last executing test programs: 1m8.84383216s ago: executing program 1 (id=2): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$eJzs3c1vXFfdB/DvHY8dT9ombpq0eR5VqtVIgIhI7FgpmA0BIWSkCqGyYG0lTmNlkhbHRW6FqMPrtov+Ad1kg1ghsWITqbBgA7vukJeVkNh0g1kNujN3XjJ+m+bF45TPJ7pzzj3nnnN/93fvnbfImgD/s5bOp34/RZbOv75Rrm/dW2hu3Vu41a0nOZZkM6knqSUp/t1qtT5OriRFb5piqNzhw9XFNz75bOvTzlq9Wtrb1/YbN6TabnOoebPbNptkoiofwQPzXX3k+Ype5FeSnKtKGLvJJK3WZFo9P/nrs72esvNkp2zsNnr68AIFnpii87pZvhjXBttnkuPVjV6+D+i+8tbGEuQIjo243fA7CAAAAHjajPIZ+OR2trNRnDiEcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOALYbP/+/9FtdS69dkU3d//n6raUtWPllc+3+b3n1QcAAAAAAAAAHCIXtnOdjZyorveKtr/5/9qe+V0+/GZvJM7WclaLmQjy1nPetYyn2RmYKKpjeX19bX5EUZe2nXkpQMCPVaVjcdz3AAAAAAAAADwBfOLLPX//x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6CIpnoFCnuDjTPpFZPMp1kqmzYTP7erT/N7o87AAAAADgEJ7eznY2c6K63ipxO8mL7O4DpvJPbWc9q1tPMSq61vxfofOqvbd1baG7dW7hVLjvn/fa/HlidPiCM9ozpfPew+57Ptrdo5HpW2y0XcjVvpZlrqbVHls5W8XRnHYrrbhlT8a3KiAm6VpXlkX9QlTu8P+Jk+xv+MqWx/xcsM+2MTPYyMlfFVmbj+e6Z2f0MDZ2dgwzvaT61XmCnh/Y0FPBD5fx4VZbH85u9cj4Ww5m4NHD1vbh/zpMv//H3P56r6kfnkEYzUZWt9mNjZyYWBjLx0iiZuNG8ffPG9Tvnn7ZM7DDXzsSZ3vpSvpcf5Xxm88OsZTU/zXLWs5LZfLddW65OfjFwe++RqSudYnK33S71E9fN+1R1hU5UrZ8nplfbY09kNT/IW7mWlbzW/ncp8/l6LudyFgfO8Jn9z3D7rq89cNf3XwFaz+2axnNfqSrl095vq3JXe3Y8KWVenx/I6+Bz7ky7b7Cln6VTB2epTMsDz41/2j+U+v9XlXIfvxw49+M3nIn5gUy8sF8muhfynebtm2s3lt8ebXenPhgY/usj9ZRaXi+nypOV7gnqXx1l3wvdvqF8lX2ne321HX1nen2dO3Vzzzt1qnoPt3OmS+2+l3btW2j3nR3o2+391sHv5gAYs+NfPT7V+Gfjb42PGr9q3Gi8Pv2dY9849vJUJv88+c363MSXai8Xf8hH+Xn/8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDw7rz73s3lZnNlbajSarXe36Or2TqZ7NH1cJXanmGUlfoBoe6oZPYfz5QDui2t9Lq6P2f2GIM/qPJ/zyajj6p+gSedlvrjzfMYK/9ptVpVS7HHNr/7y85EPTdS6qZGvzYOqExXV3jlSKSuqtQPeadjekICDs3F9VtvX7zz7ntfW721/ObKmyu3Fy9fXpxbvPzawsXrq82Vuc7juKMEnoT+i/64IwEAAAAAAAAAAABGNdrfA+SR/pxg3McIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPN2Wzqd+P0Xm5y7Mletb9xaa5dKt97esJ6klKX6WFB8nV9JZMjMwXbHXfj5cXXzjk8+2Pu3PVS75/tUDxo1ms1oym2SiU959XPNdrcp9FfsdQtE7wjJh57qJg3H7bwAAAP//EOj9JQ==") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1e01408, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC], 0x3, 0x644, &(0x7f0000000e40)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) rename(0x0, &(0x7f0000000080)='./file2\x00') r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 1m8.180739763s ago: executing program 3 (id=4): open(0x0, 0x47a540, 0x34) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, 0x0, 0x7, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m4.840719841s ago: executing program 1 (id=6): socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$nvram(0xffffff9c, &(0x7f0000002000), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010811798080000000000010902"], 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f0000000040), 0x80) pipe2(&(0x7f0000000080), 0x4800) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 1m0.716435181s ago: executing program 1 (id=8): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) 58.6364235s ago: executing program 1 (id=12): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000340)=0xa, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522f", 0x3c}], 0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000001280)=0x1, 0x4) 50.475276632s ago: executing program 32 (id=4): open(0x0, 0x47a540, 0x34) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, 0x0, 0x7, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 47.340116103s ago: executing program 2 (id=22): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc9, 0xff, 0xa, 0x2000, 0x8}}}}, 0xe) 46.385867871s ago: executing program 2 (id=24): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}}, 0x14}}, 0x0) 45.347343306s ago: executing program 2 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='dots,nfs,dots,nodots,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303030322c756d61736b3d303030303030303030303030303030303030302c000f5186c5e6c7e221acae1f2bce3f628976329421ce230baaaf88191a4017d68f03a16b33a382d61eba86fceff31784759104935bbab41ae1aad4f295ee75b6600e5750d28fba3de65d9ea879618828e5668b6fd6be8d61ed7d6e494317a9b4c4e09b8dd4c502067ee7d71a"], 0x1, 0x159, &(0x7f0000000840)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x40047211, 0xffffffffffffffff) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x67f, 0x64, 0x0, 0x0) 42.238700541s ago: executing program 33 (id=12): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000340)=0xa, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522f", 0x3c}], 0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000001280)=0x1, 0x4) 42.115858898s ago: executing program 2 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x803, 0x6) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r1}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'ip6_vti0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001740)='d', 0x1}], 0x1}}], 0x1, 0x4000050) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000028000480240001800b0001007470726f78790000140002800800024000000015080001400000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000050}, 0x24044010) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) connect$inet(r2, 0x0, 0x0) close(0x3) socket$kcm(0x2, 0xa, 0x2) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x58, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@srh={0x6c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}]}}}}}}}, 0x0) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r3, 0x7277, 0x2, 0x43, 0x0, 0x0) 39.673492749s ago: executing program 2 (id=32): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2) ioctl$VT_RESIZE(r0, 0x5609, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x1000000, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x2) 37.307631511s ago: executing program 2 (id=35): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x0, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r7 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_setup(0x162a, &(0x7f0000000180)={0x0, 0x2b6c, 0x2, 0x2, 0x2ae, 0x0, r7}) io_submit(0x0, 0x0, &(0x7f0000001d00)) 22.065238998s ago: executing program 0 (id=51): ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e23, @loopback}, {0x301, @multicast}, 0x46, {0x2, 0x4e24, @multicast2}, 'vcan0\x00'}) socket$inet(0x2, 0x3, 0x2) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x832381) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x1, 0x0, 0x7, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2, 0x3, 0x0, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 21.899985863s ago: executing program 34 (id=35): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x0, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r7 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_setup(0x162a, &(0x7f0000000180)={0x0, 0x2b6c, 0x2, 0x2, 0x2ae, 0x0, r7}) io_submit(0x0, 0x0, &(0x7f0000001d00)) 20.727632446s ago: executing program 0 (id=54): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0x10, 0x2}, {0xffe0}}}, 0x24}}, 0x0) 17.409166606s ago: executing program 0 (id=57): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f0000000200)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000240)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) timer_delete(r1) tkill(r2, 0x13) 16.629291778s ago: executing program 0 (id=58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.993808944s ago: executing program 0 (id=60): syz_emit_ethernet(0xe4, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6004000000ae0600fe8000"/34, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000b907800005ae60b01000000c98b26096ff3478971ebefeac309e2eb7624af27301d43d51315e2e101434bfb8fb417d63c46aeb5e1de495ebe8fabc26649abdd78163d428508db0e9c9e973e08da63454ffcb869798024ea1207000000b4eeeab19a6d1142d5ee162d8b47191f340df08240a911e6a404edbda26f128748c4ae8dea6cf92f75a196c38baa9cac01dd3f54e9dc665ae2692530c5a583330322"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x5a043, 0x196) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440100000103010100000000000000000300000280000b800800164000000003400004803c0003800800024000000009080003400000000905000100080000000800024000000eb30500010000000000080003400000800108000240000001e12c001980080001000000000008000200010000020000000000000000080001000000000008000200010800000800154000000001b0000f800c000a8008000140000000000800084000000001900003802c00018014"], 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x40050) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x100000000000f7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x58, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x44, 0x1, [@m_ctinfo={0x40, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) 9.245760944s ago: executing program 0 (id=62): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x41440, 0x71) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x141}, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) rename(0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) io_uring_setup(0x80070c5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8.378670604s ago: executing program 4 (id=64): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8000000000000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000048040)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b80000000000000008000800", 0x20) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount(0x0, &(0x7f0000000500)='./cgroup\x00', 0x0, 0x208000, 0x0) close(0x3) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) 4.698959228s ago: executing program 4 (id=65): socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x40, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 4.095247419s ago: executing program 4 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='dots,nfs,dots,nodots,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303030322c756d61736b3d303030303030303030303030303030303030302c000f5186c5e6c7e221acae1f2bce3f628976329421ce230baaaf88191a4017d68f03a16b33a382d61eba86fceff31784759104935bbab41ae1aad4f295ee75b6600e5750d28fba3de65d9ea879618828e5668b6fd6be8d61ed7d6e494317a9b4c4e09b8dd4c502067ee7d71a"], 0x1, 0x159, &(0x7f0000000840)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x40047211, 0xffffffffffffffff) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x67f, 0x64, 0x0, 0x0) 1.390422677s ago: executing program 4 (id=67): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) socket(0x2b, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 788.645803ms ago: executing program 4 (id=68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 4 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0xd6c, 0x2001) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES32=r2], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 188.550700][ T5754] cgroup: Unknown subsys name 'net' [ 188.665583][ T5754] cgroup: Unknown subsys name 'cpuset' [ 188.681093][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 195.084891][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 199.747123][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.756810][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.775290][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.783347][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.791868][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.802139][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.814874][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.826644][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.836838][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.846323][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.855543][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.867145][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.884622][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.895835][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.896951][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.935461][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.944107][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.953601][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.977472][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.993755][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.001772][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 