last executing test programs: 10.274937315s ago: executing program 3 (id=181): rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="c6cfdab7e6f83fe5e44dd3a8d886a720a29cfb7e50ef99fcf38be6c3b9a9f8c9fdb7b1332c99b85247977ad2d66a577e6f0853366c7561476cb35cf07e6fc1c21d33853a21771a8835a50d941d35a4ccb511cb67ed64259c99811f0e6f176fba1e0fa45fefe030a588f0cf64895fb12a794fd0bd176a38440328d3c6c24c85f50e95c5190eb03fb04f1eb34cae287ed75c8ca8fab2c04dc1fafa14ef93e2a721a12238700dfdabd057e94e697534e1af81921756270313d22a185c146852a5e94300bc8de9904e8c6948d5d2aed05337b9572ee74b77209c6b4710e87fa6661b19283079a46f70a538d96f484b63171bdc3622fcbab6d9bafeaacd755923209c07b8c2f39c04ea713020bcd9e6f1120ea3fbc8dd0b55986c05aa0c0b13ad52f250e9505ba53a887ed7c857e0f56282d6dd5932930efe384bbb198c50aae4b9a65e6a6ccc2904a9121a28df865011c39a54fb0f890cc1f7ef5f5172754f1c2aa8e8acf8c754f22efa88ffea91f2a14133e0a7a8a06bc80d042ce1affa2ebc74b49b48169404b33c62915e54c554d10bc432ec988f7081a8690335d58d0a819d33296db1377af876d84fd557f9a2018ee91f7d39819fc72b0a9bbdd05d6efe6cc459cd42e16f955dcb1a6a2b8b2a71b3a7e1bfa82816abf8c7d3688d53decbc480eaa3821cef557290284d9c504a63768852e15b39841ef3648f14c7edab006a30c7bd518f300df6ff307c0740150dddfdab1e408edb96b2e6ed612b0bc2fca570fa1813d86160a766fe6c11cdbc7a67014fa7645b4b1d3aad378bcce27aa4725ecf7675b2682cc5a15673136e7181ed5ef122017dc72df65af147dcb9ac702f8a6a2eb3f6824ba7db3c32fa4bfbf63dcd45e42a49b6edee22856fc2a43aeb6a3eea91dbd53a231b559ca7b38564853be3bdee7f820966faa916ed4fd335159328f8b727ba068b0ade0e11c9f2c2af4d5244f5d49f9c9f94105a6fe4c71112bcacf9c3dd2861d06cb3fa6b2159bc2028e513298b594ca7da60f4ed30edd7b066c23ca7d9b7d9555b47e687b43b7b5ca3210d939e34dd3d176d8b3d3d2f32f28518aa8b5169362fee4a4ede7d3d218db0ecc3de14789344df20188d907093bbf621fe67ab2a1f29221b2ec334dadc15345fc829005f4f81fc13ad0f5590742295812a7f2108cbbbc37387a7d4174592bf4f94f272306942e6c44b23e96d92911ef416b4159e81b19f267aad20c2aabf7fd285330cbf4c1bb8ac86493e0ef84de88eb7953fcf833e6cc5ebdd50b706bcc148971d24e9d3736ed66e28f75e6a1e2c9a4e2abba887b27815d2f5739fe5f8afe7240841337bfe7a69308186180fed5736fe3cbc2892cb991d0f4400d66952459c54a16448f06fd49995aa65501631d5c42e2abd8f0d890a6bbe49b384bfe27599afd536493981be5f7dbb15bfbc198fcd8ebfca182c53156742e237df31c1dca495e40cf030623a8a081e3bec3b8e5109ba05c0830ef00ff98a4419bae14762d8e0a790c1d517f1f683bb1712a6a0951f024a46efb5c2122460495fa0f4ebaae86286b8a626be2052874f947f18b0c2860ce681a33d5f4217415363fe7a6f8fca125742f03433988d88a5b8e2bf4f3079eb990b6e1ff381b7199717fb885f4f37351bf18bedbeeca351b7bfca5b791b91be0dcf8d169914c449829669e0577d1ebc4fa783d57e0c695cafae201014831a16d8fec47f22d9b79c2acc820f4dba9d1a2986731681ed1f8dd1e83bc2d491302d2f769e6b0bc470404930cad6511492b3adadc6f5073220590d1ce89a520b6d51d6903dd54360cd7047aed76e0a6cd3c3625e67b7c1636fd627aa48f1ee6dd567730c6ec19d1634f62a77f70c64736532455f0d2ae85003e7bb32f06b480a9f7fba5e6917305fd77e38f6936e49c1a3b2a07e242ccc2f9d629d7992937a035574b3efefd515096e30058cb60cc89d8565205f15e71d805ba5d1c4f7b971918e32bd81611a574fc651bc8094f7f3aef8a3ebf95aef1c062ec66e288b1d1ee17ab75723bc46b031744a25cf055c1bc8b083313e38d0fd5d60e832ef28fbff4c93d2d2ed283575a486167c7158e08fe7094d23984bdf38cf6000db39c5d0f7db72325af909b18247d8fddd89eff8831c294d52194a11dae2339938a79ae903eb63bc6e5535796e1c0416cdad01e1493a3075930a0b3b50ad904ff760bec5c6406b10808bf13251df73b4d6fd149a378ac277ccbbfddd9536abdf5c7a8d29e128a290f0d56c9635540f4c9a3ff1d3e0e2b974b50497ebd690dc9393f8b3acfd1650627db8ab784233727f997dab536f1e993980a41f510fa0128d6bf2c8445ed1578b25a36e05f7170b9fbe8ca63e1b4a7235c27f56790c4dd38168ce26358d12b143e9dbae1d01406778250f1c77c80643016ffd4a7a6703b9c3dfa4e7b51fa1d59605d57c9712159eb34c306a988ac95eeb15c3225ccd022d2ccf5f31a81009d2a25891b83e60efe8f718d6c124202f108d23e5e6c89e269890bda8e5681315db361cdf30e4269f2cb530a188f26621a8b263f22bb385d779b3c4eebd16656451087457892e15074abb1c796f0b7f635b9496f3a17220716c449c11c0e82b67b8f1ee6a2709a20676f40f2751df3d74db503db6cb73c955ae1d6983da44de4d349004f3d9db4ba40124416a67bd18d1d9b3c1e4706ddbb2099a2ae16e99c144860d46ef66bc6844963c0563fe2cb8c4049dea32ce5656fbfec6d1aff7ef48bac92c932c9787d9e4cb0c78fc3d70f730c452c20d077b4d9ea304f1b8a2967b1e7af7f05fd35f84d633bf5095b1af53a506f6f61abc99186eba707843e9db2a18fc1c6c77dd79ab9353eaad6457245709acbe9cb381d4458eb5571fa4f4df069ae668b1df2c97f91271be5fc2040031c3980c7555af2d4186875ea4599c873ffaf47aa08c27a0580ceef6251dce4cfd6eb175a1bf36c1fd750826f4e14966e6f196b68da0a524baf86f49ce8c09430554b50a0b387c02ebd59fae9caa1054cba1304aa6732f3990ce6b7bca6b65237f0fc3c79a102e2989dcf3f884002f2efe83e25a3fb217c24c4f66e0973e7ca62483bb52c943ccfbf31324f2b7938de0555a54f47256c903ab65489906c382d7d1022f7f302b186d18b5775e042ba83b874793420a6d854aaec01e3c819d0b11b51558fb9c10b1e2ff96639fb119d90f80aa302c9a6420b4b1230d79fd1e8105259c4ebf9cc3f1eac67f15bcb9d49ae537084c96994ad08214ac07db663c1bbce6499b5665fb5a949ab3d65062467824a2065a9de2f1edc243e03ad38f0ef227519de50a3dc2e8f4a38538be5557c5de56d0110a0759fe96b0e66d20fcb6066995f77fba9c7468434a53892cf2b3f41d58e08bd2ea3b1da2a1178acf50249d77757353943cd126b511098230698782ca88d018381f233f4331d3980f72f30caf915a18794de1253734b89303f25826a80ddd75a9bdf14c6f01690833190872ca5431ab92ab3dca92595983b11de0076125059234720906641119dab9c96be9c10d60fb54267bda61fcb85a491df037cd563b229eea02cd192796d36803b04691d385471a5f68bb76afafe9df28f50dcabfefc8e2eb334bcace928b8eb8f6449116fb5a0fa4a0c51e21b8b1f99308d396db60418cb5385bdf6bce7227e514f6cbc9a9fc50b79e8b0530fd51b21679ea1c404dba52811b3c9487f670e622ac7b1ce8028eadbd882d4325663d8dc4f0960c047c5f3099c90c6256bc11e8eef6b325e0f1ed00279a695f2828762f28ecacdc726aedf42064727ec100ffa74d38d47f383946b9f856e53cb939f98df1bb5af2a12810a619f205e030a302628ffb9b2cfcc2e881e239f33844a118a4de2a5c3d6b857c5105db775a61c5d54d1d82048670e8cd2c44a032904005125eb9f999e845efba3a063e3e26b06298f28799975b51118eece2b7fec02d4b888bfb90919bec287aba71296c66dcf749efa3abcddfccee6ef80d03a1638045f18fb96131cbd9a93e657c29eb74de40f433969e1988ac335bdd9c671b5b75ce6e2440be247775f9d597b4d8523c283e774ed0987e10b88e0c5616720502149db329babc91b225359927f88e0b42f02d41a4c9e0ad7c55a0d2c52cf45da6152c0c742f661b562c3a8ecff1145cac3f63fc053e1a14fe7a57742ab709581604fabe54ff13172b5049434d12f6ed9623265af643f725efea21e2ac1b82365033b9cff4158318f40c8894d2bcffdc954fcf7068c97ca2d2b1bf19b9232b918864e3f63fd59f4c8c578821ec5083e46363d9158451c5a92b425e68081b2c7572df44658a4aae41a439c6bb4bdd2f26ff2a357fa2946e5be5cd97ba25f73bbcc6c05fa966d0aa0cf2e45f22e0021468b37d5afebbfba3233e2cd4fd64e1578be72c38891224cd6c70c4cfd146df6a8142f1493772d48650f8fcbd1435ff704e02ec121e9f43de623eff8070f88a623cd395a02b6b1ffe4ea7ae7f443dc8bdac2cfaa126d4ac9d7788dc972c88fd87d3c8758853f1882532e4ff298b466e7d198daa9015127f2937544b34aaf545f39ee00d74e0e1017a30ff2edff701d53f3a13fc61b31fe7d9032a6c4a517c7527e48c0c44a2beebc9a9f9e6f989bc6c255e05bec5ff99547658143d9eb43a1d96aa5288638b4477aa1f84c59d41194335c09d9d5d660640acb84b53520482fb200ca616e1a6f486e6da3e6721479e85d0676ba142d95ecdf1acc76a49e9bf016f951d8b95adc7e8d4317ddbb28b678135a4a9b98fb8b8b5948b682ee70e04a31f7e3c49c52a11acbb29bd8152bbb4fedd2aae8e7ad5330365213d207677855e6cd72bf93502c14b11bd2f2d6e797efc2cc5bc198730e5cc51c92751ece5c167b3328a6deed4bd73c62623bb3874c9ef18e24997e3ac93b0ad9ca7ddd4c0401ec1b942cb21dfe6abfd3aefe2588ac1684bf6b37dc09d9b9d932d5534c707ef8fe0812a403e057d00955559ca3e0f7e70d3cdfab918b8d125061fd53374c97bd0c9d19e68bacb3db46974d36cb1c96b4475acaf4d46b88a578ed570ce09eb540f30cce4c3f853a9fd669ca36c36ff1f0432713f60e6d6bc789fdae7c7fcf4049e6166b63a12aaa3da6fc35d8783020ceb92f7f90082d4826735618905fc9fdbeb65990882ce130a7e5ebfcdc796ef293019925e80af5074bfed5f62833d9d98e324dd54e30e1d69a15e4beed5da9c6ec01a32978aa29cd26c5703a28e504e7c9264e0421718422b88ef90f6fb4e51c619f29b5fc2f600f88be036eaf28d7f5433715bd493ce55811901a59964f20ac0b06dc3a555eac123c40d3b397053501523a51e8b53a92bbd99ec3bdcd57904cfac3c0d7bcc6613b11a771d32f0f6c60c05449b42820c0a41f757ea1efebebb37f8ea567b2f7dcc4a67ebbdc00716a70f5fe255b9232e27ba05888e034fc50ac0934a43c84577183b83019008edbeb27546e8be7d8402a4c1852198c0e050b96129fd66247c39abff19338300fc3cbe20a395e5805d8bc64c2d87ba27264716e211ab023765e8d454b637aa1320cb18eb4a3dbfa94027a4d75a9a2cc784cbdc22694a8f7e97bd6cea5a4e26b538be9a9dde5637be2d386a85a79ed4df541ab7d0b1370d99d2cfd1f7bf1458bedd0a53f5e6972ee424ed08acb4b49db83cae427d315d1fea4e680258e73b3fc50fdb77692c8798bcda57ac0c34823d69a8ead14c41e9613813838ef80f63138cc9ba3a6b83dfc77b6aa1248678409bd96b64c0b625e88e33262fa0bbee94fec8f3bffedaf8b12d229d0f637848a1dba01892d80f5a5596d37ac1c9c54d32dec3ca56b49aa1157583074af418d0d95a5a46fc3c234814e377963dd4c9c8a5f7cc35aacc892afb9bcede477760688e06f0b2c5a702954f4532c715151eda02f78830129b2612de8fc62fb992d1ba52da164920eb1d1dbc7d1f8f16e31c763581f4c478cf7a84cf01ca904160475a1eabae393bcb852fd550374002bad1ba0827dadcf3f6a2354a3f8f67e6da4f567fe21f55cc34840e79f6af947561c79a141721f6da4625a20fb203f96bd1a3b7322a14a0ab4a38835e1f235f772a18643824cbb9f76664b1212c785055ae17e89f590fdb1b81535e1e3e8a726a9aaf67ae2a8e67eab8f32781bc21027cb1babd932d63bafe7faf48bc57820c5e32288583db4cf369a7fbb479e1e97ca67f63b1880fb33ccf2661d7af9041ea1afc0e90ee0b4b510d094268e4576584a17fcb21b3c3f68bf1e1c4748177cb4cab92df4c254e0d0759d507e5eb096861efcf1aa66805474e3bd32f7055a7d53d47f416d24a5ac7d5fc953206db3a012234d8693e0ff662457ddaf977eaf37d043c407a7ade1fa8eaf85b6e1b1456aec3064ee858742f4e22f2d6084e3881a4783b3a9086009202eb6eb77fc1ce2236d6384cbc62c7db9cecd2fdb06f328d49c066562cf1dee863d33b48288fbb1d4d5bcafcd1b6391879e670c7189bbebafe48214d6e2b405e36192e1067eb8d0363777a174e630467673ca968ea51476b0b8a04d598f6fc593d3f3267ab37e17831dab86a67aac3ec8336c5b6e9e416b1f46d0a9e8ec6c515d86e773baa409e2afae30ea1744f2bc777af11c42f2bf6177e95245c6d601f7cb7b589ccda76a2a314dab023da8128c667a0df682f5c7bbf842a2bb51d4d842cd09d02d67444e5d8ae1f3260c4ef2da5a1c4121fdd47e953d03ff6fea10e35db2c0c110704f513b9d1c57c9da80881ced16d92faf1be60471dc4d82529ea50fd6060be18e8e6deffb15e0a0df4e36117dc22d78bd43b3fedb24cba54c2f2e3bba015bc4c817f70fc1e8b21adb04a9d8c229e9ec178fee0f35d4f169bb7dadd14f46ddc13fc62da4e21e42270a4ed0d60b4034db31ee1e13c97d8d941b2627b255d4283cf0af9044a65765ba88dcb2010fae98a6aeb0a5605d8a904d1cfa0cf8fa67a9d29670a108f014a1b21862e20d4f0f3f0cb99c97f289c657dbd08237aba2f616804ebb0e71819fa46df1a018d8336b534391596cd24b0720dd8a95e5c74b9d047da1da93d653b2aa98e67a65c3868a0c464ad24d427c3c81b41f0b2fb78f6aecd5487c29f4fd871bec21f54d22b661eeed67c866cdf057d585beace568ed52a4399dfdcc8c9a80c94f3cb92f0974b9b33ed893e8db33cf95220e03f3d28edd8b80991b0754010e7252392d1e846011defb6c46c73ee015bcb9b288f6945771af90ddd8c548eb6649efff32b0a2b36e743e46135e47fc65d1eb3f7a580104c22bbcc75ec041813cf2496a4793d17112f40333e3c874e0bcbcd889a6bb484e43632b2f9a628a461a2a5d58808b848751642b5c426c50fd82398894dc78c56ed1f0358b626cde2a0167dcb210c8ae2f6d9c95356331cf2a21ed0dfd5165bcac2681ce070f60ffffe69dd75836c4be0aa7f8630bf345a32d246c838552cbb35a6dfdb6ea54c4ecf0ad16990901b7a72280872fc807eda1de4fdce2c223fd089e0f0eac84c1e2980b9b5a032dd1294bd2eb49372f55b9b4cf4d3c1b14050bec1344d71a8316e173bd36f5917100de4dfedfff896517a04468006e5c632c8ad15521324f3abd72545b47df874a4a95d3bb30915ebcc3ed371528f89c7e943286a8cf4ff2cca3f3496ded16b139658bd5d3323ae9007b4dab665cd24e7888735de2cce7bc1b3af39a6d92d787dd237f8d72283f7aab1d99985f3783e5cb0661cadb552293f189f75e7f3fa933c775a27415a3ad22239986364ba7a582f2d9c31e7247aa8d44d5a7e8169fec65daaf62756b34dd307ebc7fbe8a8023aac1553fbf15b48a8ee3bd0c35c7ced684f667500ab2997aa75382475eb35888e72b30ad5aad3910c5ead6797f4182adce92dafc2073f1529ff5f1a42daf3c78e499039864e8e768fb11b33c0d7779e6128579d882761f9b21fcc0696da03eeb049c90b86da8dba548058f0caddb83ec9051a04f3133341e9a17a17b72ac20cd9e242fb383365f6a2f5c795087c7ee682555adadb7305bfe2886a57f3718f30f24b52d481aa35eb2c40417df5ea9d8af1b7b871ce37fb1c84402d269e3a01a5c9a00d3c7d6ff21c90