last executing test programs: 9m36.542042991s ago: executing program 1 (id=41): ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000010c0)={0xfffffffe, 0x2, 'client1\x00', 0x5, "422e9d7d23856127", "07c9e8028cd1f0394efed58c2c8fd304183134b004670d4b3355b33600bfb6c0", 0x10004, 0x1}) socket$alg(0x26, 0x5, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e130100ca000100aaaaaaaaaa2218"], 0x16) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24002805}, 0x4000000) 9m34.578374872s ago: executing program 1 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000400)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000480)="05031600d3fc143c00004788031c09102c28", 0xfdef, 0x4, &(0x7f00000004c0)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 9m33.863872636s ago: executing program 1 (id=48): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x5, @none, 0x0, 0x1}, 0xe) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=cp1255,errors=continue,\x00'/49], 0x1, 0x1535, &(0x7f0000000400)="$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") chdir(&(0x7f0000001940)='./file0\x00') setns(0xc9, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000001980)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000019c0), 0x800001d, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setregid(0x0, 0x0) chown(&(0x7f0000001a00)='./file0\x00', 0x0, 0x0) 9m30.720331299s ago: executing program 1 (id=58): r0 = syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x0, &(0x7f0000000980), 0x1, 0x44b, &(0x7f00000009c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000e40)='./file0/file1\x00', 0x40, 0x83) getdents64(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000ec0)='./proc\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000f00)='./proc/fs/nfsd\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f40)='.\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000f80)='./file0\x00', 0x1) open$dir(&(0x7f0000000fc0)='./file0\x00', 0x200, 0xdd) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x2, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001140)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) getdents(r1, 0x0, 0x0) 9m26.038325589s ago: executing program 1 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./loop0\x00', 0x6180, 0x700) mount(&(0x7f0000000040)=@filename='./loop0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x85, &(0x7f0000000400)='rtdev=./loop0\x00') 9m23.410240379s ago: executing program 1 (id=70): prctl$PR_GET_TID_ADDRESS(0x28, 0x0) socket$inet(0x2, 0x4000000000000001, 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x12) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, 0x0) getrandom(&(0x7f0000002500)=""/286, 0xffffff9a, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000280)={[{@uni_xlate}, {@shortname_winnt}, {@shortname_win95}, {@shortname_lower}, {@rodir}, {@utf8}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@uni_xlateno}, {@utf8no}, {@utf8no}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@utf8no}]}, 0x3, 0x28e, &(0x7f00000027c0)="$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") syz_emit_vhci(&(0x7f0000002640)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) ioctl$EVIOCSABS0(r1, 0x40806685, &(0x7f00000026c0)={0x8276, 0xf0, 0xfffffffc, 0x100000, 0x7, 0xb391}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000002740)={0x0, 0x7, 0x0, '\x00', 0x0}) 9m23.023235049s ago: executing program 32 (id=70): prctl$PR_GET_TID_ADDRESS(0x28, 0x0) socket$inet(0x2, 0x4000000000000001, 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x12) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, 0x0) getrandom(&(0x7f0000002500)=""/286, 0xffffff9a, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000280)={[{@uni_xlate}, {@shortname_winnt}, {@shortname_win95}, {@shortname_lower}, {@rodir}, {@utf8}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@uni_xlateno}, {@utf8no}, {@utf8no}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@utf8no}]}, 0x3, 0x28e, &(0x7f00000027c0)="$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") syz_emit_vhci(&(0x7f0000002640)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) ioctl$EVIOCSABS0(r1, 0x40806685, &(0x7f00000026c0)={0x8276, 0xf0, 0xfffffffc, 0x100000, 0x7, 0xb391}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000002740)={0x0, 0x7, 0x0, '\x00', 0x0}) 9m1.48474655s ago: executing program 2 (id=118): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x108) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x7, r1, 0x0, 0x6f39, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)={[{@test_dummy_encryption_v1}, {@acl}, {@noinit_itable}, {@noblock_validity}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}, 0x0, 0x5c4, &(0x7f0000000880)="$eJzs3W+IHGcdB/Df7N2l+XM1aWzV1tichtpA6O3lcgmJ+MIS/9Sa1Irii1AIR257F7J3e+Yu0NsKtvimKIjgGxGEin1hRTSQN5VS2xctvlFQ6h8qNQZUEKFopSCCuvLsn+vaTJro3e1o5vOByT3zzNw9z2b57szOPDMTQGmNpX+yiNGIuBAR2zuz/77CWOdH88D5uTRl0Wp98k9Ze72ZA+fneqv2fm9b+mc4YnNE7DyaxZ6Ry9tdWmmema7Xa2e789Xl+cXq0krzrtPz07O12drCwcNTRyYPTR2eWr/XOvHjrbf8/o77Lj3x/F///vVfHvpu6u9od1n/61gvYzHW/T8ZiZv66oeziHvXu7GCDHXe6rijry4bLrBDXLNWa+d30vv31ojY087/9hiKzpv30tMP/GV7/PyeovsIbJxWT/7iV1vAdavS3gfOKuMR0SlXKuPjnX34m2Nrpd5YWt73YOPcwkxnX3lHjFQePF2vTXS/K+yIkSzN72+XX5+ffMP8gYj2PvBjQ1va8+OnGvWZQX/YAW2jERcvfObUpm1vyP8fhjr5B65fKf8/e+GpZ1P5taGiewMMUsr/t1+b/1jIP5SO/EN5yT+Ul/xDeck/lJf8Q3nJP5SX/EN5yT+U13+Y/0cG0SdgMHr5v//48bj/+PFWs3v9+0Jj9vSZucUjkxPj8+dOjZ9qnF0cn200ZttX7Mxf/e/WG43F/ZNx7qHqcm1pubq00jw53zi3sHyyfV3/yVrOrQCAApy4tPnem3Y/91KWNvDv29Kekk3d5bIK17dWK4uir0EGiuHQH5SXW7VBefmOD2RXWb75Sgvq698XYDAqRXcAKMydtzr/B2Xl+D+Ul+P/UF728QHH/6F8HP+H8hq9wvO/bux7dtdERLwlIn40NHJD71lfwP+v0YiLF7/56erqc7gVFBQUVgtFf0IBG+310BfdE6AoMwfOz/WmQbX5zOygWgLyvHJ3ZxBQyn2zO3WWDK+eGxjZoHFCLz8WMRbf//Xje+eG0hTdz6ENaArI8cijEfGOvO1/1j43sKO73s7OanFzRNwSEW+LiLevse2vfiLl/4Vaf538w+Bca/5vjYjbI+K2iHhnROyKiHetse2fXkj5/8WW/jr5h3L47PNF9wDYYFe8xPCjTw22I8D/jhPGGEBpfevhonsAFOXp7xXdA6AoX3qx6B5AuT13d0RM5J3/q7TP9/eMdO8LeEP3XgBbImJrRGzrXkN4Y/cawe195wyv5uTHI8bi9h/01zn/B4PTG//XvGz8X2V1/N9QROxeQxvPvH/0i3n107tS/p94uDf+L02p/d5YQGBjvfJoxG25+c9Wx/xmkXIa8e7/so2xz116Mq/+xfvS3x35ifxDMVrfiHhv5Oe/J5Wqy/OL1aWV5l3t53jP1hYOHp46Mnlo6vBUtX2LkGrvRiE5jv351X159S9Ppvx/7aD8QzHS9n/rFfLfv///njW0cfQrXziRVz/625T/Xc++ef4rf9yUfao933suwUPTy8tn90dsyo5dXj+5ho7Cda6XkV6GUv737sn//r+z+ztp+380Ij6Y9hci4h8R8c+I+FBEfDgiPhIR97xJm1++c/ZSXv1vnkz5f/yM7T8UI+V/5irb//Tzb2toY9/eH34+r/4Du1P+x3/1u2MPDKdJ/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW39JK88x0vV47u4GFol8jAAAAAAAAlMW/AgAA///s8TV1") r3 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x1c1002, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) write(r3, &(0x7f0000000200)="c7", 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 9m0.189556063s ago: executing program 2 (id=124): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001780)=0x2) setpriority(0x0, 0x0, 0x2a14b58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001a40)={0x1, &(0x7f0000001a80)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b40)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001ac0)={0x1, &(0x7f0000001b00)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000b80)='keyring\x00', &(0x7f0000000bc0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000c40), 0x0, r1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r2, &(0x7f0000001cc0)=[{0x0}], 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)) 8m58.926420253s ago: executing program 2 (id=131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0213002f020075"], 0x33fe0}}, 0x4000050) syz_genetlink_get_family_id$devlink(0x0, r1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xe) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4409b}, 0x110) 8m58.066089501s ago: executing program 2 (id=134): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x1, 0x264, &(0x7f0000000940)="$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") r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000200), 0x4) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x136) pipe2$9p(0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) write$tcp_congestion(r1, 0x0, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r2, r1, 0x0, 0x7ffff000) 8m57.043180736s ago: executing program 2 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r2, r2, 0x0) 8m56.394318653s ago: executing program 2 (id=145): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) io_submit(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000200)={0x2, 0x0, '\x00', 0x1, 0x0}) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000de5000/0x4000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) 8m56.104779763s ago: executing program 33 (id=145): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) io_submit(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000200)={0x2, 0x0, '\x00', 0x1, 0x0}) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000de5000/0x4000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) 10.799445351s ago: executing program 5 (id=1499): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1040}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='m']}]}}]}]}]}}]}, 0x78}}, 0x0) 10.3228043s ago: executing program 5 (id=1502): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 10.090888454s ago: executing program 5 (id=1504): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x3, 0xc9}}}, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x20000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f0000000440)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) semop(0x0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) creat(&(0x7f0000019480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x16a) fanotify_init(0xf00, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000019640)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019680)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000197c0)={0x0, 0x0, &(0x7f0000019800), 0x0, &(0x7f0000019880)=ANY=[@ANYBLOB="1800000000000000170100000300000001000000000000002800"/50]}, 0x0) 8.601362446s ago: executing program 4 (id=1510): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x3, 0xc9}}}, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x20000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000000440)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) semop(0x0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) creat(&(0x7f0000019480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x16a) fanotify_init(0xf00, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000019640)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019680)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000197c0)={0x0, 0x0, &(0x7f0000019800), 0x0, &(0x7f0000019880)=ANY=[@ANYBLOB="1800000000000000170100000300000001000000000000002800"/50]}, 0x0) 7.355989215s ago: executing program 5 (id=1512): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x800700, &(0x7f0000000c00)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsv1}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@max_batch_time={'max_batch_time', 0x3d, 0xfff0000000000000}}, {@dioread_lock}, {@noblock_validity}, {@inlinecrypt}]}, 0x3, 0x470, &(0x7f0000000740)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000bc0)={0x2f}) 7.352151565s ago: executing program 3 (id=1513): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x40042, 0x0) write$dsp(r0, &(0x7f0000000140)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000180)=0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7.053738585s ago: executing program 4 (id=1514): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)={0x78, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}]}]}, 0x78}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) 6.362359207s ago: executing program 0 (id=1517): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000002c0), 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='proc\x00', 0x1a) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000380)) 6.22539999s ago: executing program 0 (id=1518): mlockall(0x6) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) 6.026061341s ago: executing program 3 (id=1519): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.411658354s ago: executing program 3 (id=1520): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000280)={0x0, 0x5962, 0x10000, 0x0, 0x4f}, &(0x7f0000000340)=0x0, &(0x7f00000017c0)=0x0, &(0x7f0000001880)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000018c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 5.269906789s ago: executing program 5 (id=1521): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x3, 