last executing test programs: 3m55.75732403s ago: executing program 1 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000023c0)=""/4103, 0x1007}], 0x1, 0x5, 0x0) unshare(0x64000600) 3m41.416286389s ago: executing program 1 (id=87): socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffff7fffffffc01, 0xf) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRESDEC=r3], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0xc0cc810) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 3m39.945777341s ago: executing program 1 (id=91): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2b02, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x1404, 0x204, 0x70bd26, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0x8, 0x8, '\x00', 0x0, &(0x7f0000000140)=[0x0]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0xb, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000006, 0xfffffffffffffffa, 0xc8, 0xb6da, 0x80000a5, 0xb7, 0xb6, 0x8000000000000002, 0x4000000008, 0x7, 0xfff, 0x6, 0xfb, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x8, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1be, 0xffffffff, 0x8000000000000003, 0x5, 0x0, 0x7, 0x72, 0x9, 0x2000000002, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x4, 0x6, 0xfffffffffffffffd, 0x7, 0xf1, 0xfffffffffffffffe, 0x5, 0x2, 0x5, 0x2, 0xfffffffffffffffd, 0x9, 0x7, 0xdffffffffffffd, 0xd, 0x81, 0x8, 0x7fff, 0x6, 0xe, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x2, 0x1, 0xf, 0x79d, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0xf, 0x6, 0xb, 0x1, 0x10003, 0x1, 0x10000, 0x1ff, 0x6, 0x0, 0x7, 0x7, 0x0, 0xfc0, 0x7, 0xaad, 0x8000000000007, 0x2, 0x8, 0x200e2, 0x6, 0x6, 0x8, 0xa, 0x0, 0x9, 0x5, 0x40, 0x8000, 0x83d0, 0xf0, 0x100000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x7ffffffe) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000120000000000000000000000030005000000000002004e22ac1414bb000000000000000008001200000001000200000006000000060000000000002000000000000000000a010101000000000000000000000000ac14140000000000000000000000000005000600330000000a004e2300000002ff010000000000000000000000007d5523ea54a32581b2968d60fd010001cd00000000000000"], 0x90}}, 0x44000) pwritev(r0, &(0x7f00000021c0)=[{&(0x7f0000000080)="e4", 0xfffe}], 0x10000000000000a7, 0x2000, 0x10000) 3m32.522088481s ago: executing program 1 (id=96): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r5 = socket(0xa, 0x3, 0x87) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000480)={@private2, 0x18, r7}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000540)=0xd172, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000140)="41000200010001", 0x7) 3m32.213848978s ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/128, 0x80}, 0x2106) r5 = io_uring_setup(0x549a, &(0x7f0000000000)={0x0, 0x70e6, 0x1000, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, 0x0, 0x2) fsopen(&(0x7f00000000c0)='pstore\x00', 0x0) 3m29.790669149s ago: executing program 1 (id=101): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000001140)=0x30000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xd4ba2000) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) 3m18.09278055s ago: executing program 4 (id=117): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x109540) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xe7d, 0x3ff, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 3m14.945359903s ago: executing program 4 (id=121): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 3m13.994859009s ago: executing program 32 (id=101): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000001140)=0x30000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xd4ba2000) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) 3m13.911008281s ago: executing program 4 (id=125): socketpair$unix(0x1, 0x832ede98a4082b94, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x70bd26, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_simple={0x34, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "82af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x10000084) write$P9_RVERSION(r5, 0x0, 0x15) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x0, 0xffffffffffffffff}}, './file0/file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x14000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@ignoreqv}], [{@euid_gt={'euid>', r7}}, {@appraise_type}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, ']\']@.,]$}\')'}}, {@dont_hash}, {@uid_lt={'uid<', r7}}], 0x6b}}) 3m13.218942448s ago: executing program 4 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) socket$kcm(0x2b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) 3m10.098057528s ago: executing program 4 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r3) 3m8.76708882s ago: executing program 4 (id=130): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r4, 0x25, 0x2, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x62000400) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m52.699083702s ago: executing program 33 (id=130): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r4, 0x25, 0x2, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x62000400) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.491689542s ago: executing program 2 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r6, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r6, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)='i', 0x1) sendto$inet(r6, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x84000) 18.231178179s ago: executing program 2 (id=333): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b02, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x28, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf62, 0x100}, 0x0) openat(0xffffffffffffffff, 0x0, 0x200102, 0x1a0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) shutdown(r2, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ptrace$cont(0x18, 0x0, 0x3, 0x4ed46c22) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x2}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x8, &(0x7f0000006580)=0x4d61, 0x4) 12.30337113s ago: executing program 2 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, 0x0, 0x4000) 10.369534346s ago: executing program 3 (id=344): r0 = creat(0x0, 0x4b) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x101, 0x259ab454}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x8000) prlimit64(r2, 0xa, &(0x7f00000000c0)={0xd35, 0x6}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000000040), 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, 0x0, 0x40) 7.60078763s ago: executing program 3 (id=347): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) syz_emit_ethernet(0x8a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setgroups(0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x1, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) 7.325406452s ago: executing program 2 (id=348): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0x0, 0xc7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd, 0x0, 0x0, 0x0, 0x4}, {}, {0x4000000, 0x0, 0x1}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2}, {}, {0x9548, 0x0, 0xfff}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff9}, {}, {}, {0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x0, 0x41}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40}, {0x2}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x20004000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r3, &(0x7f00000003c0), 0x4) recvmmsg(r3, 0x0, 0x0, 0x40000002, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.375022023s ago: executing program 0 (id=349): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000080)={0x35, &(0x7f0000000140)=[{0x29, '\x00', @st={0x4, [{0x1, @svalue=0x6}, {0x1, @svalue=0xd91}, {0x1, @uvalue=0xff}, {0x1, @uvalue=0x7}]}, 0x7f}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) open(&(0x7f0000000000)='.\x00', 0x1000000, 0x0) 5.199122536s ago: executing program 0 (id=350): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) landlock_restrict_self(r2, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 5.155603893s ago: executing program 3 (id=351): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000003a80)={0x7, 0x1, 0x0, [{0xffffffffffffffc0, 0x7, 0x5, 0x6, 0x0, 0x0, 0x4b, '\x00', 0x4}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x35, 0x0, 0x0, 0x400}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}}) readv(r0, &(0x7f0000000440), 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.950169487s ago: executing program 2 (id=352): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r3 = mq_open(&(0x7f0000000040)='a\x7f\x00\xca\x06x\a\x00\x00\x00\x00\x00g\xd4\xb8\xcd\x18\xbb', 0xc3, 0x48, 0x0) mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.896225124s ago: executing program 0 (id=353): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000080)={0x35, &(0x7f0000000140)=[{0x29, '\x00', @st={0x4, [{0x1, @svalue=0x6}, {0x1, @svalue=0xd91}, {0x1, @uvalue=0xff}, {0x1, @uvalue=0x7}]}, 0x7f}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) 3.307028206s ago: executing program 3 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0xa, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) getdents64(r5, 0x0, 0xc0) getdents(r5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x18) 2.985376916s ago: executing program 0 (id=355): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) open(&(0x7f0000000000)='.