last executing test programs: 4m41.680984693s ago: executing program 1 (id=2): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x5fffd, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1fe}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000000) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r4 = userfaultfd(0x801) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x7fffffff, 0x2, 0xc}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3b6, &(0x7f0000000880)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, [{0xe, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x22, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000007000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0xe, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback={0xff00000000000000}, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r7 = timerfd_create(0x7, 0x80000) timerfd_settime(r7, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4m40.351379628s ago: executing program 1 (id=6): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x1) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473", 0xe, 0x8000, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read(r4, &(0x7f0000000200)=""/189, 0xbd) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 4m37.635347379s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0xfffffffe) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 4m37.448704875s ago: executing program 1 (id=7): r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r0, &(0x7f00000008c0)=""/257, 0x101) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 4m32.805822098s ago: executing program 4 (id=9): finit_module(0xffffffffffffffff, 0xfffffffffffffffe, 0x7) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x400203, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff0200007b010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000005000080000000000100000095000000000000008510000005000000dc07200200ffffffff8511000002000000850000009b5700009720000005b47a000000184a000005000000000000000000000085200000010000008400000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x1e, &(0x7f00000000c0)=""/30, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x10, 0x3}, 0x94) syz_io_uring_setup(0x4179, &(0x7f0000000180)={0x0, 0xfe74, 0x10000, 0x3, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x8, 0x0, 0x8a, 0x0, &(0x7f00000004c0)="b43da2d237506db49eefba127669501bde4a0d11558a03e5e232a1428352ccbe34637edb54e83c4f0aa084389827ff598af670ae1c4822cfd4d934b1e43ef88a14901013777ed152a462bd5055f7f8896f10d08129831e1e81203784632286bd8ce94cf5fa316b8bb5a2557290474dba8443209575c78e3b5071237dabbb4dea73d56b87d31ffed4fca0", 0x0, 0x2, 0x0, 0xdf}, 0x4c) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x8, "cc7bc99aebba087aaff0fa0f4658ca556b2280b486f02c32dc99ea830b66a5e7"}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000500)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendmmsg$inet(r5, 0x0, 0x0, 0x2000c044) sendto$inet(r5, 0x0, 0x0, 0x12000000, 0x0, 0x0) 4m26.226233929s ago: executing program 1 (id=10): syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x4006c0) timer_create(0x6, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x10010}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x28002) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) pselect6(0x40, &(0x7f0000000100)={0xa5, 0x2, 0x1ff, 0x9, 0x3, 0x4f8, 0xbc, 0x8}, &(0x7f0000000140)={0x11, 0x800, 0x848, 0x7, 0x1, 0x6, 0x1ff, 0x5}, &(0x7f0000000180)={0xdde, 0x7ff, 0xfffffffffffffffa, 0x13, 0xd43, 0x2, 0xff, 0x2}, &(0x7f0000000240), 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x44, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x32400, 0x12345}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 4m22.705486026s ago: executing program 4 (id=11): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x5fffd, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1fe}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000000) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r5 = userfaultfd(0x801) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x7fffffff, 0x2, 0xc}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3b6, &(0x7f0000000880)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, [{0xe, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x22, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000007000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0xe, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback={0xff00000000000000}, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r8 = timerfd_create(0x7, 0x80000) timerfd_settime(r8, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4m18.1327326s ago: executing program 4 (id=14): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x4006c0) timer_create(0x6, &(0x7f0000000940)={0x0, 0x0, 0x2, @thr={&(0x7f0000000a00)="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", &(0x7f0000000140)="ae4b3955a5b35bac639cbeae84be14ae531a01b88c82d6c0e0e694cc4f937bdce5e541e874ec0d6a29a627ecb29e60ab8fe65b313cdf29eb03fd37f025d19f921d35188dd8e0dd7e4282f99dae24188a99edeeb33ebe3a13efa9b767e9696d866e44"}}, &(0x7f0000000980)=0x0) timer_gettime(r0, &(0x7f00000009c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x4, 0x0, 0x9, 0x14, 0x100, &(0x7f0000001b80)="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"}) socket$nl_generic(0x10, 0x3, 0x10) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 4m17.867289094s ago: executing program 1 (id=17): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r5, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0x301, 0xffffffff, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e23}}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040014) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x4000) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x1818850, &(0x7f0000000140)=ANY=[@ANYBLOB="73726f72746e616d653d6d077d9600ff070000000000006d653d676f7765722c757466383d302c00"], 0x1, 0x374, &(0x7f0000000600)="$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") 4m0.122163957s ago: executing program 32 (id=17): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r5, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newrule={0x24, 0x20, 0x301, 0xffffffff, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e23}}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040014) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x4000) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x1818850, &(0x7f0000000140)=ANY=[@ANYBLOB="73726f72746e616d653d6d077d9600ff070000000000006d653d676f7765722c757466383d302c00"], 0x1, 0x374, &(0x7f0000000600)="$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") 3m58.824401161s ago: executing program 33 (id=14): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x4006c0) timer_create(0x6, &(0x7f0000000940)={0x0, 0x0, 0x2, @thr={&(0x7f0000000a00)="58dcdb45e36d3c723ecb4c0377d31e5ea89c30eeb7000acba358bb4f99d4afc04dd675676530f66e780d78252c02fe8c05ac4862495a0396f268c6a59bacc285018ba5ad4328c6d25d4f4062cd9a992841f677dde13cbfc85dd0b3ab0bff664996f9f1a65a7e6dc17dfde66aefbc5bd29151fd4ee5730038e28e8b403174f89087e6b075ad686784b2b80379181fbd6feb0e1120db416644b06377842fd23ee70fe1e59913405f4fa2082278c9e37365116fb3eaa17420dc6350ddd9c6703e6399c2c93b0c4d52def211c65a433cd297af186ba4a54a55178ab69a7b1e01c9eddf0d4f13ea31e3f5fc8cd9052f96048be8cd3d12da48191b14025a50cc1ba188b0885dfd8e8ba721f0518f32cbe86eb77e12b248e7daefc5491349ef128fb46f2ae0cf1fa2d94a134eea257a08829a744f491847226cba991ff7a721e9c4fcbf191ec7163673a92f7ee68867fd77ad13eab5a6de062c860d81bb7ca19e82d4d3c21a4f7de22c5e78d80cc01fd11e2ca19c47c4aa45e7ad7e44272cc8ac08e14128ea0bda0222c0e8a05a5b9194afd908ab8db8277702ab83cb80143ba2c58bed89ff9231cb57e7a6b2923afd21d3731bec16db1dcee87aa6e3557f64e66b5ace216af16f17c5919c7e9bde475b55df35fb63680b0450460251ed24ce258e1a6267f904aa3e99118dbf82640261c89170d6363bb5a562211819d391b489239877e7d278a654be8bce9ad8ddc494967bae3ca2965355a04d51b0f9aefff79ddc5600493ebd2c256db7a1acc228066bf15371051be4304e57dbb3ec6422ef91e725f279e70e5141e9ab3a9c340d61ccfcc02b2708581a9ef2578ecb5120f4123905efc5fa8a4b439ec5d9cebef474bde17d70f309067dedf701d0935b5af481df7a7711ae2ada3c55268bbc4c59caaa94e7ed704d543406b9b35066fff63d5735da94513bfc4f3ed408d30ce3e2d53ceecde401dc736d8b204576653e45fc881d0914ddbc369b3ca9f8a3c9bf6f21413eec1f1eb8d7e317fd742b0adb10bc53e6661cacd816746bd5f8bb54673cede3fd0671781ae0eba5ddc2f0370693d4a0b0a051bccf4ff505b1c4203b4c5a98fd89aae79bbd191a759bef1f77b2a435d3fa147006dea3a1a77f3f627754f13cc9358c6f6cede407823cf86d3b27e12acf58d060c0190615134353678df294b9f31dcff22f8cc1576b5cfdae95ec00280355ac49892597e3c2c0e2a91dfd1d0862cab717a20ee2643b08e8d822bed083292d0c5d3f13abe0c70046ecf60e64dc8ef52ec38f58d19695d5751d33dd361dc769ae06b58783c7de353899d9cdfd6dea6a1f8f3a2f4128d64b56c44fad8265aa0fb0e8337ebf9fcc03f95236840f642829b950d988021e48baed1fd0916c77028367d72bf9bbfaa3009dce869b70bf955c91f4d5d350181fefa079cf8f090279d0860503aae538d34b90552a34286748bb9cb62dd99e3770ab9419a0a032c6f3cbaa14d80ad4dfac121a8bfdbf0df91408f577d912e2f4e7aad12c8645797f572b9c8673162c7d190ffc7ad13e89aabb3f2f069c75be68372b5c27f9417cb7516b04a26bd6e180e339f6d68c5a8197a3b1924fe0dd7a37301370db571df5bbe5b9ca0056603b07d2f2a9949b4bc43c747c9e11792443f937a3b4335018fdf6c4b3e7a8ab9eaa128041101152403f03198795d60e0da221b936c403ebf9c110a6f05ae58ac57b84c79b25258343213f462780a3f13afbac97cdd48cae90799043a2a1caff04633e746e46a96c2a5c170bea71d7247f2ec1b4575003cd7cd9c7f570f0e22fd2238eed28c2ad5cb26546f046b487e27618715819c1f5937030b18451d07a736475dbe1684e5dd90fc17405dfebc9ccafeeebdc203d24670d7b60df7b25a250ef864ec9df652693c3335c7c5d9c15a05402d15bdbff33816413295a5b91ebd6eb6bc319fb4b987353da7940fb529f5f85f1561bd3586e88308f5491b721982d837e22b76f76e72f4859bef0722837ee3a68bd44ca5fe5bc7c75939545dc5f2a7f39563d8a0a4125e5d2f11394a617346cf5156f7eefa5fe52694258c6d01ffba5f164e29bdfe101090224da5d08fdf36c29b68daf7447e354c74a6d5285bfb69c1ac3adddbaca9b126d078572663123d19af814ea8c7a87a2472380b9f0265fa7470cf6ecf12ad1cbeac33114002b1171fbf9da43ed125ade171056a12ee706a116e475516bf87aa2d559da3da2a9027683bd95ce881fef4586c4f76cb616c287aa91eb7aeec3c0d7cd11bd7070fb75a107a63e6