last executing test programs: 14.6432378s ago: executing program 3 (id=64): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000240)='smaps_rollup\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') 13.14201448s ago: executing program 3 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_create_resource$binfmt(0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r1, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 11.652042021s ago: executing program 3 (id=71): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001200010a00000000000000000a006c"], 0x26}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x6a, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x34, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x33, 0x3, '\x00', [@calipso={0x7, 0x8}, @calipso={0x7, 0x8}, @ra]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}}, 0x8000) r3 = socket(0x10, 0x3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x1, @random="64d0aaedaeb6", 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r4, &(0x7f0000001dc0), 0x213, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f80)=@bridge_getlink={0x28, 0x12, 0xdba2e9e4846a7f93, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x75800, 0x1}, [@IFLA_CARRIER={0x5, 0x1d, 0x2}]}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x26}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x30, 0x0, 0x135, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x1, 0x4}, {0x81, 0x5}, {0x8, 0x4}], "7ecbad144922f925"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 11.469205348s ago: executing program 2 (id=73): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x43c7, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) 10.693196393s ago: executing program 5 (id=77): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000240)='smaps_rollup\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') 9.891841821s ago: executing program 2 (id=79): r0 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61"}, 0x28) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x8, 0x7f, 0x9}}, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007701c9d4859a55b1545b9e4f5b71fa6f182641063d6f21"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r5 = syz_io_uring_setup(0x18d6, &(0x7f0000000040), &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, &(0x7f0000000180), 0xfe) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x14, 0x30, 0x829}, 0x14}}, 0x0) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000001ac0)={0x2}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) sendmsg$netlink(r6, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 9.891395811s ago: executing program 3 (id=80): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) 9.860962429s ago: executing program 0 (id=81): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x80042, 0x4, 0x2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='kfree\x00', 0xffffffffffffffff, 0x0, 0x400000006}, 0x18) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff004}, {0x6}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) 9.736645689s ago: executing program 5 (id=83): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x0, 0x1542}]}) 7.76639239s ago: executing program 4 (id=84): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r3, 0xd81, 0x0, 0x0, 0x0, 0x0) 7.003694793s ago: executing program 5 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_create_resource$binfmt(0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r1, &(0x7f00000002c0)=""/199, 0xc7) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 6.492122374s ago: executing program 1 (id=86): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000001900)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 6.284999825s ago: executing program 2 (id=87): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000703000000000000000007000000", @ANYRES32, @ANYBLOB="4000cc000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) read(r6, 0x0, 0x2006) 6.266531095s ago: executing program 0 (id=88): r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f00000002c0)=""/199, 0xc7) 6.239086236s ago: executing program 1 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, 0x0) 5.969059525s ago: executing program 4 (id=90): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) pselect6(0x40, &(0x7f0000000000)={0x9, 0x1, 0x8, 0x4, 0x100000000, 0x5, 0x401, 0x1}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) 5.915560573s ago: executing program 5 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000020c0)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic='E']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20000094) 5.164045941s ago: executing program 2 (id=92): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x43c7, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) 4.931825734s ago: executing program 0 (id=93): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340200001c000000080001"], 0x24}}, 0x0) 4.568343447s ago: executing program 1 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x3, 0x5) 4.469786821s ago: executing program 4 (id=95): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 4.440417422s ago: executing program 3 (id=96): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1001, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @private=0xa010100}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x109b70819ce8d017, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'team_slave_1\x00'}) dup2(r5, r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14", @ANYRESDEC=r5], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x1f) r8 = syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)}, 0x0, 0x80002101}) io_uring_enter(r8, 0xd81, 0x0, 0x0, 0x0, 0x0) 4.412437372s ago: executing program 5 (id=97): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2, 0x1}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x7bf}, {0xa, 0xe20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, r1, 0xd}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) 4.311907443s ago: executing program 1 (id=98): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='setgroups\x00') read$FUSE(r0, &(0x7f0000009540)={0x2020}, 0x2020) write$binfmt_script(r0, 0x0, 0x0) 4.286711499s ago: executing program 0 (id=99): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents64(r3, &(0x7f0000000040)=""/44, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xb8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x8, 0x3a, 0xff, @empty, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x7ff, 0x7}}}}}}, 0x0) 3.283464963s ago: executing program 2 (id=100): r0 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61"}, 0x28) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x8, 0x7f, 0x9}}, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007701c9d4859a55b1545b9e4f5b71fa6f182641063d6f21"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r5 = syz_io_uring_setup(0x18d6, &(0x7f0000000040), &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, &(0x7f0000000180), 0xfe) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x14, 0x30, 0x829}, 0x14}}, 0x0) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000001ac0)={0x2}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) sendmsg$netlink(r6, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.979494646s ago: executing program 5 (id=101): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x80042, 0x4, 0x2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='kfree\x00', 0xffffffffffffffff, 0x0, 0x400000006}, 0x18) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff004}, {0x6}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) 1.928132487s ago: executing program 1 (id=102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000001900)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.700381289s ago: executing program 0 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 1.681865919s ago: executing program 4 (id=104): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7) 1.018133124s ago: executing program 3 (id=105): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x7207, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0x4d4}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb, 0x8b, 0x9}}}}}]}}]}}, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000380)='stack\x00') pread64(r2, &(0x7f0000001580)=""/4101, 0x1005, 0xa) 880.784898ms ago: executing program 2 (id=106): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$revoke(0x1c, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') 743.674736ms ago: executing program 1 (id=107): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r3, 0xffffd000) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084504, &(0x7f0000ffcffc)=0x4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 630.595634ms ago: executing program 4 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0xffffd000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) 230.301048ms ago: executing program 0 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_create_resource$binfmt(0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r1, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) 0s ago: executing program 4 (id=110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x3, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 70.265242][ T5817] cgroup: Unknown subsys name 'net' [ 70.403658][ T5817] cgroup: Unknown subsys name 'cpuset' [ 70.411960][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.842479][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.848935][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.845430][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.232502][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.260167][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.267815][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.276088][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.283762][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.291182][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.500620][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.509028][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.519370][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.527211][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.534958][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.542984][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.550278][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.557410][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.581072][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.588653][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.609981][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.619556][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.631184][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.639746][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.639944][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.647244][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.655123][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.661582][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.668472][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.675167][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.690817][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.711806][ T5136] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.720319][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.727993][ T5136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.738973][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 74.774934][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.792868][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.804677][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.821319][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.847329][ T5844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.855345][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.985804][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.994755][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.002496][ T5828] bridge_slave_0: entered allmulticast mode [ 75.009459][ T5828] bridge_slave_0: entered promiscuous mode [ 75.017935][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.025140][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.032352][ T5828] bridge_slave_1: entered allmulticast mode [ 75.039144][ T5828] bridge_slave_1: entered promiscuous mode [ 75.076913][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.116911][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.237986][ T5828] team0: Port device team_slave_0 added [ 75.246455][ T5828] team0: Port device team_slave_1 added [ 75.293216][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.301109][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.327746][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.342862][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.349872][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.375851][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.413888][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 75.548744][ T5828] hsr_slave_0: entered promiscuous mode [ 75.555351][ T5828] hsr_slave_1: entered promiscuous mode [ 75.625037][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 75.644549][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 75.711079][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 75.750507][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.758239][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.765504][ T5841] bridge_slave_0: entered allmulticast mode [ 75.772339][ T5841] bridge_slave_0: entered promiscuous mode [ 75.857681][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.864950][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.873414][ T5841] bridge_slave_1: entered allmulticast mode [ 75.881684][ T5841] bridge_slave_1: entered promiscuous mode [ 75.986316][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 75.999495][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.031209][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.038449][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.045850][ T5833] bridge_slave_0: entered allmulticast mode [ 76.052761][ T5833] bridge_slave_0: entered promiscuous mode [ 76.065994][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.073163][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.080525][ T5835] bridge_slave_0: entered allmulticast mode [ 76.087358][ T5835] bridge_slave_0: entered promiscuous mode [ 76.100776][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.138049][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.145313][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.152934][ T5833] bridge_slave_1: entered allmulticast mode [ 76.160403][ T5833] bridge_slave_1: entered promiscuous mode [ 76.173443][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.180584][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.187750][ T5835] bridge_slave_1: entered allmulticast mode [ 76.194787][ T5835] bridge_slave_1: entered promiscuous mode [ 76.217634][ T5841] team0: Port device team_slave_0 added [ 76.228967][ T5841] team0: Port device team_slave_1 added [ 76.300597][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.307790][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.315826][ T5845] bridge_slave_0: entered allmulticast mode [ 76.324034][ T5845] bridge_slave_0: entered promiscuous mode [ 76.332301][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.339765][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.346947][ T5845] bridge_slave_1: entered allmulticast mode [ 76.354031][ T5845] bridge_slave_1: entered promiscuous mode [ 76.360695][ T5843] Bluetooth: hci0: command tx timeout [ 76.369684][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.391896][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.403727][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.422735][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.429803][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.455880][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.486842][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.528839][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.536253][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.562593][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.583151][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.637333][ T5835] team0: Port device team_slave_0 added [ 76.646347][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.658735][ T5833] team0: Port device team_slave_0 added [ 76.692518][ T5835] team0: Port device team_slave_1 added [ 76.718558][ T5833] team0: Port device team_slave_1 added [ 76.760223][ T5843] Bluetooth: hci3: command tx timeout [ 76.760249][ T5136] Bluetooth: hci2: command tx timeout [ 76.760502][ T5844] Bluetooth: hci1: command tx timeout [ 76.794223][ T5841] hsr_slave_0: entered promiscuous mode [ 76.801086][ T5841] hsr_slave_1: entered promiscuous mode [ 76.807092][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.815399][ T5841] Cannot create hsr debugfs directory [ 76.842846][ T5844] Bluetooth: hci4: command tx timeout [ 76.846010][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.855516][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.882686][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.894061][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.906370][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.913772][ T5850] bridge_slave_0: entered allmulticast mode [ 76.921029][ T5850] bridge_slave_0: entered promiscuous mode [ 76.928582][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.935695][ T5844] Bluetooth: hci5: command tx timeout [ 76.936228][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.967539][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.989055][ T5845] team0: Port device team_slave_0 added [ 76.997411][ T5845] team0: Port device team_slave_1 added [ 77.009502][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.016470][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.042741][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.055243][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.062671][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.070004][ T5850] bridge_slave_1: entered allmulticast mode [ 77.076813][ T5850] bridge_slave_1: entered promiscuous mode [ 77.094261][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.101502][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.127729][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.179129][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.218910][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.226064][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.252234][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.266721][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.325572][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.332757][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.359103][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.390620][ T5850] team0: Port device team_slave_0 added [ 77.398914][ T5850] team0: Port device team_slave_1 added [ 77.408823][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.484235][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.497370][ T5833] hsr_slave_0: entered promiscuous mode [ 77.504256][ T5833] hsr_slave_1: entered promiscuous mode [ 77.510724][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.518279][ T5833] Cannot create hsr debugfs directory [ 77.537098][ T5835] hsr_slave_0: entered promiscuous mode [ 77.544086][ T5835] hsr_slave_1: entered promiscuous mode [ 77.550461][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.558119][ T5835] Cannot create hsr debugfs directory [ 77.567290][ T5845] hsr_slave_0: entered promiscuous mode [ 77.574085][ T5845] hsr_slave_1: entered promiscuous mode [ 77.580602][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.588173][ T5845] Cannot create hsr debugfs directory [ 77.594458][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.601620][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.627731][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.646320][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.656369][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.667936][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.675166][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.701687][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.866229][ T5850] hsr_slave_0: entered promiscuous mode [ 77.874248][ T5850] hsr_slave_1: entered promiscuous mode [ 77.880870][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.888439][ T5850] Cannot create hsr debugfs directory [ 78.141608][ T5841] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.180629][ T5841] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.207572][ T5841] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.231520][ T5841] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.253145][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.281662][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.304667][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.326855][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.365129][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.404259][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.416844][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.445277][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.452485][ T5844] Bluetooth: hci0: command tx timeout [ 78.483084][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.523438][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.557238][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.567840][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.595083][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.606590][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.628014][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.654524][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.664372][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.675518][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.682751][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.707966][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.726475][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.733607][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.787090][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.839606][ T5844] Bluetooth: hci3: command tx timeout [ 78.839628][ T5843] Bluetooth: hci1: command tx timeout [ 78.839667][ T5136] Bluetooth: hci2: command tx timeout [ 78.893479][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.920007][ T5136] Bluetooth: hci4: command tx timeout [ 78.954632][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.962377][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.996409][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.004426][ T5136] Bluetooth: hci5: command tx timeout [ 79.031258][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.061856][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.069486][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.102168][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.142792][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.149969][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.171799][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.178936][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.263378][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.315245][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.333131][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.343694][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.350976][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.366151][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.373367][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.387275][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.472499][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.521224][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.538151][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.545337][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.591650][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.598909][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.629307][ T5828] veth0_vlan: entered promiscuous mode [ 79.638099][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.647772][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.655046][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.672278][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.679523][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.734567][ T5828] veth1_vlan: entered promiscuous mode [ 79.868041][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.907277][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.968063][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.995386][ T5828] veth0_macvtap: entered promiscuous mode [ 80.015447][ T5828] veth1_macvtap: entered promiscuous mode [ 80.110773][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.191814][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.254168][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.266748][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.279003][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.300507][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.321564][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.340315][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.443133][ T5841] veth0_vlan: entered promiscuous mode [ 80.478490][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.516161][ T5841] veth1_vlan: entered promiscuous mode [ 80.520216][ T5136] Bluetooth: hci0: command tx timeout [ 80.573385][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.621735][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.660891][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.720696][ T5841] veth0_macvtap: entered promiscuous mode [ 80.731717][ T5833] veth0_vlan: entered promiscuous mode [ 80.772095][ T5841] veth1_macvtap: entered promiscuous mode [ 80.785728][ T5833] veth1_vlan: entered promiscuous mode [ 80.816625][ T5845] veth0_vlan: entered promiscuous mode [ 80.837114][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.848620][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.864186][ T5845] veth1_vlan: entered promiscuous mode [ 80.892335][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.903776][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.916114][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.919760][ T5136] Bluetooth: hci2: command tx timeout [ 80.929938][ T5844] Bluetooth: hci3: command tx timeout [ 80.929954][ T5843] Bluetooth: hci1: command tx timeout [ 80.935090][ T5850] veth0_vlan: entered promiscuous mode [ 80.978922][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.979366][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.000147][ T5136] Bluetooth: hci4: command tx timeout [ 81.011861][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.023150][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.034448][ T5841] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.044511][ T5841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.053694][ T5841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.062606][ T5841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.079950][ T5136] Bluetooth: hci5: command tx timeout [ 81.170041][ T5850] veth1_vlan: entered promiscuous mode [ 81.178819][ T5833] veth0_macvtap: entered promiscuous mode [ 81.196615][ T5835] veth0_vlan: entered promiscuous mode [ 81.225159][ T5835] veth1_vlan: entered promiscuous mode [ 81.253938][ T5833] veth1_macvtap: entered promiscuous mode [ 81.305882][ T5845] veth0_macvtap: entered promiscuous mode [ 81.368169][ T5845] veth1_macvtap: entered promiscuous mode [ 81.423619][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.469663][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.488243][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.510126][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.532038][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.555317][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.577252][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.598082][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.618887][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.638986][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.659077][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.819053][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.875883][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.905901][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.923994][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.934645][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.946665][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.960668][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.979181][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.996382][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.008023][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.025638][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.036503][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.062094][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.088861][ T5835] veth0_macvtap: entered promiscuous mode [ 82.208588][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.219120][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.238008][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.259337][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.272091][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.288656][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.301772][ T5850] veth0_macvtap: entered promiscuous mode [ 82.340017][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.348763][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.385927][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.403823][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.458833][ T5835] veth1_macvtap: entered promiscuous mode [ 82.490252][ T5850] veth1_macvtap: entered promiscuous mode [ 82.560437][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.575195][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.585954][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.596719][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.599861][ T5136] Bluetooth: hci0: command tx timeout [ 82.612427][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.624519][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.650133][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.662223][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.674016][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.688389][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.703040][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.713031][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.723673][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.733936][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.744483][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.759064][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.770087][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.784120][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.797417][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.848260][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.875448][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.901058][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.911283][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.923150][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.959845][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.096490][ T5136] Bluetooth: hci1: command tx timeout [ 83.096875][ T5843] Bluetooth: hci2: command tx timeout [ 83.109880][ T55] Bluetooth: hci3: command tx timeout [ 83.110033][ T5843] Bluetooth: hci4: command tx timeout [ 83.129402][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.147467][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.159397][ T5843] Bluetooth: hci5: command tx timeout [ 83.167816][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.191026][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.542748][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.554476][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.571889][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.598163][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.631077][ T5954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.633706][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.639003][ T5954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.666567][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.676778][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.687795][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.698327][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.709507][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.720035][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.730601][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.740530][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.751174][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.766163][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.889632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 83.903896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.108641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.186563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.200081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.211072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.313378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 