\x00', 0x1000000, 0x0) 1.702968206s ago: executing program 3 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, 0x0, 0x4000) 1.613481708s ago: executing program 2 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, 0x0, 0x4000) 0s ago: executing program 0 (id=358): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000080)={0x35, &(0x7f0000000140)=[{0x29, '\x00', @st={0x4, [{0x1, @svalue=0x6}, {0x1, @svalue=0xd91}, {0x1, @uvalue=0xff}, {0x1, @uvalue=0x7}]}, 0x7f}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) open(&(0x7f0000000000)='.\x00', 0x1000000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. [ 92.480898][ T1028] cfg80211: failed to load regulatory.db [ 93.151085][ T5788] cgroup: Unknown subsys name 'net' [ 93.422799][ T5788] cgroup: Unknown subsys name 'cpuset' [ 93.486965][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.547419][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.134235][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.135334][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.148539][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.160741][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.164305][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.164950][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.168415][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.188482][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.193676][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.207917][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.211658][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.218366][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.233523][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.236678][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.237559][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.238692][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.242510][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.246766][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.263378][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.268853][ T5120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.278617][ T5120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.324971][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.330414][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.337230][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.352252][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.215406][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 99.332471][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 99.470197][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 99.560967][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 99.573399][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 99.714265][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.714369][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.714548][ T5804] bridge_slave_0: entered allmulticast mode [ 99.722640][ T5804] bridge_slave_0: entered promiscuous mode [ 99.802691][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.802782][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.802933][ T5804] bridge_slave_1: entered allmulticast mode [ 99.804916][ T5804] bridge_slave_1: entered promiscuous mode [ 99.900322][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.900516][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.900646][ T5803] bridge_slave_0: entered allmulticast mode [ 99.902528][ T5803] bridge_slave_0: entered promiscuous mode [ 99.984955][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.985103][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.985618][ T5803] bridge_slave_1: entered allmulticast mode [ 99.993031][ T5803] bridge_slave_1: entered promiscuous mode [ 100.051320][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.073743][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.073859][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.073997][ T5805] bridge_slave_0: entered allmulticast mode [ 100.075872][ T5805] bridge_slave_0: entered promiscuous mode [ 100.142091][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.247290][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.247404][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.247808][ T5805] bridge_slave_1: entered allmulticast mode [ 100.249799][ T5805] bridge_slave_1: entered promiscuous mode [ 100.328374][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.351510][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.351690][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.351836][ T5806] bridge_slave_0: entered allmulticast mode [ 100.353703][ T5806] bridge_slave_0: entered promiscuous mode [ 100.355763][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.355894][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.356866][ T5802] bridge_slave_0: entered allmulticast mode [ 100.364785][ T5802] bridge_slave_0: entered promiscuous mode [ 100.397890][ T5811] Bluetooth: hci3: command tx timeout [ 100.397895][ T5120] Bluetooth: hci4: command tx timeout [ 100.398056][ T5811] Bluetooth: hci2: command tx timeout [ 100.398065][ T5120] Bluetooth: hci1: command tx timeout [ 100.398154][ T5811] Bluetooth: hci0: command tx timeout [ 100.446327][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.468044][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.468161][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.468326][ T5802] bridge_slave_1: entered allmulticast mode [ 100.470243][ T5802] bridge_slave_1: entered promiscuous mode [ 100.472434][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.472552][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.472688][ T5806] bridge_slave_1: entered allmulticast mode [ 100.474689][ T5806] bridge_slave_1: entered promiscuous mode [ 100.543634][ T5804] team0: Port device team_slave_0 added [ 100.573540][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.620375][ T5804] team0: Port device team_slave_1 added [ 100.641756][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.697706][ T5803] team0: Port device team_slave_0 added [ 100.719600][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.725888][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.762229][ T5803] team0: Port device team_slave_1 added [ 100.786494][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.789138][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.790212][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.790223][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.790243][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.869591][ T5805] team0: Port device team_slave_0 added [ 100.908054][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.908069][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.908088][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.943705][ T5805] team0: Port device team_slave_1 added [ 101.001462][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.001490][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.001510][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.052166][ T5802] team0: Port device team_slave_0 added [ 101.054477][ T5806] team0: Port device team_slave_0 added [ 101.069483][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.069496][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.069516][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.119863][ T5802] team0: Port device team_slave_1 added [ 101.129375][ T5806] team0: Port device team_slave_1 added [ 101.148956][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.148970][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.148989][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.229701][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.229715][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.229736][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.719621][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.719635][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.719654][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.720855][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.720870][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.720897][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.832117][ T5804] hsr_slave_0: entered promiscuous mode [ 101.833356][ T5804] hsr_slave_1: entered promiscuous mode [ 101.849182][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.849201][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.849229][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.850938][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.850953][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.850975][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.019431][ T5803] hsr_slave_0: entered promiscuous mode [ 102.020416][ T5803] hsr_slave_1: entered promiscuous mode [ 102.021284][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 102.021386][ T5803] Cannot create hsr debugfs directory [ 102.103218][ T5805] hsr_slave_0: entered promiscuous mode [ 102.104320][ T5805] hsr_slave_1: entered promiscuous mode [ 102.105006][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 102.105025][ T5805] Cannot create hsr debugfs directory [ 102.239643][ T5802] hsr_slave_0: entered promiscuous mode [ 102.240699][ T5802] hsr_slave_1: entered promiscuous mode [ 102.241442][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 102.241460][ T5802] Cannot create hsr debugfs directory [ 102.257559][ T5806] hsr_slave_0: entered promiscuous mode [ 102.261697][ T5806] hsr_slave_1: entered promiscuous mode [ 102.264228][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 102.264294][ T5806] Cannot create hsr debugfs directory [ 102.477093][ T60] Bluetooth: hci1: command tx timeout [ 102.477137][ T60] Bluetooth: hci2: command tx timeout [ 102.477172][ T60] Bluetooth: hci3: command tx timeout [ 102.477196][ T60] Bluetooth: hci0: command tx timeout [ 102.477220][ T60] Bluetooth: hci4: command tx timeout [ 103.225326][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.266923][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.305433][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.355955][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.486465][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.534570][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.575233][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.592685][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.767058][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.808209][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.844649][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.901817][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.048929][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.103775][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.138009][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.192682][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.300161][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.353188][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.408414][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.454178][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.477090][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.543899][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.556327][ T5811] Bluetooth: hci4: command tx timeout [ 104.556362][ T5811] Bluetooth: hci0: command tx timeout [ 104.556386][ T5811] Bluetooth: hci3: command tx timeout [ 104.556409][ T5811] Bluetooth: hci2: command tx timeout [ 104.556434][ T5811] Bluetooth: hci1: command tx timeout [ 104.618264][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.618775][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.642770][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.685208][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.685937][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.783637][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.824630][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.824788][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.858251][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.880603][ T389] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.881510][ T389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.971721][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.003328][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.031889][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.036325][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.075052][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.083607][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.174718][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.201859][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.237945][ T1443] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.238048][ T1443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.293545][ T1443] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.303770][ T1443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.369755][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.419792][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.419936][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.472260][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.474289][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.625527][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.766971][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.978600][ T5804] veth0_vlan: entered promiscuous mode [ 106.020274][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.070126][ T5804] veth1_vlan: entered promiscuous mode [ 106.118685][ T5803] veth0_vlan: entered promiscuous mode [ 106.201271][ T5803] veth1_vlan: entered promiscuous mode [ 106.262921][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.329789][ T5804] veth0_macvtap: entered promiscuous mode [ 106.374368][ T5804] veth1_macvtap: entered promiscuous mode [ 106.437052][ T5803] veth0_macvtap: entered promiscuous mode [ 106.472872][ T5803] veth1_macvtap: entered promiscuous mode [ 106.485950][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.522029][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.551301][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.574194][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.591612][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.593310][ T5802] veth0_vlan: entered promiscuous mode [ 106.610933][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.611061][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.640072][ T60] Bluetooth: hci1: command tx timeout [ 106.640109][ T60] Bluetooth: hci2: command tx timeout [ 106.640134][ T60] Bluetooth: hci3: command tx timeout [ 106.640157][ T60] Bluetooth: hci0: command tx timeout [ 106.640180][ T60] Bluetooth: hci4: command tx timeout [ 106.641063][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.688777][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.753480][ T5802] veth1_vlan: entered promiscuous mode [ 106.773149][ T389] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.819085][ T389] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.842565][ T389] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.864487][ T389] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.983106][ T5805] veth0_vlan: entered promiscuous mode [ 107.171824][ T5805] veth1_vlan: entered promiscuous mode [ 107.201346][ T1443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.201371][ T1443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.234881][ T5806] veth0_vlan: entered promiscuous mode [ 107.262841][ T5802] veth0_macvtap: entered promiscuous mode [ 107.304639][ T5802] veth1_macvtap: entered promiscuous mode [ 107.319634][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.319652][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.349082][ T5806] veth1_vlan: entered promiscuous mode [ 107.404413][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.404435][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.473253][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.509825][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.509850][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.512648][ T5805] veth0_macvtap: entered promiscuous mode [ 107.543708][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.567237][ T5805] veth1_macvtap: entered promiscuous mode [ 107.605229][ T1109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.624663][ T1109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.644914][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.662897][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.683853][ T5806] veth0_macvtap: entered promiscuous mode [ 107.759207][ T5806] veth1_macvtap: entered promiscuous mode [ 