last executing test programs: 22.042847758s ago: executing program 3 (id=232): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000007c0)=0x40049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xe, &(0x7f000001c900)=ANY=[], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x2e}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) 21.018732923s ago: executing program 3 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='./dev/sda1\x00', &(0x7f0000000780)='./mnt\x00', &(0x7f00000007c0)='ext4\x00', 0x8410, 0x0) chdir(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000880)="ff", 0x58200, 0xfb2200) 15.185837968s ago: executing program 1 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x180) socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f00000005c0)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000600)={0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'dh\x00', 0x20, 0xa8a, 0x3e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000640)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x27, 0x81, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x1, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000006c0)={{0x84, @rand_addr=0x64010100, 0x4e25, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4ea4, 0x10000, 0x0, 0x12d5c, 0x12d4f}}, 0x44) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='100', 0x3) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2) mount(&(0x7f00000003c0)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000400)='./proc\x00', 0x0, 0x2800002, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x402) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x80000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f00000004c0)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad30c897700001b00", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 14.148711395s ago: executing program 3 (id=244): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000007c0)=0x40049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xe, &(0x7f000001c900)=ANY=[], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x2e}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r2, &(0x7f0000003800)=""/102368, 0x18fe0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f000001c800)={0x500, 0x0, &(0x7f000001c840)={&(0x7f000001c880)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) 13.088770753s ago: executing program 0 (id=253): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r2, &(0x7f00000009c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6) mount(0x0, 0x0, &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r4 = fsopen(&(0x7f0000000a80)='proc\x00', 0x1) fsmount(r4, 0x0, 0x1) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ac0), 0x840, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, &(0x7f0000000b00)=0x13c) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @none, 0x18}, 0xa) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) 12.022269002s ago: executing program 0 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x180) socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f00000005c0)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000600)={0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'dh\x00', 0x20, 0xa8a, 0x3e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000640)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x27, 0x81, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x1, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000006c0)={{0x84, @rand_addr=0x64010100, 0x4e25, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4ea4, 0x10000, 0x0, 0x12d5c, 0x12d4f}}, 0x44) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='100', 0x3) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2) mount(&(0x7f00000003c0)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000400)='./proc\x00', 0x0, 0x2800002, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x402) syz_open_dev$dvb_demux(&(0x7f0000000480), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f00000004c0)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad30c897700001b00", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 12.021909432s ago: executing program 1 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 11.624275032s ago: executing program 2 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) syz_emit_ethernet(0x116, &(0x7f00000000c0)={@local, @empty, @void, {@mpls_mc={0x8848, {[{0x3ff, 0x0, 0x1}, {0xfff00}, {}, {0x81, 0x0, 0x1}, {0x1cab}], @ipv6=@tipc_packet={0xd, 0x6, "a7270a", 0xcc, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, {[@hopopts={0x29, 0x8, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0xa}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x7, [0x5, 0xffffffff, 0x8, 0x1]}}]}, @srh={0x11, 0xa, 0x4, 0x5, 0x8, 0x8, 0xfff, [@local, @mcast2, @remote, @remote, @mcast1]}, @fragment={0x2f, 0x0, 0x40, 0x0, 0x0, 0xc, 0x68}], @payload_conn={{{0x1c, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, 0x2, 0x7, 0x0, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x0, 0x4e24, 0x4e24}}, [0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x28000600) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000002e80)=@assoc_value, &(0x7f0000002ec0)=0xfffffffffffffdae) connect$bt_l2cap(r2, &(0x7f0000002f00)={0x1f, 0x0, @any, 0x3}, 0xe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f40)={0x18, 0x0, 0x0, &(0x7f0000003000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003040)={r3, 0x0, 0x0, 0x0, &(0x7f00000030c0), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003100)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003240)={0x7, 0x17, &(0x7f0000003300)=ANY=[@ANYBLOB="18000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000006e0002000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003400)=@generic={&(0x7f0000003440)='./file0\x00', r4}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000003480)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000034c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x8, 0x0, 