0xc9}}}, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x20000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f0000000440)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) semop(0x0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) creat(&(0x7f0000019480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x16a) fanotify_init(0xf00, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000019640)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019680)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000197c0)={0x0, 0x0, &(0x7f0000019800), 0x0, &(0x7f0000019880)=ANY=[@ANYBLOB="1800000000000000170100000300000001000000000000002800"/50]}, 0x0) 5.110184325s ago: executing program 0 (id=1522): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x40042) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @private}}}], 0x20}, 0x0) 4.568987221s ago: executing program 0 (id=1523): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x3, 0xc9}}}, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x20000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f0000000440)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) semop(0x0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) creat(&(0x7f0000019480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x16a) fanotify_init(0xf00, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000019640)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019680)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000197c0)={0x0, 0x0, &(0x7f0000019800), 0x0, &(0x7f0000019880)=ANY=[@ANYBLOB="1800000000000000170100000300000001000000000000002800"/50]}, 0x0) 3.167490185s ago: executing program 4 (id=1524): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmsg$unix(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 3.106249091s ago: executing program 3 (id=1525): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20060094}, 0x0) sendto$packet(r0, &(0x7f0000000280)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x404c891, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 2.751688907s ago: executing program 4 (id=1526): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x9) sendto$inet(r0, 0x0, 0x0, 0x24008059, &(0x7f0000000300)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) shutdown(r0, 0x1) 2.449401968s ago: executing program 4 (id=1527): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x3, 0xc9}}}, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x20000001) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000000440)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) semop(0x0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) creat(&(0x7f0000019480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x16a) fanotify_init(0xf00, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000019640)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019680)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000197c0)={0x0, 0x0, &(0x7f0000019800), 0x0, &(0x7f0000019880)=ANY=[@ANYBLOB="1800000000000000170100000300000001000000000000002800"/50]}, 0x0) 2.345699599s ago: executing program 5 (id=1528): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000100)='./file4\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x1, 0x1f1, &(0x7f0000000180)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001640)='sys_mnt\x00', 0x1ff) 2.275562416s ago: executing program 0 (id=1529): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$l2tp(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000940), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 664.867572ms ago: executing program 0 (id=1530): mknodat$md(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f00000006c0)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6000}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000740)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000880)={0x4, {0x1, 0x1}, 0x2, 0x4021e}) ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) 570.386691ms ago: executing program 3 (id=1531): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffe1}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x24040004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000005c0)=@x86={0x2, 0x7, 0x3, 0x0, 0x8, 0x2, 0xff, 0x63, 0x3, 0x2, 0xd, 0x7, 0x0, 0x1, 0xfffffffb, 0xfa, 0x9, 0x2, 0x0, '\x00', 0x25, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 434.265555ms ago: executing program 4 (id=1532): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000}, 0xf8d}], 0x1, 0x10122, 0x0) 0s ago: executing program 3 (id=1533): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 79.452308][ T5773] cgroup: Unknown subsys name 'net' [ 79.591361][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.365201][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.158366][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.176454][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.187431][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.196235][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.204137][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.211861][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.212119][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.222084][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.234130][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.241486][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.241648][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.257192][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.264449][ T5803] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.272311][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.279710][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.295221][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.303438][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.306121][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.319565][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.327217][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.335150][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.344734][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.352637][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.365744][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.452790][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 83.465489][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 83.471809][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.480119][ T5788] (null): rxe_set_mtu: Set mtu to 1024 [ 83.489124][ T5787] (null): rxe_set_mtu: Set mtu to 1024 [ 83.492860][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.503857][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.507562][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.518815][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.538150][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.952155][ T5785] infiniband rxe0: set active [ 83.962129][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.972921][ T5785] infiniband rxe0: added rxe_eth0 [ 84.105173][ T5785] RDS/IB: rxe0: added [ 84.110025][ T5785] smc: adding ib device rxe0 with port count 1 [ 84.163040][ T5785] smc: ib device rxe0 port 1 has pnetid [ 84.170185][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.213405][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.223907][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 84.248271][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 84.416884][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 84.523967][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.531109][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.539362][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.547063][ T5786] bridge_slave_0: entered allmulticast mode [ 84.555001][ T5786] bridge_slave_0: entered promiscuous mode [ 84.565996][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.573347][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.580595][ T5786] bridge_slave_1: entered allmulticast mode [ 84.588254][ T5786] bridge_slave_1: entered promiscuous mode [ 84.704238][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.718484][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.790841][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.799308][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.807793][ T5787] bridge_slave_0: entered allmulticast mode [ 84.815701][ T5787] bridge_slave_0: entered promiscuous mode [ 84.837680][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.845057][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.852254][ T5788] bridge_slave_0: entered allmulticast mode [ 84.861730][ T5788] bridge_slave_0: entered promiscuous mode [ 84.869174][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.876089][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.887745][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.895426][ T5787] bridge_slave_1: entered allmulticast mode [ 84.903253][ T5787] bridge_slave_1: entered promiscuous mode [ 84.930875][ T5786] team0: Port device team_slave_0 added [ 84.945100][ T5786] team0: Port device team_slave_1 added [ 84.994115][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.001325][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.023007][ T5788] bridge_slave_1: entered allmulticast mode [ 85.030583][ T5788] bridge_slave_1: entered promiscuous mode [ 85.148917][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.176452][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.204065][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.211112][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.269947][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.323807][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.342056][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.351273][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.372817][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.399038][ T5791] Bluetooth: hci3: command tx timeout [ 85.399528][ T5791] Bluetooth: hci0: command tx timeout [ 85.410281][ T5791] Bluetooth: hci2: command tx timeout [ 85.422880][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.455472][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.467276][ T5791] Bluetooth: hci1: command tx timeout [ 85.527298][ T5787] team0: Port device team_slave_0 added [ 85.556604][ T5787] team0: Port device team_slave_1 added [ 85.651613][ T5788] team0: Port device team_slave_0 added [ 85.678049][ T5788] team0: Port device team_slave_1 added [ 85.780516][ T5786] hsr_slave_0: entered promiscuous mode [ 85.788808][ T5786] hsr_slave_1: entered promiscuous mode [ 85.796774][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.803945][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.830050][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.843101][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.850097][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.876123][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.902203][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.909359][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.935471][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.967267][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.974444][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.000755][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.135032][ T5788] hsr_slave_0: entered promiscuous mode [ 86.141628][ T5788] hsr_slave_1: entered promiscuous mode [ 86.148647][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.157058][ T5788] Cannot create hsr debugfs directory [ 86.182264][ T5787] hsr_slave_0: entered promiscuous mode [ 86.189795][ T5787] hsr_slave_1: entered promiscuous mode [ 86.196926][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.204568][ T5787] Cannot create hsr debugfs directory [ 86.569411][ T5447] infiniband rxe0: set active [ 86.596135][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.651554][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 86.689341][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.716698][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.789369][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.833757][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.844318][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.895929][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.921833][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.929115][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.937105][ T5785] bridge_slave_0: entered allmulticast mode [ 86.944983][ T5785] bridge_slave_0: entered promiscuous mode [ 86.961988][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.969976][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.977462][ T5785] bridge_slave_1: entered allmulticast mode [ 86.985768][ T5785] bridge_slave_1: entered promiscuous mode [ 86.992465][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.023750][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.099648][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.111427][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.147436][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.166286][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.258375][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.319586][ T5785] team0: Port device team_slave_0 added [ 87.326563][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.351455][ T5785] team0: Port device team_slave_1 added [ 87.435967][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.453250][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.480767][ T5791] Bluetooth: hci2: command tx timeout [ 87.483916][ T5098] Bluetooth: hci0: command tx timeout [ 87.486522][ T5791] Bluetooth: hci3: command tx timeout [ 87.500764][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.523677][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.530699][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.562373][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.580769][ T5098] Bluetooth: hci1: command tx timeout [ 87.621976][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.741792][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.778821][ T5785] hsr_slave_0: entered promiscuous mode [ 87.786437][ T5785] hsr_slave_1: entered promiscuous mode [ 87.792673][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.800578][ T5785] Cannot create hsr debugfs directory [ 87.841103][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.848531][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.864567][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.950810][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.958050][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.023703][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.069754][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.134833][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.142060][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.157632][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.165104][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.187494][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.212524][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.219752][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.244323][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.251552][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.423351][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.447678][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.459356][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.485188][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.611395][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.822373][ T5786] veth0_vlan: entered promiscuous mode [ 88.847359][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.880785][ T5786] veth1_vlan: entered promiscuous mode [ 88.929255][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.975211][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.982431][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.027956][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.035211][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.087105][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.150959][ T5786] veth0_macvtap: entered promiscuous mode [ 89.160989][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.205319][ T5786] veth1_macvtap: entered promiscuous mode [ 89.265803][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.299431][ T5788] veth0_vlan: entered promiscuous mode [ 89.328054][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.345988][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.361252][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.370498][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.384531][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.438960][ T5788] veth1_vlan: entered promiscuous mode [ 89.518402][ T5787] veth0_vlan: entered promiscuous mode [ 89.541324][ T5787] veth1_vlan: entered promiscuous mode [ 89.547150][ T5098] Bluetooth: hci3: command tx timeout [ 89.554078][ T5791] Bluetooth: hci2: command tx timeout [ 89.554824][ T5801] Bluetooth: hci0: command tx timeout [ 89.629818][ T5098] Bluetooth: hci1: command tx timeout [ 89.648910][ T5788] veth0_macvtap: entered promiscuous mode [ 89.661174][ T5788] veth1_macvtap: entered promiscuous mode [ 89.688577][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.699621][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.712025][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.724467][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.735192][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.747056][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.761217][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.777089][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.789728][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.799464][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.808623][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.817865][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.842560][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.892591][ T5787] veth0_macvtap: entered promiscuous mode [ 89.905194][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.910095][ T5787] veth1_macvtap: entered promiscuous mode [ 89.922323][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.975934][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.986545][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.996512][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.007715][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.021142][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.090360][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.110799][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.125304][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.138522][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.151308][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.160010][ T5786] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.212529][ T5785] veth0_vlan: entered promiscuous mode [ 90.225105][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.239880][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.250785][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.264971][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.300670][ T5785] veth1_vlan: entered promiscuous mode [ 90.334510][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.342395][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.421722][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.434958][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.542462][ T5785] veth0_macvtap: entered promiscuous mode [ 90.580290][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.589824][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.593705][ T5785] veth1_macvtap: entered promiscuous mode [ 90.702784][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.720720][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.739203][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.759492][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.759526][ T5888] syz.1.2[5888]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.770987][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.794539][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.813578][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.862530][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.882296][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.896516][ T5888] loop1: detected capacity change from 0 to 512 [ 90.917987][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.963900][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.024137][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.062432][ T5888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.083069][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.110195][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.118367][ T5888] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.140982][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.175668][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.180289][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.658478][ T5098] Bluetooth: hci2: command tx timeout [ 91.664659][ T5801] Bluetooth: hci0: command tx timeout [ 91.671197][ T5098] Bluetooth: hci3: command tx timeout [ 91.698919][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.708695][ T5098] Bluetooth: hci1: command tx timeout [ 91.752905][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.809981][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.977849][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.034699][ T5902] netlink: 'syz.3.6': attribute type 4 has an invalid length. [ 92.211244][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.240937][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.318499][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.507130][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.407944][ T5918] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.570044][ T5920] xt_policy: output policy not valid in PREROUTING and INPUT [ 97.333976][ T1193] cfg80211: failed to load regulatory.db [ 98.550767][ T5868] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.170801][ T5962] syzkaller0: entered promiscuous mode [ 100.202984][ T5962] syzkaller0: entered allmulticast mode [ 100.274219][ T5970] 0: reclassify loop, rule prio 0, protocol 800 [ 100.303013][ T5972] capability: warning: `syz.1.20' uses 32-bit capabilities (legacy support in use) [ 100.462963][ T5967] netlink: 11 bytes leftover after parsing attributes in process `syz.3.17'. [ 100.638670][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'. [ 100.916384][ T5997] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 100.972001][ T5997] netlink: 84 bytes leftover after parsing attributes in process `syz.0.22'. [ 101.282105][ T5791] Bluetooth: Wrong link type (-71) [ 102.505258][ T6013] loop0: detected capacity change from 0 to 512 [ 103.130260][ T6013] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 103.271231][ T6013] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.26: invalid indirect mapped block 256 (level 1) [ 103.581079][ T6013] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.26: invalid indirect mapped block 2683928664 (level 1) [ 104.040007][ T6029] loop2: detected capacity change from 0 to 128 [ 104.762718][ C0] sched: RT throttling activated [ 104.780807][ T6013] EXT4-fs (loop0): 1 truncate cleaned up [ 105.776371][ T6013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.471847][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.502319][ T6036] loop1: detected capacity change from 0 to 512 [ 107.522523][ T6036] ext2: Unknown parameter 'measure' [ 111.524905][ T6070] jffs2: notice: (6070) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 112.204482][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 112.266030][ T6098] syzkaller0: entered promiscuous mode [ 112.271603][ T6098] syzkaller0: entered allmulticast mode [ 112.776756][ T6105] loop2: detected capacity change from 0 to 512 [ 112.782207][ T6107] loop1: detected capacity change from 0 to 256 [ 112.819736][ T6105] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.846326][ T6107] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 112.928986][ T6105] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002] [ 112.960522][ T6105] System zones: 0-2, 18-18, 34-35 [ 112.995461][ T6105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.044945][ T6105] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.183020][ T6113] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz.2.47: iget: bad i_size value: 2533274857506816 [ 113.247315][ T28] audit: type=1800 audit(1793782627.600:2): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.47" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 113.471373][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.008361][ T6124] syz.2.53 uses obsolete (PF_INET,SOCK_PACKET) [ 