107.777650][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.881451][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.046023][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.057553][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.063837][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.081581][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.144671][ T5921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 108.144698][ T5921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 108.144737][ T5921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 108.144804][ T5921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 108.150559][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.259365][ T5921] syz.3.4 (5921) used greatest stack depth: 17656 bytes left [ 108.447216][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.447240][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.450549][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.558965][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.631666][ T1443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.674897][ T1443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.699819][ T1443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.088170][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.088194][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.265892][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 109.297100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.336296][ T1443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.336318][ T1443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.618060][ T5932] nbd: socks must be embedded in a SOCK_ITEM attr [ 111.216122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.265492][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.265519][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.333235][ T5862] udevd[5862]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 111.431902][ T5862] udevd[5862]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 111.501725][ T389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.501751][ T389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.762364][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.762392][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.526168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.532697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.535099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.962451][ T5965] team0: Port device vxlan0 added [ 112.962828][ T389] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.963181][ T389] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.963423][ T389] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.963466][ T389] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.414669][ T5975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.731168][ T5974] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 115.695123][ T5986] orangefs_mount: mount request failed with -4 [ 119.683870][ T6007] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.728561][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 119.756196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.766217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.796131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.805619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.806558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.956414][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.156130][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 120.200207][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.200251][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.200293][ T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 120.200317][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.255158][ T10] usb 2-1: config 0 descriptor?? [ 122.655553][ T10] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 124.719657][ T6042] usb 2-1: USB disconnect, device number 2 [ 125.912875][ T6038] fido_id[6038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 126.005657][ T6052] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.727244][ T6077] tipc: Started in network mode [ 129.727276][ T6077] tipc: Node identity 4, cluster identity 4711 [ 129.727290][ T6077] tipc: Node number set to 4 [ 134.424474][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.424576][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.968258][ T36] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 145.557679][ T36] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 145.557713][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.557734][ T36] usb 1-1: config 0 has no interfaces? [ 145.583233][ T36] usb 1-1: language id specifier not provided by device, defaulting to English [ 145.675084][ T36] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 145.675120][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.675161][ T36] usb 1-1: Manufacturer: ࡠ [ 145.675191][ T36] usb 1-1: SerialNumber: 䀁 [ 145.765328][ T36] usb 1-1: config 0 descriptor?? [ 146.013348][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.013941][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.041456][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.62'. [ 146.769034][ T5890] usb 1-1: USB disconnect, device number 2 [ 155.797542][ T36] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 155.948491][ T36] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.948528][ T36] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.948571][ T36] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.948595][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.249125][ T36] usb 4-1: usb_control_msg returned -32 [ 156.249182][ T36] usbtmc 4-1:16.0: can't read capabilities [ 158.599823][ T5888] usb 4-1: USB disconnect, device number 2 [ 160.140620][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 160.219775][ T6240] vlan2: entered promiscuous mode [ 160.220137][ T6240] vlan2: entered allmulticast mode [ 160.220154][ T6240] hsr_slave_1: entered allmulticast mode [ 167.936107][ T6276] ubi31: attaching mtd0 [ 167.940744][ T6276] ubi31: scanning is finished [ 167.940766][ T6276] ubi31: empty MTD device detected [ 169.326249][ T6276] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 175.210722][ T6313] Bluetooth: MGMT ver 1.23 [ 177.367856][ T5811] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 177.374649][ T5120] Bluetooth: hci2: command 0x0401 tx timeout [ 177.933765][ T6330] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.569771][ T5811] Bluetooth: hci4: command 0x0405 tx timeout [ 190.006643][ T6388] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 190.010487][ T6388] overlayfs: overlapping lowerdir path [ 192.306807][ T6389] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 192.519636][ T6392] Bluetooth: MGMT ver 1.23 [ 194.212371][ T6408] netlink: 'syz.4.125': attribute type 4 has an invalid length. [ 194.227296][ T6408] netlink: 'syz.4.125': attribute type 7 has an invalid length. [ 194.227313][ T6408] netlink: 'syz.4.125': attribute type 8 has an invalid length. [ 194.228894][ T6408] 9p: Bad value for 'wfdno' [ 194.565357][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.590668][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.593310][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.594402][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.595567][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.922612][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.922683][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.052452][ T5811] Bluetooth: hci5: command tx timeout [ 199.136403][ T60] Bluetooth: hci5: command tx timeout [ 201.610805][ T60] Bluetooth: hci5: command tx timeout [ 201.630950][ T6450] syz.2.131 (6450) used greatest stack depth: 16448 bytes left [ 201.740575][ T5982] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 202.102108][ T5982] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 202.102147][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.102180][ T5982] usb 4-1: Product: syz [ 202.102191][ T5982] usb 4-1: Manufacturer: syz [ 202.102216][ T5982] usb 4-1: SerialNumber: syz [ 202.569286][ T5982] usb 4-1: config 0 descriptor?? [ 203.073024][ T5982] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 203.276484][ T6414] chnl_net:caif_netlink_parms(): no params data found [ 203.895735][ T60] Bluetooth: hci5: command tx timeout [ 205.091889][ T5982] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 205.139971][ T5982] usb 4-1: USB disconnect, device number 3 [ 209.526352][ T6042] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 209.916147][ T6042] usb 3-1: Using ep0 maxpacket: 8 [ 209.930355][ T6042] usb 3-1: unable to get BOS descriptor or descriptor too short [ 209.933577][ T6042] usb 3-1: config 3 has an invalid interface number: 12 but max is 0 [ 209.933606][ T6042] usb 3-1: config 3 has no interface number 0 [ 209.933655][ T6042] usb 3-1: config 3 interface 12 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 209.933686][ T6042] usb 3-1: config 3 interface 12 altsetting 9 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 209.933714][ T6042] usb 3-1: config 3 interface 12 has no altsetting 0 [ 209.940527][ T6042] usb 3-1: New USB device found, idVendor=04ca, idProduct=4605, bcdDevice=41.1d [ 209.940560][ T6042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.940582][ T6042] usb 3-1: Product: syz [ 209.940598][ T6042] usb 3-1: Manufacturer: syz [ 209.940614][ T6042] usb 3-1: SerialNumber: syz [ 211.285129][ T6494] overlay: ./file0 is not a directory [ 212.338851][ T6500] Zero length message leads to an empty skb [ 212.446695][ T6042] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 212.592571][ T6042] usb 3-1: USB disconnect, device number 2 [ 213.235216][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.235268][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.667301][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.667397][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.667633][ T6414] bridge_slave_0: entered allmulticast mode [ 215.669591][ T6414] bridge_slave_0: entered promiscuous mode [ 218.106678][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.110141][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.111797][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.157108][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.161933][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.165670][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.210828][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.266513][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.266626][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.266901][ T6414] bridge_slave_1: entered allmulticast mode [ 218.270645][ T6414] bridge_slave_1: entered promiscuous mode [ 218.903121][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.903164][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.079272][ T6414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.212790][ T6414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.319341][ T60] Bluetooth: hci1: command tx timeout [ 223.132878][ T5120] Bluetooth: hci2: command 0x0401 tx timeout [ 223.133028][ T5120] Bluetooth: hci0: command 0x0406 tx timeout [ 223.133058][ T5120] Bluetooth: hci1: command tx timeout [ 223.133083][ T5120] Bluetooth: hci3: command 0x0406 tx timeout [ 223.133111][ T5120] Bluetooth: hci4: command 0x0405 tx timeout [ 224.037879][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.037914][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.747737][ T60] Bluetooth: hci1: command tx timeout [ 225.798194][ T6414] team0: Port device team_slave_0 added [ 227.623353][ T6414] team0: Port device team_slave_1 added [ 227.756185][ T5811] Bluetooth: hci1: command tx timeout [ 228.510948][ T6414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.510980][ T6414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.511008][ T6414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.772572][ T6414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.772592][ T6414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.772621][ T6414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.548265][ T6414] hsr_slave_0: entered promiscuous mode [ 231.549339][ T6414] hsr_slave_1: entered promiscuous mode [ 231.550112][ T6414] debugfs: 'hsr0' already exists in 'hsr' [ 231.550132][ T6414] Cannot create hsr debugfs directory [ 231.738261][ T57] bridge_slave_1: left allmulticast mode [ 231.738530][ T57] bridge_slave_1: left promiscuous mode [ 231.742836][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.866745][ T57] bridge_slave_0: left allmulticast mode [ 232.866777][ T57] bridge_slave_0: left promiscuous mode [ 232.867051][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.118791][ T57] team0: Port device vxlan0 removed [ 240.287345][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.357153][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.416497][ T57] bond0 (unregistering): Released all slaves [ 247.390691][ T6648] netlink: 'syz.0.180': attribute type 4 has an invalid length. [ 247.856468][ T6521] chnl_net:caif_netlink_parms(): no params data found [ 248.460558][ T57] hsr_slave_0: left promiscuous mode [ 248.506563][ T57] hsr_slave_1: left promiscuous mode [ 248.511265][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.511337][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.270199][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.270224][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.159397][ T57] veth1_macvtap: left promiscuous mode [ 251.172729][ T57] veth0_macvtap: left promiscuous mode [ 251.173103][ T57] veth1_vlan: left promiscuous mode [ 251.183389][ T57] veth0_vlan: left promiscuous mode [ 253.230234][ T6681] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.855537][ T6682] kAFS: No cell specified [ 254.394220][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.403605][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.405179][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.407484][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.408720][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 255.890333][ T57] team0 (unregistering): Port device team_slave_1 removed [ 255.946424][ T57] team0 (unregistering): Port device team_slave_0 removed [ 256.343162][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.343227][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.476213][ T60] Bluetooth: hci3: command tx timeout [ 258.556272][ T60] Bluetooth: hci3: command tx timeout [ 259.079642][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.079889][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.082049][ T6521] bridge_slave_0: entered allmulticast mode [ 259.114558][ T6521] bridge_slave_0: entered promiscuous mode [ 259.498714][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.499635][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.503302][ T6521] bridge_slave_1: entered allmulticast mode [ 259.593912][ T6521] bridge_slave_1: entered promiscuous mode [ 260.646321][ T60] Bluetooth: hci3: command tx timeout [ 261.163453][ T37] audit: type=1326 audit(1772070661.387:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6710 comm="syz.2.192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe86e1bc629 code=0x0 [ 261.263550][ T6521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.323618][ T6521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.131529][ T6521] team0: Port device team_slave_0 added [ 262.198351][ T6521] team0: Port device team_slave_1 added [ 264.000563][ T60] Bluetooth: hci3: command tx timeout [ 264.921289][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.921431][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.921461][ T6521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.919606][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.919626][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.919654][ T6521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.069372][ T6521] hsr_slave_0: entered promiscuous mode [ 269.070325][ T6521] hsr_slave_1: entered promiscuous mode [ 272.449973][ T6686] chnl_net:caif_netlink_parms(): no params data found [ 274.779399][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.117179][ T6797] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 277.117487][ T6797] block device autoloading is deprecated and will be removed. [ 278.540917][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.704127][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.726394][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.729750][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.763120][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.764323][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.269128][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.983264][ T5811] Bluetooth: hci5: command tx timeout [ 281.176094][ T6850] ======================================================= [ 281.176094][ T6850] WARNING: The mand mount option has been deprecated and [ 281.176094][ T6850] and is ignored by this kernel. Remove the mand [ 281.176094][ T6850] option from the mount to silence this warning. [ 281.176094][ T6850] ======================================================= [ 281.183343][ T6850] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 282.328420][ T6853] syz.0.222 uses obsolete (PF_INET,SOCK_PACKET) [ 282.390631][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.644000][ T5811] Bluetooth: hci5: command tx timeout [ 283.749650][ T6862] futex_wake_op: syz.2.221 tries to shift op by 32; fix this program [ 286.549178][ T5811] Bluetooth: hci5: command tx timeout [ 