200.030470][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.044403][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.058172][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.069730][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.591495][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 201.824336][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 201.961855][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 202.006140][ T5067] Bluetooth: hci0: command tx timeout [ 202.010992][ T5779] Bluetooth: hci1: command tx timeout [ 202.079903][ T5779] Bluetooth: hci4: command tx timeout [ 202.079962][ T5067] Bluetooth: hci2: command tx timeout [ 202.130910][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 202.159750][ T5779] Bluetooth: hci3: command tx timeout [ 202.215480][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 202.689805][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.710549][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.718288][ T5781] bridge_slave_0: entered allmulticast mode [ 202.746217][ T5781] bridge_slave_0: entered promiscuous mode [ 202.790184][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.800766][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.808414][ T5781] bridge_slave_1: entered allmulticast mode [ 202.840166][ T5781] bridge_slave_1: entered promiscuous mode [ 203.044472][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.143997][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.215609][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.223792][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.233241][ T5773] bridge_slave_0: entered allmulticast mode [ 203.242176][ T5773] bridge_slave_0: entered promiscuous mode [ 203.339327][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.347417][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.355564][ T5773] bridge_slave_1: entered allmulticast mode [ 203.364476][ T5773] bridge_slave_1: entered promiscuous mode [ 203.374644][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.382440][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.390562][ T5775] bridge_slave_0: entered allmulticast mode [ 203.399357][ T5775] bridge_slave_0: entered promiscuous mode [ 203.485197][ T5781] team0: Port device team_slave_0 added [ 203.560689][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.568368][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.577885][ T5775] bridge_slave_1: entered allmulticast mode [ 203.588851][ T5775] bridge_slave_1: entered promiscuous mode [ 203.630079][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.637619][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.646349][ T5784] bridge_slave_0: entered allmulticast mode [ 203.655589][ T5784] bridge_slave_0: entered promiscuous mode [ 203.674237][ T5781] team0: Port device team_slave_1 added [ 203.735522][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.743585][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.751822][ T5774] bridge_slave_0: entered allmulticast mode [ 203.761444][ T5774] bridge_slave_0: entered promiscuous mode [ 203.773492][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.781214][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.788670][ T5784] bridge_slave_1: entered allmulticast mode [ 203.798228][ T5784] bridge_slave_1: entered promiscuous mode [ 203.843141][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.880820][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.888552][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.897474][ T5774] bridge_slave_1: entered allmulticast mode [ 203.906535][ T5774] bridge_slave_1: entered promiscuous mode [ 203.979610][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.999223][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.065037][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.072727][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.080494][ T5779] Bluetooth: hci1: command tx timeout [ 204.100297][ T5067] Bluetooth: hci0: command tx timeout [ 204.110834][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.157552][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.163337][ T5067] Bluetooth: hci4: command tx timeout [ 204.172509][ T5779] Bluetooth: hci2: command tx timeout [ 204.211951][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.223634][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.231035][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.257743][ T5067] Bluetooth: hci3: command tx timeout [ 204.263836][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.337260][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.355859][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.415965][ T5773] team0: Port device team_slave_0 added [ 204.461261][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.507316][ T5773] team0: Port device team_slave_1 added [ 204.523612][ T5775] team0: Port device team_slave_0 added [ 204.565333][ T5784] team0: Port device team_slave_0 added [ 204.630592][ T5775] team0: Port device team_slave_1 added [ 204.673030][ T5784] team0: Port device team_slave_1 added [ 204.787551][ T5774] team0: Port device team_slave_0 added [ 204.824724][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.832239][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.858865][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.888743][ T5781] hsr_slave_0: entered promiscuous mode [ 204.897727][ T5781] hsr_slave_1: entered promiscuous mode [ 204.940949][ T5774] team0: Port device team_slave_1 added [ 