d437066850ea92773288ba925294f9368b74fd1f3c4512ae8be2f86b73641507480f3db07634df10fca86bb4431664ade710d5a8894c368660c95f7a0b8ce5ffcdae136b5c8b4ed8c3b4cd9b71079dfd6d1501df9b7f1477b516f3cceecb2def619c05061502b253af7e3deccc839de56292c95a3912e809b100897a85705cf59af66e194143d13c12b6dc1a31cd15a74fe57666931e3fd6b75512d22f063c68576b1bd6a1ab6d7f4065447daee300b7d4fe330daeda866beb44eb8ed4041d0a36bfa49871e0623eb6f5d7b967e8f969985063e2fc4f4097c2a5189b10c1776713f78193c6e0e847025936b36eaa2e817ebb45c375f18350247f6586214a200f2f17536b52b8fa196d4a6a77317807075d130a77badf745a6076b1241e47942501cba893fd0db02545e49f559e9712a60ffce9f3154459c69984de49e11192266196497c81b7c5b45997c1369c8e8490b1a748985fd4c9ab8929d17a51c331dc160c8ae8d2961351ef103e3427299e4f28faff6ac1905be2814cb02511472c7232bd104ac438d846b4a727df2ed24364e061f157c2447e7d5265b1cd75797603e220a9d2e280868f3c2c56befbc6b1b1a07be1070b293adf324b3aee5140ef5f643c952726d9b770989b07f2cdea2e1d6951027e8b386faccff07b2547dd78aa85cc113b599ab168ef602e40fc097396341a8e5b97b59032110ddf114129feaed96e85237bb4bb886b287279b96234c18947ce7d2d5e92dd5c68829edd271bfccff21b87f6a061c9b43b51252add291c8f59be1a222d00fb7719664a8b89c452e78cf1d491a036107f0a521545fd96d2548735847e278065c196153028b91f59c7b70f9883f14cfb3343bb230f4af9bd51132cc62ee5459e34e77bb2983d30e65e65ab769fa0a0578bed01f33c76f4138208659a97fbbf380f1321336c14d21012f3cc4ee2101d42321f0123d51377e319e4ff4551f7f83ca62ff9448a28b6134da582f609be7dea5d70370772ef2552f12e97cf390ee2697022168d622ae0c813d86a43c25c758162ab0aadf25c84c790fb32a459997068be01325e473871cb024ff030070434d197558b8df442e1d2ad0c7b33fe021fa6cd57b7477dd76c6a802ddf405e909d48d23321e986d791b44d32d417d63638246fcdd661e6a1453d1411ec85fa0b750354aecdd4f4b90a420d2d4f67c514f15a8fe590735f660dc5eaa7f2873c7841edaf2c0d46a92fc07c6cd22fc978f74bac72e468d96ba370fb88f9a629d4de0a8a83d43c1949aae33fe24859c1bbf8663adc6936e305cf9c56aacc84e7515caf18d0d049bec2f0a484b75a8c2c23abbca66b039a52e606f08df0a3cdd2dc6449e84ce463206d2878de0e4d0f438764a0fe360e95494e9e61581001785b081254971197024460a68ec029052f2d8841dac7e714798027696067e739cd1525df28ac9514c02e25f8ea1146e356fc5941e4661cd244dccee4a1450e4334a20cb572b842d44a8431abf4d5bb82ac6b78ce3c6d394e5969c6fe8216805f6e2db2889f27849e0dd26a5a387958a36c833a8b3d861033c00ffef267e4b09350ca1b819d5c83025e4ad69328970db92520e6ce569d5632caeb6dc42c8f6f8759256ad9c1ffe8c30a92b795bf00544714c957d5d982a4e91ec7a30dfdcacbd41ceb61f208e5442f7f7ce19ba2f0dddf50020ed1c271afe5007277e2496c3bc7f3101d6fa7f0ea2627a99de0c441a11c6afbb721037dcfc897fc5d9e0ed644b9c3aee328bc2beb3801d2bf43b1e360759c1056c74a63aa33cb6e5933b7a0b4f654113ea5830de7e8374e939e4c794be77f1f0c1e1bcedc8f584a56db0c38b6c8da60bad62b41d754d9b6cbf3379374a6126db0ef1ee2da5862acaf117408ad26c66ec8ee4f9f1844fb4cc64bc61212b303c7c622f05d29b7fd540bdc253bc948d373886e5cd4dc9bc1b551dfc514f12cc64ecc3b276ab43a4adc2142fea9c5ecf983b0841729d1771b51c2ff787ac2439f305ca3fe31cdbe24f034fcd3d41141cc0ed5cdd82e3171be1381ad4f0bf81b3be200524c98cad5a3dee3ee618c97d0678c7b4fbf729dbc2baaa2385fb63e6b906b08681c19d55200924c0edb4c3b48463fd9c2ac86510ce1e0a641def11e9e7b7fa74a629895221b06a15c995cafe55dee6c06e01b34f4f18e5ffeb76ffb412277bdfa4cee10823a1e55832c3d1d19ba5b84560668b33fafc672cfba1a85c60c61c45bd562506d9d28542c4b4795ed011a8005862f7add9dc2533dd29d0ddd534eb0a3b537b391c423b527b3ae4ce0c829a6efcf8671e9e5224df6ed6c1f20452cb46cd578a620788f9af325d45825ced3043ef3693ffebf7b881518ba2c71587251edf150772ae1e24f4415f9d9307151b8fbcb83d0da908f4b6c762b777dc406991353e962f181bc06e892ff9e49e557639dafd09b291f79720b866e46bcf14d5bd1ed15a468a8996ecec8ce3d9890fb45c96804dddfe5b7280c0e30934f129e14b344506f70d484eea40baac63b89dc71b030a6c8149ffca2434c773bffe76bbf2e778f0034666970a96bf336ee5240e765ea3715382bd8fe19c5ce5a8814717d87d4d6304a3b0d6581a6fed44975ef8a8186c19a513f5c6c0610acbd31fd58e2cb683162464cf7f50ade879461ee91f433b09d1febe058c101a0ff96cbffd547c2beab15ca343cfe592ea435f980ff03e0aeadcc80d64383d287997a6a937fc22221cec2a1aa6e8dfc1dc6e0f2e02060a18c09957376a72e165728acddf73873a958f43bcd2e9c6c71a83f744bf14c75f5e8308523a7d39bcbfd832c6597b2928b07630ae50540bb71b44b5b4040a1d172fabe8dbfb96a99e7498b12dcc8ed9e43fb36c202d019b4fbe11f715f5de76bede175c22d8355323eb004c5021d892fbe48fa7b6bf382eb03d0e447a38c63bb7fa1154c2cdf08a1cf5fa95ec75a5aa9037ebf8916cb78e6da650016a0c7ed34290e25e2122be24e4373c49c4fc81c39ec1a1ce4b658e1b80562bf911a1f6a5fc2e69d2554d4abf5ad79d9c9b7d9ac8c4122c11f590a35dcee3fbe185027832b4e2a71ebc591a60bb874b36b415b455bd942fe1a69a92b70ce1a1c867c85138449529cab5f63feab609a2ba3344191c416d8409b59962bcee1c4a40874069e28432fcade20f07c9259dec75fb978a6b84b6e8f50fdb341c7c19f55a8fa389cf085f44661c9618d56d32be0bdb3b2928fc2c372e86ea109afaee022bb832e80e869c7cb1053921b862b27599d3665f7fabfd6436743ea893ec43e4e4daa598127df8ee3249be4668d717117a038f0e734a894457df4c64dd76a9d9d42efc29f2311085c9e6fcef385f40af94f283edca078797e96b79719875aed3900252c3acc6a92e23083b3fa24057d9ebf7886df99d652e7d18cbd445560a0afc81bf7c011777837f94b32094fa1bc99472cc2a40bff245abb27d3f628b1b649fd", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50, 0x0, 0x100000000, {0x7, 0x2d, 0x0, 0x0, 0x0, 0xfff7, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008140)="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", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x802154}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa24, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000400)={0x0, 0x20fb87, 0x0, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2050, 0x20, 0x10001006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40000, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88e1, 0x8000, 0x2, 0x239}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x4, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 9.946445078s ago: executing program 1 (id=183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 8.709730742s