286.784679][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.784860][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.785160][ T6686] bridge_slave_0: entered allmulticast mode [ 287.048215][ T6686] bridge_slave_0: entered promiscuous mode [ 288.686830][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.686981][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.687284][ T6686] bridge_slave_1: entered allmulticast mode [ 288.691816][ T6686] bridge_slave_1: entered promiscuous mode [ 288.840080][ T5811] Bluetooth: hci5: command tx timeout [ 289.371821][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.819420][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.344517][ T6896] binder: binder_mmap: 6892 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 293.635325][ T6686] team0: Port device team_slave_0 added [ 293.973168][ T6686] team0: Port device team_slave_1 added [ 295.147774][ T5891] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 296.277145][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 296.277774][ T57] bridge_slave_1: left allmulticast mode [ 296.277801][ T57] bridge_slave_1: left promiscuous mode [ 296.278081][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.282812][ T5891] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 296.282841][ T5891] usb 3-1: config 0 has no interface number 0 [ 296.282875][ T5891] usb 3-1: config 0 interface 55 has no altsetting 0 [ 296.340317][ T5891] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=17.bd [ 296.340353][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.340373][ T5891] usb 3-1: Product: syz [ 296.340388][ T5891] usb 3-1: Manufacturer: syz [ 296.340402][ T5891] usb 3-1: SerialNumber: syz [ 296.418765][ T5891] usb 3-1: config 0 descriptor?? [ 296.466703][ T57] bridge_slave_0: left allmulticast mode [ 296.466738][ T57] bridge_slave_0: left promiscuous mode [ 296.467022][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.563603][ T57] bridge_slave_1: left allmulticast mode [ 296.563639][ T57] bridge_slave_1: left promiscuous mode [ 296.563907][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.693111][ T5891] usbtest 3-1:0.55: couldn't get endpoints, -22 [ 296.693209][ T5891] usbtest 3-1:0.55: probe with driver usbtest failed with error -22 [ 296.721041][ T5891] usb 3-1: USB disconnect, device number 3 [ 296.747895][ T57] bridge_slave_0: left allmulticast mode [ 296.747930][ T57] bridge_slave_0: left promiscuous mode [ 296.748297][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.574278][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.955824][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.702024][ T57] bond0 (unregistering): Released all slaves [ 301.997625][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.452285][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.480711][ T57] bond0 (unregistering): Released all slaves [ 302.782938][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.782958][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.782988][ T6686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.817084][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.817143][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.817215][ T6686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.582881][ T6686] hsr_slave_0: entered promiscuous mode [ 304.616807][ T6686] hsr_slave_1: entered promiscuous mode [ 304.617818][ T6686] debugfs: 'hsr0' already exists in 'hsr' [ 304.617854][ T6686] Cannot create hsr debugfs directory [ 305.136416][ T5784] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 305.268711][ T6824] chnl_net:caif_netlink_parms(): no params data found [ 305.296109][ T5784] usb 1-1: Using ep0 maxpacket: 32 [ 305.326626][ T5784] usb 1-1: config 0 has an invalid interface number: 147 but max is 2 [ 305.326659][ T5784] usb 1-1: config 0 has an invalid interface number: 115 but max is 2 [ 305.326679][ T5784] usb 1-1: config 0 has an invalid interface number: 202 but max is 2 [ 305.326700][ T5784] usb 1-1: config 0 has no interface number 0 [ 305.326716][ T5784] usb 1-1: config 0 has no interface number 1 [ 305.326733][ T5784] usb 1-1: config 0 has no interface number 2 [ 305.326819][ T5784] usb 1-1: config 0 interface 202 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 305.326848][ T5784] usb 1-1: config 0 interface 147 has no altsetting 0 [ 305.326868][ T5784] usb 1-1: config 0 interface 115 has no altsetting 0 [ 305.326887][ T5784] usb 1-1: config 0 interface 202 has no altsetting 0 [ 305.337694][ T5784] usb 1-1: New USB device found, idVendor=2100, idProduct=9e61, bcdDevice=6c.bf [ 305.337728][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.337750][ T5784] usb 1-1: Product: syz [ 305.337766][ T5784] usb 1-1: Manufacturer: syz [ 305.337781][ T5784] usb 1-1: SerialNumber: syz [ 305.490856][ T5784] usb 1-1: config 0 descriptor?? [ 305.753187][ T5784] ftdi_sio 1-1:0.147: FTDI USB Serial Device converter detected [ 305.781838][ T5784] ftdi_sio ttyUSB0: unknown device type: 0x6cbf [ 305.820300][ T5784] ftdi_sio 1-1:0.115: FTDI USB Serial Device converter detected [ 305.843149][ T5784] ftdi_sio ttyUSB1: unknown device type: 0x6cbf [ 305.865781][ T5784] ftdi_sio 1-1:0.202: FTDI USB Serial Device converter detected [ 305.867990][ T5784] ftdi_sio ttyUSB2: unknown device type: 0x6cbf [ 305.895947][ T5784] usb 1-1: USB disconnect, device number 3 [ 305.904925][ T5784] ftdi_sio 1-1:0.147: device disconnected [ 305.923159][ T5784] ftdi_sio 1-1:0.115: device disconnected [ 305.950154][ T5784] ftdi_sio 1-1:0.202: device disconnected [ 306.132052][ T6986] overlayfs: missing 'lowerdir' [ 309.309634][ T57] hsr_slave_0: left promiscuous mode [ 310.186710][ T57] hsr_slave_1: left promiscuous mode [ 310.187642][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.259897][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.466284][ T57] hsr_slave_0: left promiscuous mode [ 310.508561][ T57] hsr_slave_1: left promiscuous mode [ 310.536262][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.536290][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.616547][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.616583][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.761494][ T7025] loop9: detected capacity change from 0 to 7 [ 310.763098][ T7025] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.763137][ T7025] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.763164][ T7025] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.763198][ T7025] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.763239][ T7025] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.763274][ T7025] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.763297][ T7025] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.763310][ T7025] ldm_validate_partition_table(): Disk read failed. [ 310.763331][ T7025] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.763355][ T7025] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.763379][ T7025] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.763412][ T7025] Dev loop9: unable to read RDB block 0 [ 310.763467][ T7025] loop9: unable to read partition table [ 310.763627][ T7025] loop9: partition table beyond EOD, truncated [ 310.763648][ T7025] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 310.763648][ T7025] ) failed (rc=-5) [ 311.088207][ T57] veth1_macvtap: left promiscuous mode [ 311.088290][ T57] veth0_macvtap: left promiscuous mode [ 311.088474][ T57] veth1_vlan: left promiscuous mode [ 311.088598][ T57] veth0_vlan: left promiscuous mode [ 311.401355][ T7025] ldm_validate_partition_table(): Disk read failed. [ 311.401600][ T7025] Dev loop9: unable to read RDB block 0 [ 311.401904][ T7025] loop9: unable to read partition table [ 311.406590][ T7025] loop9: partition table beyond EOD, truncated [ 312.069925][ T7033] ALSA: mixer_oss: invalid OSS volume '' [ 312.707812][ T57] team0 (unregistering): Port device team_slave_1 removed [ 312.886358][ T57] team0 (unregistering): Port device team_slave_0 removed [ 318.454232][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.454315][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.761206][ T57] team0 (unregistering): Port device team_slave_1 removed [ 318.876010][ T57] team0 (unregistering): Port device team_slave_0 removed [ 319.426718][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.444223][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.445790][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.447180][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.450857][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.725777][ T6824] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.726011][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.726277][ T6824] bridge_slave_0: entered allmulticast mode [ 319.754290][ T6824] bridge_slave_0: entered