204.975173][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.983012][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.010665][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.043619][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.051280][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.077835][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.118976][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.126679][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.153192][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.243885][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.251654][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.278426][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.336203][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.343838][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.371342][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.408650][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.416301][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.443186][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.549373][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.556671][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.583238][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.637270][ T5773] hsr_slave_0: entered promiscuous mode [ 205.646582][ T5773] hsr_slave_1: entered promiscuous mode [ 205.655211][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 205.661332][ T5773] Cannot create hsr debugfs directory [ 205.795936][ T5775] hsr_slave_0: entered promiscuous mode [ 205.805005][ T5775] hsr_slave_1: entered promiscuous mode [ 205.813654][ T5775] debugfs: 'hsr0' already exists in 'hsr' [ 205.819710][ T5775] Cannot create hsr debugfs directory [ 205.994324][ T5784] hsr_slave_0: entered promiscuous mode [ 206.004099][ T5784] hsr_slave_1: entered promiscuous mode [ 206.013116][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 206.019019][ T5784] Cannot create hsr debugfs directory [ 206.041123][ T5774] hsr_slave_0: entered promiscuous mode [ 206.050578][ T5774] hsr_slave_1: entered promiscuous mode [ 206.058467][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 206.064682][ T5774] Cannot create hsr debugfs directory [ 206.163476][ T5067] Bluetooth: hci0: command tx timeout [ 206.169115][ T5067] Bluetooth: hci1: command tx timeout [ 206.239928][ T5779] Bluetooth: hci2: command tx timeout [ 206.245958][ T5067] Bluetooth: hci4: command tx timeout [ 206.319741][ T5067] Bluetooth: hci3: command tx timeout [ 207.354634][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.425957][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.478654][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.513867][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.653855][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.684096][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.703719][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.744880][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.945638][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.019085][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.042845][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.062973][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.239987][ T5779] Bluetooth: hci0: command tx timeout [ 208.245702][ T5067] Bluetooth: hci1: command tx timeout [ 208.320372][ T5067] Bluetooth: hci4: command tx timeout [ 208.325998][ T5067] Bluetooth: hci2: command tx timeout [ 208.372062][ T5774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.405468][ T5067] Bluetooth: hci3: command tx timeout [ 208.432322][ T5774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.494205][ T5774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.545589][ T5774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.789363][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 208.817782][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.865506][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.918016][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.033158][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.207974][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.328622][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.407581][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.415215][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.441558][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.493352][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.500903][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.605887][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.613361][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.678796][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.686329][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.766425][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.006359][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.099356][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.107005][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.145221][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.304606][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.312334][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.394458][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.548306][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.555990][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.625889][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.698834][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.706545][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.936124][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.160875][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.168511][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.204048][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.258213][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.265703][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.693303][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.247195][ T5781] veth0_vlan: entered promiscuous mode [ 212.541456][ T5781] veth1_vlan: entered promiscuous mode [ 212.597430][ T5775] veth0_vlan: entered promiscuous mode [ 212.635330][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.833670][ T5775] veth1_vlan: entered promiscuous mode [ 212.988745][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.117185][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.127589][ T5781] veth0_macvtap: entered promiscuous mode [ 213.232388][ T5781] veth1_macvtap: entered promiscuous mode [ 213.336857][ T5773] veth0_vlan: entered promiscuous mode [ 213.373897][ T5775] veth0_macvtap: entered promiscuous mode [ 213.473937][ T5775] veth1_macvtap: entered promiscuous mode [ 213.506211][ T5773] veth1_vlan: entered promiscuous mode [ 213.644408][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.764842][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.812539][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.877608][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.905663][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.003312][ T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.019807][ T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.059342][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.078504][ T5784] veth0_vlan: entered promiscuous mode [ 214.174162][ T5773] veth0_macvtap: entered promiscuous mode [ 214.238877][ T34] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.257867][ T5773] veth1_macvtap: entered promiscuous mode [ 214.287497][ T5784] veth1_vlan: entered promiscuous mode [ 214.304830][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.316805][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.377628][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.603198][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.756529][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.778029][ T5774] veth0_vlan: entered promiscuous mode [ 214.927820][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.976795][ T5784] veth0_macvtap: entered promiscuous mode [ 215.030817][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.064293][ T1141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.087708][ T5774] veth1_vlan: entered promiscuous mode [ 215.154380][ T1141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.185185][ T5784] veth1_macvtap: entered promiscuous mode [ 215.579128][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.718895][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.814076][ T5774] veth0_macvtap: entered promiscuous mode [ 215.897755][ T76] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.939902][ T76] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.958861][ T5774] veth1_macvtap: entered promiscuous mode [ 215.995431][ T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.033479][ T76] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.305062][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.450699][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.568770][ T1141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.592362][ T1141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.688508][ T1141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.711752][ T1141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.099626][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.107697][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.417729][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.445200][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.792590][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.817610][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.954506][ T5781] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 221.160167][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.168232][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.721037][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.752041][ T5951] loop1: detected capacity change from 0 to 1024 [ 221.762492][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.200428][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.208475][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.398348][ T5964] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 224.358834][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.812345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 225.150453][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.712935][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.779754][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.192385][ T5970] loop0: detected capacity change from 0 to 128 [ 226.454356][ T5825] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 226.760564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 227.989563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 228.127330][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 228.699633][ T5825] usb 2-1: config 0 has no interfaces? [ 228.762764][ T5825] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 228.887052][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.962901][ T5825] usb 2-1: config 0 descriptor?? [ 229.185537][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.230499][ T5825] usb 2-1: can't set config #0, error -71 [ 229.246845][ T5825] usb 2-1: USB disconnect, device number 2 [ 229.253900][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.404590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 229.665547][ T5980] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3'. [ 229.691196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 229.792350][ T5982] loop1: detected capacity change from 0 to 1024 [ 229.838496][ T5982] ======================================================= [ 229.838496][ T5982] WARNING: The mand mount option has been deprecated and [ 229.838496][ T5982] and is ignored by this kernel. Remove the mand [ 229.838496][ T5982] option from the mount to silence this warning. [ 229.838496][ T5982] ======================================================= [ 230.067447][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.159847][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.180513][ T5982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.272675][ T5982] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.287415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 230.424449][ T5982] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.8: lblock 0 mapped to illegal pblock 0 (length 6) [ 230.497451][ T5982] EXT4-fs error (device loop1): ext4_ext_remove_space:2956: inode #15: comm syz.1.8: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 230.612111][ T5990] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.8: lblock 3 mapped to illegal pblock 3 (length 3) [ 230.700440][ T5990] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 230.771452][ T5989] loop0: detected capacity change from 0 to 512 [ 230.809703][ T5990] EXT4-fs (loop1): This should not happen!! Data will be lost [ 230.809703][ T5990] [ 231.172256][ T5992] loop5: detected capacity change from 0 to 2640 [ 231.383313][ T56] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 231.462197][ T5992] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 231.536336][ T56] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 231.550448][ T5992] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 231.592043][ T56] EXT4-fs (loop1): This should not happen!! Data will be lost [ 231.592043][ T56] [ 231.655058][ T5992] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 231.713650][ T5992] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 231.749851][ T5992] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 231.754587][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 231.758460][ T5992] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 231.758587][ T5992] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 231.934492][ T5992] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 231.997159][ T5992] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 232.010448][ T5992] Buffer I/O error on dev loop5, logical block 9, lost async page write [ 232.325722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.720885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.730893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.885911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 233.294913][ T6003] fuse: Unknown parameter 'use00000000000000000000' [ 233.584948][ T6009] loop2: detected capacity change from 0 to 128 [ 234.892925][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.310318][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.458033][ T6024] loop0: detected capacity change from 0 to 256 [ 239.649711][ T6024] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 241.635917][ T6030] exFAT-fs (loop0): start_clu is invalid cluster(0x0) [ 243.028621][ T5067] Bluetooth: min 255 > max 10 [ 243.494274][ T5779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.508770][ T5779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.519659][ T5779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.564750][ T5779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.576319][ T5779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.641266][ T6039] loop0: detected capacity change from 0 to 64 [ 244.974219][ T6047] loop2: detected capacity change from 0 to 128 [ 245.052733][ T5067] Bluetooth: hci4: command tx timeout [ 245.068245][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'. [ 245.743474][ T5067] Bluetooth: hci5: command tx timeout [ 247.852498][ T5779] Bluetooth: hci5: command tx timeout [ 248.502210][ T6058] syz.2.29 uses obsolete (PF_INET,SOCK_PACKET) [ 249.657740][ T6036] chnl_net:caif_netlink_parms(): no params data found [ 249.921736][ T5779] Bluetooth: hci5: command tx timeout [ 250.038619][ T6066] loop0: detected capacity change from 0 to 256 [ 250.150704][ T5067] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.169856][ T5067] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.181775][ T5067] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.204175][ T5067] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.220617][ T5067] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.148683][ T5067] Bluetooth: hci5: command tx timeout [ 252.462032][ T5067] Bluetooth: hci6: command tx timeout [ 252.679591][ T6084] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 252.686364][ T6084] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 252.715940][ T6015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.800484][ T6084] vhci_hcd vhci_hcd.0: Device attached [ 253.089749][ T794] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 253.115285][ T6085] vhci_hcd: connection reset by peer [ 253.141026][ T1141] vhci_hcd vhci_hcd.4: stop threads [ 253.182683][ T1141] vhci_hcd vhci_hcd.4: release socket [ 253.210067][ T1141] vhci_hcd vhci_hcd.4: disconnect device [ 253.230944][ T6015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.589158][ T6015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.067814][ T6015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.171431][ T6101] loop4: detected capacity change from 0 to 128 [ 254.479860][ T5067] Bluetooth: hci6: command tx timeout [ 256.578673][ T5067] Bluetooth: hci6: command tx timeout [ 256.908974][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.989972][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.997836][ T6036] bridge_slave_0: entered allmulticast mode [ 257.033296][ T6036] bridge_slave_0: entered promiscuous mode [ 257.356554][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.424252][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.479174][ T6036] bridge_slave_1: entered allmulticast mode [ 257.563587][ T6036] bridge_slave_1: entered promiscuous mode [ 258.230447][ T794] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 258.639880][ T5067] Bluetooth: hci6: command tx timeout [ 259.387038][ T6036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.553061][ T6036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.883409][ T6122] loop4: detected capacity change from 0 to 128 [ 260.017023][ T6015] bridge_slave_1: left allmulticast mode [ 260.042785][ T6015] bridge_slave_1: left promiscuous mode [ 260.049638][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.120194][ T6015] bridge_slave_0: left allmulticast mode [ 260.156559][ T6015] bridge_slave_0: left promiscuous mode [ 260.200319][ T29] audit: type=1804 audit(1771037424.066:2): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.43" name="/newroot/11/file2/file1" dev="loop4" ino=1048615 