x230 [ 671.312571][ T9191] ? do_syscall_64+0xb6/0x230 [ 671.317270][ T9191] do_syscall_64+0xf3/0x230 [ 671.321799][ T9191] ? clear_bhb_loop+0x35/0x90 [ 671.326495][ T9191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.332406][ T9191] RIP: 0033:0x7f355157df39 [ 671.336844][ T9191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.356673][ T9191] RSP: 002b:00007f35522ba038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 671.365127][ T9191] RAX: ffffffffffffffda RBX: 00007f3551736058 RCX: 00007f355157df39 [ 671.373168][ T9191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 671.381202][ T9191] RBP: 00007f35522ba090 R08: 0000000000000000 R09: 0000000000000000 [ 671.389232][ T9191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.397322][ T9191] R13: 0000000000000000 R14: 00007f3551736058 R15: 00007ffc777b9358 [ 671.405410][ T9191] [ 671.445403][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 671.463529][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 673.022534][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 673.022556][ T29] audit: type=1326 audit(1727363636.050:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9197 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733a17df39 code=0x7ffc0000 [ 673.112962][ T29] audit: type=1326 audit(1727363636.050:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9197 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733a17df39 code=0x7ffc0000 [ 673.148586][ T29] audit: type=1326 audit(1727363636.050:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9197 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f733a17df39 code=0x7ffc0000 [ 673.677199][ T29] audit: type=1326 audit(1727363636.050:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9197 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733a17df39 code=0x7ffc0000 [ 674.050381][ T29] audit: type=1326 audit(1727363636.050:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9197 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f733a17df39 code=0x7ffc0000 [ 674.256132][ T29] audit: type=1326 audit(1727363636.050:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9197 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f733a17c8d0 code=0x7ffc0000 [ 674.512319][ T29] audit: type=1326 audit(1727363636.050:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9197 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f733a17f767 code=0x7ffc0000 [ 674.676719][ T29] audit: type=1326 audit(1727363636.050:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9197 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f733a17df39 code=0x7ffc0000 [ 674.759668][ T29] audit: type=1326 audit(1727363636.050:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9197 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f733a17f767 code=0x7ffc0000 [ 674.919142][ T29] audit: type=1326 audit(1727363636.050:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9197 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f733a17cbca code=0x7ffc0000 [ 675.593692][ T9233] fuse: Bad value for 'group_id' [ 675.599486][ T9233] fuse: Bad value for 'group_id' [ 676.752715][ T9236] delete_channel: no stack [ 680.834731][ T9271] fuse: Bad value for 'group_id' [ 680.845023][ T9271] fuse: Bad value for 'group_id' [ 680.966877][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 683.706801][ T9277] delete_channel: no stack [ 685.195201][ T9302] netlink: 'syz.4.908': attribute type 1 has an invalid length. [ 685.226877][ T9302] netlink: 9384 bytes leftover after parsing attributes in process `syz.4.908'. [ 686.383849][ T8558] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 686.393237][ T8558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 686.402286][ T8558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 686.419315][ T8558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 686.440141][ T8558] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 686.447687][ T8558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 686.486429][ T9315] fuse: Bad value for 'group_id' [ 686.491581][ T9315] fuse: Bad value for 'group_id' [ 688.392947][ T9312] chnl_net:caif_netlink_parms(): no params data found [ 688.440288][ T8558] Bluetooth: hci5: command tx timeout [ 689.290958][ T9332] delete_channel: no stack [ 689.512256][ T9312] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.519943][ T9312] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.527524][ T9312] bridge_slave_0: entered allmulticast mode [ 689.537576][ T9312] bridge_slave_0: entered promiscuous mode [ 689.592719][ T9312] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.615658][ T9312] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.630375][ T9312] bridge_slave_1: entered allmulticast mode [ 689.639093][ T9312] bridge_slave_1: entered promiscuous mode [ 689.719275][ T9312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.760009][ T9312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.840335][ T9312] team0: Port device team_slave_0 added [ 689.880804][ T9312] team0: Port device team_slave_1 added [ 689.983206][ T9312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.017787][ T9312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.043823][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.100834][ T9312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.141248][ T9312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.159493][ T9312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.524305][ T8558] Bluetooth: hci5: command tx timeout [ 690.885675][ T9312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.007803][ T9312] hsr_slave_0: entered promiscuous mode [ 691.063353][ T9312] hsr_slave_1: entered promiscuous mode [ 692.159963][ T9312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.388548][ T9312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.477089][ T8558] Bluetooth: hci5: command tx timeout [ 692.666870][ T9312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.768278][ T9312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.930058][ T9367] FAULT_INJECTION: forcing a failure. [ 692.930058][ T9367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.943460][ T9367] CPU: 0 UID: 0 PID: 9367 Comm: syz.4.923 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 692.953818][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 692.963960][ T9367] Call Trace: [ 692.967262][ T9367] [ 692.970243][ T9367] dump_stack_lvl+0x241/0x360 [ 692.975025][ T9367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.980255][ T9367] ? __pfx__printk+0x10/0x10 [ 692.984867][ T9367] ? __pfx_lock_release+0x10/0x10 [ 692.989948][ T9367] should_fail_ex+0x3b0/0x4e0 [ 692.994690][ T9367] _copy_from_user+0x2f/0xe0 [ 692.999323][ T9367] copy_msghdr_from_user+0xae/0x680 [ 693.004638][ T9367] ? __lock_acquire+0x1384/0x2050 [ 693.009836][ T9367] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 693.015682][ T9367] __sys_sendmmsg+0x36d/0x730 [ 693.020384][ T9367] ? __pfx___sys_sendmmsg+0x10/0x10 [ 693.025608][ T9367] ? do_raw_spin_unlock+0x13c/0x8b0 [ 693.030842][ T9367] ? __pfx___schedule+0x10/0x10 [ 693.035696][ T9367] ? irqentry_exit+0x63/0x90 [ 693.040332][ T9367] ? lockdep_hardirqs_on+0x99/0x150 [ 693.045611][ T9367] __x64_sys_sendmmsg+0xa0/0xb0 [ 693.050514][ T9367] do_syscall_64+0xf3/0x230 [ 693.055042][ T9367] ? clear_bhb_loop+0x35/0x90 [ 693.059728][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.065812][ T9367] RIP: 0033:0x7f87bc17df39 [ 693.070520][ T9367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.090331][ T9367] RSP: 002b:00007f87bcfa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 693.098768][ T9367] RAX: ffffffffffffffda RBX: 00007f87bc336058 RCX: 00007f87bc17df39 [ 693.106742][ T9367] RDX: 0000000000000006 RSI: 000000002000a0c0 RDI: 0000000000000006 [ 693.114769][ T9367] RBP: 00007f87bcfa8090 R08: 0000000000000000 R09: 0000000000000000 [ 693.122756][ T9367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.130737][ T9367] R13: 0000000000000000 R14: 00007f87bc336058 R15: 00007ffc638762b8 [ 693.138724][ T9367] [ 693.141832][ C0] vkms_vblank_simulate: vblank timer overrun [ 693.677035][ T9312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 693.718442][ T9312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 693.742195][ T9312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 693.758864][ T9312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 694.008569][ T9312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.140483][ T9312] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.311544][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.318825][ T6805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.470327][ T8558] Bluetooth: hci5: command tx timeout [ 694.653150][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.660564][ T6805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.821743][ T9312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 696.065058][ T9312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.759510][ T9312] veth0_vlan: entered promiscuous mode [ 696.773631][ T9312] veth1_vlan: entered promiscuous mode [ 696.801142][ T9312] veth0_macvtap: entered promiscuous mode [ 696.810812][ T9312] veth1_macvtap: entered promiscuous mode [ 696.826419][ T9312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.837013][ T9312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.846942][ T9312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.857747][ T9312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.868429][ T9312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.879287][ T9312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.889688][ T9312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.901242][ T9312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.912036][ T9312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.922893][ T9312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.934474][ T9312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 696.974693][ T9312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.992044][ T9312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.202215][ T9312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.213849][ T9312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.353934][ T9312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.559961][ T9312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.805730][ T8348] Bluetooth: hci0: command 0x0406 tx timeout [ 697.811956][ T8560] Bluetooth: hci2: command 0x0406 tx timeout [ 697.819825][ T9312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.907086][ T9312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.946305][ T8560] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 697.961598][ T8560] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 697.973618][ T8560] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 697.981709][ T8560] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 697.993979][ T8560] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 698.001655][ T8560] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 698.021305][ T9312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.067625][ T9312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.115496][ T9312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.259032][ T9312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.297592][ T9312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.331261][ T9312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.385115][ T9312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.562648][ T9399] FAULT_INJECTION: forcing a failure. [ 698.562648][ T9399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.650113][ T9399] CPU: 0 UID: 0 PID: 9399 Comm: syz.4.931 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 698.660409][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 698.670468][ T9399] Call Trace: [ 698.673763][ T9399] [ 698.676707][ T9399] dump_stack_lvl+0x241/0x360 [ 698.681402][ T9399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.686617][ T9399] ? __pfx__printk+0x10/0x10 [ 698.691221][ T9399] ? __pfx_lock_release+0x10/0x10 [ 698.696259][ T9399] should_fail_ex+0x3b0/0x4e0 [ 698.700962][ T9399] _copy_from_user+0x2f/0xe0 [ 698.705553][ T9399] copy_msghdr_from_user+0xae/0x680 [ 698.710754][ T9399] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 698.716565][ T9399] __sys_sendmsg+0x22d/0x380 [ 698.721158][ T9399] ? __pfx___sys_sendmsg+0x10/0x10 [ 698.726276][ T9399] ? __pfx_vfs_write+0x10/0x10 [ 698.731065][ T9399] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 698.737411][ T9399] ? do_syscall_64+0x100/0x230 [ 698.742177][ T9399] ? do_syscall_64+0xb6/0x230 [ 698.746860][ T9399] do_syscall_64+0xf3/0x230 [ 698.751373][ T9399] ? clear_bhb_loop+0x35/0x90 [ 698.756062][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.761976][ T9399] RIP: 0033:0x7f87bc17df39 [ 698.766535][ T9399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.786224][ T9399] RSP: 002b:00007f87bcfc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.794635][ T9399] RAX: ffffffffffffffda RBX: 00007f87bc335f80 RCX: 00007f87bc17df39 [ 698.802600][ T9399] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 698.810668][ T9399] RBP: 00007f87bcfc9090 R08: 0000000000000000 R09: 0000000000000000 [ 698.818649][ T9399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.826614][ T9399] R13: 0000000000000000 R14: 00007f87bc335f80 R15: 00007ffc638762b8 [ 698.834604][ T9399] [ 698.917038][ T8559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 698.954257][ T8558] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 698.972800][ T8558] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 698.982239][ T8558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 698.996769][ T8558] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 699.008703][ T8558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 699.263992][ T5603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.311882][ T5603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.368548][ T6805] bridge_slave_1: left allmulticast mode [ 699.379505][ T6805] bridge_slave_1: left promiscuous mode [ 699.421412][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.451063][ T6805] bridge_slave_0: left allmulticast mode [ 699.456756][ T6805] bridge_slave_0: left promiscuous mode [ 700.382374][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 700.382397][ T29] audit: type=1326 audit(1727363664.741:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bc17df39 code=0x7ffc0000 [ 700.382548][ T8558] Bluetooth: hci3: command tx timeout [ 700.388573][ T29] audit: type=1326 audit(1727363664.741:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bc17df39 code=0x7ffc0000 [ 700.388613][ T29] audit: type=1326 audit(1727363664.741:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f87bc17df39 code=0x7ffc0000 [ 700.460520][ T29] audit: type=1326 audit(1727363664.751:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bc17df39 code=0x7ffc0000 [ 700.482254][ T29] audit: type=1326 audit(1727363664.751:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87bc17df39 code=0x7ffc0000 [ 700.504237][ T29] audit: type=1326 audit(1727363664.751:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87bc17fe57 code=0x7ffc0000 [ 700.525872][ T29] audit: type=1326 audit(1727363664.751:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f87bc17fdcc code=0x7ffc0000 [ 700.547469][ T29] audit: type=1326 audit(1727363664.751:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f87bc17fd04 code=0x7ffc0000 [ 700.569023][ T29] audit: type=1326 audit(1727363664.751:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f87bc17fd04 code=0x7ffc0000 [ 700.601857][ T29] audit: type=1326 audit(1727363664.751:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9407 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f87bc17cbca code=0x7ffc0000 [ 700.625556][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.783197][ T1166] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 701.382158][ T8558] Bluetooth: hci4: command tx timeout [ 701.401945][ T1166] usb 3-1: config 0 has no interfaces? [ 701.419379][ T1166] usb 3-1: language id specifier not provided by device, defaulting to English [ 701.440542][ T1166] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 701.449753][ T1166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.457943][ T1166] usb 3-1: Product: syz [ 701.462631][ T1166] usb 3-1: Manufacturer: 靰ﻥ傖ᅅ㞴岼먊ߧᚨ筨鴴㝮렃舊陌睬ٶ寥淴駖켧ἲ㯩譅㯂֫凑ᶜ鎣䟒ᣇ邛྽ⰨꢅŦꂙ섾倞ࡢᅗ힋䒺⿰挱 [ 701.483684][ T1166] usb 3-1: SerialNumber: syz [ 701.494325][ T1166] usb 3-1: config 0 descriptor?? [ 702.126562][ T6805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.148306][ T6805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.168692][ T6805] bond0 (unregistering): Released all slaves [ 702.383831][ T8558] Bluetooth: hci3: command tx timeout [ 