a5835b59dc6ac2c03639fbf868cd51ceb302a67aacc5be4f712bfc57423db6ead15ec38a51acd44eb0f2baa34649d69365e552d952aa45d872ffbaa107865cc889cfd2da9c8b0e98df99c4d1ab881cc40453123452630d3c54c79d5e9e7718299b10383a19c235d173712ee15ecd94f65557cff7fe90cf4eb16b0fc76dd2178527737fef6c5e8dda55e5e5d2e73fca836440f92a7913bc70b64ffe3fa96516662100be3990832bb6d1b11cfcde31b3a25fcdebac7a561ab168fff3401c90143bbefdd2393dc90b48cf98bf08df6c294006870567c1e5e38d6452021014eadb249de1989f33318fc7c08a2ae65b5f82cdc78f5494c5c92ae6944da95f0485ee93c7ebc40999ec282ad53a0cd9830f4ce0117b5e71be3b7f3e18b4616d7f8e5efdee1c39a985b50adb57185243a4f0444bd0beffbf91920ad30b4dbdb981f41bda75ac562a8f60920822980ea315f414532ae2fc16105440e86a299f04fec135ccc73c796376f818c65b1226540ac016cce3225575e1bdd1fb0b79797e06c08aca7d4ddac8fd47bc4158344347b999491ef3aa77f58b4b55b06dd4c98c5ecb8c7081b018c083b2681a46b8e7e1d51d3dc71a436f0b58b1bc76285507ec5e352992acafb302309fe287b368ba42565ab9d239cf1e626b8b6eebc89edf71a43837209474bc41dc78bb1bd96fcbc3cc5fc8b6c147a2bf7fbb98b62ad2b73485ec9e2b956ff97916fdd4b9f8fa381ddfd3f4adb664f872a5dd0d682d96411c8920b38bb137294ff2c395821c891e72cbc6d375ad75c6670f1368d4f5f74fba7f8e5d2ccddfb3581be118c63467763852a0bbbac6a1b9c2fbab47a907d9f21f2d79dac9e6764cd870e3247712662207d2508ff8df6db72629254789e247696881c1bae82ba6acb722b60c92fdb62cbfc7ed63f0afd0173d6333102f4102e54ace0661c2dec685048099e4354a22a675046b8f80d393f47b3380feccd1d4177668ed36d8e7527d88dd9e833fe7474656b9e32b8eea6ca7b1a30fee93e2c33028247defe145a9be7ab0f965c4c1ae61c6b17ecb9b719daf355598e9715bc7af6538e2b5e9c77f813342ab627a7747df8576399eedf9711c73df21af4db9ec4a54ade40fa3ab88ae363bb115cd00ec9f2088a270ba12c69eeb35e64109e41ea9336da6eb7167460509a88edb296f20ddab09f25c24bc1264791146d7ad13edc67abe314473968abb43bf23c61cd314b3852e7a69ec4534f80b03e0113d2b83d3a186214e7e1509173cdb23f09ea2349b1e68d60d8b971b564e492d9907d0bb7faeb3d3c7d9acf60aa6ae053b42c74fb5fb3ee2698cb5daec9568c1725e6ee937a5364a3856cd5cf77b634c5749def82822467fba29fb4cd86f36bf998eb950c54d2734ad98ccc525a4f95f4136d8261ae9b16d8cd39bbdaf39c616a9c3999b3ac0823def4d5b8a6e22e7cda3203a43b9748266b9d02d268ad9e4ff118adf7f342dcaafdc3b9dac835d03c1a962b6743ea0bf67b63962b9fb09b1aaacee6bd06e3358bfd3053edf086b63f0f21a69afe27583266dacb90a0584b53145060c16555397a82de194b59b8b66f600c0a74c0b965ea2eefae88efd6110bc9be3b324313ca5d1f62b137e84facea9723dc649f69f685996fbe3eb7016403408f685e1ff0a9cc602db6b4a63722f61f3cd7f56e3d25f6f8e8e8b56c90641e5ae432cc96ed37519bc4002f2a35d889d4894c480e10a05c64307b474731090aac639914860b9e3f167d5c0a7f3fb2543428734d6108d2a8b354d78e3f298d8098e9249bd70e8f013306baa10c22fd3ba4bf3f640004f3c11cec2e1500591b3e68a750441ca1261c94f9122aabf5878683ef8d215c5ee10e63ec6a8455e365ce2659c35e69c531e9f48fbe32124bc03177f7e9ccda71fa2145b44a2de046e044d724de219151b584900252c4a4d482027bbbc4debabdb9d26961752b1297aad1643cabcf1a0b98a6e468a7386c5391236899cd04244b9ef168c08e1b269bad10fb3565c7f7d644653dafe31f8f518a52b6d6817539d090ce8eabeedcfc384b8f71f07bb35d1a20393e31509369a782a08027157d04e8d4ddef5f1850afdb74d99da74189832772b54346810dbb14e448139686e2c56d98ff18cfef126f64d18be4b2332b484c450e254d243738a909e135c55d20fb8bfdb59afe64686b62ae15608aadd2df5369964688c1fd8db68de0b20696d2c6400921be34aedfb09e60801f6e8599762fd22be8efb8bddea4785ae294db250c05dc0ab72d4b9826aeac2aceb1909d79e295d9161b6cf0100fc2ba77dac819b8d978202193d5ba714224731a28b2b8209668b796233b3e60e3d4c5688fa3efb92501140a7b9346e9076e3bf24e57d3e859d79b22bcae7fa2dcdabd32a2d063ee4f09aa3f09408477dba59fa21797e7cb734a13aca7f64794b2a8ac9c7c653b6dc2044e28ecba40697bb34b5fbb5a5890cf46f440a19700a05bc60cfd790be1f27aac0c240284380e1f1824d87cf5a6d36f39f82cce84954a925af1c8bca7a2686e433df70e0290c79dc763c56791f40d32dc98799b2e8f9e43ec839eacd3bce280afcdc7c2cf082f96c13a444b1a1ddd65801f9f1a3f2d1f62f294a892bce7a149d88580bf7ef8e66c251143072fb3339b070f1172cf57ba23e951e90d1690a16ca4b1c544316d492c4d2a61c71fe4bbdff50d1a34bd80b0f8c9a863a7490f1601a4cba401a79121c5b2fa1e2bed0db5ea0ef6a3c8aea591a939e632db1b3145e37b1d4f6ce98ec58221b1e111c361b5a3d39aad92cde459fadd205a67f552a48445b37422d208df3f840ce8484b7f470668e9b7d0252694fb9f1ce52cbf7ea32ec0afb5cebdbd9b4d6cc141624002b837dfe9bc0821138a9972cffb59f12f76643dc7a31aab80ce9621cce1436f04bc89a7816f47a16c38493d478bdae496dde210ccf891ebdd6b131d892be03557e35535f31348cf8a1c14dfd5d0cb2ee08a756499ef8f2dae91f1eed747dcbe0433e658fed2a5f6b7a2f04d5ad7a1272b3e3050a10e75db3aba69384adc97dff6e40a03eb3a8642be23d70d0030f89ae525c401b341c8146e1f1079e816e940c03fe82d8cbb5dbe86369a20958efa51fa1291f5c623ef60d4543ed40797c2789514dabc9138bc5dfa9e873c988caa2a7c3b2ec4f52d834c3e267d6df7480d1f16e80d3cdcd6b06133ebb305ec9c8b3704a4481a72654a170e2e0236916a3cffa8d87bc9e26b634d6099760a9e6412c62f52c1e21ff3fc8d99ee2f3814e79341bca2c077ea6f9a6240337642be48467eddc6c1d8d06e2a870be8eb959d03e533746523d6506d8f928b39311f1b0236c228d190625af59881deaa3538b751c671014fc36e906874247740ece2b694ee7e267276244f0cd436be546a5413c26895355d1bc9ca3c3c05797ea7edd7f6af54c27694d8cbad098f7255e511514b4b15774aa6e4a1ce80f633d012a5217bd2d0e2", &(0x7f0000000140)="ae4b3955a5b35bac639cbeae84be14ae531a01b88c82d6c0e0e694cc4f937bdce5e541e874ec0d6a29a627ecb29e60ab8fe65b313cdf29eb03fd37f025d19f921d35188dd8e0dd7e4282f99dae24188a99edeeb33ebe3a13efa9b767e9696d866e44"}}, &(0x7f0000000980)=0x0) timer_gettime(r0, &(0x7f00000009c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x4, 0x0, 0x9, 0x14, 0x100, &(0x7f0000001b80)="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"}) socket$nl_generic(0x10, 0x3, 0x10) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 9.330730887s ago: executing program 0 (id=271): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') pwritev2(r0, 0x0, 0x0, 0x401f, 0x1, 0x6) 8.829024426s ago: executing program 0 (id=273): statx(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x988, &(0x7f0000000100)) 8.491707427s ago: executing program 2 (id=275): getpid() exit_group(0x1) getpid() 8.196748996s ago: executing program 0 (id=276): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) 7.991479627s ago: executing program 2 (id=277): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(&(0x7f0000000000)='./file0\x00', 0x20) 7.500309002s ago: executing program 0 (id=278): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 7.48107862s ago: executing program 3 (id=279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3) 6.226925012s ago: executing program 3 (id=280): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x8400000) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, &(0x7f0000000000)=0x3, 0x4ffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) fallocate(r0, 0x0, 0x800657, 0x40000b7) lseek(r0, 0x6, 0x3) 3.653561502s ago: executing program 3 (id=281): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x123a00, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe2(&(0x7f0000000040), 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaabbaaaabb86dd6000020000200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c6000090780000080ac5f924187f"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.298241767s ago: executing program 2 (id=282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x0, 0x25000, 0x1000, &(0x7f0000d7f000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000f8b000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 2.857560757s ago: executing program 3 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x42000006, 0x801) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)={0x1}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r3, 0x7, 0x2, r2}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r6, 0x7, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.675500617s ago: executing program 0 (id=284): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000300)={{&(0x7f000080e000/0x1000)=nil, 0x1000}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xbfd0, 0x6000007, 0x8, 0x80000001}) 2.157956292s ago: executing program 2 (id=285): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001e9000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty, 0xffffffff}, {0xa, 0x4e20, 0x101, @remote, 0x7}, r1, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f00000025c0)}}, 0x10) 1.421945018s ago: executing program 2 (id=286): io_uring_setup(0x4fee, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.270030833s ago: executing program 0 (id=287): mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x833, &(0x7f0000000080)={0x0, 0x92bc, 0x400}) r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x3000) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.089347446s ago: executing program 3 (id=288): socket(0x2, 0x3, 0xff) socket(0x2, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r0, &(0x7f0000000100)=""/1, 0x1, 0x7fffffff) 871.647224ms ago: executing program 6 (id=23): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ad80, 0x0, 0x0) 163.280674ms ago: executing program 2 (id=289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x280, 0x3c0, &(0x7f0000000180)=[0x6bd1a30f, 0xec66, 0xace, 0x8, 0x98bf, 0x8, 0x7, 0x4, 0x4, 0x80000000, 0x0, 0x9, 0x6, 0x9, 0x5, 0x3f2, 0x3ff, 0x5, 0x101, 0x4000000001, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x80000000000002, 0x800000006, 0x1000000000, 0x96, 0xffffffff, 0xffffffff00000000, 0x8, 0x5, 0x7, 0x4, 0x3541, 0x9, 0x888f, 0xf01, 0x8, 0x49, 0x6, 0x10000000000003, 0xa3df, 0x20000000006, 0x40, 0x9, 0x3fe, 0x10000003, 0xfffffffffffffff7, 0xd, 0x2, 0xe, 0x0, 0x4, 0xf5, 0xfd, 0x7, 0x9, 0x66, 0x9, 0x3, 0x40000005, 0xffffffff00000000, 0x9, 0xd, 0x10001, 0x6, 0x80000000, 0xffffffffffeffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x0, 0x8b, 0xfff, 0x6, 0x2, 0x1, 0xab6, 0xffffffff7ffffffc, 0x0, 0x0, 0xffffffffffffff84, 0x9, 0xff, 0x3, 0x28000000, 0x5, 0x8, 0x7, 0x8, 0xf6, 0x40000004, 0x6, 0x203, 0x7, 0x5a3, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xffffffffffffffff, 0x2, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0x470ddba2, 0x8, 0xd, 0x5, 0x8, 0x1, 0x1, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0x142, 0x8, 0x1000003]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)) 0s ago: executing program 3 (id=290): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 156.318394][ T5758] cgroup: Unknown subsys name 'net' [ 156.463914][ T5758] cgroup: Unknown subsys name 'cpuset' [ 156.480116][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.969205][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 167.301801][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.310966][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.320018][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.333659][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.344685][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.434386][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.450909][ T5070] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.459096][ T5070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.476748][ T5070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.484865][ T5070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.494189][ T5070] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.518673][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.529702][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.532801][ T5070] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.553536][ T5070] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.563589][ T5070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.572205][ T5070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.581834][ T5070] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.598999][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.611640][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.657674][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.685731][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.696797][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.728917][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.748188][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.872091][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 169.205662][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 169.288632][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 169.378172][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 169.401656][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 169.415275][ T5786] Bluetooth: hci0: command tx timeout [ 169.655325][ T5786] Bluetooth: hci2: command tx timeout [ 169.660912][ T5786] Bluetooth: hci3: command tx timeout [ 169.667422][ T5788] Bluetooth: hci1: command tx timeout [ 169.818937][ T5786] Bluetooth: hci4: command tx timeout [ 169.888153][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.896304][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.903901][ T5781] bridge_slave_0: entered allmulticast mode [ 169.929778][ T5781] bridge_slave_0: entered promiscuous mode [ 169.975448][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.982929][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.029043][ T5781] bridge_slave_1: entered allmulticast mode [ 170.048433][ T5781] bridge_slave_1: entered promiscuous mode [ 170.262163][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.339144][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.396002][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.403617][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.411223][ T5783] bridge_slave_0: entered allmulticast mode [ 170.419562][ T5783] bridge_slave_0: entered promiscuous mode [ 170.498593][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.506475][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.513849][ T5776] bridge_slave_0: entered allmulticast mode [ 170.522659][ T5776] bridge_slave_0: entered promiscuous mode [ 170.532857][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.540394][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.548043][ T5783] bridge_slave_1: entered allmulticast mode [ 170.556513][ T5783] bridge_slave_1: entered promiscuous mode [ 170.565812][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.573240][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.580931][ T5780] bridge_slave_0: entered allmulticast mode [ 170.588992][ T5780] bridge_slave_0: entered promiscuous mode [ 170.645990][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.653579][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.661454][ T5776] bridge_slave_1: entered allmulticast mode [ 170.669984][ T5776] bridge_slave_1: entered promiscuous mode [ 170.701723][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.709341][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.717283][ T5780] bridge_slave_1: entered allmulticast mode [ 170.725728][ T5780] bridge_slave_1: entered promiscuous mode [ 170.742346][ T5781] team0: Port device team_slave_0 added [ 170.750269][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.758531][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.766227][ T5787] bridge_slave_0: entered allmulticast mode [ 170.774248][ T5787] bridge_slave_0: entered promiscuous mode [ 170.858593][ T5781] team0: Port device team_slave_1 added [ 170.865713][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.873096][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.881231][ T5787] bridge_slave_1: entered allmulticast mode [ 170.889612][ T5787] bridge_slave_1: entered promiscuous mode [ 170.929423][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.079334][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.097351][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.119451][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.186297][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.227067][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.238428][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.245613][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.271916][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.291303][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.371194][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.378592][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.405374][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.424085][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.488172][ T5783] team0: Port device team_slave_0 added [ 171.495307][ T5786] Bluetooth: hci0: command tx timeout [ 171.564720][ T5776] team0: Port device team_slave_0 added [ 171.578209][ T5783] team0: Port device team_slave_1 added [ 171.590429][ T5780] team0: Port device team_slave_0 added [ 171.606856][ T5780] team0: Port device team_slave_1 added [ 171.619546][ T5787] team0: Port device team_slave_0 added [ 171.631888][ T5776] team0: Port device team_slave_1 added [ 171.698475][ T5787] team0: Port device team_slave_1 added [ 171.735301][ T5786] Bluetooth: hci3: command tx timeout [ 171.740849][ T5786] Bluetooth: hci1: command tx timeout [ 171.746576][ T5791] Bluetooth: hci2: command tx timeout [ 171.855160][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.862280][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.888591][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.899430][ T5786] Bluetooth: hci4: command tx timeout [ 171.904569][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.912717][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.939240][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.953266][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.960478][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.987347][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.045486][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.052580][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.078925][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.123278][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.130432][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.157111][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.181698][ T5781] hsr_slave_0: entered promiscuous mode [ 172.190317][ T5781] hsr_slave_1: entered promiscuous mode [ 172.201058][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.208247][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.235199][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.249174][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.256659][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.282877][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.332198][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.339457][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.367044][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.552469][ T5776] hsr_slave_0: entered promiscuous mode [ 172.560853][ T5776] hsr_slave_1: entered promiscuous mode [ 172.568957][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 172.574790][ T5776] Cannot create hsr debugfs directory [ 172.679647][ T5780] hsr_slave_0: entered promiscuous mode [ 172.688017][ T5780] hsr_slave_1: entered promiscuous mode [ 172.695809][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 172.701851][ T5780] Cannot create hsr debugfs directory [ 172.721012][ T5783] hsr_slave_0: entered promiscuous mode [ 172.729312][ T5783] hsr_slave_1: entered promiscuous mode [ 172.737301][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 172.743175][ T5783] Cannot create hsr debugfs directory [ 172.839039][ T5787] hsr_slave_0: entered promiscuous mode [ 172.847937][ T5787] hsr_slave_1: entered promiscuous mode [ 172.855859][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 172.861714][ T5787] Cannot create hsr debugfs directory [ 173.575192][ T5786] Bluetooth: hci0: command tx timeout [ 173.815434][ T5788] Bluetooth: hci2: command tx timeout [ 173.821016][ T5788] Bluetooth: hci3: command tx timeout [ 173.828240][ T5786] Bluetooth: hci1: command tx timeout [ 173.975226][ T5786] Bluetooth: hci4: command tx timeout [ 174.010597][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.041591][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.061523][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.091541][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.181721][ T5783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.241687][ T5783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.282895][ T5783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.310792][ T5783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.480461][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.499424][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.522557][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.542138][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.799959][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.819870][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.865525][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.889410][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.132979][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.170553][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.211244][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.260575][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.294342][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.491719][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.593250][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.620581][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.628138][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.655199][ T5786] Bluetooth: hci0: command tx timeout [ 175.697120][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.704411][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.772073][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.882262][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.897305][ T5791] Bluetooth: hci2: command tx timeout [ 175.902987][ T5788] Bluetooth: hci3: command tx timeout [ 175.910607][ T5786] Bluetooth: hci1: command tx timeout [ 175.984568][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.991921][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.014224][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.056060][ T5786] Bluetooth: hci4: command tx timeout [ 176.099694][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.107208][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.168518][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.189040][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.196511][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.304937][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.312398][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.463436][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.531456][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.653970][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.661725][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.789769][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.888328][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.895856][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.978887][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.986557][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.069725][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.077473][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.737724][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.018080][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.456450][ T5781] veth0_vlan: entered promiscuous mode [ 178.480767][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.627487][ T5781] veth1_vlan: entered promiscuous mode [ 178.779294][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.001433][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.102097][ T5781] veth0_macvtap: entered promiscuous mode [ 179.198157][ T5781] veth1_macvtap: entered promiscuous mode [ 179.208007][ T5780] veth0_vlan: entered promiscuous mode [ 179.340271][ T5787] veth0_vlan: entered promiscuous mode [ 179.370518][ T5780] veth1_vlan: entered promiscuous mode [ 179.451516][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.516459][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.525819][ T5787] veth1_vlan: entered promiscuous mode [ 179.650202][ T166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.659506][ T166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.717717][ T166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.729155][ T166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.762689][ T5780] veth0_macvtap: entered promiscuous mode [ 179.780260][ T5776] veth0_vlan: entered promiscuous mode [ 179.863547][ T5783] veth0_vlan: entered promiscuous mode [ 179.903853][ T5780] veth1_macvtap: entered promiscuous mode [ 179.951238][ T5776] veth1_vlan: entered promiscuous mode [ 180.040327][ T5783] veth1_vlan: entered promiscuous mode [ 180.086793][ T5787] veth0_macvtap: entered promiscuous mode [ 180.147796][ T5787] veth1_macvtap: entered promiscuous mode [ 180.173936][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.301425][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.459827][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.479251][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.543897][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.557242][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.579403][ T5783] veth0_macvtap: entered promiscuous mode [ 180.598224][ T5776] veth0_macvtap: entered promiscuous mode [ 180.623809][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.646585][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.691533][ T5783] veth1_macvtap: entered promiscuous mode [ 180.737560][ T5776] veth1_macvtap: entered promiscuous mode [ 180.772592][ T166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.791757][ T166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.863631][ T166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.890072][ T166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.101228][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.129223][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.204656][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.239692][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.404238][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.463070][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.540165][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.560053][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.627954][ T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.661445][ T53] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.712558][ T53] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.768755][ T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.988145][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.019736][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.230719][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.275413][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.760113][ T5781] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.291976][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.382773][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.609820][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.646401][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.054578][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.135245][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.483631][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.575111][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.860373][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.954810][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.937023][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.965259][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.493832][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.575583][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.283171][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.045556][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.988466][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.626191][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.998888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 205.205228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 205.306321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 205.408598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 205.715982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 205.817932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 206.125366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 206.227611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 206.536523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 206.637245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 207.506335][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 222.415262][ T35] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 223.388769][ T6056] Device name cannot be null; rc = [-22] [ 229.838704][ T35] usb 1-1: device descriptor read/all, error -71 [ 237.495628][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.504580][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.514848][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.546159][ T5788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.570534][ T5788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.582235][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28'. [ 237.591421][ T6082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.28'. [ 239.474457][ T5788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.378665][ T5788] Bluetooth: hci5: command tx timeout [ 240.391467][ T5788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.405053][ T5788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.338322][ T5791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.351661][ T5791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 242.160453][ T6103] loop3: detected capacity change from 0 to 256 [ 242.256123][ T6103] ======================================================= [ 242.256123][ T6103] WARNING: The mand mount option has been deprecated and [ 242.256123][ T6103] and is ignored by this kernel. Remove the mand [ 242.256123][ T6103] option from the mount to silence this warning. [ 242.256123][ T6103] ======================================================= [ 242.545374][ T5791] Bluetooth: hci5: command tx timeout [ 242.841439][ T6103] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.916113][ T6103] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 243.185753][ T6103] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 243.386286][ T6103] exFAT-fs (loop3): failed to load alloc-bitmap [ 243.475543][ T6103] exFAT-fs (loop3): failed to recognize exfat type [ 243.505036][ T5791] Bluetooth: hci6: command tx timeout [ 243.577483][ T29] audit: type=1326 audit(1774081200.019:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.0.33" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00e7d9c799 code=0x0 [ 244.705216][ T5791] Bluetooth: hci5: command tx timeout [ 245.646463][ T5791] Bluetooth: hci6: command tx timeout [ 246.785349][ T5791] Bluetooth: hci5: command tx timeout [ 248.626069][ T5830] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 248.679569][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.691006][ T5791] Bluetooth: hci6: command tx timeout [ 249.740703][ T5830] usb 1-1: config 0 has no interfaces? [ 250.185597][ T5830] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 250.194867][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.698686][ T5791] Bluetooth: hci6: command tx timeout [ 254.812611][ T5830] usb 1-1: config 0 descriptor?? [ 256.105459][ T5830] usb 1-1: can't set config #0, error -71 [ 256.128487][ T5830] usb 1-1: USB disconnect, device number 4 [ 256.138120][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.38'. [ 256.153296][ T6135] netlink: 36 bytes leftover after parsing attributes in process `syz.2.38'. [ 257.401602][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.212901][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.39'. [ 258.221938][ T6137] netlink: 36 bytes leftover after parsing attributes in process `syz.0.39'. [ 258.458890][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.651006][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.058791][ T6093] chnl_net:caif_netlink_parms(): no params data found [ 261.393348][ T6083] chnl_net:caif_netlink_parms(): no params data found [ 261.867840][ T13] bridge_slave_1: left allmulticast mode [ 261.915508][ T13] bridge_slave_1: left promiscuous mode [ 261.922060][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.000862][ T13] bridge_slave_0: left allmulticast mode [ 262.007029][ T13] bridge_slave_0: left promiscuous mode [ 262.013501][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.272805][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.341520][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.355378][ T5875] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 264.413080][ T13] bond0 (unregistering): Released all slaves [ 264.525611][ T5875] usb 1-1: device descriptor read/64, error -71 [ 264.825350][ T5875] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 265.009466][ T5875] usb 1-1: device descriptor read/64, error -71 [ 265.148371][ T5875] usb usb1-port1: attempt power cycle [ 265.434494][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.441739][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.548239][ T5875] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 265.632189][ T5875] usb 1-1: device descriptor read/8, error -71 [ 265.776083][ T13] hsr_slave_0: left promiscuous mode [ 265.825619][ T13] hsr_slave_1: left promiscuous mode [ 265.864697][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.915348][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.965191][ T5875] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 266.008632][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.046051][ T5875] usb 1-1: device descriptor read/8, error -71 [ 266.066210][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.180871][ T5875] usb usb1-port1: unable to enumerate USB device [ 267.105877][ T13] veth1_macvtap: left promiscuous mode [ 267.111576][ T13] veth0_macvtap: left promiscuous mode [ 267.183088][ T13] veth1_vlan: left promiscuous mode [ 267.206045][ T13] veth0_vlan: left promiscuous mode [ 274.955673][ T13] team0 (unregistering): Port device team_slave_1 removed [ 275.257792][ T13] team0 (unregistering): Port device team_slave_0 removed [ 277.040623][ T6201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.51'. [ 277.049694][ T6201] netlink: 36 bytes leftover after parsing attributes in process `syz.3.51'. [ 277.138783][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.170044][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.210581][ T6083] bridge_slave_0: entered allmulticast mode [ 277.260145][ T6083] bridge_slave_0: entered promiscuous mode [ 281.352562][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.360926][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.406016][ T6083] bridge_slave_1: entered allmulticast mode [ 283.371215][ T6083] bridge_slave_1: entered promiscuous mode [ 284.464874][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.511964][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.396412][ T6093] bridge_slave_0: entered allmulticast mode [ 285.448640][ T6093] bridge_slave_0: entered promiscuous mode [ 285.705180][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.733635][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.752096][ T6093] bridge_slave_1: entered allmulticast mode [ 285.772813][ T6093] bridge_slave_1: entered promiscuous mode [ 285.819463][ T6083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.873393][ T6083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.088786][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.332239][ T6083] team0: Port device team_slave_0 added [ 286.515638][ T5875] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 287.503973][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.625312][ T5875] usb 3-1: device descriptor read/64, error -71 [ 290.485437][ T5875] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 291.580213][ T6083] team0: Port device team_slave_1 added [ 292.969414][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.319698][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.360817][ T29] audit: type=1326 audit(1774081249.879:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.2.58" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d5e99c799 code=0x0 [ 293.464365][ T6093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.497278][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 293.504805][ T5791] Bluetooth: hci4: command 0x0406 tx timeout [ 293.575209][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 294.257387][ T6249] vivid-001: disconnect [ 294.418695][ T13] bridge_slave_1: left allmulticast mode [ 294.418795][ T13] bridge_slave_1: left promiscuous mode [ 294.419650][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.522892][ T13] bridge_slave_0: left allmulticast mode [ 294.522994][ T13] bridge_slave_0: left promiscuous mode [ 294.523844][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.038668][ T6245] vivid-001: reconnect [ 295.151754][ T6255] No such timeout policy "syz0" [ 295.437599][ T6255] loop3: detected capacity change from 0 to 1024 [ 295.728697][ T6255] EXT4-fs (loop3): unsupported inode size: 8 [ 295.728906][ T6255] EXT4-fs (loop3): blocksize: 1024 [ 297.588488][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.609733][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.613191][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.619512][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.623352][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.686688][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.726731][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.731196][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.747165][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.751389][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.811097][ T5788] Bluetooth: hci1: command tx timeout [ 299.834852][ T5788] Bluetooth: hci3: command tx timeout [ 300.953874][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.64'. [ 300.954016][ T6273] netlink: 36 bytes leftover after parsing attributes in process `syz.3.64'. [ 301.693061][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.746922][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.771229][ T13] bond0 (unregistering): Released all slaves [ 301.816622][ T5788] Bluetooth: hci1: command tx timeout [ 301.909404][ T5788] Bluetooth: hci3: command tx timeout [ 302.976569][ T6284] No such timeout policy "syz0" [ 303.336265][ T6285] loop3: detected capacity change from 0 to 1024 [ 303.423222][ T6285] EXT4-fs (loop3): unsupported inode size: 8 [ 303.423427][ T6285] EXT4-fs (loop3): blocksize: 1024 [ 303.895169][ T5788] Bluetooth: hci1: command tx timeout [ 303.976002][ T5788] Bluetooth: hci3: command tx timeout [ 305.066214][ T35] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 305.265382][ T35] usb 1-1: Using ep0 maxpacket: 8 [ 305.285508][ T35] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.285628][ T35] usb 1-1: config 0 has no interfaces? [ 305.285779][ T35] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 305.285914][ T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.371028][ T35] usb 1-1: config 0 descriptor?? [ 305.609047][ T35] usb 1-1: USB disconnect, device number 9 [ 305.977132][ T5788] Bluetooth: hci1: command tx timeout [ 306.055545][ T5788] Bluetooth: hci3: command tx timeout [ 314.032491][ T13] hsr_slave_0: left promiscuous mode [ 314.121013][ T13] hsr_slave_1: left promiscuous mode [ 314.165755][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.203877][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.261846][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.280557][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.337926][ T13] veth1_macvtap: left promiscuous mode [ 314.348780][ T13] veth0_macvtap: left promiscuous mode [ 314.365908][ T5092] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 314.383742][ T13] veth1_vlan: left promiscuous mode [ 314.400843][ T13] veth0_vlan: left promiscuous mode [ 314.568522][ T5092] usb 3-1: config 0 has no interfaces? [ 314.574272][ T5092] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 