0x0) writev(r2, &(0x7f0000003500)=[{&(0x7f0000003540)="3d7edcfae8b253779261304e596fde5f5e16132cafa93dad2d9b950786ed8ddfd26d29f2327fa1b33fc52809c680eea91f25f8714cccf113c46ab0a423ad850caa1960931d2f5134283d853ac41f6a36739705ef9a507689426e1675d19167928c88527e48d0a4fca074dc44aab5a95318b5c689e540528accdfdfafbedbaff4b50a88012eb3283dabe28e05096620bccfeffa78fe3f598f447732afb0b8f8ee51c855156b60773b1f8f888092774fc2fea560ee62622fe67b13332ceaba038e9ec1582495f6db81babafd17c93f8ea3fd8729336cd228b7ba4b483ad9c2253a0a1ce755438f1b449024a95f640fa253e5f1e962776bc0d140fe2e36d2c8e84eaebb08d3aa3920673d777425e307ba2c1c9e1e0a7e68ede997d445897b859db5c6ca622fab5fa742d70130f3e823906506e22d964735041c07d607e28721c213055eef3c16d730d0da820aad2cbe8bc32e79c66a2686c268166f868b9cf48713802d0ce7403f5bf56e6743d724f0758d0717eb48b15e376bae3b6695a2c8ad94e44b5ac6d5003c3feff5e3cee2ebd64597e2eecf3c5cf08838e0fa8c2571c2be80990e17d67225ec7b9d10f2e1bded0591fd5a85e74610a9db8daf3215fb56af632b567b7beb6af86e2f53d76dfa2f3edd4575a1353b99d6d1e2c357ff7602042fcb96bb1dc4912b09d8336df256ccc4969b95e84c82d6c13d7ba8ddcaa788cc103d11d1f33f6fc847fc41e05109d3dee2f40045854137251cd6774910f65cfa4f38e72b10a777d2728bb4060e6f25945f1434b303909c1f005c394c801b6ad468511039c8f733c734f0afa90d6770624c52d82246e0147b596f14ca41ef13c8410b74af1c7afe54c947bde0fa7b53e6299359bc917dec8991046fcac4b1cf47fa30091dc852117630d6452c159172cdbaddbda793c61401a9a099067b67f7805ff8760bff8d9019c5be1abfab90a735558588a9684cfb685b9212e1834950798de47ba3558c43b11db7d15ae7bf4e6f642ab53cbccd7637d84edf11b21cefe5496647a3545d7944b95fe7ccbe2033d2f4294394fa7654d5a33b88e426eb441d8cebb00149c3bdf550c5fc3a54196a8772702c74332225ebdb7b292b9a549772a03b19963c61c2f1e019ee40899e995a82796c54fd385e321ebbc68dc833a92fb1466a77431ed42c43aabc9e5b226f4fc652b488a588c974c562278172f5b51e1e5426825b664751f2ce95f7d1fc1b2f676016f2170a6395290fd0386697311ab08cc2041c38c0c48ac2f857ee5417d62a28c75153cd6e184d37b9cd4ed8a5772ca919d47fc496ee83b44dc6c4062b26fa26629c92c1f5a7884c49b7b433a32863626dc8e8c3426acf9e6937d1f8d65791782c2c018df7f1ed834d7422955332bbbff18a3cf90d662cbb1cc2fc896286c7383583ff45e6b2", 0xfdef}], 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r8 = socket$inet(0x2, 0x3, 0xd) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x3, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000d40], 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="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"]}, 0x2a8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000008000000000008000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x1013, &(0x7f0000003940)=""/4115, 0x0, 0xc}, 0x94) 10.527393404s ago: executing program 0 (id=249): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000007c0)=0x40049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xe, &(0x7f000001c900)=ANY=[], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x2e}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r2, &(0x7f0000003800)=""/102368, 0x18fe0) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x5a) sendfile(0xffffffffffffffff, r2, 0x0, 0x85b1) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='R', 0x1) read$FUSE(r4, &(0x7f00000017c0)={0x2020}, 0x2020) 10.448635323s ago: executing program 1 (id=250): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x1, 0xffffffff, 0x0, r4}}], 0x1, 0x0, 0x0) 9.218338858s ago: executing program 0 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000e80)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 9.035995127s ago: executing program 1 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='./dev/sda1\x00', &(0x7f0000000780)='./mnt\x00', &(0x7f00000007c0)='ext4\x00', 0x8410, 0x0) chdir(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000880)="ff", 0x58200, 0xfb2200) 7.723175831s ago: executing program 1 (id=254): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000007c0)=0x40049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xe, &(0x7f000001c900)=ANY=[], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x2e}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000003800)=""/102368, 0x18fe0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) 7.621745432s ago: executing program 2 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) write$char_usb(r5, &(0x7f00000001c0)="e2", 0x2250) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 6.209776626s ago: executing program 3 (id=256): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r2, &(0x7f00000009c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6) mount(0x0, 0x0, &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r4 = fsopen(&(0x7f0000000a80)='proc\x00', 0x1) fsmount(r4, 0x0, 0x1) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000ac0), 0x840, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, &(0x7f0000000b00)=0x13c) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @none, 0x18}, 0xa) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) 5.527942965s ago: executing program 2 (id=257): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x180) socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f00000005c0)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000600)={0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'dh\x00', 0x20, 0xa8a, 0x3e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000640)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x27, 0x81, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x1, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000006c0)={{0x84, @rand_addr=0x64010100, 0x4e25, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4ea4, 0x10000, 0x0, 0x12d5c, 0x12d4f}}, 0x44) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='100', 0x3) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2) mount(&(0x7f00000003c0)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000400)='./proc\x00', 0x0, 0x2800002, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x402) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x80000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f00000004c0)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad30c897700001b00", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 4.576858383s ago: executing program 2 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x180) socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f00000005c0)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000600)={0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'dh\x00', 0x20, 0xa8a, 0x3e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000640)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x27, 0x81, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x1, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000006c0)={{0x84, @rand_addr=0x64010100, 