114.016924][ T6124] netlink: 'syz.2.53': attribute type 1 has an invalid length. [ 115.147846][ T6128] ======================================================= [ 115.147846][ T6128] WARNING: The mand mount option has been deprecated and [ 115.147846][ T6128] and is ignored by this kernel. Remove the mand [ 115.147846][ T6128] option from the mount to silence this warning. [ 115.147846][ T6128] ======================================================= [ 115.282467][ T6128] jffs2: notice: (6128) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 116.458809][ T6140] loop1: detected capacity change from 0 to 512 [ 116.543202][ T6140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.348332][ T6140] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.466519][ T6140] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.58: No space for directory leaf checksum. Please run e2fsck -D. [ 118.522075][ T6140] EXT4-fs error (device loop1): __ext4_find_entry:1698: inode #2: comm syz.1.58: checksumming directory block 0 [ 118.572191][ T6152] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.58: No space for directory leaf checksum. Please run e2fsck -D. [ 118.899898][ T6149] loop3: detected capacity change from 0 to 512 [ 119.102025][ T6149] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 119.275053][ T6152] EXT4-fs error (device loop1): ext4_readdir:223: inode #2: comm syz.1.58: path /12/file0: directory fails checksum at offset 0 [ 119.490914][ T6157] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.58: No space for directory leaf checksum. Please run e2fsck -D. [ 119.506452][ T6157] EXT4-fs error (device loop1): __ext4_find_entry:1698: inode #2: comm syz.1.58: checksumming directory block 0 [ 119.515954][ T6149] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #17: comm syz.3.60: iget: immutable or append flags not allowed on symlinks [ 119.562953][ T6155] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.58: No space for directory leaf checksum. Please run e2fsck -D. [ 119.621749][ T6149] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.60: couldn't read orphan inode 17 (err -117) [ 119.632871][ T6155] EXT4-fs error (device loop1): __ext4_find_entry:1698: inode #2: comm syz.1.58: checksumming directory block 0 [ 119.688680][ T6140] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.58: No space for directory leaf checksum. Please run e2fsck -D. [ 119.690244][ T6157] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.58: No space for directory leaf checksum. Please run e2fsck -D. [ 119.730055][ T6140] EXT4-fs error (device loop1): __ext4_find_entry:1698: inode #2: comm syz.1.58: checksumming directory block 0 [ 119.732331][ T6149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.784855][ T6145] EXT4-fs error (device loop1): ext4_validate_block_bitmap:421: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 119.865214][ T6157] EXT4-fs error (device loop1): __ext4_find_entry:1698: inode #2: comm syz.1.58: checksumming directory block 0 [ 119.938184][ T6152] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.58: No space for directory leaf checksum. Please run e2fsck -D. [ 119.967650][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.983338][ T6152] EXT4-fs error (device loop1): __ext4_find_entry:1698: inode #2: comm syz.1.58: checksumming directory block 0 [ 120.004614][ T6140] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.58: No space for directory leaf checksum. Please run e2fsck -D. [ 120.048869][ T6140] EXT4-fs error (device loop1): ext4_readdir:223: inode #2: comm syz.1.58: path /12/file0: directory fails checksum at offset 0 [ 120.146534][ T6163] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.58: No space for directory leaf checksum. Please run e2fsck -D. [ 120.287473][ T6163] EXT4-fs error (device loop1): __ext4_find_entry:1698: inode #2: comm syz.1.58: checksumming directory block 0 [ 120.368839][ T6163] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.58: No space for directory leaf checksum. Please run e2fsck -D. [ 120.602475][ T6167] loop3: detected capacity change from 0 to 256 [ 122.887765][ T6163] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.197570][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.322022][ T6180] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.331267][ T6180] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.340379][ T6180] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.349187][ T6180] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.376415][ T6180] team0: Port device vxlan0 added [ 123.462255][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.666092][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.032862][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.75'. [ 124.325478][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.807638][ T6202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.75'. [ 125.018057][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.029694][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.042402][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.052139][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.066440][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.074185][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.082215][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 126.148035][ T6205] rxe_eth0 speed is unknown, defaulting to 1000 [ 127.176872][ T5098] Bluetooth: hci3: command tx timeout [ 129.224086][ T5098] Bluetooth: hci3: command tx timeout [ 129.643755][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.928867][ T6234] xt_hashlimit: max too large, truncated to 1048576 [ 130.124078][ T6255] jffs2: notice: (6255) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.311265][ T6205] chnl_net:caif_netlink_parms(): no params data found [ 130.461682][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 130.491163][ T8] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 130.502920][ T8] usb 1-1: can't read configurations, error -71 [ 131.303242][ T5098] Bluetooth: hci3: command tx timeout [ 131.360879][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.547301][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.822833][ T6205] bridge_slave_0: entered allmulticast mode [ 131.895178][ T6205] bridge_slave_0: entered promiscuous mode [ 131.960977][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.043117][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.050477][ T6205] bridge_slave_1: entered allmulticast mode [ 132.489079][ T6205] bridge_slave_1: entered promiscuous mode [ 132.877542][ T12] hsr_slave_0: left promiscuous mode [ 132.898248][ T12] hsr_slave_1: left promiscuous mode [ 132.918131][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.948406][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.975123][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.989028][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.021216][ T12] bridge_slave_1: left allmulticast mode [ 133.040097][ T12] bridge_slave_1: left promiscuous mode [ 133.052448][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.125285][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.132197][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.211207][ T12] bridge_slave_0: left allmulticast mode [ 133.223431][ T12] bridge_slave_0: left promiscuous mode [ 133.229370][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.366566][ T12] veth1_macvtap: left promiscuous mode [ 133.372738][ T12] veth0_macvtap: left promiscuous mode [ 133.373400][ T6289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.393078][ T5791] Bluetooth: hci3: command tx timeout [ 133.402967][ T12] veth1_vlan: left promiscuous mode [ 133.413309][ T12] veth0_vlan: left promiscuous mode [ 134.262874][ T5791] Bluetooth: hci1: command tx timeout [ 134.518529][ T28] audit: type=1800 audit(1793782904.873:3): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.92" name="file2" dev="sda1" ino=2046 res=0 errno=0 [ 134.585877][ T12] team0 (unregistering): Port device team_slave_1 removed [ 134.639871][ T12] team0 (unregistering): Port device team_slave_0 removed [ 134.691993][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.780541][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.274432][ T12] bond0 (unregistering): Released all slaves [ 135.904547][ T6205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.955777][ T6288] pimreg: entered allmulticast mode [ 135.963054][ T6304] netlink: 27 bytes leftover after parsing attributes in process `syz.2.91'. [ 136.002439][ T6313] bridge1: entered promiscuous mode [ 136.128780][ T6205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.278854][ T6205] team0: Port device team_slave_0 added [ 136.318695][ T6205] team0: Port device team_slave_1 added [ 136.410215][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.442808][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.523710][ T6205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.554748][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.561779][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.592954][ T6205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.726660][ T6205] hsr_slave_0: entered promiscuous mode [ 136.779370][ T6205] hsr_slave_1: entered promiscuous mode [ 136.793803][ T6205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.809686][ T6205] Cannot create hsr debugfs directory [ 138.043960][ T6347] ip_tables: iptables: counters copy to user failed while replacing table [ 138.123444][ T6346] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 139.085902][ T6205] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 140.603446][ T6205] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.654521][ T6205] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 140.680390][ T6205] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 140.958790][ T6205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.058097][ T6205] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.110387][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.117670][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.153361][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.160591][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.895635][ T6205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.516056][ T6205] veth0_vlan: entered promiscuous mode [ 143.538762][ T6205] veth1_vlan: entered promiscuous mode [ 143.630773][ T6205] veth0_macvtap: entered promiscuous mode [ 143.659909][ T6205] veth1_macvtap: entered promiscuous mode [ 143.706229][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.723238][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.745817][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.768967][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.782508][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.801415][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.826489][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.853104][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.877711][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.908379][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.950938][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.970332][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.981779][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.000192][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.040989][ T6205] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.052453][ T6205] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.066098][ T6205] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.076327][ T6205] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.240826][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.263198][ T5791] Bluetooth: hci1: command 0x0401 tx timeout [ 144.272339][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.398566][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.419162][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.454050][ T6442] loop2: detected capacity change from 0 to 64 [ 144.731419][ T6450] netlink: 'syz.4.72': attribute type 1 has an invalid length. [ 145.027823][ T6459] loop0: detected capacity change from 0 to 256 [ 145.172217][ T5791] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 145.233494][ T6466] loop2: detected capacity change from 0 to 1024 [ 145.347976][ T6466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.411417][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 145.486904][ T28] audit: type=1804 