res=1 errno=0 [ 260.229583][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.353854][ T6132] loop4: detected capacity change from 0 to 128 [ 262.409908][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.411099][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 262.992248][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.751358][ T6015] bond0 (unregistering): Released all slaves [ 264.827137][ T6137] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 264.834672][ T6137] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 264.946810][ T6036] team0: Port device team_slave_0 added [ 265.010068][ T6067] chnl_net:caif_netlink_parms(): no params data found [ 265.318484][ T6036] team0: Port device team_slave_1 added [ 265.420889][ T5825] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 265.608098][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.620583][ T5825] usb 5-1: config 0 interface 0 has no altsetting 0 [ 265.662322][ T5825] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 265.715169][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.740247][ T5825] usb 5-1: Product: syz [ 265.767733][ T5825] usb 5-1: Manufacturer: syz [ 265.786656][ T5825] usb 5-1: SerialNumber: syz [ 265.848662][ T5825] usb 5-1: config 0 descriptor?? [ 265.910623][ T5825] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 265.984177][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.008821][ T5825] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 266.069750][ T5825] usb 5-1: media controller created [ 266.239171][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.483902][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.535610][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.684212][ T6036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.856177][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.910009][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.025201][ T6036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.119305][ T5825] DVB: Unable to find symbol tda10046_attach() [ 267.132380][ T5825] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 267.147393][ T5825] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 267.163694][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 267.385258][ T5825] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 267.482206][ T5825] usb 5-1: USB disconnect, device number 2 [ 267.870737][ T6015] hsr_slave_0: left promiscuous mode [ 267.909773][ T6015] hsr_slave_1: left promiscuous mode [ 267.939296][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.978760][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.064415][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.142377][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.290252][ T6015] veth1_macvtap: left promiscuous mode [ 268.299103][ T6015] veth0_macvtap: left promiscuous mode [ 268.340184][ T6015] veth1_vlan: left promiscuous mode [ 268.359161][ T6015] veth0_vlan: left promiscuous mode [ 270.390772][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.404078][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.414279][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.428329][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.440709][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.999891][ T6015] team0 (unregistering): Port device team_slave_1 removed [ 271.073283][ T6015] team0 (unregistering): Port device team_slave_0 removed [ 271.437535][ T6166] loop4: detected capacity change from 0 to 128 [ 272.216392][ T6036] hsr_slave_0: entered promiscuous mode [ 272.410938][ T6036] hsr_slave_1: entered promiscuous mode [ 272.456916][ T6036] debugfs: 'hsr0' already exists in 'hsr' [ 272.472153][ T6036] Cannot create hsr debugfs directory [ 272.563362][ T5067] Bluetooth: hci2: command tx timeout [ 274.507844][ T6015] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.639959][ T5779] Bluetooth: hci2: command tx timeout [ 276.064095][ T6015] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.006802][ T5779] Bluetooth: hci2: command tx timeout [ 277.743790][ T6195] netlink: 44 bytes leftover after parsing attributes in process `syz.0.60'. [ 279.182085][ T5779] Bluetooth: hci2: command tx timeout [ 280.180752][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.194077][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.268024][ T6067] bridge_slave_0: entered allmulticast mode [ 280.692104][ T6067] bridge_slave_0: entered promiscuous mode [ 280.855674][ T6015] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.050114][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.057697][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.110504][ T6067] bridge_slave_1: entered allmulticast mode [ 281.138884][ T6067] bridge_slave_1: entered promiscuous mode [ 281.460585][ T6202] process 'syz.0.62' launched './file2' with NULL argv: empty string added [ 281.509957][ T6202] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 281.615863][ T6015] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.251660][ T6067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.383301][ T6067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.949038][ T6067] team0: Port device team_slave_0 added [ 286.263222][ T6230] loop4: detected capacity change from 0 to 128 [ 286.306225][ T6067] team0: Port device team_slave_1 added [ 289.362208][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.390058][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.479717][ T6067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.792918][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.823100][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.885674][ T6067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.860328][ T6161] chnl_net:caif_netlink_parms(): no params data found [ 295.740234][ T34] ===================================================== [ 295.747481][ T34] BUG: KMSAN: uninit-value in __inet6_bind+0x4ac/0x1830 [ 295.755037][ T34] __inet6_bind+0x4ac/0x1830 [ 295.760211][ T34] inet6_bind+0x11e/0x1a0 [ 295.764765][ T34] kernel_bind+0xd6/0x130 [ 295.769536][ T34] rds_tcp_conn_path_connect+0x952/0xff0 [ 295.777449][ T34] rds_connect_worker+0x353/0x4d0 [ 295.783396][ T34] process_scheduled_works+0xae7/0x1d60 [ 295.789135][ T34] worker_thread+0xede/0x1580 [ 295.797827][ T34] kthread+0x53f/0x600 [ 295.802248][ T34] ret_from_fork+0x20f/0x910 [ 295.807022][ T34] ret_from_fork_asm+0x1a/0x30 [ 295.812159][ T34] [ 295.814578][ T34] Uninit was stored to memory at: [ 295.820270][ T34] kernel_bind+0x92/0x130 [ 295.824809][ T34] rds_tcp_conn_path_connect+0x952/0xff0 [ 295.830813][ T34] rds_connect_worker+0x353/0x4d0 [ 295.836037][ T34] process_scheduled_works+0xae7/0x1d60 [ 295.843236][ T34] worker_thread+0xede/0x1580 [ 295.848110][ T34] kthread+0x53f/0x600 [ 295.852743][ T34] ret_from_fork+0x20f/0x910 [ 295.857509][ T34] ret_from_fork_asm+0x1a/0x30 [ 295.862626][ T34] [ 295.865129][ T34] Uninit was stored to memory at: [ 295.870559][ T34] rds_tcp_conn_path_connect+0xae5/0xff0 [ 295.877758][ T34] rds_connect_worker+0x353/0x4d0 [ 295.883672][ T34] process_scheduled_works+0xae7/0x1d60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 295.889529][ T34] worker_thread+0xede/0x1580 [ 295.894389][ T34] kthread+0x53f/0x600 [ 295.898663][ T34] ret_from_fork+0x20f/0x910 [ 295.903556][ T34] ret_from_fork_asm+0x1a/0x30 [ 295.908532][ T34] [ 295.911150][ T34] Uninit was created at: [ 295.915639][ T34] kmem_cache_alloc_noprof+0x373/0x1200 [ 295.921649][ T34] rds_tcp_conn_alloc+0x7b/0xbb0 [ 295.926804][ T34] __rds_conn_create+0x267f/0x34e0 [ 295.932266][ T34] rds_conn_create+0x5d/0x80 [ 295.938402][ T34] rds_tcp_accept_one+0x784/0x17d0 [ 295.943751][ T34] rds_tcp_accept_worker+0x38/0x100 [ 295.949110][ T34] process_scheduled_works+0xae7/0x1d60 [ 295.954879][ T34] worker_thread+0xede/0x1580 [ 295.959787][ T34] kthread+0x53f/0x600 [ 295.963986][ T34] ret_from_fork+0x20f/0x910 [ 295.968671][ T34] ret_from_fork_asm+0x1a/0x30 [ 295.973708][ T34] [ 295.976115][ T34] CPU: 0 UID: 0 PID: 34 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 295.986810][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 295.997490][ T34] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 296.003902][ T34] ===================================================== [ 296.011078][ T34] Disabling lock debugging due to kernel taint [ 296.154916][ T6015] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.295060][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.303567][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.759621][ T34] Kernel panic - not syncing: kmsan.panic set ... [ 296.766253][ T34] CPU: 0 UID: 0 PID: 34 Comm: kworker/u8:2 Tainted: G B syzkaller #0 PREEMPT(full) [ 296.777342][ T34] Tainted: [B]=BAD_PAGE [ 296.781652][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 296.791885][ T34] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 296.798290][ T34] Call Trace: [ 296.801686][ T34] [ 296.804744][ T34] __dump_stack+0x26/0x30 [ 296.809306][ T34] dump_stack_lvl+0x50/0x1c0 [ 296.814144][ T34] ? dump_stack+0x12/0x25 [ 296.818789][ T34] dump_stack+0x1e/0x25 [ 296.823251][ T34] vpanic+0x7b4/0x1430 [ 296.827577][ T34] panic+0x15d/0x160 [ 296.831748][ T34] kmsan_report+0x31a/0x320 [ 296.836490][ T34] ? __msan_warning+0x1b/0x30 [ 296.841378][ T34] ? __inet6_bind+0x4ac/0x1830 [ 296.846375][ T34] ? inet6_bind+0x11e/0x1a0 [ 296.851111][ T34] ? kernel_bind+0xd6/0x130 [ 296.855949][ T34] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 296.862017][ T34] ? rds_connect_worker+0x353/0x4d0 [ 296.867441][ T34] ? process_scheduled_works+0xae7/0x1d60 [ 296.873391][ T34] ? worker_thread+0xede/0x1580 [ 296.878448][ T34] ? kthread+0x53f/0x600 [ 296.882913][ T34] ? ret_from_fork+0x20f/0x910 [ 296.887891][ T34] ? ret_from_fork_asm+0x1a/0x30 [ 296.893092][ T34] ? stack_depot_save+0x12/0x20 [ 296.898154][ T34] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 296.904207][ T34] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 296.910256][ T34] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 296.916839][ T34] ? __msan_memcpy+0x105/0x1c0 [ 296.921815][ T34] ? kernel_bind+0x92/0x130 [ 296.926555][ T34] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 296.932604][ T34] ? rds_connect_worker+0x353/0x4d0 [ 296.938011][ T34] ? process_scheduled_works+0xae7/0x1d60 [ 296.943943][ T34] ? worker_thread+0xede/0x1580 [ 296.948997][ T34] ? kthread+0x53f/0x600 [ 296.953453][ T34] ? ret_from_fork+0x20f/0x910 [ 296.958411][ T34] ? ret_from_fork_asm+0x1a/0x30 [ 296.963678][ T34] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 296.969753][ T34] ? stack_depot_save_flags+0x610/0x790 [ 296.975634][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 296.981019][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 296.987094][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 296.992448][ T34] __msan_warning+0x1b/0x30 [ 296.997150][ T34] __inet6_bind+0x4ac/0x1830 [ 297.001988][ T34] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 297.008045][ T34] inet6_bind+0x11e/0x1a0 [ 297.012740][ T34] ? __pfx_inet6_bind+0x10/0x10 [ 297.017839][ T34] kernel_bind+0xd6/0x130 [ 297.022427][ T34] ? kmsan_get_metadata+0xf1/0x160 [ 297.027785][ T34] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 297.033845][ T34] rds_tcp_conn_path_connect+0x952/0xff0 [ 297.039721][ T34] ? try_to_wake_up+0x1056/0x2070 [ 297.045006][ T34] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 297.051564][ T34] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 297.057954][ T34] rds_connect_worker+0x353/0x4d0 [ 297.063197][ T34] ? __pfx_rds_connect_worker+0x10/0x10 [ 297.068966][ T34] process_scheduled_works+0xae7/0x1d60 [ 297.074781][ T34] worker_thread+0xede/0x1580 [ 297.079713][ T34] kthread+0x53f/0x600 [ 297.083991][ T34] ? __pfx_worker_thread+0x10/0x10 [ 297.089320][ T34] ? __pfx_kthread+0x10/0x10 [ 297.094195][ T34] ret_from_fork+0x20f/0x910 [ 297.098980][ T34] ? __switch_to+0x51c/0x750 [ 297.104000][ T34] ? __pfx_kthread+0x10/0x10 [ 297.108831][ T34] ret_from_fork_asm+0x1a/0x30 [ 297.113893][ T34] [ 297.117675][ T34] Kernel Offset: disabled [ 297.122087][ T34] Rebooting in 86400 seconds..