ago: executing program 3 (id=184): unshare(0x2000100) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x100003b) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)="91", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x7fff}}, 0x7, 0x1, 0x0, 0x3, 0xb4, 0x83, 0x9}, 0x9c) write$tun(r1, &(0x7f0000000540)=ANY=[], 0xfffd) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000e", 0x46}], 0x1) 8.641969s ago: executing program 1 (id=185): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000ac0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x7f00, @in={0x2, 0x4e23, @empty}}}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/156, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) socket$netlink(0x10, 0x3, 0xb) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x1000000000000007}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 7.015370623s ago: executing program 1 (id=186): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000010c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001240), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000012c0)={'rti802\x00', [0x100, 0x4, 0x13600, 0x4, 0x0, 0x10005, 0x79, 0x0, 0x80008, 0x8, 0x2, 0x64, 0x5, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0x6, 0xca9f, 0x9, 0x20001e58, 0x3, 0xf39e, 0x7ff, 0x1539b804, 0x7, 0x801, 0x2]}) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000001500)={0x0, 0xfffffffffffffe26, &(0x7f0000001540)={&(0x7f0000001580)={0x2c, r4, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) r7 = openat$md_node(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r7, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$RUN_ARRAY(r7, 0x400c0930, &(0x7f0000000380)) 6.842307701s ago: executing program 0 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000e00)={0x1, 0x0, [{0xb, 0x3ff, 0x6, 0xd4, 0x40000, 0x4, 0x74d25d9d}]}) 6.55508646s ago: executing program 3 (id=189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x1, 0x4, 0xa, 0x1000, 0x0, 0xffffffffffffffff, 0x6b}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000084000000080000001410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.952348031s ago: executing program 1 (id=190): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000010c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001240), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000012c0)={'rti802\x00', [0x100, 0x4, 0x13600, 0x4, 0x0, 0x10005, 0x79, 0x0, 0x80008, 0x8, 0x2, 0x64, 0x5, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0x6, 0xca9f, 0x9, 0x20001e58, 0x3, 0xf39e, 0x7ff, 0x1539b804, 0x7, 0x801, 0x2]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000001500)={0x0, 0xfffffffffffffe26, &(0x7f0000001540)={&(0x7f0000001580)={0x2c, r4, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) r7 = openat$md_node(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r7, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$RUN_ARRAY(r7, 0x400c0930, &(0x7f0000000380)) 4.754085401s ago: executing program 1 (id=191): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101602, 0x0) fallocate(r0, 0x1, 0x0, 0x140000804000004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f0000000400)="$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") openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x6) r3 = socket(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x9a, 0x9, 0x4, 0x70000, 0x1, {r4, r5/1000+10000}, {0x5, 0x1, 0x5, 0x81, 0x26, 0x0, "1f76cbaa"}, 0x7ff, 0x4, {}, 0x5, 0x0, r3}) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000a80)={0x0, 0x1ff, 0xffff}, 0xc) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000ac0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000b00)={0x3}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0) 4.655841781s ago: executing program 3 (id=192): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x64042, 0x49) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x6549bfc8e202b0dd, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 4.56306979s ago: executing program 0 (id=194): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000ac0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x7f00, @in={0x2, 0x4e23, @empty}}}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/156, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) socket$netlink(0x10, 0x3, 0xb) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x1000000000000007}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 4.059760971s ago: executing program 3 (id=196): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz1\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0xa5b0e763, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x487, 0xd6, 0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1000, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x400, 0x27, 0x0, 0x3], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0xffffffff, 0xffffffff, 0x0, 0xfffffffb, 0x806, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, 0x4d1, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000680)=""/102392, 0x18ff8) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.545529043s ago: executing program 0 (id=197): unshare(0x2000100) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x100003b) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)="91", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x7fff}}, 0x7, 0x1, 0x0, 0x3, 0xb4, 0x83, 0x9}, 0x9c) write$tun(r1, &(0x7f0000000540)=ANY=[], 0xfffd) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000e", 0x46}], 0x1) 3.535193214s ago: executing program 2 (id=198): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000002340)='asymmetric\x00', &(0x7f0000002380)=@secondary) add_key(0x0, 0x0, 0x0, 0x0, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000002500)='asymmetric\x00', 