audit(1793782915.843:4): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.118" name="/newroot/32/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 145.531220][ T6472] lo: entered promiscuous mode [ 146.035577][ T6485] loop4: detected capacity change from 0 to 128 [ 146.081021][ T6485] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 146.234322][ T6485] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 146.255812][ T6485] FAT-fs (loop4): Filesystem has been set read-only [ 146.723553][ T6488] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 146.743072][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.144122][ T28] audit: type=1326 audit(1793782917.483:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79fb19 code=0x7fc00000 [ 147.220883][ T28] audit: type=1326 audit(1793782917.483:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f818b79fb19 code=0x7fc00000 [ 147.267817][ T28] audit: type=1326 audit(1793782917.483:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79fb19 code=0x7fc00000 [ 147.299461][ T28] audit: type=1326 audit(1793782917.483:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79fb19 code=0x7fc00000 [ 147.329322][ T28] audit: type=1326 audit(1793782917.483:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79fb19 code=0x7fc00000 [ 147.363059][ T28] audit: type=1326 audit(1793782917.483:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79fb19 code=0x7fc00000 [ 147.393532][ T28] audit: type=1326 audit(1793782917.483:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79fb19 code=0x7fc00000 [ 147.425539][ T28] audit: type=1326 audit(1793782917.483:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79fb19 code=0x7fc00000 [ 147.455679][ T28] audit: type=1326 audit(1793782917.483:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818b79fb19 code=0x7fc00000 [ 147.473150][ T1193] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.639066][ T6518] bridge_slave_0: left allmulticast mode [ 147.646425][ T6518] bridge_slave_0: left promiscuous mode [ 147.654226][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.689705][ T6518] bridge_slave_1: left allmulticast mode [ 147.698169][ T1193] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 147.716158][ T1193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.729509][ T6518] bridge_slave_1: left promiscuous mode [ 147.739497][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.808996][ T6518] bond0: (slave bond_slave_0): Releasing backup interface [ 147.864142][ T6518] bond0: (slave bond_slave_1): Releasing backup interface [ 147.980329][ T6518] team0: Port device team_slave_0 removed [ 148.035868][ T6518] team0: Port device team_slave_1 removed [ 148.043168][ T1193] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 148.092941][ T6518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.100446][ T6518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.148275][ T6518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.163601][ T6518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.321141][ T6520] team0: Mode changed to "broadcast" [ 148.397656][ T1193] usb 1-1: USB disconnect, device number 4 [ 148.562506][ T6539] loop2: detected capacity change from 0 to 128 [ 149.218062][ T6557] netlink: 'syz.3.140': attribute type 4 has an invalid length. [ 149.228532][ T6557] netlink: 'syz.3.140': attribute type 4 has an invalid length. [ 149.505330][ T5785] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 149.532910][ T5785] FAT-fs (loop2): Filesystem has been set read-only [ 149.552003][ T5785] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 149.657495][ T6570] overlayfs: failed to clone lowerpath [ 150.014761][ T6577] netlink: 'syz.3.144': attribute type 4 has an invalid length. [ 150.028209][ T6577] Zero length message leads to an empty skb [ 151.812462][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 151.822887][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.245586][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.256568][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.287057][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.319889][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.336160][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.351514][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.760016][ T6610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.918911][ T5791] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 153.077065][ T6621] rxe_eth0 speed is unknown, defaulting to 1000 [ 153.144097][ T6631] bridge_slave_0: left allmulticast mode [ 153.149871][ T6631] bridge_slave_0: left promiscuous mode [ 153.173253][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.189144][ T6631] bridge_slave_1: left allmulticast mode [ 153.196289][ T6631] bridge_slave_1: left promiscuous mode [ 153.202143][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.227229][ T6631] bond0: (slave bond_slave_0): Releasing backup interface [ 153.260332][ T6631] bond0: (slave bond_slave_1): Releasing backup interface [ 153.329063][ T6631] team0: Port device team_slave_0 removed [ 153.348198][ T6631] team0: Port device team_slave_1 removed [ 153.385843][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.394327][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.409193][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.424551][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.576997][ T6636] team0: Port device xfrm0 added [ 153.617534][ T6641] tipc: Started in network mode [ 153.635296][ T6641] tipc: Node identity 722d69b6abaa, cluster identity 4711 [ 153.646453][ T6641] tipc: Enabled bearer , priority 0 [ 154.429099][ T5791] Bluetooth: hci0: command tx timeout [ 154.655406][ T173] tipc: Node number set to 3649530294 [ 154.725775][ T6621] chnl_net:caif_netlink_parms(): no params data found [ 155.315304][ T6680] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 155.377502][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 155.470758][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.510123][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.541129][ T6621] bridge_slave_0: entered allmulticast mode [ 155.565007][ T6621] bridge_slave_0: entered promiscuous mode [ 155.657003][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.687367][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.718961][ T6621] bridge_slave_1: entered allmulticast mode [ 155.751608][ T6621] bridge_slave_1: entered promiscuous mode [ 155.956831][ T6621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.026771][ T6621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.175961][ T6674] loop0: detected capacity change from 0 to 131072 [ 156.198657][ T6674] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 156.207623][ T6674] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 156.235418][ T6674] F2FS-fs (loop0): invalid crc value [ 156.279871][ T6674] F2FS-fs (loop0): Found nat_bits in checkpoint [ 156.352242][ T6674] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 156.359879][ T6674] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 156.414402][ T6621] team0: Port device team_slave_0 added [ 156.448182][ T6621] team0: Port device team_slave_1 added [ 156.512777][ T5791] Bluetooth: hci0: command tx timeout [ 156.566883][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.574310][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.601033][ T6621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.620098][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.706796][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 156.706811][ T28] audit: type=1804 audit(1793782926.843:80): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.161" name="/newroot/40/file1/bus" dev="loop0" ino=10 res=1 errno=0 [ 156.768539][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.802407][ T6621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.652636][ T6621] hsr_slave_0: entered promiscuous mode [ 157.730421][ T6621] hsr_slave_1: entered promiscuous mode [ 157.778770][ T6621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.787962][ T6621] Cannot create hsr debugfs directory [ 158.622831][ T5791] Bluetooth: hci0: command tx timeout [ 159.043954][ T6621] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.103877][ T6621] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.137891][ T6621] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.169555][ T6621] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.481039][ T6621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.547113][ T6621] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.718410][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.725717][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.792804][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.800075][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.377619][ T6621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.663115][ T5791] Bluetooth: hci0: command tx timeout [ 162.126348][ T6621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.007247][ T6621] veth0_vlan: entered promiscuous mode [ 163.034661][ T6621] veth1_vlan: entered promiscuous mode [ 163.099727][ T5791] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 163.157712][ T6621] veth0_macvtap: entered promiscuous mode [ 163.203659][ T6621] veth1_macvtap: entered promiscuous mode [ 163.234117][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.244760][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.256556][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.270210][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.283344][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.295428][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.306257][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.318775][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.335244][ T28] audit: type=1804 audit(1793782933.693:81): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.181" name="/newroot/45/file0" dev="fuse" ino=1 res=1 errno=0 [ 163.360061][ T6621] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.382758][ T6621] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.402359][ T6621] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.414423][ T6621] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.580378][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.618138][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.627698][ T1193] IPVS: starting estimator thread 0... [ 163.733294][ T6798] IPVS: using max 17 ests per chain, 40800 per kthread [ 163.743969][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.767192][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.199766][ T28] audit: type=1326 audit(1793782934.553:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.3.186" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff07bd9fb19 code=0x0 [ 165.725955][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 166.933033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 170.587400][ T6875] fuse: Bad value for 'fd' [ 170.790160][ T6877] process 'syz.3.195' launched './file2' with NULL argv: empty string added [ 175.587993][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.207'. [ 176.707811][ T6918] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 177.293496][ T6929] kvm: pic: non byte write [ 177.556253][ T6941] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 177.566891][ T6941] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 178.698330][ T6945] loop5: detected capacity change from 0 to 32768 [ 178.741110][ T6945] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 178.859032][ T6945] XFS (loop5): Ending clean mount [ 178.867760][ T6947] nvme_fabrics: missing parameter 'transport=%s' [ 178.883184][ T6947] nvme_fabrics: missing parameter 'nqn=%s' [ 178.905515][ T6945] XFS (loop5): Quotacheck needed: Please wait. [ 179.020800][ T6945] XFS (loop5): Quotacheck: Done. [ 179.964565][ T6621] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.184681][ T6970] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 182.293022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 183.984700][ T6988] loop5: detected capacity change from 0 to 4096 [ 184.328017][ T6988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.350779][ T6988] EXT4-fs (loop5): Test dummy encryption mode enabled [ 184.393056][ T6988] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 184.423776][ T6988] System zones: 0-5 [ 184.452427][ T6988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.509973][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.941630][ T7049] tc action pedit 'at' offset -2147483645 out of bounds [ 189.168962][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 189.207564][ T7056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.499359][ T7066] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 189.575584][ T7066] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 190.660538][ T7075] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 190.672566][ T7075] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 194.614008][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.620686][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.196661][ T7142] netlink: 'syz.5.244': attribute type 8 has an invalid length. [ 200.231778][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.244'. [ 200.306034][ T7142] bond0: entered promiscuous mode [ 200.332957][ T7142] bond_slave_0: entered promiscuous mode [ 200.341953][ T7142] bond_slave_1: entered promiscuous mode [ 200.370762][ T7142] gretap0: entered promiscuous mode [ 200.426696][ T7142] hsr1: entered promiscuous mode [ 202.432624][ T7149] ima: policy update failed [ 202.624523][ T28] audit: type=1802 audit(1793782972.975:83): pid=7149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.247" res=0 errno=0 [ 202.944693][ T7168] syz.3.249 (7168) used greatest stack depth: 19880 bytes left [ 203.163542][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.250'. [ 204.729795][ T7186] Invalid ELF header magic: != ELF [ 206.827400][ T5098] Bluetooth: hci2: command 0x0406 tx timeout [ 207.039442][ T7184] loop0: detected capacity change from 0 to 32768 [ 207.194684][ T7184] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 207.481731][ T7184] XFS (loop0): Ending clean mount [ 207.534540][ T7184] XFS (loop0): Quotacheck needed: Please wait. [ 207.642363][ T7184] XFS (loop0): Quotacheck: Done. [ 207.742907][ T5787] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.841324][ T7224] bridge_slave_0: left allmulticast mode [ 208.924793][ T7224] bridge_slave_0: left promiscuous mode [ 208.930675][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.048845][ T7224] bridge_slave_1: left allmulticast mode [ 209.152873][ T7224] bridge_slave_1: left promiscuous mode [ 209.158769][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.183683][ T7224] bond0: (slave bond_slave_0): Releasing backup interface [ 211.827481][ T7224] bond_slave_0: left promiscuous mode [ 212.437429][ T7224] bond0: (slave bond_slave_1): Releasing backup interface [ 213.012997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 213.422711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 213.527927][ T7259] fuse: Bad value for 'fd' [ 213.645198][ T7224] bond_slave_1: left promiscuous mode [ 213.859118][ T7263] xt_hashlimit: max too large, truncated to 1048576 [ 214.728894][ T7224] team0: Port device team_slave_0 removed [ 214.748614][ T7267] jffs2: notice: (7267) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 214.797714][ T7224] team0: Port device team_slave_1 removed [ 214.825484][ T7224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.851426][ T7224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.872065][ T7224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.889541][ T7224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.057449][ T7228] team0: Port device xfrm0 added [ 215.077526][ T7233] tipc: Started in network mode [ 215.090245][ T7233] tipc: Node identity 8eebdd64fef9, cluster identity 4711 [ 215.103043][ T7233] tipc: Enabled bearer , priority 0 [ 215.824562][ T7280] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 216.105740][ T5868] tipc: Node number set to 1880284516 [ 216.935014][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.269'. [ 217.160402][ T7294] loop0: detected capacity change from 0 to 512 [ 217.454029][ T7294] ext4: Bad value for 'data' [ 217.656949][ T7301] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 222.223121][ T7355] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 223.662689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 226.743062][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 226.881749][ T7402] syz.5.290 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 230.049754][ T7424] loop5: detected capacity change from 0 to 512 [ 230.163066][ T7424] ext4: Bad value for 'data' [ 232.372575][ T7444] random: crng reseeded on system resumption [ 233.493002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 236.647560][ T7473] netlink: 'syz.4.308': attribute type 4 has an invalid length. [ 239.705513][ T7493] block device autoloading is deprecated and will be removed. [ 243.025482][ T7532] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 243.732977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 248.029770][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 248.052826][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 248.702436][ T7561] tipc: Started in network mode [ 248.707442][ T7561] tipc: Node identity 4, cluster identity 4711 [ 248.713709][ T7561] tipc: Node number set to 4 [ 249.164384][ T7562] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 252.416390][ T7576] pim6reg: entered allmulticast mode [ 252.463260][ T7576] pim6reg: left allmulticast mode [ 255.950102][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.957032][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.588015][ T7642] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 261.603982][ T7642] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 261.693044][ T28] audit: type=1800 audit(1793783032.039:84): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.355" name="c_chmask" dev="configfs" ino=12983 res=0 errno=0 [ 261.715723][ T7642] configfs-gadget.g1 gadget.0: afunc_bind:1261 Error! [ 261.733231][ T7642] udc dummy_udc.0: failed to start g1: -19 [ 261.762040][ T28] audit: type=1800 audit(1793783032.049:85): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.355" name="UDC" dev="configfs" ino=12985 res=0 errno=0 [ 261.796575][ T7642] UDC core: g1: couldn't find an available UDC or it's busy [ 262.743036][ T7650] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 262.963786][ T7659] loop5: detected capacity change from 0 to 16 [ 263.233016][ T7659] erofs: (device loop5): mounted with root inode @ nid 36. [ 264.551368][ T7673] bridge0: port 3(netdevsim0) entered blocking state [ 264.559697][ T7673] bridge0: port 3(netdevsim0) entered disabled state [ 264.566903][ T7673] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 264.574436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 264.584760][ T7673] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 264.593282][ T7673] bridge0: port 3(netdevsim0) entered blocking state [ 264.601128][ T7673] bridge0: port 3(netdevsim0) entered forwarding state [ 267.422451][ T7711] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 267.430600][ T7711] Error parsing options; rc = [-22] [ 268.410205][ T7717] capability: warning: `syz.5.376' uses deprecated v2 capabilities in a way that may be insecure [ 269.350211][ T7726] loop5: detected capacity change from 0 to 2048 [ 270.380949][ T7726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.552052][ T7734] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 271.669577][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.413363][ T5791] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 278.055325][ T7780] ip_tables: iptables: counters copy to user failed while replacing table [ 278.792778][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 281.828315][ T7816] loop5: detected capacity change from 0 to 512 [ 284.360796][ T7816] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 284.403707][ T7816] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.399: invalid indirect mapped block 256 (level 1) [ 284.453320][ T7816] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.399: invalid indirect mapped block 2683928664 (level 1) [ 284.489526][ T7816] EXT4-fs (loop5): 1 truncate cleaned up [ 284.499631][ T7816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.876351][ T7826] xt_hl: Unknown TTL match mode: 56 [ 286.296007][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.217640][ T7828] ip_tables: iptables: counters copy to user failed while replacing table [ 292.623330][ T7872] loop5: detected capacity change from 0 to 2048 [ 292.633233][ T7872] UDF-fs: bad mount option "fscontext=root" or missing value [ 292.806030][ T7860] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 292.840413][ T7872] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6621] was attempted by " \x22CiG 3ox\x07'9 l/Eߍ۷;N7WNO})*Q˿GGn\x0b乓S\x0bK˳3fAHͿ}eїG6}zӇ'Fխ= OEߌAGD%\x0dF_하h\x5c\x5c)L\x5cQYh#Ћd,Zߩr&KsJc*іSJňh{=x(XV:E^<3з\x0bVx\x0czQ_DNŅWy?+eq[)۩1+'X\x22~)R+t{]y[כzjەnm>6Eoo\x0b E4Rܜ!-F9ڹQckyjd-PαgsN\x5cy-7ry+j9[9?g-PαgsN\x5cy-7ry+j9[9yO , priority 10 [ 390.234191][ T5775] tipc: Node number set to 2130706433 [ 391.139067][ T8472] futex_wake_op: syz.3.554 tries to shift op by 144; fix this program [ 391.194999][ T8472] overlayfs: failed to clone lowerpath [ 393.988779][ T8494] ip_tables: iptables: counters copy to user failed while replacing table [ 396.345156][ T8501] netlink: 'syz.5.562': attribute type 10 has an invalid length. [ 396.391247][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.5.562'. [ 396.494986][ T8501] dummy0: entered promiscuous mode [ 396.533119][ T5791] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 396.561358][ T8505] fuse: Bad value for 'fd' [ 396.692043][ T8501] bridge0: port 1(dummy0) entered blocking state [ 396.698809][ T8501] bridge0: port 1(dummy0) entered disabled state [ 396.712045][ T8501] dummy0: entered allmulticast mode [ 397.358849][ T8512] Invalid ELF header magic: != ELF [ 397.856982][ T8501] bridge0: port 1(dummy0) entered blocking state [ 397.863607][ T8501] bridge0: port 1(dummy0) entered forwarding state [ 398.412396][ T8520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.496341][ T8521] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.565'. [ 399.961283][ T8537] 9pnet_fd: Insufficient options for proto=fd [ 405.974364][ T8581] netlink: 36 bytes leftover after parsing attributes in process `syz.5.579'. [ 406.024902][ T5791] Bluetooth: hci0: unknown advertising packet type: 0x05 [ 410.246279][ T5791] Bluetooth: hci1: command tx timeout [ 411.344095][ T8612] overlayfs: missing 'lowerdir' [ 414.468048][ T8635] autofs4:pid:8635:autofs_fill_super: called with bogus options [ 417.977197][ T8661] Invalid ELF header magic: != ELF [ 421.468952][ T8672] syz.0.601 (8672) used greatest stack depth: 19112 bytes left [ 421.934200][ T8687] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 424.333270][ T8701] netlink: 20 bytes leftover after parsing attributes in process `syz.4.598'. [ 425.412000][ T8698] syz.0.609 (8698) used greatest stack depth: 18744 bytes left [ 426.853823][ T8717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.222841][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 431.220907][ T5791] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 433.268863][ T8753] futex_wake_op: syz.5.622 tries to shift op by 144; fix this program [ 434.014437][ T5791] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 434.238382][ T8765] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 434.542537][ T8767] configfs-gadget.g1 gadget.0: afunc_bind:1261 Error! [ 434.549722][ T8767] udc dummy_udc.0: failed to start g1: -19 [ 434.557748][ T8767] UDC core: g1: couldn't find an available UDC or it's busy [ 434.578616][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 434.578634][ T28] audit: type=1800 audit(2000000166.708:141): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.626" name="c_chmask" dev="configfs" ino=15690 res=0 errno=0 [ 435.310139][ T28] audit: type=1800 audit(2000000166.708:142): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.626" name="UDC" dev="configfs" ino=15691 res=0 errno=0 [ 436.580330][ T8782] loop5: detected capacity change from 0 to 128 [ 436.629860][ T8782] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 436.923138][ T5791] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 437.442888][ T8782] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 437.468945][ T8785] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 437.468945][ T8785] [ 437.483259][ T8785] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 437.495948][ T8785] CIFS: Attempting to mount //127.0.0.1/share [ 439.025791][ T8785] CIFS: VFS: Error connecting to socket. Aborting operation. [ 439.033320][ T8785] CIFS: VFS: cifs_mount failed w/return code = -4 [ 440.685371][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.691998][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.384861][ T8810] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 443.384861][ T8810] [ 443.398729][ T8810] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 443.411355][ T8810] CIFS: Attempting to mount //127.0.0.1/share [ 444.141712][ T8810] CIFS: VFS: cifs_mount failed w/return code = -112 [ 444.511100][ T8823] loop5: detected capacity change from 0 to 512 [ 444.920315][ T8823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 445.572860][ T8823] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 445.735454][ T8823] EXT4-fs (loop5): 1 truncate cleaned up [ 445.800562][ T8823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.032773][ T8832] block device autoloading is deprecated and will be removed. [ 446.128370][ T8832] md: md0 stopped. [ 448.173266][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.376226][ T8862] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6205] was attempted by " \x22CiG 3ox\x07'9 l/Eߍ۷;N7WNO})*Q˿GGn\x0b乓S\x0bK˳3fAHͿ}eїG6}zӇ'Fխ= OEߌAGD%\x0dF_하h\x5c\x5c)L\x5cQYh#Ћd,Zߩr&KsJc*іSJňh{=x(XV:E^<3з\x0bVx\x0czQ_DNŅWy?