702.437073][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.449905][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.657119][ T9394] chnl_net:caif_netlink_parms(): no params data found [ 703.624757][ T8558] Bluetooth: hci4: command tx timeout [ 703.680834][ T8378] usb 3-1: USB disconnect, device number 19 [ 703.706743][ T6805] hsr_slave_0: left promiscuous mode [ 703.792069][ T6805] hsr_slave_1: left promiscuous mode [ 703.810262][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.823440][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.843005][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.850481][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.621378][ T8558] Bluetooth: hci3: command tx timeout [ 704.785971][ T6805] veth1_macvtap: left promiscuous mode [ 704.792465][ T6805] veth0_macvtap: left promiscuous mode [ 704.800162][ T6805] veth1_vlan: left promiscuous mode [ 704.805912][ T6805] veth0_vlan: left promiscuous mode [ 705.170221][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'. [ 705.613123][ T8558] Bluetooth: hci4: command tx timeout [ 706.566796][ T8558] Bluetooth: hci3: command tx timeout [ 707.670964][ T8558] Bluetooth: hci4: command tx timeout [ 707.900436][ T6805] team0 (unregistering): Port device team_slave_1 removed [ 708.159468][ T6805] team0 (unregistering): Port device team_slave_0 removed [ 730.189462][ T5603] sched: DL replenish lagged too much [ 730.191061][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 730.203827][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 736.326765][ T9394] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.361239][ T9394] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.412999][ T9394] bridge_slave_0: entered allmulticast mode [ 736.472839][ T9394] bridge_slave_0: entered promiscuous mode [ 736.581931][ T9394] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.589451][ T9394] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.633885][ T9394] bridge_slave_1: entered allmulticast mode [ 737.076588][ T9394] bridge_slave_1: entered promiscuous mode [ 741.015050][ T8348] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 741.059147][ T8348] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 741.165979][ T8348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 741.267587][ T8348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 741.394773][ T8348] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 741.436596][ T8348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 745.863060][ T8558] Bluetooth: hci1: command tx timeout [ 748.269168][ T8348] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 748.334795][ T8348] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 748.395666][ T8348] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 748.449776][ T8348] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 748.735684][ T8348] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 748.786212][ T8348] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 748.936190][ T8348] Bluetooth: hci1: command tx timeout [ 749.692075][ T8348] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 749.714706][ T8348] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 749.734186][ T8348] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 749.738720][ T9394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.918271][ T9394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.049564][ T8348] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 750.221783][ T8348] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 750.248128][ T8348] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 750.917194][ T8348] Bluetooth: hci1: command tx timeout [ 750.918410][ T8558] Bluetooth: hci6: command tx timeout [ 751.002828][ T9394] team0: Port device team_slave_0 added [ 751.184684][ T9394] team0: Port device team_slave_1 added [ 751.236498][ T9400] chnl_net:caif_netlink_parms(): no params data found [ 752.289959][ T8558] Bluetooth: hci7: command tx timeout [ 752.830438][ T6805] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.898473][ T8558] Bluetooth: hci6: command tx timeout [ 752.907982][ T8558] Bluetooth: hci1: command tx timeout [ 753.082818][ T9394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.127636][ T9394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.170618][ T9394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.050018][ T6805] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.265179][ T9394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.278258][ T8558] Bluetooth: hci7: command tx timeout [ 754.301780][ T9394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.455280][ T9394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.879820][ T8558] Bluetooth: hci6: command tx timeout [ 755.048324][ T6805] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.251660][ T8558] Bluetooth: hci7: command tx timeout [ 756.478476][ T6805] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.861257][ T8558] Bluetooth: hci6: command tx timeout [ 758.232795][ T8558] Bluetooth: hci7: command tx timeout [ 763.056887][ T8348] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 763.072948][ T8348] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 763.109857][ T8348] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 763.194260][ T8348] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 763.248954][ T8348] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 763.271788][ T8560] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 763.323464][ T8348] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 763.344012][ T8348] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 763.372843][ T8348] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 763.457700][ T8348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 763.516732][ T8348] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 763.539838][ T8348] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 764.743202][ T6805] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.244493][ T8559] Bluetooth: hci0: command tx timeout [ 765.295819][ T6805] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.625892][ T8559] Bluetooth: hci3: command tx timeout [ 766.001665][ T6805] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.230440][ T9485] chnl_net:caif_netlink_parms(): no params data found [ 766.467179][ T6805] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.226022][ T8559] Bluetooth: hci0: command tx timeout [ 767.566091][ T9481] chnl_net:caif_netlink_parms(): no params data found [ 767.606188][ T8559] Bluetooth: hci3: command tx timeout [ 769.206449][ T8559] Bluetooth: hci0: command tx timeout [ 769.587568][ T8559] Bluetooth: hci3: command tx timeout [ 769.927228][ T9487] chnl_net:caif_netlink_parms(): no params data found [ 770.588973][ T9485] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.615890][ T9485] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.648402][ T9485] bridge_slave_0: entered allmulticast mode [ 770.699823][ T9485] bridge_slave_0: entered promiscuous mode [ 771.187756][ T8559] Bluetooth: hci0: command tx timeout [ 771.339617][ T9485] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.347627][ T9485] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.356620][ T9485] bridge_slave_1: entered allmulticast mode [ 771.372183][ T9485] bridge_slave_1: entered promiscuous mode [ 771.568809][ T8559] Bluetooth: hci3: command tx timeout [ 772.155254][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.165819][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.175960][ T9481] bridge_slave_0: entered allmulticast mode [ 772.191960][ T9481] bridge_slave_0: entered promiscuous mode [ 772.813560][ T6805] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.923142][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.931036][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.940087][ T9481] bridge_slave_1: entered allmulticast mode [ 773.038053][ T9481] bridge_slave_1: entered promiscuous mode [ 773.067676][ T9485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.102747][ T9485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.302506][ T6805] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.595875][ T9487] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.673014][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.718328][ T9487] bridge_slave_0: entered allmulticast mode [ 773.734271][ T9487] bridge_slave_0: entered promiscuous mode [ 773.870373][ T6805] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.164224][ T9487] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.181290][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.190396][ T9487] bridge_slave_1: entered allmulticast mode [ 774.209756][ T9487] bridge_slave_1: entered promiscuous mode [ 774.398736][ T9481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.455816][ T6805] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.836357][ T9485] team0: Port device team_slave_0 added [ 774.863022][ T9485] team0: Port device team_slave_1 added [ 775.427245][ T9481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.120856][ T9487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.611659][ T9485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.621415][ T9485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.654818][ T9485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.745609][ T9487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.804563][ T9481] team0: Port device team_slave_0 added [ 776.853194][ T9481] team0: Port device team_slave_1 added [ 777.231791][ T9485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.239821][ T9485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.267001][ T9485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.904765][ T9487] team0: Port device team_slave_0 added [ 777.935350][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.991887][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.272189][ T9481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.341907][ T9498] chnl_net:caif_netlink_parms(): no params data found [ 778.467668][ T9487] team0: Port device team_slave_1 added [ 778.623020][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.642278][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.669255][ T9481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.823594][ T9485] hsr_slave_0: entered promiscuous mode [ 779.842849][ T9485] hsr_slave_1: entered promiscuous mode [ 779.855493][ T9485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 779.865364][ T9485] Cannot create hsr debugfs directory [ 779.880665][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.888176][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.914929][ T9487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.978363][ T9496] chnl_net:caif_netlink_parms(): no params data found [ 780.161855][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.168961][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.195943][ T9487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.982224][ T6805] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.480849][ T6805] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.852414][ T9481] hsr_slave_0: entered promiscuous mode [ 781.869305][ T9481] hsr_slave_1: entered promiscuous mode [ 781.880489][ T9481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.888969][ T9481] Cannot create hsr debugfs directory [ 782.175462][ T6805] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.810770][ T6805] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.268493][ T9498] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.339049][ T9498] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.409669][ T9498] bridge_slave_0: entered allmulticast mode [ 783.451967][ T9498] bridge_slave_0: entered promiscuous mode [ 783.988003][ T9498] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.996642][ T9498] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.005844][ T9498] bridge_slave_1: entered allmulticast mode [ 784.020091][ T9498] bridge_slave_1: entered promiscuous mode [ 784.114376][ T9487] hsr_slave_0: entered promiscuous mode [ 784.130105][ T9487] hsr_slave_1: entered promiscuous mode [ 784.140957][ T9487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 784.148776][ T9487] Cannot create hsr debugfs directory [ 785.576047][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.609548][ T9496] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.618444][ T9496] bridge_slave_0: entered allmulticast mode [ 785.633565][ T9496] bridge_slave_0: entered promiscuous mode [ 785.741204][ T9498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.896681][ T9496] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.905403][ T9496] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.920347][ T9496] bridge_slave_1: entered allmulticast mode [ 785.938258][ T9496] bridge_slave_1: entered promiscuous mode [ 786.167093][ T9498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.420796][ T9498] team0: Port device team_slave_0 added [ 787.902612][ T9496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.925294][ T9496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.937978][ T9498] team0: Port device team_slave_1 added [ 788.047759][ T9496] team0: Port device team_slave_0 added [ 788.056891][ T9496] team0: Port device team_slave_1 added [ 788.067232][ T9498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.074200][ T9498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.102051][ T9498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.160231][ T9485] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.184837][ T6805] bridge_slave_1: left allmulticast mode [ 788.192237][ T6805] bridge_slave_1: left promiscuous mode [ 788.197985][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.206937][ T6805] bridge_slave_0: left allmulticast mode [ 788.213182][ T6805] bridge_slave_0: left promiscuous mode [ 788.218854][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.239686][ T6805] bridge_slave_1: left allmulticast mode [ 788.245366][ T6805] bridge_slave_1: left promiscuous mode [ 788.251234][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.260220][ T6805] bridge_slave_0: left allmulticast mode [ 788.265892][ T6805] bridge_slave_0: left promiscuous mode [ 788.272079][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.283915][ T6805] bridge_slave_1: left allmulticast mode [ 788.290565][ T6805] bridge_slave_1: left promiscuous mode [ 788.298285][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.307834][ T6805] bridge_slave_0: left allmulticast mode [ 788.313501][ T6805] bridge_slave_0: left promiscuous mode [ 788.320329][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.330247][ T6805] bridge_slave_1: left allmulticast mode [ 788.336160][ T6805] bridge_slave_1: left promiscuous mode [ 788.341927][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.350616][ T6805] bridge_slave_0: left allmulticast mode [ 788.356550][ T6805] bridge_slave_0: left promiscuous mode [ 788.362313][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.487792][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 788.494146][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 789.613601][ T6805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.629327][ T6805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.640898][ T6805] bond0 (unregistering): Released all slaves [ 789.770911][ T6805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.783248][ T6805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.803915][ T6805] bond0 (unregistering): Released all slaves [ 790.055138][ T6805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.063417][ T8348] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 790.073862][ T8348] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 790.082143][ T8348] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 790.089678][ T6805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.099499][ T8348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 790.107417][ T8348] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 790.114812][ T8348] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 790.123720][ T6805] bond0 (unregistering): Released all slaves [ 790.260070][ T6805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.270967][ T6805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.282042][ T6805] bond0 (unregistering): Released all slaves [ 790.303947][ T9498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.311135][ T9498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.339785][ T9498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.437622][ T9485] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.563504][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.570484][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.623561][ T9496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.788774][ T9485] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.806144][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.813351][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.842824][ T9496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.934049][ T9485] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.027432][ T9498] hsr_slave_0: entered promiscuous mode [ 791.034234][ T9498] hsr_slave_1: entered promiscuous mode [ 791.040567][ T9498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 791.048134][ T9498] Cannot create hsr debugfs directory [ 791.105075][ T9496] hsr_slave_0: entered promiscuous mode [ 791.113729][ T9496] hsr_slave_1: entered promiscuous mode [ 791.124401][ T9496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 791.132033][ T9496] Cannot create hsr debugfs directory [ 791.711798][ T8559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 791.721327][ T8559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 791.731935][ T9529] chnl_net:caif_netlink_parms(): no params data found [ 791.746629][ T8559] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 791.767495][ T8559] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 791.785760][ T8559] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 791.800092][ T8559] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 792.064216][ T9485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 792.067899][ T8559] Bluetooth: hci2: command tx timeout [ 792.128631][ T9485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 792.145123][ T9485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 792.159203][ T9529] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.172413][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.179701][ T9529] bridge_slave_0: entered allmulticast mode [ 792.187205][ T9529] bridge_slave_0: entered promiscuous mode [ 792.198728][ T9529] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.206119][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.213467][ T9529] bridge_slave_1: entered allmulticast mode [ 792.220710][ T9529] bridge_slave_1: entered promiscuous mode [ 792.227574][ T9485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 792.266670][ T6805] hsr_slave_0: left promiscuous mode [ 792.287640][ T6805] hsr_slave_1: left promiscuous mode [ 792.293663][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.302124][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.311598][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.319117][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.330920][ T6805] hsr_slave_0: left promiscuous mode [ 792.341676][ T6805] hsr_slave_1: left promiscuous mode [ 792.347769][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.355309][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.363907][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.371355][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.383990][ T6805] hsr_slave_0: left promiscuous mode [ 792.390575][ T6805] hsr_slave_1: left promiscuous mode [ 792.396855][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.404476][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.412806][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.420344][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.436555][ T6805] hsr_slave_0: left promiscuous mode [ 792.442506][ T6805] hsr_slave_1: left promiscuous mode [ 792.448417][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.456196][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.467385][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.475008][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.533128][ T6805] veth1_macvtap: left promiscuous mode [ 792.538886][ T6805] veth0_macvtap: left promiscuous mode [ 792.544555][ T6805] veth1_vlan: left promiscuous mode [ 792.549910][ T6805] veth0_vlan: left promiscuous mode [ 792.564133][ T6805] veth1_macvtap: left promiscuous mode [ 792.569677][ T6805] veth0_macvtap: left promiscuous mode [ 792.575296][ T6805] veth1_vlan: left promiscuous mode [ 792.581118][ T6805] veth0_vlan: left promiscuous mode [ 792.587610][ T6805] veth1_macvtap: left promiscuous mode [ 792.593337][ T6805] veth0_macvtap: left promiscuous mode [ 792.598959][ T6805] veth1_vlan: left promiscuous mode [ 792.604449][ T6805] veth0_vlan: left promiscuous mode [ 792.620339][ T6805] veth1_macvtap: left promiscuous mode [ 792.625986][ T6805] veth0_macvtap: left promiscuous mode [ 792.631847][ T6805] veth1_vlan: left promiscuous mode [ 792.637167][ T6805] veth0_vlan: left promiscuous mode [ 793.480263][ T6805] team0 (unregistering): Port device team_slave_1 removed [ 793.590708][ T8348] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 793.601648][ T6805] team0 (unregistering): Port device team_slave_0 removed [ 793.611104][ T8348] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 793.630539][ T8348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 793.638479][ T8348] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 793.654242][ T8348] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 793.669106][ T8348] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 793.745805][ T8559] Bluetooth: hci1: command tx timeout [ 794.053520][ T8559] Bluetooth: hci2: command tx timeout [ 794.555691][ T6805] team0 (unregistering): Port device team_slave_1 removed [ 794.603291][ T6805] team0 (unregistering): Port device team_slave_0 removed [ 795.486193][ T6805] team0 (unregistering): Port device team_slave_1 removed [ 795.542856][ T6805] team0 (unregistering): Port device team_slave_0 removed [ 795.659164][ T8559] Bluetooth: hci4: command tx timeout [ 795.734849][ T8559] Bluetooth: hci1: command tx timeout [ 796.031627][ T8559] Bluetooth: hci2: command tx timeout [ 796.636281][ T6805] team0 (unregistering): Port device team_slave_1 removed [ 796.693283][ T6805] team0 (unregistering): Port device team_slave_0 removed [ 797.255160][ T9529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.273417][ T9529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.427432][ T9529] team0: Port device team_slave_0 added [ 797.460654][ T9529] team0: Port device team_slave_1 added [ 797.582939][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.589949][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.616334][ T9529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.663659][ T8559] Bluetooth: hci4: command tx timeout [ 797.707462][ T8559] Bluetooth: hci1: command tx timeout [ 797.731420][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.738602][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.765818][ T9529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.870420][ T9535] chnl_net:caif_netlink_parms(): no params data found [ 797.955213][ T9529] hsr_slave_0: entered promiscuous mode [ 797.961620][ T9529] hsr_slave_1: entered promiscuous mode [ 798.022234][ T8559] Bluetooth: hci2: command tx timeout [ 798.086755][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.107300][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.114560][ T9535] bridge_slave_0: entered allmulticast mode [ 798.122659][ T9535] bridge_slave_0: entered promiscuous mode [ 798.134572][ T9541] chnl_net:caif_netlink_parms(): no params data found [ 798.153795][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.161252][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.176446][ T9535] bridge_slave_1: entered allmulticast mode [ 798.193853][ T9535] bridge_slave_1: entered promiscuous mode [ 798.434658][ T9535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.471695][ T9535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.643643][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.668994][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.676319][ T9541] bridge_slave_0: entered allmulticast mode [ 798.698424][ T9541] bridge_slave_0: entered promiscuous mode [ 798.711562][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.718836][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.726861][ T9541] bridge_slave_1: entered allmulticast mode [ 798.734144][ T9541] bridge_slave_1: entered promiscuous mode [ 798.753641][ T9535] team0: Port device team_slave_0 added [ 798.853021][ T9535] team0: Port device team_slave_1 added [ 798.881359][ T9541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.935737][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.942722][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.983139][ T9535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.002496][ T9496] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 799.018601][ T9541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.038883][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.046008][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.072165][ T9535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.083830][ T9496] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 799.122963][ T9541] team0: Port device team_slave_0 added [ 799.133745][ T9496] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 799.153962][ T9541] team0: Port device team_slave_1 added [ 799.187068][ T9496] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 799.219387][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.227201][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.253593][ T9541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.267232][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.274425][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.300477][ T9541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.399957][ T9498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 799.415403][ T9535] hsr_slave_0: entered promiscuous mode [ 799.426702][ T9535] hsr_slave_1: entered promiscuous mode [ 799.433975][ T9535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 799.441771][ T9535] Cannot create hsr debugfs directory [ 799.455345][ T9541] hsr_slave_0: entered promiscuous mode [ 799.478275][ T9541] hsr_slave_1: entered promiscuous mode [ 799.488913][ T9541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 799.496498][ T9541] Cannot create hsr debugfs directory [ 799.506667][ T9498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 799.522449][ T9498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 799.587431][ T9498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 799.612978][ T8559] Bluetooth: hci4: command tx timeout [ 799.688609][ T8559] Bluetooth: hci1: command tx timeout [ 800.021075][ T9529] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 800.030902][ T9529] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 800.081787][ T9496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.096770][ T9529] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 800.106298][ T9529] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 800.184480][ T9496] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.191536][ T9535] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 800.203201][ T9535] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 800.228891][ T9498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.241381][ T9535] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 800.255574][ T9535] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 800.285141][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.292262][ T5603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.309971][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.317163][ T5603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.418070][ T9498] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.446659][ T6805] bridge_slave_1: left allmulticast mode [ 800.455817][ T6805] bridge_slave_1: left promiscuous mode [ 800.463667][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.472934][ T6805] bridge_slave_0: left allmulticast mode [ 800.478600][ T6805] bridge_slave_0: left promiscuous mode [ 800.486677][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.503679][ T6805] bridge_slave_1: left allmulticast mode [ 800.510851][ T6805] bridge_slave_1: left promiscuous mode [ 800.516540][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.525446][ T6805] bridge_slave_0: left allmulticast mode [ 800.531868][ T6805] bridge_slave_0: left promiscuous mode [ 800.538650][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.550203][ T6805] bridge_slave_1: left allmulticast mode [ 800.556117][ T6805] bridge_slave_1: left promiscuous mode [ 800.561821][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.570770][ T6805] bridge_slave_0: left allmulticast mode [ 800.576534][ T6805] bridge_slave_0: left promiscuous mode [ 800.582204][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.592222][ T6805] bridge_slave_1: left allmulticast mode [ 800.599009][ T6805] bridge_slave_1: left promiscuous mode [ 800.605314][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.618279][ T6805] bridge_slave_0: left allmulticast mode [ 800.625528][ T6805] bridge_slave_0: left promiscuous mode [ 800.631927][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.645599][ T6805] bridge_slave_1: left allmulticast mode [ 800.652342][ T6805] bridge_slave_1: left promiscuous mode [ 800.658004][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.666787][ T6805] bridge_slave_0: left allmulticast mode [ 800.672530][ T6805] bridge_slave_0: left promiscuous mode [ 800.679968][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.435308][ T6805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.447355][ T6805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.458435][ T6805] bond0 (unregistering): Released all slaves [ 801.479081][ T6805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.499814][ T6805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.510890][ T6805] bond0 (unregistering): Released all slaves [ 801.525162][ T6805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.544291][ T6805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.556286][ T6805] bond0 (unregistering): Released all slaves [ 801.593531][ T8559] Bluetooth: hci4: command tx timeout [ 801.707222][ T6805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.727719][ T6805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.739112][ T6805] bond0 (unregistering): Released all slaves [ 801.752754][ T6805] bond0 (unregistering): Released all slaves [ 801.764195][ T6805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.785653][ T6805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.796557][ T6805] bond0 (unregistering): Released all slaves [ 801.896173][ T9502] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.903468][ T9502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.924187][ T9502] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.931397][ T9502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.430082][ T9535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.457724][ T6805] hsr_slave_0: left promiscuous mode [ 802.467557][ T6805] hsr_slave_1: left promiscuous mode [ 802.478392][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.486636][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.498942][ T6805] hsr_slave_0: left promiscuous mode [ 802.505135][ T6805] hsr_slave_1: left promiscuous mode [ 802.516903][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.527954][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.539502][ T6805] hsr_slave_0: left promiscuous mode [ 802.545367][ T6805] hsr_slave_1: left promiscuous mode [ 802.551640][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.562443][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.573297][ T6805] hsr_slave_0: left promiscuous mode [ 802.579345][ T6805] hsr_slave_1: left promiscuous mode [ 802.586255][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.594427][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.602521][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.610107][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.623217][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.631061][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.661885][ T6805] veth1_macvtap: left promiscuous mode [ 802.667479][ T6805] veth0_macvtap: left promiscuous mode [ 802.673460][ T6805] veth1_vlan: left promiscuous mode [ 802.678801][ T6805] veth0_vlan: left promiscuous mode [ 802.938376][ T6805] team0 (unregistering): Port device team_slave_1 removed [ 802.975268][ T6805] team0 (unregistering): Port device team_slave_0 removed [ 803.273208][ T6805] team0 (unregistering): Port device team_slave_1 removed [ 803.309185][ T6805] team0 (unregistering): Port device team_slave_0 removed [ 803.641005][ T6805] team0 (unregistering): Port device team_slave_1 removed [ 803.679019][ T6805] team0 (unregistering): Port device team_slave_0 removed [ 804.250358][ T6805] team0 (unregistering): Port device team_slave_1 removed [ 804.306488][ T6805] team0 (unregistering): Port device team_slave_0 removed [ 804.895957][ T6805] team0 (unregistering): Port device team_slave_1 