promiscuous mode [ 319.779234][ T6824] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.779384][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.779581][ T6824] bridge_slave_1: entered allmulticast mode [ 319.854906][ T6824] bridge_slave_1: entered promiscuous mode [ 320.735463][ T6824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.778725][ T6824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.266890][ T6824] team0: Port device team_slave_0 added [ 321.316668][ T6824] team0: Port device team_slave_1 added [ 321.699379][ T60] Bluetooth: hci1: command tx timeout [ 322.205310][ T6824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.205331][ T6824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.205362][ T6824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.490051][ T7089] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 322.498984][ T6824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.499004][ T6824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.499035][ T6824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.903539][ T6824] hsr_slave_0: entered promiscuous mode [ 322.904825][ T6824] hsr_slave_1: entered promiscuous mode [ 322.905868][ T6824] debugfs: 'hsr0' already exists in 'hsr' [ 322.905893][ T6824] Cannot create hsr debugfs directory [ 323.914712][ T60] Bluetooth: hci1: command tx timeout [ 326.154882][ T60] Bluetooth: hci1: command tx timeout [ 327.604651][ T7052] chnl_net:caif_netlink_parms(): no params data found [ 328.365922][ T60] Bluetooth: hci1: command tx timeout [ 328.645124][ T7110] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 328.645263][ T7110] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 328.698116][ T60] Bluetooth: hci2: command 0x0401 tx timeout [ 329.178061][ T7110] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 329.257860][ T7110] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 329.357646][ T7128] netlink: 36 bytes leftover after parsing attributes in process `syz.2.284'. [ 329.357673][ T7128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.284'. [ 329.357695][ T7128] netlink: 36 bytes leftover after parsing attributes in process `syz.2.284'. [ 329.357736][ T7128] netlink: 36 bytes leftover after parsing attributes in process `syz.2.284'. [ 329.523847][ T7110] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 329.523998][ T7110] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 330.594312][ T7110] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 330.594422][ T7110] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 330.655828][ T7139] netlink: 'syz.3.287': attribute type 22 has an invalid length. [ 330.655855][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 330.686688][ T7140] kAFS: unable to lookup cell '(,c' [ 330.920999][ T60] Bluetooth: hci2: command 0x0401 tx timeout [ 330.947154][ T7139] bond0: option ad_select: unable to set because the bond device is up [ 331.691009][ T7110] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 331.693189][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 331.693319][ T60] Bluetooth: hci4: command 0x0405 tx timeout [ 331.820182][ T7110] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 331.820278][ T7110] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 331.901323][ T7110] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 332.123683][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.123828][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.124139][ T7052] bridge_slave_0: entered allmulticast mode [ 332.163201][ T7052] bridge_slave_0: entered promiscuous mode [ 332.491774][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.492089][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.492393][ T7052] bridge_slave_1: entered allmulticast mode [ 332.495236][ T7052] bridge_slave_1: entered promiscuous mode [ 332.960891][ T7151] process 'syz.2.289' launched '/dev/fd/7' with NULL argv: empty string added [ 333.145708][ T5811] Bluetooth: hci5: command 0x0c1a tx timeout [ 334.305035][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 334.305204][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 334.324065][ T5811] Bluetooth: hci4: command 0x0405 tx timeout [ 334.770405][ T7052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.444531][ T5807] Bluetooth: hci5: command 0x0c1a tx timeout [ 336.478956][ T5807] Bluetooth: hci1: command 0x0c1a tx timeout [ 336.604579][ T7052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.624513][ T57] bridge_slave_1: left allmulticast mode [ 336.624538][ T57] bridge_slave_1: left promiscuous mode [ 336.624747][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.789245][ T5807] Bluetooth: hci5: command 0x0c1a tx timeout [ 338.147752][ T57] bridge_slave_0: left allmulticast mode [ 338.147787][ T57] bridge_slave_0: left promiscuous mode [ 338.148056][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.320861][ T57] bridge_slave_1: left allmulticast mode [ 338.320897][ T57] bridge_slave_1: left promiscuous mode [ 338.321159][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.799982][ T5807] Bluetooth: hci1: command 0x0c1a tx timeout [ 339.387624][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.407841][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.409430][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.410609][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.411344][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.572026][ T57] bridge_slave_0: left allmulticast mode [ 339.572057][ T57] bridge_slave_0: left promiscuous mode [ 339.572302][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.964632][ T7210] usb usb9: usbfs: process 7210 (syz.3.299) did not claim interface 3 before use [ 341.348194][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.607709][ T5807] Bluetooth: hci3: command tx timeout [ 341.704289][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.747743][ T57] bond0 (unregistering): Released all slaves [ 342.827964][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.911383][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.829748][ T5807] Bluetooth: hci3: command tx timeout [ 343.929960][ T57] bond0 (unregistering): Released all slaves [ 346.717893][ T7052] team0: Port device team_slave_0 added [ 346.821151][ T5807] Bluetooth: hci3: command tx timeout [ 347.386697][ T7052] team0: Port device team_slave_1 added [ 348.457845][ T7246] kAFS: unable to lookup cell '(' [ 348.531720][ T7247] kAFS: unable to lookup cell '(,cL' [ 349.108239][ T5807] Bluetooth: hci3: command tx timeout [ 349.239330][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.239351][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.239381][ T7052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.364924][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.364944][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.364972][ T7052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.890217][ T57] hsr_slave_0: left promiscuous mode [ 351.053399][ T57] hsr_slave_1: left promiscuous mode [ 351.054535][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.338956][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.851311][ T57] hsr_slave_0: left promiscuous mode [ 351.868797][ T57] hsr_slave_1: left promiscuous mode [ 351.869561][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.898984][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.900316][ T7266] kAFS: unable to lookup cell '(,c' [ 352.611219][ T7275] ubi0: attaching mtd0 [ 352.614586][ T7275] ubi0: scanning is finished [ 354.011361][ T7275] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 354.210051][ T57] team0 (unregistering): Port device team_slave_1 removed [ 354.276071][ T57] team0 (unregistering): Port device team_slave_0 removed [ 358.484869][ T57] team0 (unregistering): Port device team_slave_1 removed [ 358.653450][ T57] team0 (unregistering): Port device team_slave_0 removed [ 361.283784][ T7303] ceph: No mds server is up or the cluster is laggy [ 361.329585][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 361.338708][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 363.325402][ T7052] hsr_slave_0: entered promiscuous mode [ 363.326569][ T7052] hsr_slave_1: entered promiscuous mode [ 365.463910][ T7337] deleting an unspecified loop device is not supported. [ 369.930039][ T7198] chnl_net:caif_netlink_parms(): no params data found [ 371.184393][ T7052] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 371.389416][ T7052] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 371.591117][ T7052] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 372.925598][ T7198] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.925820][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.926024][ T7198] bridge_slave_0: entered allmulticast mode [ 372.950551][ T7198] bridge_slave_0: entered promiscuous mode [ 373.069564][ T7406] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 373.108690][ T7052] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 373.184110][ T7198] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.184295][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.184549][ T7198] bridge_slave_1: entered allmulticast mode [ 373.186776][ T7198] bridge_slave_1: entered promiscuous mode [ 373.829648][ T7419] binder: binder_mmap: 7415 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 375.241819][ T7198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.824258][ T7198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.169238][ T7198] team0: Port device team_slave_0 added [ 381.334075][ T7198] team0: Port device team_slave_1 added [ 383.569777][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.569853][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.820972][ T7198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.820989][ T7198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.821012][ T7198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.359374][ T7198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.359394][ T7198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.359423][ T7198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.751236][ T7198] hsr_slave_0: entered promiscuous mode [ 387.766464][ T7198] hsr_slave_1: entered promiscuous mode [ 387.771051][ T7198] debugfs: 'hsr0' already exists in 'hsr' [ 387.771082][ T7198] Cannot create hsr debugfs directory [ 387.806151][ T7493] ------------[ cut here ]------------ [ 387.806170][ T7493] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 387.806196][ T7493] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: syz.3.356/7493 [ 387.806259][ T7493] Modules linked in: [ 387.806310][ T7493] CPU: 1 UID: 0 PID: 7493 Comm: syz.3.356 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 387.806338][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.806357][ T7493] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 387.806396][ T7493] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 fa d2 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 387.806416][ T7493] RSP: 0018:ffffc90004327ae0 EFLAGS: 00010246 [ 387.806436][ T7493] RAX: 1ffff11004a02a00 RBX: ffffffff8f750820 RCX: 0000000000000000 [ 387.806453][ T7493] RDX: ffffffff8bbf2ee0 RSI: ffffffff8bc0ede0 RDI: ffffffff8f750820 [ 387.806470][ T7493] RBP: ffffc90004327bc8 R08: 0000000000000000 R09: 0000000000000000 [ 387.806484][ T7493] R10: dffffc0000000000 R11: fffffbfff1ed4517 R12: ffffffff8bc0ede0 [ 387.806501][ T7493] R13: ffff888025015000 R14: 0000000000000000 R15: ffffffff8bbf2ee0 [ 387.806517][ T7493] FS: 00007fd7b2f146c0(0000) GS:ffff888126443000(0000) knlGS:0000000000000000 [ 387.806538][ T7493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.806553][ T7493] CR2: 000000110c27373e CR3: 00000000732ec000 CR4: 00000000003526f0 [ 387.806573][ T7493] Call Trace: [ 387.806588][ T7493] [ 387.806605][ T7493] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 387.806641][ T7493] ? rt_spin_unlock+0x14f/0x200 [ 387.806668][ T7493] ? __pfx_autoremove_wake_function+0x10/0x10 [ 387.806706][ T7493] ? rt_spin_unlock+0x160/0x200 [ 387.806734][ T7493] ? drm_vblank_get+0x147/0x260 [ 387.806770][ T7493] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 387.806806][ T7493] drm_fb_helper_ioctl+0x6f/0xc0 [ 387.806844][ T7493] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 387.806880][ T7493] do_fb_ioctl+0x4cc/0x800 [ 387.806906][ T7493] ? __pfx_do_fb_ioctl+0x10/0x10 [ 387.806945][ T7493] ? smk_tskacc+0x311/0x3a0 [ 387.806981][ T7493] ? __pfx_smack_file_ioctl+0x10/0x10 [ 387.807024][ T7493] ? __fget_files+0x3a6/0x420 [ 387.807050][ T7493] ? __fget_files+0x2a/0x420 [ 387.807081][ T7493] ? bpf_lsm_file_ioctl+0x9/0x20 [ 387.807116][ T7493] ? __pfx_fb_ioctl+0x10/0x10 [ 387.807150][ T7493] __se_sys_ioctl+0xff/0x170 [ 387.807187][ T7493] do_syscall_64+0x14d/0xf80 [ 387.807218][ T7493] ? trace_irq_disable+0x3b/0x150 [ 387.807244][ T7493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.807275][ T7493] ? clear_bhb_loop+0x40/0x90 [ 387.807304][ T7493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.807328][ T7493] RIP: 0033:0x7fd7b4cfc629 [ 387.807357][ T7493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.807375][ T7493] RSP: 002b:00007fd7b2f14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.807397][ T7493] RAX: ffffffffffffffda RBX: 00007fd7b4f76180 RCX: 00007fd7b4cfc629 [ 387.807414][ T7493] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000009 [ 387.807428][ T7493] RBP: 00007fd7b4d92b39 R08: 0000000000000000 R09: 0000000000000000 [ 387.807442][ T7493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.807455][ T7493] R13: 00007fd7b4f76218 R14: 00007fd7b4f76180 R15: 00007ffd2e1f8e48 [ 387.807494][ T7493] [ 387.807514][ T7493] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 387.807532][ T7493] CPU: 1 UID: 0 PID: 7493 Comm: syz.3.356 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 387.807556][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.807570][ T7493] Call Trace: [ 387.807579][ T7493] [ 387.807589][ T7493] vpanic+0x56c/0xa60 [ 387.807626][ T7493] ? __pfx__printk+0x10/0x10 [ 387.807651][ T7493] ? __pfx_vpanic+0x10/0x10 [ 387.807682][ T7493] ? is_bpf_text_address+0x292/0x2b0 [ 387.807715][ T7493] ? is_bpf_text_address+0x26/0x2b0 [ 387.807757][ T7493] panic+0xc5/0xd0 [ 387.807791][ T7493] ? __pfx_panic+0x10/0x10 [ 387.807847][ T7493] __warn+0x315/0x4f0 [ 387.807878][ T7493] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 387.807915][ T7493] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 387.807953][ T7493] __report_bug+0x29a/0x540 [ 387.807990][ T7493] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 387.808037][ T7493] ? __pfx___report_bug+0x10/0x10 [ 387.808088][ T7493] report_bug_entry+0x19a/0x290 [ 387.808117][ T7493] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 387.808150][ T7493] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 387.808184][ T7493] handle_bug+0xca/0x200 [ 387.808218][ T7493] exc_invalid_op+0x1a/0x50 [ 387.808250][ T7493] asm_exc_invalid_op+0x1a/0x20 [ 387.808278][ T7493] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 387.808312][ T7493] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 fa d2 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 387.808330][ T7493] RSP: 0018:ffffc90004327ae0 EFLAGS: 00010246 [ 387.808347][ T7493] RAX: 1ffff11004a02a00 RBX: ffffffff8f750820 RCX: 0000000000000000 [ 387.808362][ T7493] RDX: ffffffff8bbf2ee0 RSI: ffffffff8bc0ede0 RDI: ffffffff8f750820 [ 387.808378][ T7493] RBP: ffffc90004327bc8 R08: 0000000000000000 R09: 0000000000000000 [ 387.808392][ T7493] R10: dffffc0000000000 R11: fffffbfff1ed4517 R12: ffffffff8bc0ede0 [ 387.808407][ T7493] R13: ffff888025015000 R14: 0000000000000000 R15: ffffffff8bbf2ee0 [ 387.808450][ T7493] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 387.808483][ T7493] ? rt_spin_unlock+0x14f/0x200 [ 387.808506][ T7493] ? __pfx_autoremove_wake_function+0x10/0x10 [ 387.808541][ T7493] ? rt_spin_unlock+0x160/0x200 [ 387.808567][ T7493] ? drm_vblank_get+0x147/0x260 [ 387.808601][ T7493] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 387.808634][ T7493] drm_fb_helper_ioctl+0x6f/0xc0 [ 387.808668][ T7493] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 387.808702][ T7493] do_fb_ioctl+0x4cc/0x800 [ 387.808727][ T7493] ? __pfx_do_fb_ioctl+0x10/0x10 [ 387.808764][ T7493] ? smk_tskacc+0x311/0x3a0 [ 387.808799][ T7493] ? __pfx_smack_file_ioctl+0x10/0x10 [ 387.808839][ T7493] ? __fget_files+0x3a6/0x420 [ 387.808864][ T7493] ? __fget_files+0x2a/0x420 [ 387.808894][ T7493] ? bpf_lsm_file_ioctl+0x9/0x20 [ 387.808929][ T7493] ? __pfx_fb_ioctl+0x10/0x10 [ 387.808963][ T7493] __se_sys_ioctl+0xff/0x170 [ 387.809000][ T7493] do_syscall_64+0x14d/0xf80 [ 387.809028][ T7493] ? trace_irq_disable+0x3b/0x150 [ 387.809053][ T7493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.809076][ T7493] ? clear_bhb_loop+0x40/0x90 [ 387.809104][ T7493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.809127][ T7493] RIP: 0033:0x7fd7b4cfc629 [ 387.809146][ T7493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.809164][ T7493] RSP: 002b:00007fd7b2f14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.809185][ T7493] RAX: ffffffffffffffda RBX: 00007fd7b4f76180 RCX: 00007fd7b4cfc629 [ 387.809200][ T7493] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000009 [ 387.809213][ T7493] RBP: 00007fd7b4d92b39 R08: 0000000000000000 R09: 0000000000000000 [ 387.809226][ T7493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.809239][ T7493] R13: 00007fd7b4f76218 R14: 00007fd7b4f76180 R15: 00007ffd2e1f8e48 [ 387.809281][ T7493] [ 387.809899][ T7493] Kernel Offset: disabled