+eq[)۩1+'X\x22~)R+t{]y[כzjەnm>6Eoo\x0b E4Rܜ!-F9ڹQckyjd-PαgsN\x5cy-7ry+j9[9?g-PαgsN\x5cy-7ry+j9[9yO 6Eoo\x0b E4Rܜ!-F9ڹQckyjd-PαgsN\x5cy-7ry+j9[9?g-PαgsN\x5cy-7ry+j9[9yO 6Eoo\x0b E4Rܜ!-F9ڹQckyjd-PαgsN\x5cy-7ry+j9[9?g-PαgsN\x5cy-7ry+j9[9yO 11 [ 523.485183][ T9162] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 524.093435][ T9162] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 525.300985][ T9333] netlink: 'syz.5.754': attribute type 16 has an invalid length. [ 525.309020][ T9333] netlink: 'syz.5.754': attribute type 17 has an invalid length. [ 525.317000][ T9333] netlink: 'syz.5.754': attribute type 27 has an invalid length. [ 527.720222][ T9345] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 528.492550][ T5098] Bluetooth: hci3: unexpected event for opcode 0x203c [ 528.644450][ T5098] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 530.408767][ T9369] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 530.776821][ T9162] Bluetooth: hci2: unexpected event for opcode 0x2007 [ 532.123006][ T9162] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 532.361202][ T9162] Bluetooth: hci3: unexpected event for opcode 0x041b [ 533.454962][ T5098] Bluetooth: hci2: unexpected event for opcode 0x0c7d [ 536.482305][ T9162] Bluetooth: hci3: unexpected event for opcode 0x200a [ 540.478656][ T8718] Bluetooth: hci0: unexpected cc 0x0c1c length: 5 > 1 [ 540.486040][ T8718] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 540.961344][ T9162] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 541.338057][ T9162] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 542.321625][ T9472] trusted_key: encrypted_key: insufficient parameters specified [ 543.720330][ T9162] Bluetooth: hci2: unexpected event for opcode 0x200a [ 544.022734][ T9162] Bluetooth: hci3: unexpected event for opcode 0x202a [ 544.127395][ T9497] dns_resolver: Unsupported server list version (0) [ 544.760473][ T9507] trusted_key: encrypted_key: insufficient parameters specified [ 547.813746][ T9162] Bluetooth: hci0: ACL packet too small [ 548.163567][ T9162] Bluetooth: hci1: unexpected event for opcode 0x202f [ 550.401719][ T9551] rxe_eth0 speed is unknown, defaulting to 1000 [ 551.510397][ T8718] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 552.721377][ T9556] Bluetooth: hci0: command 0x0406 tx timeout [ 552.802558][ T9162] Bluetooth: hci3: command 0x0406 tx timeout [ 553.129705][ T5098] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 553.200160][ T5098] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 555.612592][ T5098] Bluetooth: hci2: Malformed Event: 0x13 [ 556.473441][ T5098] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 556.499274][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 0 < 9 [ 556.506630][ T5098] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 557.232547][ T5098] Bluetooth: hci1: unexpected event for opcode 0x200c [ 557.403491][ T5098] Bluetooth: hci3: hardware error 0x00 [ 557.576354][ T9162] Bluetooth: hci2: unexpected event for opcode 0x201c [ 557.817869][ T9162] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 557.827997][ T9162] Bluetooth: hci0: unexpected event for opcode 0x0c38 [ 560.461674][ T5098] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 560.529464][ T9644] smc: removing ib device rxe0 [ 562.836959][ T9677] trusted_key: encrypted_key: insufficient parameters specified [ 563.333422][ T9680] netlink: 'syz.0.893': attribute type 21 has an invalid length. [ 563.348708][ T9680] netlink: 160 bytes leftover after parsing attributes in process `syz.0.893'. [ 563.712683][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.719106][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.591361][ T9773] netlink: 40 bytes leftover after parsing attributes in process `syz.4.935'. [ 573.792452][ T5098] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 575.958025][ T9835] netlink: 'syz.4.964': attribute type 10 has an invalid length. [ 575.991929][ T9835] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 578.939571][ T9877] netlink: 52 bytes leftover after parsing attributes in process `syz.0.981'. [ 582.774402][ T9924] ip_tables: iptables: counters copy to user failed while replacing table [ 587.432444][ T9987] ip_tables: iptables: counters copy to user failed while replacing table [ 591.566071][T10038] ip_tables: iptables: counters copy to user failed while replacing table [ 591.749978][T10040] block device autoloading is deprecated and will be removed. [ 593.406714][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'. [ 593.432217][T10064] netlink: 'syz.4.1064': attribute type 2 has an invalid length. [ 593.440068][T10064] netlink: 75 bytes leftover after parsing attributes in process `syz.4.1064'. [ 593.769100][T10072] ip6gre1: entered allmulticast mode [ 593.802677][ T3455] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.188811][T10076] batadv0: entered promiscuous mode [ 594.230306][T10075] batadv0: left promiscuous mode [ 594.622553][T10080] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 597.683127][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 602.996145][T10183] mmap: syz.4.1118 (10183) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 605.922588][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 613.266016][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1147'. [ 614.505985][T10273] md: ram10 does not have a valid v1.1 superblock, not importing! [ 614.532375][T10273] md: md_import_device returned -22 [ 614.834908][T10284] ip_tables: iptables: counters copy to user failed while replacing table [ 615.214394][T10294] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1161'. [ 616.839138][ T5098] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 616.846467][ T5098] Bluetooth: hci0: unexpected event for opcode 0x203e [ 616.857830][T10317] netlink: 'syz.5.1171': attribute type 1 has an invalid length. [ 616.871561][T10317] netlink: 4912 bytes leftover after parsing attributes in process `syz.5.1171'. [ 616.883359][ T5098] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 617.773660][T10336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1180'. [ 619.238305][T10350] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 619.379894][T10357] block device autoloading is deprecated and will be removed. [ 620.422445][T10385] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.439164][T10386] futex_wake_op: syz.0.1199 tries to shift op by 144; fix this program [ 620.886767][ T5098] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 620.897150][ T5098] Bluetooth: hci0: Injecting HCI hardware error event [ 620.907925][ T9162] Bluetooth: hci0: hardware error 0x00 [ 621.922241][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 623.819278][ T9162] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 625.578551][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.585157][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.795038][T10462] fuse: Bad value for 'fd' [ 629.477788][T10480] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 629.638138][T10484] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 629.645695][T10484] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 633.804423][T10537] tipc: Enabled bearer , priority 0 [ 635.905530][T10561] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1277'. [ 636.187254][T10575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1283'. [ 641.433670][T10651] 9pnet_fd: Insufficient options for proto=fd [ 648.910769][T10741] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1354'. [ 651.748890][T10769] ip_tables: iptables: counters copy to user failed while replacing table [ 652.244331][T10786] bridge0: port 2(syz_tun) entered blocking state [ 652.261674][T10786] bridge0: port 2(syz_tun) entered disabled state [ 652.271865][T10786] syz_tun: entered allmulticast mode [ 652.283754][T10786] syz_tun: entered promiscuous mode [ 652.289796][T10786] bridge0: port 2(syz_tun) entered blocking state [ 652.296477][T10786] bridge0: port 2(syz_tun) entered forwarding state [ 652.642374][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 654.748884][T10845] warning: `syz.5.1399' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 655.253185][T10861] netlink: 'syz.0.1407': attribute type 1 has an invalid length. [ 655.335913][T10861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 655.465070][T10864] bond1: (slave geneve2): making interface the new active one [ 655.500292][T10864] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 656.625100][ T28] audit: type=1326 audit(2000000388.254:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10895 comm="syz.0.1417" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d1eb9fb19 code=0x0 [ 657.528932][T10927] ecryptfs_parse_options: eCryptfs: unrecognized option [eccipher=aes] [ 657.581477][T10932] fuse: Bad value for 'fd' [ 658.083199][T10948] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1434'. [ 659.251576][T10979] overlayfs: failed to clone upperpath [ 666.704977][T11064] dummy0: left allmulticast mode [ 666.710244][T11064] bridge0: port 1(dummy0) entered disabled state [ 666.839551][T11064] team0: Port device xfrm0 removed [ 666.873111][T11064] bond0: (slave geneve1): Releasing backup interface [ 667.159592][T11064] bond0: (slave wlan1): Releasing backup interface [ 667.275729][ T7410] tipc: Resetting bearer [ 667.348815][T11066] team0: Mode changed to "broadcast" [ 668.245501][T11071] gretap0: entered promiscuous mode [ 671.159990][T11100] syz.3.1488 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 671.170256][T11100] CPU: 0 PID: 11100 Comm: syz.3.1488 Not tainted syzkaller #0 [ 671.177759][T11100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 671.187891][T11100] Call Trace: [ 671.191191][T11100] [ 671.194153][T11100] dump_stack_lvl+0x18c/0x250 [ 671.198886][T11100] ? show_regs_print_info+0x20/0x20 [ 671.204128][T11100] ? load_image+0x420/0x420 [ 671.208683][T11100] ? ___ratelimit+0x478/0x610 [ 671.213430][T11100] ? radix_tree_cpu_dead+0x160/0x160 [ 671.218756][T11100] dump_header+0xd8/0x820 [ 671.223114][T11100] oom_kill_process+0x390/0x580 [ 671.227992][T11100] out_of_memory+0xe0e/0x1200 [ 671.232695][T11100] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 671.238352][T11100] ? mutex_lock_nested+0x20/0x20 [ 671.243311][T11100] ? unregister_oom_notifier+0x20/0x20 [ 671.248819][T11100] mem_cgroup_out_of_memory+0x2c2/0x390 [ 671.254390][T11100] ? try_charge_memcg+0xc8c/0x17c0 [ 671.259525][T11100] ? drain_local_stock+0x630/0x630 [ 671.264666][T11100] ? do_raw_spin_unlock+0x121/0x230 [ 671.269908][T11100] try_charge_memcg+0xc9c/0x17c0 [ 671.274890][T11100] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 671.280732][T11100] ? folio_flags+0x120/0x120 [ 671.285386][T11100] ? shmem_alloc_folio+0x1f4/0x2a0 [ 671.290559][T11100] ? percpu_ref_tryget+0x15/0x180 [ 671.295610][T11100] ? get_mem_cgroup_from_mm+0x38/0x290 [ 671.301210][T11100] charge_memcg+0x11b/0x3b0 [ 671.305749][T11100] ? __mem_cgroup_charge+0x80/0x80 [ 671.310935][T11100] ? get_mem_cgroup_from_mm+0x38/0x290 [ 671.316417][T11100] ? get_mem_cgroup_from_mm+0x38/0x290 [ 671.322058][T11100] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 671.327671][T11100] __mem_cgroup_charge+0x25/0x80 [ 671.332646][T11100] shmem_add_to_page_cache+0x8d3/0x1b80 [ 671.338223][T11100] ? xas_load+0x12b/0x140 [ 671.342586][T11100] ? shmem_alloc_folio+0x2a0/0x2a0 [ 671.347716][T11100] ? mark_lock+0x94/0x320 [ 671.353397][T11100] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 671.359432][T11100] ? __lock_acquire+0x7eb0/0x7eb0 [ 671.364480][T11100] ? lock_chain_count+0x20/0x20 [ 671.369359][T11100] shmem_get_folio_gfp+0x1037/0x2b40 [ 671.374694][T11100] shmem_write_begin+0xf2/0x430 [ 671.379574][T11100] generic_perform_write+0x2fe/0x5c0 [ 671.384895][T11100] ? generic_file_direct_write+0x3e0/0x3e0 [ 671.390747][T11100] ? file_update_time+0x192/0x1a0 [ 671.395799][T11100] shmem_file_write_iter+0xfb/0x120 [ 671.401064][T11100] __kernel_write_iter+0x29f/0x6d0 [ 671.406221][T11100] ? vfs_read+0x990/0x990 [ 671.410582][T11100] ? get_dump_page+0x156/0x200 [ 671.415523][T11100] ? __asan_memset+0x22/0x40 [ 671.420162][T11100] ? iov_iter_bvec+0xd4/0x1b0 [ 671.424872][T11100] dump_user_range+0x389/0x7c0 [ 671.429689][T11100] ? dump_skip+0x40/0x40 [ 671.433983][T11100] elf_core_dump+0x320e/0x37c0 [ 671.438803][T11100] ? load_elf_binary+0x2850/0x2850 [ 671.444061][T11100] ? verify_lock_unused+0x140/0x140 [ 671.449296][T11100] ? __lock_acquire+0x7eb0/0x7eb0 [ 671.454344][T11100] ? mas_next_slot+0x94c/0x980 [ 671.459175][T11100] ? rcu_read_lock_any_held+0xb4/0x140 [ 671.464691][T11100] ? 