removed [ 804.926729][ T6805] team0 (unregistering): Port device team_slave_0 removed [ 805.104268][ T9541] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 805.149732][ T9541] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 805.179361][ T9541] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 805.210408][ T9535] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.238552][ T9541] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 805.273742][ T9496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.296095][ T9529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.342668][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.349899][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.407578][ T9498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.453887][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.461122][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.491165][ T9529] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.554786][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.562076][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.601410][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.608579][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.629865][ T9496] veth0_vlan: entered promiscuous mode [ 805.691524][ T9496] veth1_vlan: entered promiscuous mode [ 805.753909][ T9498] veth0_vlan: entered promiscuous mode [ 805.788950][ T9535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 805.827945][ T9498] veth1_vlan: entered promiscuous mode [ 805.897120][ T9496] veth0_macvtap: entered promiscuous mode [ 805.958405][ T9496] veth1_macvtap: entered promiscuous mode [ 805.998536][ T9498] veth0_macvtap: entered promiscuous mode [ 806.036737][ T9541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.067389][ T9498] veth1_macvtap: entered promiscuous mode [ 806.136525][ T9498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.178744][ T9541] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.227110][ T9498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.244504][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.263669][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.298034][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.326459][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.333777][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.354854][ T9502] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.362022][ T9502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.392648][ T9535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.421953][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.432747][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.445602][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.465303][ T9498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.475745][ T9498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.484509][ T9498] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.494247][ T9498] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.566254][ T9496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.575100][ T9496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.588742][ T9496] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.597709][ T9496] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.666989][ T9529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.897898][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.918920][ T9529] veth0_vlan: entered promiscuous mode [ 806.937295][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.962748][ T9535] veth0_vlan: entered promiscuous mode [ 806.988442][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.000317][ T9529] veth1_vlan: entered promiscuous mode [ 807.004884][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.025793][ T9535] veth1_vlan: entered promiscuous mode [ 807.061955][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.070375][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.110491][ T9541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.137938][ T5603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.145812][ T5603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.186822][ T9529] veth0_macvtap: entered promiscuous mode [ 807.228764][ T9529] veth1_macvtap: entered promiscuous mode [ 807.279181][ T9535] veth0_macvtap: entered promiscuous mode [ 807.294570][ T9535] veth1_macvtap: entered promiscuous mode [ 807.381017][ T9535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.411570][ T9535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.464926][ T9535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.498041][ T9535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.536688][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.590976][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.610620][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.622828][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.337508][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.358080][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.623278][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.640328][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.386283][ T9535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.637532][ T9535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.687690][ T9535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.714128][ T9535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.739129][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.761939][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.773694][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.785951][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.799372][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.809445][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.822214][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.835684][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.847409][ T9529] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.856254][ T9529] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.865276][ T9529] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.874110][ T9529] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.051461][ T9535] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.089754][ T9535] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.124309][ T9535] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.161270][ T9535] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.700528][ T9541] veth0_vlan: entered promiscuous mode [ 810.754044][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.763760][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.785541][ T9541] veth1_vlan: entered promiscuous mode [ 810.891082][ T6805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.898986][ T6805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.377362][ T5603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.385269][ T5603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.436539][ T9541] veth0_macvtap: entered promiscuous mode [ 811.449785][ T5603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.453983][ T9541] veth1_macvtap: entered promiscuous mode [ 811.501748][ T5603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.522717][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.538773][ T9608] hpfs: bad mount options. [ 811.545779][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.563623][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.574259][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.593841][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.786457][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.797204][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.808485][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.796916][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.825101][ T9609] delete_channel: no stack [ 813.224775][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.270288][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.309855][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.362970][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.605264][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.616510][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.627099][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.637916][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.651928][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.667606][ T9541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.704581][ T9541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.729061][ T9541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.759992][ T9541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.883055][ T9628] overlay: ./file0 is not a directory [ 816.284266][ T9619] delete_channel: no stack [ 816.696145][ T6801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.720134][ T6801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.854261][ T5603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.868946][ T5603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.538852][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 818.674575][ T9659] fuse: Unknown parameter 'group_id00000000000000000000' [ 823.438449][ T9680] delete_channel: no stack [ 823.510726][ T9672] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 55450 - 0 [ 823.599524][ T9672] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 55450 - 0 [ 823.609152][ T9672] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 55450 - 0 [ 823.624599][ T9672] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 55450 - 0 [ 824.054201][ T9672] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 42233 - 0 [ 824.306477][ T9672] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 42233 - 0 [ 824.323806][ T9672] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 42233 - 0 [ 824.332761][ T9672] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 42233 - 0 [ 824.362467][ T9701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.371708][ T9701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.414877][ T9701] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 825.121982][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.980'. [ 828.304010][ T8559] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 828.313105][ T8559] Bluetooth: hci3: Injecting HCI hardware error event [ 828.323862][ T8348] Bluetooth: hci3: hardware error 0x00 [ 828.663737][ T9734] delete_channel: no stack [ 829.807823][ T8378] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 830.459359][ T9762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 830.504937][ T8378] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 830.563829][ T8378] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 830.564054][ T8378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 830.564134][ T8378] usb 4-1: Product: syz [ 830.564205][ T8378] usb 4-1: Manufacturer: syz [ 830.564251][ T8378] usb 4-1: SerialNumber: syz [ 830.585735][ T8378] usb 4-1: config 0 descriptor?? [ 830.723857][ T8348] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 830.832900][ T9743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.894090][ T9743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.895640][ T9743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.907912][ T9743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.966417][ T5310] usb 4-1: USB disconnect, device number 17 [ 831.176218][ T9755] tty tty23: ldisc open failed (-12), clearing slot 22 [ 835.331106][ T9789] delete_channel: no stack [ 835.438496][ T5278] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 835.641813][ T5278] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 835.712283][ T9798] overlay: ./file0 is not a directory [ 835.723501][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 835.786286][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 835.805510][ T5278] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 836.793613][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 836.802662][ T5278] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 836.812311][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.826474][ T5278] usb 2-1: config 0 descriptor?? [ 836.832538][ T9794] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 838.666434][ T9817] delete_channel: no stack [ 839.686967][ T36] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000084: 0000 [#1] PREEMPT SMP KASAN PTI [ 839.699637][ T36] KASAN: null-ptr-deref in range [0x0000000000000420-0x0000000000000427] [ 839.708077][ T36] CPU: 0 UID: 0 PID: 36 Comm: ksmd Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 839.717749][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 839.727831][ T36] RIP: 0010:ksm_do_scan+0x823/0x6de0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 839.733188][ T36] Code: ff ff ff ff e8 2e f3 b6 09 48 89 c3 48 85 c0 4c 89 74 24 48 0f 84 ac 0b 00 00 48 89 5c 24 18 48 83 c3 20 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 9e 6b 01 00 48 8b 1b be 00 00 00 [ 839.752825][ T36] RSP: 0018:ffffc90000ac7a80 EFLAGS: 00010207 [ 839.758935][ T36] RAX: 0000000000000084 RBX: 0000000000000426 RCX: ffff8880206fbc00 [ 839.766957][ T36] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 839.774963][ T36] RBP: ffffc90000ac7d90 R08: ffffffff8bb09d21 R09: ffffffff8bb09ba7 [ 839.782969][ T36] R10: 0000000000000004 R11: ffff8880206fbc00 R12: ffffc90000ac7ce0 [ 839.790985][ T36] R13: ffffc90000ac7c70 R14: ffff8880325ed644 R15: dffffc0000000000 [ 839.798984][ T36] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 839.807942][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 839.814556][ T36] CR2: 00007fc569b51780 CR3: 0000000021f9c000 CR4: 00000000003506f0 [ 839.822577][ T36] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 839.830584][ T36] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 839.838600][ T36] Call Trace: [ 839.841911][ T36] [ 839.844867][ T36] ? __die_body+0x5f/0xb0 [ 839.849241][ T36] ? die_addr+0xb0/0xe0 [ 839.853443][ T36] ? exc_general_protection+0x3dd/0x5d0 [ 839.859050][ T36] ? asm_exc_general_protection+0x26/0x30 [ 839.864809][ T36] ? mas_next_slot+0x987/0xea0 [ 839.869602][ T36] ? mas_next_slot+0xb01/0xea0 [ 839.874406][ T36] ? ksm_do_scan+0x823/0x6de0 [ 839.879126][ T36] ? __mutex_trylock_common+0x183/0x2e0 [ 839.884703][ T36] ? __pfx_ksm_do_scan+0x10/0x10 [ 839.889668][ T36] ? __pfx___mutex_trylock_common+0x10/0x10 [ 839.895599][ T36] ? rcu_is_watching+0x15/0xb0 [ 839.900405][ T36] ? trace_contention_end+0x3c/0x120 [ 839.905726][ T36] ? __mutex_lock+0x2ef/0xd70 [ 839.910452][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 839.915516][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 839.921889][ T36] ksm_scan_thread+0x110/0x490 [ 839.926696][ T36] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 839.932627][ T36] ? lockdep_hardirqs_on+0x99/0x150 [ 839.937863][ T36] ? __pfx_ksm_scan_thread+0x10/0x10 [ 839.943190][ T36] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 839.949090][ T36] ? __pfx_autoremove_wake_function+0x10/0x10 [ 839.955203][ T36] ? __pfx_autoremove_wake_function+0x10/0x10 [ 839.961274][ T36] ? __kthread_parkme+0x169/0x1d0 [ 839.966308][ T36] ? __pfx_ksm_scan_thread+0x10/0x10 [ 839.971590][ T36] kthread+0x2f0/0x390 [ 839.975657][ T36] ? __pfx_ksm_scan_thread+0x10/0x10 [ 839.980934][ T36] ? __pfx_kthread+0x10/0x10 [ 839.985534][ T36] ret_from_fork+0x4b/0x80 [ 839.989990][ T36] ? __pfx_kthread+0x10/0x10 [ 839.994583][ T36] ret_from_fork_asm+0x1a/0x30 [ 839.999360][ T36] [ 840.002422][ T36] Modules linked in: [ 840.007926][ T36] ---[ end trace 0000000000000000 ]--- [ 840.015266][ T36] RIP: 0010:ksm_do_scan+0x823/0x6de0 [ 840.081722][ T36] Code: ff ff ff ff e8 2e f3 b6 09 48 89 c3 48 85 c0 4c 89 74 24 48 0f 84 ac 0b 00 00 48 89 5c 24 18 48 83 c3 20 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 9e 6b 01 00 48 8b 1b be 00 00 00 [ 840.105658][ T36] RSP: 0018:ffffc90000ac7a80 EFLAGS: 00010207 [ 840.111981][ T36] RAX: 0000000000000084 RBX: 0000000000000426 RCX: ffff8880206fbc00 [ 840.122113][ T36] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 840.130240][ T36] RBP: ffffc90000ac7d90 R08: ffffffff8bb09d21 R09: ffffffff8bb09ba7 [ 840.194850][ T36] R10: 0000000000000004 R11: ffff8880206fbc00 R12: ffffc90000ac7ce0 [ 840.238741][ T36] R13: ffffc90000ac7c70 R14: ffff8880325ed644 R15: dffffc0000000000 [ 840.246794][ T36] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 840.326500][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 840.333538][ T36] CR2: 00007fc569d37a8c CR3: 000000000e734000 CR4: 00000000003506f0 [ 840.342138][ T36] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 840.352225][ T36] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 840.371841][ T36] Kernel panic - not syncing: Fatal exception [ 840.378374][ T36] Kernel Offset: disabled [ 840.382713][ T36] Rebooting in 86400 seconds..