84.417282][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.433819][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.454908][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.490647][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.512221][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.523297][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.563901][ T5961] loop0: detected capacity change from 0 to 64 [ 84.583647][ T5961] ======================================================= [ 84.583647][ T5961] WARNING: The mand mount option has been deprecated and [ 84.583647][ T5961] and is ignored by this kernel. Remove the mand [ 84.583647][ T5961] option from the mount to silence this warning. [ 84.583647][ T5961] ======================================================= [ 84.657084][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.666505][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.683608][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.729569][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.818434][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.831815][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.000993][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.008862][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.009582][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 85.040255][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.048564][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.111252][ T5968] loop1: detected capacity change from 0 to 8 [ 85.133385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.229379][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 85.240080][ T5843] Bluetooth: hci5: command 0x0405 tx timeout [ 85.251770][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 85.274918][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.289012][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 85.300688][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.323826][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 85.348662][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 85.440835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.501403][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.790676][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.878462][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 85.924865][ T9] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 86.259757][ T47] cfg80211: failed to load regulatory.db [ 86.394585][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.409306][ T9] usb 6-1: Product: syz [ 86.423725][ T9] usb 6-1: Manufacturer: syz [ 86.429544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.449024][ T9] usb 6-1: SerialNumber: syz [ 86.535699][ T9] usb 6-1: config 0 descriptor?? [ 87.924142][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 87.939290][ T9] input input5: Device does not respond to id packet M [ 87.946590][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 87.973938][ T9] input input5: Device does not respond to id packet P [ 88.934985][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 88.941169][ T9] input input5: Device does not respond to id packet B [ 88.948567][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 88.954675][ T9] input input5: Device does not respond to id packet N [ 88.966817][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 88.973758][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 88.980708][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 89.534565][ T9] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 89.546692][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input5 [ 90.278641][ T9] usb 6-1: USB disconnect, device number 2 [ 90.658954][ T6010] loop2: detected capacity change from 0 to 2048 [ 90.779405][ T5863] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.884663][ T6017] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.989468][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 91.504724][ T5863] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.526295][ T5863] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.856567][ T5863] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.977267][ T5863] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.998615][ T5863] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.011955][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.083359][ T6010] syz.2.24 (6010) used greatest stack depth: 17176 bytes left [ 92.132242][ T6017] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 92.173363][ T6017] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 92.209628][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.233503][ T6017] Remounting filesystem read-only [ 92.255077][ T5845] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 92.333658][ T6004] loop0: detected capacity change from 0 to 32768 [ 92.370361][ T6004] XFS: noikeep mount option is deprecated. [ 92.399344][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 92.470029][ T5863] usb 5-1: GET_CAPABILITIES returned 0 [ 92.476202][ T5863] usbtmc 5-1:16.0: can't read capabilities [ 92.480240][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.749142][ T6004] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.045842][ T5863] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.124189][ T47] usb 5-1: USB disconnect, device number 2 [ 93.249596][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.260989][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.270683][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 93.276365][ T5863] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 93.282390][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.307676][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 93.319414][ T6004] XFS (loop0): Ending clean mount [ 93.319837][ T5863] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 93.351083][ T6004] XFS (loop0): Quotacheck needed: Please wait. [ 93.357121][ T5863] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.364674][ T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.392980][ T5863] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.393041][ T8] usb 2-1: Manufacturer: syz [ 93.418844][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.424570][ T6004] XFS (loop0): Quotacheck: Done. [ 93.449106][ T8] usb 2-1: config 0 descriptor?? [ 93.464452][ T5863] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.518531][ T5828] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.533576][ T5863] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 93.566143][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.631001][ T6025] loop3: detected capacity change from 0 to 32768 [ 93.726665][ T2143] usb 3-1: USB disconnect, device number 2 [ 93.751609][ T8] rc_core: IR keymap rc-hauppauge not found [ 93.764824][ T8] Registered IR keymap rc-empty [ 93.778795][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 