0x0, &(0x7f0000002540)="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", 0x559, r0) 2.443294044s ago: executing program 3 (id=199): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002900), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002940)={0x8, 0x100008b}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002980)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) ptrace$getregset(0x4204, r0, 0x3, &(0x7f0000000600)={&(0x7f00000004c0)=""/173, 0xad}) syz_open_dev$sndmidi(&(0x7f00000029c0), 0x2, 0x143102) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x800}}], 0x1, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000340)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000005c0)={'\x00', {0x2, 0x0, @dev}}) sendmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x60}}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f80000001800100025bd7000ffdbdf25e00000020000003cf82e49000000000000000000008000000000ffffe00000024e230b064e2300040000e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000004d233000000ffffffff0000000000000000000000000004000000000000020000000000000007000000000000000400000000000000040000000000000000000000000000003c0a00000000000000000000000000800f0000000000000003000000000000000400000000000000feffffffffffffff0a000000060000000500000028bd7000000000000200000100000000000000000900000000000000"], 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000009d00)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000009d40)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 2.277818891s ago: executing program 2 (id=200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x1, 0x4, 0xa, 0x1000, 0x0, 0xffffffffffffffff, 0x6b}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000084000000080000001410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.276326661s ago: executing program 0 (id=201): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000010c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001240), 0x10106, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000001500)={0x0, 0xfffffffffffffe26, &(0x7f0000001540)={&(0x7f0000001580)={0x2c, r4, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) r7 = openat$md_node(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r7, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$RUN_ARRAY(r7, 0x400c0930, &(0x7f0000000380)) 2.146128204s ago: executing program 2 (id=202): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x9, 0x0, &(0x7f00000000c0)) clock_gettime(0x7, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x1ffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1df) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uac2.0/p_chmask\x00', 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) write(r3, &(0x7f00000005c0)='0', 0x1) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='dummy_udc.0', 0xb) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 1.282671941s ago: executing program 0 (id=203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.266740203s ago: executing program 2 (id=204): syz_open_dev$ptys(0xc, 0x3, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f00000006c0)=[@increfs, @increfs={0x40046304, 0x3}]}) 1.010017028s ago: executing program 0 (id=205): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000041800001801000020696c2500000000002020207b1ad8ff000000007ba1000000000000070100000400ffffb702000008"], &(0x7f0000000400)='GPL\x00', 0x6, 0xffa, &(0x7f00000007c0)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000000040)={0x0, 0x4000, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002800)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002880)=[{0x0}, {&(0x7f0000002980)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0x98}], 0x2}, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f00000005c0)={0x40040, 0xd2, 0xf}, 0x18) unshare(0x26020480) unlink(&(0x7f0000000600)='./file0\x00') execveat(r4, &(0x7f0000000640)='\x00', 0x0, 0x0, 0x1000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_proto_private(r9, 0x89ed, &(0x7f0000000180)="1bae5641aa7855defe49d88fe94611af518914c9ed32158c9b198ae05ee6d2ea984d92eafdecd91d078ce632a7f1515ac4537ccee9da4bf4a465003ee8b8add7a36e30b505956172cd144c68b60c93af76a79d8bc001934239242abd23d4f31fa43925222f7d") 959.549554ms ago: executing program 1 (id=206): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000ac0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x7f00, @in={0x2, 0x4e23, @empty}}}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/156, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) socket$netlink(0x10, 0x3, 0xb) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x1000000000000007}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 151.671815ms ago: executing program 2 (id=207): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='pagemap\x00') pread64(r0, &(0x7f0000000580)=""/102400, 0x19000, 0x1000000000) 0s ago: executing program 2 (id=208): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. syzkaller login: [ 69.422735][ T5772] cgroup: Unknown subsys name 'net' [ 