314.632285][ T5092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.711415][ T5092] usb 3-1: config 0 descriptor?? [ 314.816307][ T6321] No such timeout policy "syz0" [ 316.422069][ T6324] fuse: Unknown parameter '017777777777777777777770x0000000000000003' [ 316.731819][ T6315] syz.2.70 uses obsolete (PF_INET,SOCK_PACKET) [ 316.757559][ T6315] Bluetooth: MGMT ver 1.23 [ 316.929721][ T6328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.74'. [ 316.940102][ T6328] netlink: 36 bytes leftover after parsing attributes in process `syz.3.74'. [ 317.469912][ T6331] Zero length message leads to an empty skb [ 318.319465][ T13] team0 (unregistering): Port device team_slave_1 removed [ 318.492174][ T13] team0 (unregistering): Port device team_slave_0 removed [ 319.090349][ T5875] usb 3-1: USB disconnect, device number 4 [ 320.135592][ T6258] chnl_net:caif_netlink_parms(): no params data found [ 320.325456][ T5875] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 320.391900][ T29] audit: type=1326 audit(1774081276.909:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e7d9c799 code=0x7ffc0000 [ 325.165259][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 325.187466][ T29] audit: type=1326 audit(1774081277.879:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00e7d5cfce code=0x7ffc0000 [ 325.401564][ T5875] usb 4-1: device descriptor read/all, error -71 [ 325.423153][ T29] audit: type=1326 audit(1774081277.879:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e7d9c799 code=0x7ffc0000 [ 325.597802][ T29] audit: type=1326 audit(1774081277.889:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e7d9c799 code=0x7ffc0000 [ 325.666884][ T29] audit: type=1326 audit(1774081277.889:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00e7d9c799 code=0x7ffc0000 [ 327.099695][ T29] audit: type=1326 audit(1774081277.889:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e7d9c799 code=0x7ffc0000 [ 327.101262][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.123279][ T29] audit: type=1326 audit(1774081280.999:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e7d9c799 code=0x7ffc0000 [ 327.151998][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.186441][ T13] bridge_slave_1: left allmulticast mode [ 327.192269][ T13] bridge_slave_1: left promiscuous mode [ 328.156347][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.266311][ T13] bridge_slave_0: left allmulticast mode [ 328.272146][ T13] bridge_slave_0: left promiscuous mode [ 328.364846][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.558776][ T13] bridge_slave_1: left allmulticast mode [ 328.649631][ T13] bridge_slave_1: left promiscuous mode [ 328.682853][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.759838][ T13] bridge_slave_0: left allmulticast mode [ 328.803300][ T35] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 328.826243][ T13] bridge_slave_0: left promiscuous mode [ 328.856793][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.028006][ T35] usb 1-1: config 0 has no interfaces? [ 329.045073][ T35] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 329.054328][ T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.197785][ T35] usb 1-1: config 0 descriptor?? [ 329.368293][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.521490][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.635928][ T13] bond0 (unregistering): Released all slaves [ 331.390324][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.864133][ T13] bond0 (unregistering): Released all slaves [ 332.910307][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'. [ 332.926303][ T6384] netlink: 36 bytes leftover after parsing attributes in process `syz.2.84'. [ 333.536009][ T5875] usb 1-1: USB disconnect, device number 10 [ 333.603023][ T6257] chnl_net:caif_netlink_parms(): no params data found [ 334.161340][ T13] team0 (unregistering): Port device team_slave_1 removed [ 334.257552][ T13] team0 (unregistering): Port device team_slave_0 removed [ 334.533175][ T6402] vivid-000: disconnect [ 335.368595][ T6392] vivid-000: reconnect [ 338.027773][ T29] audit: type=1326 audit(1774081294.539:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.2.89" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d5e99c799 code=0x0 [ 338.951620][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.006155][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.067916][ T6258] bridge_slave_0: entered allmulticast mode [ 339.147448][ T6258] bridge_slave_0: entered promiscuous mode [ 339.271454][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.325360][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.385697][ T6258] bridge_slave_1: entered allmulticast mode [ 339.428054][ T6258] bridge_slave_1: entered promiscuous mode [ 339.625868][ T6429] No such timeout policy "syz0" [ 339.887445][ T6429] loop3: detected capacity change from 0 to 1024 [ 339.986087][ T6429] EXT4-fs (loop3): unsupported inode size: 8 [ 339.992513][ T6429] EXT4-fs (loop3): blocksize: 1024 [ 341.145196][ T6431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'. [ 341.157498][ T6431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.93'. [ 342.244567][ T6258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.380653][ T6258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.331891][ T6258] team0: Port device team_slave_0 added [ 345.440609][ T6258] team0: Port device team_slave_1 added [ 345.867317][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.907453][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.966523][ T6257] bridge_slave_0: entered allmulticast mode [ 345.979403][ T6257] bridge_slave_0: entered promiscuous mode [ 346.092468][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.092796][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.093225][ T6257] bridge_slave_1: entered allmulticast mode [ 346.100314][ T6257] bridge_slave_1: entered promiscuous mode [ 346.232095][ T6452] vivid-001: disconnect [ 348.132927][ T6448] vivid-001: reconnect [ 348.331325][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.331395][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.331530][ T6258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.400185][ T6257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.599176][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.99'. [ 348.599748][ T6463] netlink: 36 bytes leftover after parsing attributes in process `syz.3.99'. [ 349.555334][ T6257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.618998][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.619066][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.619200][ T6258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.022739][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 353.147462][ T6483] No such timeout policy "syz0" [ 355.475768][ T6483] loop3: detected capacity change from 0 to 1024 [ 358.323137][ T6257] team0: Port device team_slave_0 added [ 358.871579][ T6257] team0: Port device team_slave_1 added [ 358.991388][ T6492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.103'. [ 359.002065][ T6492] netlink: 36 bytes leftover after parsing attributes in process `syz.3.103'. [ 366.630624][ T5786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.647194][ T5786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.659067][ T5786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.682964][ T5786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.708686][ T5786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.778658][ T5788] Bluetooth: hci5: command tx timeout [ 369.441306][ T5786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.588673][ T5786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.598244][ T5786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.612467][ T5786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.788211][ T5786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.855191][ T5786] Bluetooth: hci5: command tx timeout [ 372.821804][ T5786] Bluetooth: hci6: command tx timeout [ 372.935513][ T5786] Bluetooth: hci5: command tx timeout [ 374.579552][ T6533] No such timeout policy "syz0" [ 374.906494][ T6533] loop0: detected capacity change from 0 to 1024 [ 375.466763][ T5786] Bluetooth: hci6: command tx timeout [ 375.472558][ T5786] Bluetooth: hci5: command tx timeout [ 376.947844][ T6533] EXT4-fs (loop0): unsupported inode size: 8 [ 376.954230][ T6533] EXT4-fs (loop0): blocksize: 1024 [ 377.499451][ T5786] Bluetooth: hci6: command tx timeout [ 377.873704][ T6540] vivid-000: disconnect [ 378.936149][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 379.273233][ T6534] vivid-000: reconnect [ 379.575425][ T5786] Bluetooth: hci6: command tx timeout [ 383.099388][ T5985] bridge_slave_1: left allmulticast mode [ 383.126735][ T5985] bridge_slave_1: left promiscuous mode [ 383.154033][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.377806][ T5985] bridge_slave_0: left allmulticast mode [ 383.383714][ T5985] bridge_slave_0: left promiscuous mode [ 383.439469][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.734783][ T6552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.115'. [ 383.751722][ T6552] netlink: 36 bytes leftover after parsing attributes in process `syz.3.115'. [ 384.650181][ T6557] loop0: detected capacity change from 0 to 256 [ 384.738002][ T6557] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 384.798034][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.977227][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.040129][ T5985] bond0 (unregistering): Released all slaves [ 386.578210][ T6563] exFAT-fs (loop0): start_clu is invalid cluster(0x0) [ 387.479800][ T29] audit: type=1800 audit(1774081343.109:12): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.117" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 388.264710][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 388.312225][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.319626][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.465496][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 390.300354][ T6507] chnl_net:caif_netlink_parms(): no params data found [ 390.407859][ T6578] fuse: Unknown parameter '017777777777777777777770x0000000000000003' [ 395.328355][ T6519] chnl_net:caif_netlink_parms(): no params data found [ 395.406647][ T6593] vivid-001: disconnect [ 395.772448][ T6589] vivid-001: reconnect [ 399.252837][ T6507] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.253230][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.253726][ T6507] bridge_slave_0: entered allmulticast mode [ 399.330539][ T6507] bridge_slave_0: entered promiscuous mode [ 399.730178][ T5985] bridge_slave_1: left allmulticast mode [ 399.730358][ T5985] bridge_slave_1: left promiscuous mode [ 399.733717][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.783342][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.128'. [ 399.783443][ T6617] netlink: 36 bytes leftover after parsing attributes in process `syz.2.128'. [ 399.895230][ T5985] bridge_slave_0: left allmulticast mode [ 399.895327][ T5985] bridge_slave_0: left promiscuous mode [ 399.896126][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.384050][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.394523][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.405434][ T5985] bond0 (unregistering): Released all slaves [ 400.414619][ T6507] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.415152][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.415645][ T6507] bridge_slave_1: entered allmulticast mode [ 400.421558][ T6507] bridge_slave_1: entered promiscuous mode [ 400.622031][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.636949][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.069893][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 401.161688][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 401.900694][ T6507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.090701][ T6507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.242444][ T29] audit: type=1326 audit(1774081358.759:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66aa39c799 code=0x7ffc0000 [ 402.328885][ T29] audit: type=1326 audit(1774081358.809:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66aa39c799 code=0x7ffc0000 [ 402.855458][ T29] audit: type=1326 audit(1774081358.809:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66aa35cfce code=0x7ffc0000 [ 403.837907][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.845367][ T29] audit: type=1326 audit(1774081358.809:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66aa39c799 code=0x7ffc0000 [ 403.870019][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.834169][ T6519] bridge_slave_0: entered allmulticast mode [ 404.844111][ T6519] bridge_slave_0: entered promiscuous mode [ 404.850367][ T29] audit: type=1326 audit(1774081358.809:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66aa39c799 code=0x7ffc0000 [ 405.835222][ T29] audit: type=1326 audit(1774081358.809:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66aa39c799 code=0x7ffc0000 [ 405.857837][ T29] audit: type=1326 audit(1774081358.809:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66aa39c799 code=0x7ffc0000 [ 406.845311][ T29] audit: type=1326 audit(1774081358.809:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66aa39c799 code=0x7ffc0000 [ 406.853511][ T6507] team0: Port device team_slave_0 added [ 407.854751][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.863443][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.996164][ T6519] bridge_slave_1: entered allmulticast mode [ 408.059096][ T6519] bridge_slave_1: entered promiscuous mode [ 408.273640][ T6507] team0: Port device team_slave_1 added [ 409.585240][ T6519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.377023][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.377094][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.377227][ T6507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.395928][ T6666] vivid-001: disconnect [ 411.426403][ T6519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.477912][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.477991][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.478122][ T6507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.835535][ T6664] vivid-001: reconnect [ 413.144526][ T6519] team0: Port device team_slave_0 added [ 413.156389][ T6674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.138'. [ 413.156484][ T6674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.138'. [ 414.079680][ T6507] hsr_slave_0: entered promiscuous mode [ 414.083553][ T6507] hsr_slave_1: entered promiscuous mode [ 414.217112][ T6507] debugfs: 'hsr0' already exists in 'hsr' [ 414.217195][ T6507] Cannot create hsr debugfs directory [ 414.253572][ T6519] team0: Port device team_slave_1 added [ 420.741149][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.841896][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.340058][ T6519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.308658][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.340477][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.325118][ T6519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.930000][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 429.970809][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 429.979024][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 429.980688][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 429.997610][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 430.007463][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 430.018089][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.038006][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 430.038100][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 430.057067][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 432.176563][ T5786] Bluetooth: hci1: command tx timeout [ 432.177400][ T5786] Bluetooth: hci3: command tx timeout [ 433.113627][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.149'. [ 433.114387][ T6733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.149'. [ 434.216665][ T5786] Bluetooth: hci1: command tx timeout [ 434.217094][ T5788] Bluetooth: hci3: command tx timeout [ 435.052969][ T6741] vivid-000: disconnect [ 435.572629][ T5984] bridge_slave_1: left allmulticast mode [ 435.572726][ T5984] bridge_slave_1: left promiscuous mode [ 435.573536][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.658867][ T5984] bridge_slave_0: left allmulticast mode [ 435.658966][ T5984] bridge_slave_0: left promiscuous mode [ 435.659933][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.662611][ T6739] vivid-000: reconnect [ 436.087315][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.266638][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.298095][ T5788] Bluetooth: hci3: command tx timeout [ 436.303962][ T5786] Bluetooth: hci1: command tx timeout [ 436.336943][ T5984] bond0 (unregistering): Released all slaves [ 436.831634][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.898909][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.100150][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 437.217616][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 438.102177][ T6715] chnl_net:caif_netlink_parms(): no params data found [ 438.375172][ T5788] Bluetooth: hci3: command tx timeout [ 438.381016][ T5786] Bluetooth: hci1: command tx timeout [ 438.707964][ T6714] chnl_net:caif_netlink_parms(): no params data found [ 439.225042][ T53] bridge_slave_1: left allmulticast mode [ 439.230952][ T53] bridge_slave_1: left promiscuous mode [ 439.280349][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.385360][ T53] bridge_slave_0: left allmulticast mode [ 439.394640][ T53] bridge_slave_0: left promiscuous mode [ 439.435962][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.040979][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.111176][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.162328][ T53] bond0 (unregistering): Released all slaves [ 440.409944][ T53] hsr_slave_0: left promiscuous mode [ 440.509065][ T53] hsr_slave_1: left promiscuous mode [ 440.551711][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.612246][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.282113][ T53] team0 (unregistering): Port device team_slave_1 removed [ 441.507517][ T53] team0 (unregistering): Port device team_slave_0 removed [ 442.554966][ T6715] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.585411][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.637443][ T6715] bridge_slave_0: entered allmulticast mode [ 442.657582][ T6715] bridge_slave_0: entered promiscuous mode [ 442.915304][ T6715] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.922762][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.988781][ T6715] bridge_slave_1: entered allmulticast mode [ 443.085373][ T6715] bridge_slave_1: entered promiscuous mode [ 443.413378][ T6714] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.445557][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.453201][ T6714] bridge_slave_0: entered allmulticast mode [ 443.492277][ T6714] bridge_slave_0: entered promiscuous mode [ 443.553796][ T6715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.651444][ T6715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.772757][ T6714] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.815345][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.823006][ T6714] bridge_slave_1: entered allmulticast mode [ 443.858924][ T6714] bridge_slave_1: entered promiscuous mode [ 444.476583][ T6714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.545990][ T6715] team0: Port device team_slave_0 added [ 444.596330][ T6715] team0: Port device team_slave_1 added [ 444.652149][ T6714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.121263][ T6714] team0: Port device team_slave_0 added [ 445.173378][ T6715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.205014][ T6715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.287415][ T6715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.318350][ T6714] team0: Port device team_slave_1 added [ 445.333226][ T6715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.355585][ T6715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.445276][ T6715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.815528][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.822637][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.946420][ T6714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.068505][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.100563][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.211141][ T6714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.694072][ T6715] hsr_slave_0: entered promiscuous mode [ 446.766953][ T6715] hsr_slave_1: entered promiscuous mode [ 446.799451][ T6715] debugfs: 'hsr0' already exists in 'hsr' [ 446.825285][ T6715] Cannot create hsr debugfs directory [ 447.053523][ T6714] hsr_slave_0: entered promiscuous mode [ 447.105325][ T6714] hsr_slave_1: entered promiscuous mode [ 447.135431][ T6714] debugfs: 'hsr0' already exists in 'hsr' [ 447.141333][ T6714] Cannot create hsr debugfs directory [ 449.729754][ T6715] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 449.777451][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.777690][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.013428][ T6715] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 450.162671][ T6715] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 450.298978][ T6715] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 450.527747][ T6714] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 450.657514][ T6714] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 450.786150][ T6714] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 451.018242][ T6714] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 452.431825][ T6715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.765687][ T6715] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.011444][ T6714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.064339][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.071878][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.331031][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.338648][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.733531][ T6714] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.881912][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.889486][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.098490][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.106153][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.481901][ T6715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.313590][ T6714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.170003][ T6715] veth0_vlan: entered promiscuous mode [ 459.294921][ T6715] veth1_vlan: entered promiscuous mode [ 459.615264][ T7090] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 459.649198][ T7090] syzkaller0: entered promiscuous mode [ 459.705209][ T7090] syzkaller0: entered allmulticast mode [ 460.067078][ T6715] veth0_macvtap: entered promiscuous mode [ 460.157826][ T6715] veth1_macvtap: entered promiscuous mode [ 460.413970][ T6714] veth0_vlan: entered promiscuous mode [ 460.500606][ T6715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.597989][ T6714] veth1_vlan: entered promiscuous mode [ 460.693484][ T6715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.861503][ T5982] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.889177][ T1030] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.006984][ T1030] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.045185][ T1030] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.459382][ T6714] veth0_macvtap: entered promiscuous mode [ 461.636716][ T6714] veth1_macvtap: entered promiscuous mode [ 461.990587][ T6714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.103161][ T6714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.407935][ T6080] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.495402][ T5982] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.620021][ T166] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.645136][ T166] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.065774][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.168950][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.403439][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.451777][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.818235][ T7212] mmap: syz.2.286 (7212) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 469.685821][ T5984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.704445][ T5984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.083821][ T5984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.145835][ T5984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.276125][ C0] ===================================================== [ 470.283336][ C0] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 470.292080][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 470.298475][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 470.305579][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 470.311653][ C0] sysvec_call_function_single+0x7c/0x90 [ 470.317434][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 470.323556][ C0] pv_native_safe_halt+0x13/0x20 [ 470.328631][ C0] default_idle+0xd/0x20 [ 470.333022][ C0] arch_cpu_idle+0xd/0x20 [ 470.337483][ C0] default_idle_call+0x3f/0x70 [ 470.342391][ C0] do_idle+0x6ad/0xa10 [ 470.346570][ C0] cpu_startup_entry+0x5f/0x80 [ 470.351457][ C0] rest_init+0x1df/0x260 [ 470.355843][ C0] start_kernel+0x6d1/0x8b0 [ 470.360509][ C0] x86_64_start_reservations+0x28/0x30 [ 470.366110][ C0] x86_64_start_kernel+0x139/0x140 [ 470.371351][ C0] common_startup_64+0x13e/0x147 [ 470.376451][ C0] [ 470.378826][ C0] Local variable reuse.i created at: [ 470.384164][ C0] mas_wr_store_entry+0x14bd/0x96d0 [ 470.389487][ C0] mas_store_prealloc+0x1834/0x1e60 [ 470.394812][ C0] [ 470.397224][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 470.406293][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 470.416455][ C0] ===================================================== [ 470.423455][ C0] Disabling lock debugging due to kernel taint [ 470.429698][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 470.436223][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G B syzkaller #0 PREEMPT(full) [ 470.446872][ C0] Tainted: [B]=BAD_PAGE [ 470.451094][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 470.461248][ C0] Call Trace: [ 470.464599][ C0] [ 470.467522][ C0] __dump_stack+0x26/0x30 [ 470.472000][ C0] dump_stack_lvl+0x50/0x1c0 [ 470.476730][ C0] ? dump_stack+0x12/0x25 [ 470.481209][ C0] dump_stack+0x1e/0x25 [ 470.485500][ C0] vpanic+0x7b4/0x1430 [ 470.489739][ C0] panic+0x15d/0x160 [ 470.493830][ C0] kmsan_report+0x31a/0x320 [ 470.498517][ C0] ? __msan_warning+0x1b/0x30 [ 470.503342][ C0] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 470.509913][ C0] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 470.517177][ C0] ? __sysvec_call_function_single+0x4b/0x3e0 [ 470.523408][ C0] ? sysvec_call_function_single+0x7c/0x90 [ 470.529359][ C0] ? asm_sysvec_call_function_single+0x1f/0x30 [ 470.535692][ C0] ? pv_native_safe_halt+0x13/0x20 [ 470.540953][ C0] ? default_idle+0xd/0x20 [ 470.545512][ C0] ? arch_cpu_idle+0xd/0x20 [ 470.550164][ C0] ? default_idle_call+0x3f/0x70 [ 470.555248][ C0] ? do_idle+0x6ad/0xa10 [ 470.559610][ C0] ? cpu_startup_entry+0x5f/0x80 [ 470.564684][ C0] ? rest_init+0x1df/0x260 [ 470.569247][ C0] ? start_kernel+0x6d1/0x8b0 [ 470.574085][ C0] ? x86_64_start_reservations+0x28/0x30 [ 470.579864][ C0] ? x86_64_start_kernel+0x139/0x140 [ 470.585290][ C0] ? common_startup_64+0x13e/0x147 [ 470.590575][ C0] ? native_apic_msr_write+0x15/0x70 [ 470.595995][ C0] ? lapic_next_event+0x22/0x50 [ 470.601009][ C0] ? __pfx_lapic_next_event+0x10/0x10 [ 470.606547][ C0] ? clockevents_program_event+0x58d/0xcb0 [ 470.612566][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 470.617859][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 470.623145][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 470.629660][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 470.634955][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 470.640949][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 470.646243][ C0] __msan_warning+0x1b/0x30 [ 470.650905][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 470.657302][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 470.662618][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 470.669718][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 470.675779][ C0] sysvec_call_function_single+0x7c/0x90 [ 470.681555][ C0] [ 470.684554][ C0] [ 470.687568][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 470.693711][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 470.699586][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 c7 1b 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 470.719338][ C0] RSP: 0018:ffffffff92803d78 EFLAGS: 00000256 [ 470.725555][ C0] RAX: ffff8881aa3cd000 RBX: ffffffff9282c980 RCX: 0000000000b3949e [ 470.733656][ C0] RDX: ffff88823ea86e48 RSI: 0000000000000001 RDI: 000000000004250c [ 470.741729][ C0] RBP: ffffffff92803d78 R08: ffffea000000000f R09: 0000000000000007 [ 470.749801][ C0] R10: ffff88823f18ddf7 R11: ffffffff8183e430 R12: 0000000000000000 [ 470.757877][ C0] R13: 0000000000000000 R14: ffffffff9282d548 R15: 0000000000000000 [ 470.765963][ C0] ? __pfx_read_tsc+0x10/0x10 [ 470.770795][ C0] default_idle+0xd/0x20 [ 470.775181][ C0] arch_cpu_idle+0xd/0x20 [ 470.779656][ C0] default_idle_call+0x3f/0x70 [ 470.784580][ C0] do_idle+0x6ad/0xa10 [ 470.788854][ C0] cpu_startup_entry+0x5f/0x80 [ 470.793779][ C0] rest_init+0x1df/0x260 [ 470.798188][ C0] start_kernel+0x6d1/0x8b0 [ 470.802880][ C0] x86_64_start_reservations+0x28/0x30 [ 470.808493][ C0] x86_64_start_kernel+0x139/0x140 [ 470.813763][ C0] common_startup_64+0x13e/0x147 [ 470.818903][ C0] [ 470.822426][ C0] Kernel Offset: disabled [ 470.826800][ C0] Rebooting in 86400 seconds..