93.839607][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 93.913646][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 93.958207][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 94.049933][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.091864][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.193897][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.261123][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.667012][ T6025] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,compression=lz4,background_compression=lz4,metadata_target=invalid label 1791,journal_flush_disabled,journal_reclaim_delay=8,norecovery,reconstruct_alloc [ 94.710541][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.749958][ T6025] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 94.768386][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.078758][ T6025] bcachefs (loop3): Version upgrade required: [ 95.078758][ T6025] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 95.078758][ T6025] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 95.078758][ T6025] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 95.139341][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.231040][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.279368][ T6025] bcachefs (loop3): dropping and reconstructing all alloc info [ 95.279633][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.308406][ T6062] loop2: detected capacity change from 0 to 8 [ 95.378438][ T6025] bcachefs (loop3): error validating btree node at btree inodes level 0/0 [ 95.378466][ T6025] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 95.378487][ T6025] node offset 16/24 bset u64s 110 bset byte offset 280: keys out of order: u64s 18 type inode_v3 670014898176:4098:U32_MAX len 0 ver 0 > u64s 18 type inode_v3 0:4099:U32_MAX len 0 ver 0, fixing [ 95.398387][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.409497][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.433723][ T8] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 95.433750][ T8] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 95.634648][ T8] usb 2-1: USB disconnect, device number 2 [ 96.699939][ T6074] process 'syz.1.38' launched './file2' with NULL argv: empty string added [ 97.723782][ T6025] invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 670014898176:4098:U32_MAX len 0 ver 0: (unpack error) [ 97.723809][ T6025] nonzero k.p.inode: delete?, fixing [ 97.758277][ T6025] bcachefs (loop3): btree_node_read_work: rewriting btree node at due to error [ 97.758277][ T6025] btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 98.022486][ T6025] bcachefs (loop3): accounting_read... done [ 98.057675][ T6025] bcachefs (loop3): alloc_read... done [ 98.238544][ T6025] bcachefs (loop3): stripes_read... done [ 98.260464][ T6025] bcachefs (loop3): snapshots_read... done [ 98.287338][ T6025] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 98.410349][ T6025] bcachefs (loop3): done starting filesystem [ 98.850550][ T6089] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.120187][ T5850] bcachefs (loop3): shutting down [ 99.560639][ T5850] bcachefs (loop3): shutdown complete [ 100.939401][ T969] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.110036][ T6103] loop1: detected capacity change from 0 to 32768 [ 101.871194][ T6103] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 101.982207][ T969] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 102.056375][ T969] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.097118][ T969] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.125042][ T6103] XFS (loop1): Ending clean mount [ 102.252333][ T6103] XFS (loop1): Quotacheck needed: Please wait. [ 102.255415][ T969] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.663985][ T969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.684313][ T6103] XFS (loop1): Quotacheck: Done. [ 102.914851][ T969] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.500691][ T969] usb 5-1: invalid MIDI out EP 0 [ 103.547908][ T969] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 103.619581][ T969] usb 5-1: USB disconnect, device number 3 [ 103.688468][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.878819][ T6127] loop5: detected capacity change from 0 to 8 [ 103.954300][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 104.470789][ T6138] loop0: detected capacity change from 0 to 512 [ 104.489574][ T6138] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.504239][ T5833] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 104.516450][ T6138] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.577998][ T6138] EXT4-fs error (device loop0): __ext4_iget:4984: inode #2: block 3072: comm syz.0.54: invalid block [ 104.620442][ T6138] EXT4-fs (loop0): get root inode failed [ 104.666135][ T6138] EXT4-fs (loop0): mount failed [ 105.695096][ T6146] loop4: detected capacity change from 0 to 512 [ 105.794894][ T6146] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.56: casefold flag without casefold feature [ 106.069674][ T6146] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.56: couldn't read orphan inode 15 (err -117) [ 106.111719][ T6153] netlink: 'syz.0.57': attribute type 29 has an invalid length. [ 106.121911][ T6146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.581390][ T6162] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 107.169762][ T5843] Bluetooth: hci5: command 0x0405 tx timeout [ 107.282622][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.496893][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 107.591925][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.612234][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.640344][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 107.656981][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.695870][ T8] usb 3-1: Product: syz [ 107.715579][ T8] usb 3-1: Manufacturer: syz [ 107.741873][ T8] usb 3-1: SerialNumber: syz [ 107.774481][ T8] usb 3-1: config 0 descriptor?? [ 107.859837][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 109.102412][ T8] msi2500 3-1:0.0: Registered as swradio24 [ 109.158490][ T8] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 109.399662][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 109.597297][ T5863] usb 3-1: USB disconnect, device number 3 [ 109.664458][ T9] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 109.676274][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.693077][ T9] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.731934][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.772830][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.808512][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.048497][ T9] usb 6-1: invalid MIDI out EP 0 [ 110.961879][ T9] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 