69.552006][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.921093][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.488857][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.495357][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.528094][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.528397][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.536376][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.545152][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.556888][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.558911][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.564970][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.572169][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.578990][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.586982][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.599383][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.606964][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.627632][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.629160][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.643723][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.646151][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.651358][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.662621][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.666177][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.676567][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.686061][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.694689][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.706177][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.722099][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.768343][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 72.774255][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 72.775091][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.804083][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.812817][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 72.818356][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 72.824775][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 72.835316][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.850718][ T5783] (null): rxe_set_mtu: Set mtu to 1024 [ 72.857275][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 73.077467][ T5785] infiniband rxe0: set active [ 73.082428][ T5785] infiniband rxe0: added rxe_eth0 [ 73.091249][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.144186][ T5785] RDS/IB: rxe0: added [ 73.166712][ T5785] smc: adding ib device rxe0 with port count 1 [ 73.173105][ T5785] smc: ib device rxe0 port 1 has pnetid [ 73.216298][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.231128][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.405869][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 73.481396][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 73.575877][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 73.590678][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.774591][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.799854][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.807816][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.815049][ T5786] bridge_slave_0: entered allmulticast mode [ 73.823096][ T5786] bridge_slave_0: entered promiscuous mode [ 73.840713][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.878570][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.895705][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.902929][ T5786] bridge_slave_1: entered allmulticast mode [ 73.913742][ T5786] bridge_slave_1: entered promiscuous mode [ 73.952824][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.960057][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.970833][ T5784] bridge_slave_0: entered allmulticast mode [ 73.978195][ T5784] bridge_slave_0: entered promiscuous mode [ 74.025514][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.032792][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.045915][ T5784] bridge_slave_1: entered allmulticast mode [ 74.053494][ T5784] bridge_slave_1: entered promiscuous mode [ 74.064439][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.073408][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.081300][ T5783] bridge_slave_0: entered allmulticast mode [ 74.090422][ T5783] bridge_slave_0: entered promiscuous mode [ 74.099099][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.106629][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.114072][ T5783] bridge_slave_1: entered allmulticast mode [ 74.126519][ T5783] bridge_slave_1: entered promiscuous mode [ 74.137656][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.149725][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.247684][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.260487][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.278844][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.309596][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.335010][ T5786] team0: Port device team_slave_0 added [ 74.412479][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.463953][ T5786] team0: Port device team_slave_1 added [ 74.473350][ T5784] team0: Port device team_slave_0 added [ 74.499371][ T5783] team0: Port device team_slave_0 added [ 74.522238][ T5784] team0: Port device team_slave_1 added [ 74.554435][ T5783] team0: Port device team_slave_1 added [ 74.577164][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.584116][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.610181][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.644507][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.652524][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.678702][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.696918][ T5792] Bluetooth: hci2: command tx timeout [ 74.706498][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.713450][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.739513][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.751519][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.758827][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.784833][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.785871][ T5792] Bluetooth: hci3: command tx timeout [ 74.795438][ T5788] Bluetooth: hci0: command tx timeout [ 74.801235][ T5096] Bluetooth: hci1: command tx timeout [ 