0x4e25, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4ea4, 0x10000, 0x0, 0x12d5c, 0x12d4f}}, 0x44) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='100', 0x3) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2) mount(&(0x7f00000003c0)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f0000000400)='./proc\x00', 0x0, 0x2800002, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x402) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x80000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f00000004c0)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad30c897700001b00", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 4.494711041s ago: executing program 3 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) 2.915976413s ago: executing program 2 (id=260): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000007c0)=0x40049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xe, &(0x7f000001c900)=ANY=[], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x2e}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r2, &(0x7f0000003800)=""/102368, 0x18fe0) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x5a) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='R', 0x1) read$FUSE(r4, &(0x7f00000017c0)={0x2020}, 0x2020) 2.528066342s ago: executing program 3 (id=261): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000940)={0x2, 0x4e24, @empty}, 0x10) socket$inet(0x2, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000001440)={0x2, 0x1bd, @loopback}, 0x10) listen(r2, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./cifs\x00', 0x0) mount(&(0x7f00000014c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000001500)='./cifs\x00', &(0x7f0000001540)='cifs\x00', 0x0, 0x0) 1.499108507s ago: executing program 0 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) 1.498080637s ago: executing program 1 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='./dev/sda1\x00', &(0x7f0000000780)='./mnt\x00', &(0x7f00000007c0)='ext4\x00', 0x8410, 0x0) chdir(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000880)="ff", 0x58200, 0xfb2200) 1.47199534s ago: executing program 2 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) syz_emit_ethernet(0x116, &(0x7f00000000c0)={@local, @empty, @void, {@mpls_mc={0x8848, {[{0x3ff, 0x0, 0x1}, {0xfff00}, {}, {0x81, 0x0, 0x1}, {0x1cab}], @ipv6=@tipc_packet={0xd, 0x6, "a7270a", 0xcc, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, {[@hopopts={0x29, 0x8, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0xa}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x7, [0x5, 0xffffffff, 0x8, 0x1]}}]}, @srh={0x11, 0xa, 0x4, 0x5, 0x8, 0x8, 0xfff, [@local, @mcast2, @remote, @remote, @mcast1]}, @fragment={0x2f, 0x0, 0x40, 0x0, 0x0, 0xc, 0x68}], @payload_conn={{{0x1c, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, 0x2, 0x7, 0x0, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x0, 0x4e24, 0x4e24}}, [0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x28000600) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000002e80)=@assoc_value, &(0x7f0000002ec0)=0xfffffffffffffdae) connect$bt_l2cap(r2, &(0x7f0000002f00)={0x1f, 0x0, @any, 0x3}, 0xe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f40)={0x18, 0x0, 0x0, &(0x7f0000003000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003040)={r3, 0x0, 0x0, 0x0, &(0x7f00000030c0), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003100)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003240)={0x7, 0x17, &(0x7f0000003300)=ANY=[@ANYBLOB="180000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000006e0002000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003400)=@generic={&(0x7f0000003440)='./file0\x00', r4}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000003480)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000034c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x8, 0x0, 0x0) writev(r2, &(0x7f0000003500)=[{&(0x7f0000003540)="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", 0xfdef}], 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r8 = socket$inet(0x2, 0x3, 0xd) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x3, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000d40], 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="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"]}, 0x2a8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000008000000000008000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x1013, &(0x7f0000003940)=""/4115, 0x0, 0xc}, 0x94) 0s ago: executing program 0 (id=264): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000007c0)=0x40049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xe, &(0x7f000001c900)=ANY=[], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x2e}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f000001c800)={0x500, 0x0, &(0x7f000001c840)={&(0x7f000001c880)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. syzkaller login: [ 73.547672][ T5769] cgroup: Unknown subsys name 'net' [ 73.669404][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.037485][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.570631][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.593163][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.601787][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.604861][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.616881][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.624455][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.625383][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.640118][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.647317][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.648051][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.655307][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.663718][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.670302][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.676737][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.683111][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.690478][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.705106][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.705332][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.720102][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.722022][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.734427][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.745132][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.757056][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.770490][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.825098][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 