111.036136][ T9] usb 6-1: USB disconnect, device number 3 [ 111.605628][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.672918][ T6217] netlink: 'syz.3.71': attribute type 29 has an invalid length. [ 113.436008][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 118.045763][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 121.562850][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.101'. [ 121.823909][ T6313] Zero length message leads to an empty skb [ 122.599839][ T969] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.874342][ T6315] BUG: unable to handle page fault for address: fffffbfff3cda120 [ 122.882085][ T6315] #PF: supervisor read access in kernel mode [ 122.888040][ T6315] #PF: error_code(0x0000) - not-present page [ 122.893994][ T6315] PGD 23ffe4067 P4D 23ffe4067 PUD 23ffe3067 PMD 0 [ 122.900506][ T6315] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 122.906727][ T6315] CPU: 0 UID: 0 PID: 6315 Comm: syz.2.106 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 122.916943][ T6315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 122.926977][ T6315] RIP: 0010:kasan_check_range+0x82/0x290 [ 122.932595][ T6315] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 122.952184][ T6315] RSP: 0018:ffffc9001035f800 EFLAGS: 00010086 [ 122.958251][ T6315] RAX: 000000000147aa01 RBX: 1ffffffff3cda120 RCX: ffffffff819ae774 [ 122.966207][ T6315] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9e6d0900 [ 122.974159][ T6315] RBP: ffffffffffffffff R08: ffffffff9e6d0907 R09: 1ffffffff3cda120 [ 122.982112][ T6315] R10: dffffc0000000000 R11: fffffbfff3cda120 R12: ffff88802622e4d4 [ 122.990065][ T6315] R13: ffff88802622da00 R14: dffffc0000000001 R15: fffffbfff3cda121 [ 122.998022][ T6315] FS: 0000555591741500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 123.006948][ T6315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.013514][ T6315] CR2: fffffbfff3cda120 CR3: 0000000028bf2000 CR4: 0000000000350ef0 [ 123.021468][ T6315] Call Trace: [ 123.024733][ T6315] [ 123.027645][ T6315] ? __die_body+0x5f/0xb0 [ 123.031966][ T6315] ? page_fault_oops+0x8e4/0xcc0 [ 123.036895][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.042524][ T6315] ? __pfx_page_fault_oops+0x10/0x10 [ 123.047804][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.053430][ T6315] ? is_prefetch+0x4f6/0x780 [ 123.058009][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.063637][ T6315] ? __pfx_is_prefetch+0x10/0x10 [ 123.068570][ T6315] ? kernel_text_address+0xa7/0xe0 [ 123.073888][ T6315] ? __bad_area_nosemaphore+0x118/0x770 [ 123.079434][ T6315] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 123.085402][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.091027][ T6315] ? spurious_kernel_fault+0x119/0x5a0 [ 123.096470][ T6315] ? do_kern_addr_fault+0x30/0x80 [ 123.101485][ T6315] ? exc_page_fault+0x5c8/0x8b0 [ 123.106324][ T6315] ? asm_exc_page_fault+0x26/0x30 [ 123.111360][ T6315] ? __lock_acquire+0xc94/0x2100 [ 123.116290][ T6315] ? kasan_check_range+0x82/0x290 [ 123.121305][ T6315] __lock_acquire+0xc94/0x2100 [ 123.126067][ T6315] lock_acquire+0x1ed/0x550 [ 123.130580][ T6315] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 123.136117][ T6315] ? __pfx_lock_acquire+0x10/0x10 [ 123.141147][ T6315] ? do_raw_spin_lock+0x272/0x370 [ 123.146157][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.151788][ T6315] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 123.157147][ T6315] ? find_lock_lowest_rq+0x1d6/0x670 [ 123.162421][ T6315] ? plist_check_list+0x470/0x4d0 [ 123.167429][ T6315] ? __pfx_lock_release+0x10/0x10 [ 123.172446][ T6315] _raw_spin_lock_nested+0x31/0x40 [ 123.177545][ T6315] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 123.183076][ T6315] raw_spin_rq_lock_nested+0x2a/0x140 [ 123.188437][ T6315] find_lock_lowest_rq+0x1e1/0x670 [ 123.193543][ T6315] push_rt_task+0x144/0x790 [ 123.198039][ T6315] task_woken_rt+0x14c/0x220 [ 123.202617][ T6315] ttwu_do_activate+0x30c/0x760 [ 123.207464][ T6315] try_to_wake_up+0x89b/0x1470 [ 123.212222][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.217871][ T6315] ? __pfx_try_to_wake_up+0x10/0x10 [ 123.223079][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.228704][ T6315] ? do_raw_spin_lock+0x14f/0x370 [ 123.233715][ T6315] ? __pfx___might_resched+0x10/0x10 [ 123.238992][ T6315] signal_wake_up_state+0xb4/0x120 [ 123.244097][ T6315] zap_other_threads+0x2fd/0x3e0 [ 123.249027][ T6315] ? __pfx_zap_other_threads+0x10/0x10 [ 123.254477][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.260105][ T6315] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 123.266079][ T6315] do_group_exit+0x18a/0x2c0 [ 123.270662][ T6315] __x64_sys_exit_group+0x3f/0x40 [ 123.275683][ T6315] x64_sys_call+0x26a8/0x26b0 [ 123.280356][ T6315] do_syscall_64+0xf3/0x230 [ 123.284850][ T6315] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.290480][ T6315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.296363][ T6315] RIP: 0033:0x7f7642f8cda9 [ 123.300764][ T6315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.320351][ T6315] RSP: 002b:00007ffe0f2a9b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 123.328751][ T6315] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7642f8cda9 [ 123.336706][ T6315] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.344660][ T6315] RBP: 00007ffe0f2a9bac R08: 00007ffe0f2a9c3f R09: 00000000000927c0 [ 123.352612][ T6315] R10: 0000000000002020 R11: 0000000000000246 R12: 000000000000000e [ 123.360564][ T6315] R13: 00000000000927c0 R14: 000000000001daa0 R15: 00007ffe0f2a9c00 [ 123.368523][ T6315] [ 123.371522][ T6315] Modules linked in: [ 123.375400][ T6315] CR2: fffffbfff3cda120 [ 123.379532][ T6315] ---[ end trace 0000000000000000 ]--- [ 123.384964][ T6315] RIP: 0010:kasan_check_range+0x82/0x290 [ 123.390583][ T6315] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 123.410170][ T6315] RSP: 0018:ffffc9001035f800 EFLAGS: 00010086 [ 123.416222][ T6315] RAX: 000000000147aa01 RBX: 1ffffffff3cda120 RCX: ffffffff819ae774 [ 123.424175][ T6315] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9e6d0900 [ 123.432127][ T6315] RBP: ffffffffffffffff R08: ffffffff9e6d0907 R09: 1ffffffff3cda120 [ 123.440083][ T6315] R10: dffffc0000000000 R11: fffffbfff3cda120 R12: ffff88802622e4d4 [ 123.448036][ T6315] R13: ffff88802622da00 R14: dffffc0000000001 R15: fffffbfff3cda121 [ 123.455994][ T6315] FS: 0000555591741500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 123.464904][ T6315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.471466][ T6315] CR2: fffffbfff3cda120 CR3: 0000000028bf2000 CR4: 0000000000350ef0 [ 123.479424][ T6315] Kernel panic - not syncing: Fatal exception [ 124.594473][ T6315] Shutting down cpus with NMI [ 124.599390][ T6315] Kernel Offset: disabled [ 124.603708][ T6315] Rebooting in 86400 seconds..