0xffffffffff600000 [ 671.468885][T11100] do_coredump+0x19b8/0x2960 [ 671.473520][T11100] ? nfs_stat_to_errno+0x170/0x170 [ 671.478668][T11100] ? lock_chain_count+0x20/0x20 [ 671.483547][T11100] ? _raw_spin_unlock_irq+0x23/0x50 [ 671.488768][T11100] ? lockdep_hardirqs_on+0x98/0x150 [ 671.494014][T11100] get_signal+0x10da/0x1390 [ 671.498557][T11100] arch_do_signal_or_restart+0xc2/0x7b0 [ 671.504153][T11100] ? get_sigframe_size+0x20/0x20 [ 671.509130][T11100] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 671.515145][T11100] ? exit_to_user_mode_loop+0x3b/0x110 [ 671.520635][T11100] exit_to_user_mode_loop+0x70/0x110 [ 671.525946][T11100] exit_to_user_mode_prepare+0xee/0x180 [ 671.531536][T11100] irqentry_exit_to_user_mode+0x9/0x30 [ 671.537015][T11100] exc_page_fault+0x8c/0x100 [ 671.541622][T11100] asm_exc_page_fault+0x26/0x30 [ 671.546508][T11100] RIP: 0033:0x7ff07bd9fb21 [ 671.550943][T11100] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 671.570659][T11100] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 671.576880][T11100] RAX: 0000000000000000 RBX: 00007ff07c025fa0 RCX: 00007ff07bd9fb19 [ 671.584947][T11100] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 671.592958][T11100] RBP: 00007ff07be37b70 R08: 0000000000000000 R09: 0000000000000000 [ 671.600960][T11100] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 671.609047][T11100] R13: 00007ff07c026038 R14: 00007ff07c025fa0 R15: 00007ffedd5c6d98 [ 671.617072][T11100] [ 671.623728][T11100] memory: usage 307200kB, limit 307200kB, failcnt 14080 [ 671.630831][T11100] memory+swap: usage 364120kB, limit 9007199254740988kB, failcnt 0 [ 671.639788][T11100] kmem: usage 3468kB, limit 9007199254740988kB, failcnt 0 [ 671.646966][T11100] Memory cgroup stats for /syz3: [ 671.647516][T11100] cache 309927936 [ 671.656131][T11100] rss 1085440 [ 671.659471][T11100] rss_huge 0 [ 671.662705][T11100] shmem 309915648 [ 671.666352][T11100] mapped_file 123518976 [ 671.670515][T11100] dirty 8192 [ 671.673804][T11100] writeback 0 [ 671.677113][T11100] workingset_refault_anon 346 [ 671.681795][T11100] workingset_refault_file 341 [ 671.686741][T11100] swap 58286080 [ 671.690342][T11100] pgpgin 999822 [ 671.693850][T11100] pgpgout 924400 [ 671.697411][T11100] pgfault 527777 [ 671.700966][T11100] pgmajfault 2118 [ 671.704649][T11100] inactive_anon 124743680 [ 671.708986][T11100] active_anon 186089472 [ 671.713203][T11100] inactive_file 12288 [ 671.717418][T11100] active_file 0 [ 671.720885][T11100] unevictable 0 [ 671.724384][T11100] hierarchical_memory_limit 314572800 [ 671.729771][T11100] hierarchical_memsw_limit 9223372036854771712 [ 671.735983][T11100] total_cache 309927936 [ 671.740242][T11100] total_rss 1085440 [ 671.744161][T11100] total_rss_huge 0 [ 671.747917][T11100] total_shmem 309915648 [ 671.752157][T11100] total_mapped_file 123518976 [ 671.756937][T11100] total_dirty 8192 [ 671.760663][T11100] total_writeback 0 [ 671.764540][T11100] total_workingset_refault_anon 346 [ 671.769771][T11100] total_workingset_refault_file 341 [ 671.775057][T11100] total_swap 58286080 [ 671.779057][T11100] total_pgpgin 999822 [ 671.783110][T11100] total_pgpgout 924400 [ 671.787202][T11100] total_pgfault 527777 [ 671.791280][T11100] total_pgmajfault 2118 [ 671.795654][T11100] total_inactive_anon 124743680 [ 671.800519][T11100] total_active_anon 186089472 [ 671.805259][T11100] total_inactive_file 12288 [ 671.809769][T11100] total_active_file 0 [ 671.813802][T11100] total_unevictable 0 [ 671.817809][T11100] anon_cost 0 [ 671.821401][T11100] file_cost 0 [ 671.824762][T11100] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1338,pid=10706,uid=0 [ 671.840499][T11100] Memory cgroup out of memory: Killed process 10706 (syz.3.1338) total-vm:202632kB, anon-rss:1416kB, file-rss:20480kB, shmem-rss:120448kB, UID:0 pgtables:336kB oom_score_adj:0 [ 674.574294][ T30] oom_reaper: reaped process 10706 (syz.3.1338), now anon-rss:0kB, file-rss:20480kB, shmem-rss:120448kB [ 675.689036][T11139] ip6gre1: entered promiscuous mode [ 675.719425][T11139] ip6gre1: entered allmulticast mode [ 675.764548][T11128] netdevsim netdevsim3 netdevsim1: IPsec offload requires 128 bit authentication [ 675.817267][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1499'. [ 675.857228][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1499'. [ 677.651425][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1506'. [ 680.465495][ T28] audit: type=1326 audit(2000000412.094:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.1518" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d1eb9fb19 code=0x0 [ 680.881049][ T5447] veth0_vlan: left promiscuous mode [ 680.918698][ T5447] veth0_vlan: entered promiscuous mode [ 684.932147][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1004 jiffies old. [ 686.142314][T11264] md: array md0 already has disks! [ 686.216085][T11266] md: could not open device unknown-block(1,0). [ 686.253318][T11266] md: error, md_import_device() returned -16 [ 686.509742][T11264] ================================================================== [ 686.517896][T11264] BUG: KASAN: null-ptr-deref in free_conf+0x90/0x4b0 [ 686.524652][T11264] Read of size 8 at addr 0000000000000028 by task syz.0.1530/11264 [ 686.532617][T11264] [ 686.534992][T11264] CPU: 0 PID: 11264 Comm: syz.0.1530 Not tainted syzkaller #0 [ 686.542493][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 686.552594][T11264] Call Trace: [ 686.555917][T11264] [ 686.558886][T11264] dump_stack_lvl+0x18c/0x250 [ 686.563640][T11264] ? show_regs_print_info+0x20/0x20 [ 686.568902][T11264] ? free_conf+0x90/0x4b0 [ 686.573268][T11264] kasan_report+0x117/0x150 [ 686.577814][T11264] ? free_conf+0x90/0x4b0 [ 686.582216][T11264] kasan_check_range+0x241/0x290 [ 686.587198][T11264] free_conf+0x90/0x4b0 [ 686.591386][T11264] ? __raw_spin_lock_init+0x45/0x100 [ 686.596723][T11264] setup_conf+0x16ca/0x2a50 [ 686.601265][T11264] ? percpu_ref_put+0x1e/0x230 [ 686.606098][T11264] ? __lock_acquire+0x7eb0/0x7eb0 [ 686.611160][T11264] ? __add_stripe_bio+0x770/0x770 [ 686.616242][T11264] ? percpu_ref_put+0x17e/0x230 [ 686.621130][T11264] raid5_run+0x8af/0x2a30 [ 686.625499][T11264] ? md_run+0xa48/0x2230 [ 686.629775][T11264] ? mempool_free+0x320/0x320 [ 686.634486][T11264] ? mempool_init+0x3a/0x50 [ 686.639120][T11264] md_run+0x10c5/0x2230 [ 686.643324][T11264] do_md_run+0x34/0x570 [ 686.647520][T11264] md_ioctl+0x20fa/0x24e0 [ 686.651887][T11264] ? blkdev_common_ioctl+0x10ee/0x2580 [ 686.657383][T11264] ? md_release+0x1e0/0x1e0 [ 686.661927][T11264] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 686.667604][T11264] ? blkdev_bszset+0x1f0/0x1f0 [ 686.672401][T11264] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 686.677925][T11264] ? md_release+0x1e0/0x1e0 [ 686.682502][T11264] blkdev_ioctl+0x5b2/0x730 [ 686.687056][T11264] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 686.692550][T11264] ? bpf_lsm_file_ioctl+0x9/0x10 [ 686.697523][T11264] ? security_file_ioctl+0x80/0xa0 [ 686.702669][T11264] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 686.708168][T11264] __se_sys_ioctl+0xfd/0x170 [ 686.712825][T11264] do_syscall_64+0x55/0xb0 [ 686.717283][T11264] ? clear_bhb_loop+0x40/0x90 [ 686.722001][T11264] ? clear_bhb_loop+0x40/0x90 [ 686.726746][T11264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 686.732681][T11264] RIP: 0033:0x7f9d1eb9fb19 [ 686.737163][T11264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.756806][T11264] RSP: 002b:00007f9d1f9cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 686.765260][T11264] RAX: ffffffffffffffda RBX: 00007f9d1ee25fa0 RCX: 00007f9d1eb9fb19 [ 686.773298][T11264] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000003 [ 686.781301][T11264] RBP: 00007f9d1ec37b70 R08: 0000000000000000 R09: 0000000000000000 [ 686.789416][T11264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.797450][T11264] R13: 00007f9d1ee26038 R14: 00007f9d1ee25fa0 R15: 00007fffa937eee8 [ 686.805525][T11264] [ 686.808588][T11264] ================================================================== [ 686.869262][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.875921][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.007005][T11264] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 687.014286][T11264] CPU: 0 PID: 11264 Comm: syz.0.1530 Not tainted syzkaller #0 [ 687.021796][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 687.031903][T11264] Call Trace: [ 687.035227][T11264] [ 687.038212][T11264] dump_stack_lvl+0x18c/0x250 [ 687.042956][T11264] ? show_regs_print_info+0x20/0x20 [ 687.048224][T11264] ? load_image+0x420/0x420 [ 687.052821][T11264] panic+0x2ca/0x720 [ 687.056776][T11264] ? bpf_jit_dump+0xd0/0xd0 [ 687.061343][T11264] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 687.067427][T11264] ? _raw_spin_unlock+0x40/0x40 [ 687.072347][T11264] ? free_conf+0x90/0x4b0 [ 687.076738][T11264] check_panic_on_warn+0x84/0xa0 [ 687.081769][T11264] ? free_conf+0x90/0x4b0 [ 687.086154][T11264] end_report+0x6f/0x130 [ 687.090466][T11264] kasan_report+0x128/0x150 [ 687.095033][T11264] ? free_conf+0x90/0x4b0 [ 687.099421][T11264] kasan_check_range+0x241/0x290 [ 687.104422][T11264] free_conf+0x90/0x4b0 [ 687.108632][T11264] ? __raw_spin_lock_init+0x45/0x100 [ 687.113982][T11264] setup_conf+0x16ca/0x2a50 [ 687.118585][T11264] ? percpu_ref_put+0x1e/0x230 [ 687.123475][T11264] ? __lock_acquire+0x7eb0/0x7eb0 [ 687.128566][T11264] ? __add_stripe_bio+0x770/0x770 [ 687.133651][T11264] ? percpu_ref_put+0x17e/0x230 [ 687.138575][T11264] raid5_run+0x8af/0x2a30 [ 687.142989][T11264] ? md_run+0xa48/0x2230 [ 687.147309][T11264] ? mempool_free+0x320/0x320 [ 687.152040][T11264] ? mempool_init+0x3a/0x50 [ 687.156639][T11264] md_run+0x10c5/0x2230 [ 687.160867][T11264] do_md_run+0x34/0x570 [ 687.165084][T11264] md_ioctl+0x20fa/0x24e0 [ 687.169481][T11264] ? blkdev_common_ioctl+0x10ee/0x2580 [ 687.174997][T11264] ? md_release+0x1e0/0x1e0 [ 687.179562][T11264] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 687.185300][T11264] ? blkdev_bszset+0x1f0/0x1f0 [ 687.190119][T11264] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 687.195681][T11264] ? md_release+0x1e0/0x1e0 [ 687.200249][T11264] blkdev_ioctl+0x5b2/0x730 [ 687.204816][T11264] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 687.210337][T11264] ? bpf_lsm_file_ioctl+0x9/0x10 [ 687.215372][T11264] ? security_file_ioctl+0x80/0xa0 [ 687.220542][T11264] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 687.226061][T11264] __se_sys_ioctl+0xfd/0x170 [ 687.230725][T11264] do_syscall_64+0x55/0xb0 [ 687.235257][T11264] ? clear_bhb_loop+0x40/0x90 [ 687.239999][T11264] ? clear_bhb_loop+0x40/0x90 [ 687.244748][T11264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 687.250713][T11264] RIP: 0033:0x7f9d1eb9fb19 [ 687.255221][T11264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.274888][T11264] RSP: 002b:00007f9d1f9cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.283363][T11264] RAX: ffffffffffffffda RBX: 00007f9d1ee25fa0 RCX: 00007f9d1eb9fb19 [ 687.291389][T11264] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000003 [ 687.299413][T11264] RBP: 00007f9d1ec37b70 R08: 0000000000000000 R09: 0000000000000000 [ 687.307436][T11264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.315636][T11264] R13: 00007f9d1ee26038 R14: 00007f9d1ee25fa0 R15: 00007fffa937eee8 [ 687.323708][T11264] [ 687.326932][T11264] Kernel Offset: disabled [ 687.331281][T11264] Rebooting in 86400 seconds..