76.830947][ T5781] (null): rxe_set_mtu: Set mtu to 1024 [ 76.831894][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.845296][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.853853][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.861087][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 76.905546][ T5783] (null): rxe_set_mtu: Set mtu to 1024 [ 76.911304][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 76.919411][ T5782] (null): rxe_set_mtu: Set mtu to 1024 [ 76.928305][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.060294][ T5781] infiniband rxe0: set active [ 77.083623][ T790] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.100100][ T5781] infiniband rxe0: added rxe_eth0 [ 77.184693][ T5781] RDS/IB: rxe0: added [ 77.189653][ T5781] smc: adding ib device rxe0 with port count 1 [ 77.197725][ T5781] smc: ib device rxe0 port 1 has pnetid [ 77.205452][ T790] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.214664][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.440646][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.457186][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 77.569292][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 77.613619][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 77.670048][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.848871][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.873486][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.880930][ T5782] bridge_slave_0: entered allmulticast mode [ 77.889474][ T5782] bridge_slave_0: entered promiscuous mode [ 77.903422][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.910552][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.917842][ T5782] bridge_slave_1: entered allmulticast mode [ 77.925543][ T5782] bridge_slave_1: entered promiscuous mode [ 78.030881][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.043709][ T5781] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.052108][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.062533][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.069626][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.077304][ T5784] bridge_slave_0: entered allmulticast mode [ 78.084609][ T5784] bridge_slave_0: entered promiscuous mode [ 78.138244][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.145915][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.153347][ T5784] bridge_slave_1: entered allmulticast mode [ 78.160746][ T5784] bridge_slave_1: entered promiscuous mode [ 78.172881][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.180018][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.187482][ T5783] bridge_slave_0: entered allmulticast mode [ 78.194832][ T5783] bridge_slave_0: entered promiscuous mode [ 78.219176][ T5782] team0: Port device team_slave_0 added [ 78.249263][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.256888][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.265958][ T5783] bridge_slave_1: entered allmulticast mode [ 78.272822][ T5783] bridge_slave_1: entered promiscuous mode [ 78.287447][ T5782] team0: Port device team_slave_1 added [ 78.332209][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.371344][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.379013][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.405908][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.421306][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.437264][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.449169][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.468100][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.476409][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.502993][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.575963][ T5783] team0: Port device team_slave_0 added [ 78.584977][ T5784] team0: Port device team_slave_0 added [ 78.594203][ T5783] team0: Port device team_slave_1 added [ 78.620944][ T5784] team0: Port device team_slave_1 added [ 78.662997][ T5782] hsr_slave_0: entered promiscuous mode [ 78.669742][ T5782] hsr_slave_1: entered promiscuous mode [ 78.683513][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.690471][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.716526][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.743287][ T5796] Bluetooth: hci0: command tx timeout [ 78.765901][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.772916][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.799347][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.815966][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.823043][ T5796] Bluetooth: hci1: command tx timeout [ 78.828630][ T5796] Bluetooth: hci3: command tx timeout [ 78.834598][ T52] Bluetooth: hci2: command tx timeout [ 78.844980][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.874190][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.888009][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.895326][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.921693][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.026678][ T5784] hsr_slave_0: entered promiscuous mode [ 79.033284][ T5784] hsr_slave_1: entered promiscuous mode [ 79.039341][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.047591][ T5784] Cannot create hsr debugfs directory [ 79.067313][ T5783] hsr_slave_0: entered promiscuous mode [ 79.073579][ T5783] hsr_slave_1: entered promiscuous mode [ 79.079690][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.087655][ T5783] Cannot create hsr debugfs directory [ 79.275173][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 79.411037][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.422359][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.431946][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.475470][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.539357][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.548360][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.555849][ T5781] bridge_slave_0: entered allmulticast mode [ 79.563325][ T5781] bridge_slave_0: entered promiscuous mode [ 79.571415][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.578808][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.586096][ T5781] bridge_slave_1: entered allmulticast mode [ 79.595192][ T5781] bridge_slave_1: entered promiscuous mode [ 79.640805][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.655411][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.668638][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.678408][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.689319][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.700486][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.766371][ T5781] team0: Port device team_slave_0 added [ 79.783816][ T5781] team0: Port device team_slave_1 added [ 79.797765][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.821380][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.841716][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.848967][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.875589][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.895067][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.905218][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.916421][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.925316][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.957229][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.048880][ T5781] hsr_slave_0: entered promiscuous mode [ 80.056693][ T5781] hsr_slave_1: entered promiscuous mode [ 80.063476][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.071082][ T5781] Cannot create hsr debugfs directory [ 80.250492][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.277752][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.295808][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.311695][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.340649][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.348125][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.358468][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.365642][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.388501][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.395679][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.430606][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.437805][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.471809][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.515558][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.526340][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.536686][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.548191][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.610736][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.639669][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.646859][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.676487][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.683697][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.823356][ T52] Bluetooth: hci0: command tx timeout [ 80.904432][ T52] Bluetooth: hci2: command tx timeout [ 80.909883][ T52] Bluetooth: hci3: command tx timeout [ 80.912372][ T5796] Bluetooth: hci1: command tx timeout [ 80.939879][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.968022][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.984812][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.991937][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.028135][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.035382][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.096797][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.159277][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.173777][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.298601][ T5784] veth0_vlan: entered promiscuous mode [ 81.331188][ T5784] veth1_vlan: entered promiscuous mode [ 81.348149][ T5782] veth0_vlan: entered promiscuous mode [ 81.387830][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.413191][ T5782] veth1_vlan: entered promiscuous mode [ 81.433585][ T5784] veth0_macvtap: entered promiscuous mode [ 81.450835][ T5784] veth1_macvtap: entered promiscuous mode [ 81.510776][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.520076][ T5782] veth0_macvtap: entered promiscuous mode [ 81.545595][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.558282][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.568468][ T5782] veth1_macvtap: entered promiscuous mode [ 81.598384][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.607998][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.617600][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.629361][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.663112][ T5783] veth0_vlan: entered promiscuous mode [ 81.675707][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.687174][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.698808][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.755639][ T5783] veth1_vlan: entered promiscuous mode [ 81.775372][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.793135][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.807055][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.888992][ T5781] veth0_vlan: entered promiscuous mode [ 81.901034][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.911113][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.921860][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.931062][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.988970][ T5781] veth1_vlan: entered promiscuous mode [ 82.068157][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.084879][ T5783] veth0_macvtap: entered promiscuous mode [ 82.107325][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.121057][ T5783] veth1_macvtap: entered promiscuous mode [ 82.181801][ T5781] veth0_macvtap: entered promiscuous mode [ 82.239469][ T5781] veth1_macvtap: entered promiscuous mode [ 82.249554][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.267444][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.282711][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.302343][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.312216][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.332681][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.346457][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.372946][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.385077][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.404001][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.411610][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.425841][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.436627][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.454839][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.495661][ T5784] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.510016][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.517875][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.534003][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.539054][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.551493][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.561968][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.572005][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.583150][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.596374][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.606416][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.618907][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.628496][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.637431][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.660977][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.686697][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.702777][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.713427][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.724323][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.736201][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.748047][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.761292][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.770498][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.779547][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.788399][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.903790][ T5796] Bluetooth: hci0: command tx timeout [ 82.965881][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.984696][ T5796] Bluetooth: hci1: command tx timeout [ 82.990157][ T5796] Bluetooth: hci3: command tx timeout [ 82.992951][ T5795] Bluetooth: hci2: command tx timeout [ 83.013932][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.021955][ T5876] syzkaller1: entered promiscuous mode [ 83.034304][ T5876] syzkaller1: entered allmulticast mode [ 83.064802][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.073192][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.148249][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.170946][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.215673][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.236466][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.644259][ T5889] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.7' sets config #-1 [ 85.827453][ T52] Bluetooth: hci0: command tx timeout [ 85.832364][ T5796] Bluetooth: hci3: command tx timeout [ 85.832958][ T52] Bluetooth: hci2: command tx timeout [ 85.838231][ T5796] Bluetooth: hci1: command tx timeout [ 86.843398][ T34] cfg80211: failed to load regulatory.db [ 88.052440][ T5792] Bluetooth: hci3: command tx timeout [ 88.872346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 90.955094][ T5792] Bluetooth: hci3: command tx timeout [ 91.012606][ T790] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.717150][ T5939] jffs2: notice: (5939) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.958255][ T5851] IPVS: starting estimator thread 0... [ 92.064857][ T5947] IPVS: using max 19 ests per chain, 45600 per kthread [ 95.657911][ T5995] syzkaller1: entered promiscuous mode [ 95.672547][ T5995] syzkaller1: entered allmulticast mode [ 96.992354][ T5792] Bluetooth: hci3: command tx timeout [ 97.264767][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 97.786888][ T6010] jffs2: notice: (6010) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 100.372632][ T5787] IPVS: starting estimator thread 0... [ 100.472829][ T6035] IPVS: using max 20 ests per chain, 48000 per kthread [ 100.514531][ T6042] syzkaller1: entered promiscuous mode [ 100.520057][ T6042] syzkaller1: entered allmulticast mode [ 100.810666][ T6052] syz.2.43[6052]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 100.821338][ T6052] process 'syz.2.43' launched '/dev/fd/3' with NULL argv: empty string added [ 101.672353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 102.422406][ T5792] Bluetooth: hci3: command tx timeout [ 104.690674][ T23] IPVS: starting estimator thread 0... [ 104.874430][ T6076] IPVS: using max 18 ests per chain, 43200 per kthread [ 105.035714][ T8] libceph: connect (1)[c::]:6789 error -101 [ 105.064974][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 105.324143][ T8] libceph: connect (1)[c::]:6789 error -101 [ 105.330383][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 106.354428][ T6079] ceph: No mds server is up or the cluster is laggy [ 106.363621][ T9] libceph: connect (1)[c::]:6789 error -101 [ 106.369640][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 106.414940][ T6094] syzkaller1: entered promiscuous mode [ 106.420458][ T6094] syzkaller1: entered allmulticast mode [ 108.487768][ T5792] Bluetooth: hci3: command tx timeout [ 112.710142][ T5787] IPVS: starting estimator thread 0... [ 112.853425][ T6142] IPVS: using max 18 ests per chain, 43200 per kthread [ 114.472358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.592327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.450553][ T6183] syzkaller1: entered promiscuous mode [ 120.462400][ T6183] syzkaller1: entered allmulticast mode [ 122.262415][ T5795] Bluetooth: hci3: command tx timeout [ 124.712360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.383474][ T6228] can0: slcan on ptm0. [ 129.612944][ T6223] can0 (unregistered): slcan off ptm0. [ 130.980364][ T5795] Bluetooth: hci3: command 0x0405 tx timeout [ 131.141167][ T6250] ======================================================= [ 131.141167][ T6250] WARNING: The mand mount option has been deprecated and [ 131.141167][ T6250] and is ignored by this kernel. Remove the mand [ 131.141167][ T6250] option from the mount to silence this warning. [ 131.141167][ T6250] ======================================================= [ 131.210120][ T6250] jffs2: notice: (6250) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.378831][ T6250] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 132.964820][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.973003][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.090908][ T5795] Bluetooth: hci3: link tx timeout [ 134.097132][ T5795] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 134.109042][ T5795] Bluetooth: hci3: link tx timeout [ 134.114553][ T5795] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.158967][ T5795] Bluetooth: hci3: link tx timeout [ 134.164469][ T5795] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 134.172113][ T5795] Bluetooth: hci3: link tx timeout [ 134.177551][ T5795] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.082575][ T5795] Bluetooth: hci3: command 0x0405 tx timeout [ 137.168253][ T6311] can0: slcan on ptm0. [ 137.275363][ T6310] can0 (unregistered): slcan off ptm0. [ 138.102413][ T5098] Bluetooth: hci3: command 0x0405 tx timeout [ 140.252409][ T5098] Bluetooth: hci3: command 0x0405 tx timeout [ 140.402274][ C0] sched: RT throttling activated [ 143.001469][ T6353] syzkaller1: entered promiscuous mode [ 143.028605][ T6353] syzkaller1: entered allmulticast mode [ 144.278082][ T5792] Bluetooth: hci3: command 0x0405 tx timeout [ 146.462568][ T5792] Bluetooth: hci3: command 0x0405 tx timeout [ 150.497368][ T6386] can0: slcan on ptm0. [ 150.852895][ T6383] can0 (unregistered): slcan off ptm0. [ 151.293944][ T6399] syzkaller1: entered promiscuous mode [ 151.309787][ T6399] syzkaller1: entered allmulticast mode [ 153.062873][ T5098] Bluetooth: hci3: command 0x0405 tx timeout [ 155.054388][ T6431] can0: slcan on ptm0. [ 156.693857][ T6430] can0 (unregistered): slcan off ptm0. [ 159.255746][ T6457] syzkaller1: entered promiscuous mode [ 159.261275][ T6457] syzkaller1: entered allmulticast mode [ 160.552300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 160.620849][ T5792] Bluetooth: hci3: command 0x0405 tx timeout [ 161.077162][ T6471] can0: slcan on ptm0. [ 161.145315][ T6470] can0 (unregistered): slcan off ptm0. [ 161.373894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 165.672350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 165.905578][ T6505] syzkaller1: entered promiscuous mode [ 165.911115][ T6505] syzkaller1: entered allmulticast mode [ 166.732426][ T5098] Bluetooth: hci3: command 0x0405 tx timeout [ 171.503902][ T6541] syzkaller1: entered promiscuous mode [ 171.510073][ T6541] syzkaller1: entered allmulticast mode [ 174.476571][ T5792] Bluetooth: hci3: command 0x0405 tx timeout [ 176.343118][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 176.594686][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 176.619951][ T23] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 176.630809][ T23] usb 4-1: config 0 has no interface number 0 [ 176.726389][ T23] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 176.832507][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.843103][ T23] usb 4-1: Product: syz [ 176.847416][ T23] usb 4-1: Manufacturer: syz [ 176.852109][ T23] usb 4-1: SerialNumber: syz [ 176.918562][ T23] usb 4-1: config 0 descriptor?? [ 176.968356][ T23] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 177.722299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 177.882285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 178.330249][ T5792] Bluetooth: hci3: command 0x0405 tx timeout [ 178.413646][ T23] usb 4-1: qt2_attach - failed to power on unit: -71 [ 178.420637][ T23] quatech2: probe of 4-1:0.51 failed with error -71 [ 178.466621][ T23] usb 4-1: USB disconnect, device number 2 [ 180.306763][ T6605] syzkaller1: entered promiscuous mode [ 181.385872][ T5792] Bluetooth: hci3: command 0x0405 tx timeout [ 181.682429][ T6605] syzkaller1: entered allmulticast mode [ 190.329336][ T6665] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 195.464351][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.712377][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.521182][ T6704] syzkaller1: entered promiscuous mode [ 197.535941][ T6704] syzkaller1: entered allmulticast mode [ 199.382383][ T5098] Bluetooth: hci3: command 0x0405 tx timeout [ 202.554845][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 202.554875][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 202.560874][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 205.778587][ T6756] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 205.806352][ T6756] CIFS: Attempting to mount //127.0.0.1/share [ 207.248240][ T6756] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 207.273644][ T6756] CIFS: VFS: cifs_mount failed w/return code = -112 [ 207.820146][ T6771] syzkaller1: entered promiscuous mode [ 207.957163][ T6771] syzkaller1: entered allmulticast mode [ 209.386497][ T5795] Bluetooth: hci3: command 0x0405 tx timeout [ 213.602182][ T6809] CIFS: Attempting to mount //127.0.0.1/share [ 214.611503][ T6809] CIFS: VFS: Error connecting to socket. Aborting operation. [ 214.632527][ T6809] CIFS: VFS: cifs_mount failed w/return code = -4 [ 217.245777][ T6833] syzkaller1: entered promiscuous mode [ 217.537681][ T6833] syzkaller1: entered allmulticast mode [ 218.371153][ T5098] Bluetooth: hci3: command 0x0405 tx timeout [ 224.562702][ T6878] CIFS: Attempting to mount //127.0.0.1/share [ 224.823467][ T6878] CIFS: VFS: cifs_mount failed w/return code = -512 [ 227.231766][ T5098] Bluetooth: hci3: command 0x0405 tx timeout [ 227.308544][ T6899] syzkaller1: entered promiscuous mode [ 227.328339][ T6899] syzkaller1: entered allmulticast mode [ 230.006790][ T5098] Bluetooth: hci3: command 0x0405 tx timeout [ 235.495586][ T6950] CIFS: Attempting to mount //127.0.0.1/share [ 236.632876][ T6952] ------------[ cut here ]------------ [ 236.639063][ T6952] WARNING: CPU: 1 PID: 6952 at fs/smb/client/smb2ops.c:97 smb2_add_credits+0x1365/0x2600 [ 236.649073][ T6952] Modules linked in: [ 236.653055][ T6952] CPU: 1 PID: 6952 Comm: cifsd Not tainted syzkaller #0 [ 236.660012][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 236.670162][ T6952] RIP: 0010:smb2_add_credits+0x1365/0x2600 [ 236.676180][ T6952] Code: 03 42 80 3c 28 00 74 08 4c 89 e7 e8 95 0a 3c ff 49 8b 34 24 48 c7 c7 a0 3b 17 8b e8 b5 56 e7 07 e9 eb f9 ff ff e8 cb 01 e3 fe <0f> 0b e9 d9 ef ff ff e8 bf 01 e3 fe c6 05 f0 65 d3 0c 01 48 c7 c7 [ 236.695894][ T6952] RSP: 0018:ffffc9000342f560 EFLAGS: 00010293 [ 236.701986][ T6952] RAX: ffffffff82a4dcd5 RBX: ffff88807a6b02c0 RCX: ffff888030710000 [ 236.710031][ T6952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.718093][ T6952] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 236.726173][ T6952] R10: dffffc0000000000 R11: fffff52000685e9c R12: 1ffff1100f4d6058 [ 236.734219][ T6952] R13: dffffc0000000000 R14: ffff88807a6b0000 R15: 0000000000000000 [ 236.742644][ T6952] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 236.750119][ T6956] syzkaller1: entered promiscuous mode [ 236.751587][ T6952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.751621][ T6952] CR2: 0000200000004000 CR3: 000000005e9de000 CR4: 00000000003506e0 [ 236.751639][ T6952] Call Trace: [ 236.774491][ T6956] syzkaller1: entered allmulticast mode [ 236.775188][ T6952] [ 236.783711][ T6952] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 236.789437][ T6952] cifs_compound_last_callback+0x164/0x2a0 [ 236.795345][ T6952] ? cifs_compound_callback+0x2c0/0x2c0 [ 236.800927][ T6952] ? do_raw_spin_unlock+0x121/0x230 [ 236.806186][ T6952] cifs_abort_connection+0x937/0x1050 [ 236.811594][ T6952] ? cifs_reconnect+0xb97/0x15d0 [ 236.816648][ T6952] ? cifs_tcp_ses_needs_reconnect+0x450/0x450 [ 236.822784][ T6952] ? do_raw_spin_unlock+0x121/0x230 [ 236.828015][ T6952] cifs_reconnect+0xb9f/0x15d0 [ 236.832864][ T6952] ? cifs_readv_from_socket+0x4c3/0x8d0 [ 236.838439][ T6952] ? cifs_mark_tcp_ses_conns_for_reconnect+0x800/0x800 [ 236.845737][ T6952] ? __rwlock_init+0x150/0x150 [ 236.850531][ T6952] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 236.855978][ T6952] ? do_raw_spin_unlock+0x121/0x230 [ 236.861207][ T6952] cifs_readv_from_socket+0x782/0x8d0 [ 236.866661][ T6952] cifs_demultiplex_thread+0x53b/0x2ad0 [ 236.872314][ T6952] ? cifs_echo_request+0x340/0x340 [ 236.877449][ T6952] ? verify_lock_unused+0x140/0x140 [ 236.882701][ T6952] ? rcu_force_quiescent_state+0x220/0x220 [ 236.888535][ T6952] ? finish_task_switch+0x440/0x8f0 [ 236.893820][ T6952] ? __lock_acquire+0x7eb0/0x7eb0 [ 236.898878][ T6952] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 236.904843][ T6952] ? _raw_spin_unlock+0x40/0x40 [ 236.909713][ T6952] ? __kthread_parkme+0x71/0x1c0 [ 236.914734][ T6952] ? __kthread_parkme+0x15b/0x1c0 [ 236.919780][ T6952] kthread+0x2fa/0x390 [ 236.923889][ T6952] ? cifs_echo_request+0x340/0x340 [ 236.929020][ T6952] ? kthread_blkcg+0xd0/0xd0 [ 236.933704][ T6952] ret_from_fork+0x48/0x80 [ 236.938161][ T6952] ? kthread_blkcg+0xd0/0xd0 [ 236.943168][ T6952] ret_from_fork_asm+0x11/0x20 [ 236.947974][ T6952] [ 236.951006][ T6952] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 236.958292][ T6952] CPU: 1 PID: 6952 Comm: cifsd Not tainted syzkaller #0 [ 236.965239][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 236.975305][ T6952] Call Trace: [ 236.978593][ T6952] [ 236.981530][ T6952] dump_stack_lvl+0x18c/0x250 [ 236.986231][ T6952] ? show_regs_print_info+0x20/0x20 [ 236.991446][ T6952] ? load_image+0x420/0x420 [ 236.995972][ T6952] panic+0x2ca/0x720 [ 236.999893][ T6952] ? bpf_jit_dump+0xd0/0xd0 [ 237.004424][ T6952] ? ret_from_fork_asm+0x11/0x20 [ 237.009384][ T6952] __warn+0x2e0/0x470 [ 237.013376][ T6952] ? smb2_add_credits+0x1365/0x2600 [ 237.018594][ T6952] ? smb2_add_credits+0x1365/0x2600 [ 237.023809][ T6952] report_bug+0x2be/0x4f0 [ 237.028158][ T6952] ? smb2_add_credits+0x1365/0x2600 [ 237.033369][ T6952] ? smb2_add_credits+0x1365/0x2600 [ 237.038576][ T6952] ? smb2_add_credits+0x1367/0x2600 [ 237.043783][ T6952] handle_bug+0xcf/0x120 [ 237.048048][ T6952] exc_invalid_op+0x1a/0x50 [ 237.052573][ T6952] asm_exc_invalid_op+0x1a/0x20 [ 237.057441][ T6952] RIP: 0010:smb2_add_credits+0x1365/0x2600 [ 237.063262][ T6952] Code: 03 42 80 3c 28 00 74 08 4c 89 e7 e8 95 0a 3c ff 49 8b 34 24 48 c7 c7 a0 3b 17 8b e8 b5 56 e7 07 e9 eb f9 ff ff e8 cb 01 e3 fe <0f> 0b e9 d9 ef ff ff e8 bf 01 e3 fe c6 05 f0 65 d3 0c 01 48 c7 c7 [ 237.082883][ T6952] RSP: 0018:ffffc9000342f560 EFLAGS: 00010293 [ 237.088967][ T6952] RAX: ffffffff82a4dcd5 RBX: ffff88807a6b02c0 RCX: ffff888030710000 [ 237.096952][ T6952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.104937][ T6952] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 237.112923][ T6952] R10: dffffc0000000000 R11: fffff52000685e9c R12: 1ffff1100f4d6058 [ 237.120907][ T6952] R13: dffffc0000000000 R14: ffff88807a6b0000 R15: 0000000000000000 [ 237.128906][ T6952] ? smb2_add_credits+0x1365/0x2600 [ 237.134137][ T6952] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 237.139795][ T6952] cifs_compound_last_callback+0x164/0x2a0 [ 237.145627][ T6952] ? cifs_compound_callback+0x2c0/0x2c0 [ 237.151200][ T6952] ? do_raw_spin_unlock+0x121/0x230 [ 237.156429][ T6952] cifs_abort_connection+0x937/0x1050 [ 237.161823][ T6952] ? cifs_reconnect+0xb97/0x15d0 [ 237.166784][ T6952] ? cifs_tcp_ses_needs_reconnect+0x450/0x450 [ 237.172875][ T6952] ? do_raw_spin_unlock+0x121/0x230 [ 237.178094][ T6952] cifs_reconnect+0xb9f/0x15d0 [ 237.182889][ T6952] ? cifs_readv_from_socket+0x4c3/0x8d0 [ 237.188449][ T6952] ? cifs_mark_tcp_ses_conns_for_reconnect+0x800/0x800 [ 237.195315][ T6952] ? __rwlock_init+0x150/0x150 [ 237.200094][ T6952] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 237.205402][ T6952] ? do_raw_spin_unlock+0x121/0x230 [ 237.210625][ T6952] cifs_readv_from_socket+0x782/0x8d0 [ 237.216035][ T6952] cifs_demultiplex_thread+0x53b/0x2ad0 [ 237.221628][ T6952] ? cifs_echo_request+0x340/0x340 [ 237.226759][ T6952] ? verify_lock_unused+0x140/0x140 [ 237.231982][ T6952] ? rcu_force_quiescent_state+0x220/0x220 [ 237.237815][ T6952] ? finish_task_switch+0x440/0x8f0 [ 237.243050][ T6952] ? __lock_acquire+0x7eb0/0x7eb0 [ 237.248106][ T6952] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 237.254033][ T6952] ? _raw_spin_unlock+0x40/0x40 [ 237.258905][ T6952] ? __kthread_parkme+0x71/0x1c0 [ 237.263867][ T6952] ? __kthread_parkme+0x15b/0x1c0 [ 237.268913][ T6952] kthread+0x2fa/0x390 [ 237.272997][ T6952] ? cifs_echo_request+0x340/0x340 [ 237.278128][ T6952] ? kthread_blkcg+0xd0/0xd0 [ 237.282733][ T6952] ret_from_fork+0x48/0x80 [ 237.287164][ T6952] ? kthread_blkcg+0xd0/0xd0 [ 237.291785][ T6952] ret_from_fork_asm+0x11/0x20 [ 237.296586][ T6952] [ 237.299746][ T6952] Kernel Offset: disabled [ 237.304131][ T6952] Rebooting in 86400 seconds..