74.809946][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.819406][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.845422][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.859008][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.866332][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.892618][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.983952][ T5784] hsr_slave_0: entered promiscuous mode [ 74.990221][ T5784] hsr_slave_1: entered promiscuous mode [ 75.011657][ T5446] infiniband rxe0: set active [ 75.045722][ T5783] hsr_slave_0: entered promiscuous mode [ 75.052324][ T5783] hsr_slave_1: entered promiscuous mode [ 75.065816][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.073669][ T5783] Cannot create hsr debugfs directory [ 75.088720][ T5111] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.100207][ T5786] hsr_slave_0: entered promiscuous mode [ 75.107240][ T5786] hsr_slave_1: entered promiscuous mode [ 75.113364][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.121719][ T5786] Cannot create hsr debugfs directory [ 75.390291][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 75.535906][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.560546][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.586756][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.609083][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.616359][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.623512][ T5785] bridge_slave_0: entered allmulticast mode [ 75.630818][ T5785] bridge_slave_0: entered promiscuous mode [ 75.638036][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.655490][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.662887][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.670777][ T5785] bridge_slave_1: entered allmulticast mode [ 75.678118][ T5785] bridge_slave_1: entered promiscuous mode [ 75.737316][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.753456][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.772782][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.792703][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.802430][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.813179][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.824664][ T5785] team0: Port device team_slave_0 added [ 75.833701][ T5785] team0: Port device team_slave_1 added [ 75.872837][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.880239][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.909392][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.931827][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.938880][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.966811][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.033412][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.067666][ T5785] hsr_slave_0: entered promiscuous mode [ 76.073830][ T5785] hsr_slave_1: entered promiscuous mode [ 76.080667][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.088537][ T5785] Cannot create hsr debugfs directory [ 76.094101][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.111629][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.123391][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.288229][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.350316][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.360253][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.370323][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.401947][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.421103][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.434598][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.496805][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.504109][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.514099][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.521208][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.553222][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.590967][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.598159][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.639669][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.646836][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.697431][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.721920][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.760036][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.776662][ T5792] Bluetooth: hci2: command tx timeout [ 76.795030][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.824862][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.832091][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.848402][ T5792] Bluetooth: hci0: command tx timeout [ 76.853847][ T5792] Bluetooth: hci3: command tx timeout [ 76.859849][ T5096] Bluetooth: hci1: command tx timeout [ 76.869577][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.876730][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.903282][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.910477][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.925609][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.932762][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.103146][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.212489][ T5784] veth0_vlan: entered promiscuous mode [ 77.252595][ T5784] veth1_vlan: entered promiscuous mode [ 77.342147][ T5784] veth0_macvtap: entered promiscuous mode [ 77.369802][ T5784] veth1_macvtap: entered promiscuous mode [ 77.382893][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.419980][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.453285][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.494305][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.503913][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.514734][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.524541][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.573384][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.613807][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.629945][ T5786] veth0_vlan: entered promiscuous mode [ 77.666316][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.679862][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.681138][ T5786] veth1_vlan: entered promiscuous mode [ 77.761602][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.776337][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.798500][ T5786] veth0_macvtap: entered promiscuous mode [ 77.828130][ T5786] veth1_macvtap: entered promiscuous mode [ 77.838012][ T5785] veth0_vlan: entered promiscuous mode [ 77.848662][ T5783] veth0_vlan: entered promiscuous mode [ 77.872213][ T5785] veth1_vlan: entered promiscuous mode [ 77.889567][ T5783] veth1_vlan: entered promiscuous mode [ 77.907668][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.921032][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.933321][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.947851][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.958581][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.971676][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.999821][ T5784] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.022484][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.032723][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.042175][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.052028][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.079744][ T5783] veth0_macvtap: entered promiscuous mode [ 78.105117][ T5783] veth1_macvtap: entered promiscuous mode [ 78.138457][ T5785] veth0_macvtap: entered promiscuous mode [ 78.174370][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.197992][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.213748][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.224584][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.240191][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.252831][ T5785] veth1_macvtap: entered promiscuous mode [ 78.282264][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.302903][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.359999][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.383107][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.452926][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.573042][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.603257][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.628789][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.661763][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.845765][ T5792] Bluetooth: hci2: command tx timeout [ 78.925934][ T5792] Bluetooth: hci0: command tx timeout [ 78.935755][ T5096] Bluetooth: hci3: command tx timeout [ 78.935941][ T5788] Bluetooth: hci1: command tx timeout [ 79.226105][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.236879][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.248438][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.259210][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.271490][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.282052][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.297358][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.329636][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.370719][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.380672][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.391909][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.405110][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.420767][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.432687][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.474714][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.493064][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.571150][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.593674][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.605143][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.613952][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.659124][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.672576][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.800322][ T5892] Bluetooth: MGMT ver 1.22 [ 79.810383][ T5892] syz.1.6[5892]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.879244][ T5892] loop1: detected capacity change from 0 to 1024 [ 79.895237][ T5892] ======================================================= [ 79.895237][ T5892] WARNING: The mand mount option has been deprecated and [ 79.895237][ T5892] and is ignored by this kernel. Remove the mand [ 79.895237][ T5892] option from the mount to silence this warning. [ 79.895237][ T5892] ======================================================= [ 80.373607][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.406893][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.422788][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.430727][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.463119][ T5895] loop1: detected capacity change from 0 to 128 [ 80.534036][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.542671][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.700851][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.743628][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.794459][ T5897] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5784] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5897] [ 80.926367][ T5788] Bluetooth: hci2: command tx timeout [ 81.036328][ T5788] Bluetooth: hci0: command tx timeout [ 81.036528][ T5792] Bluetooth: hci3: command tx timeout [ 81.041871][ T5788] Bluetooth: hci1: command tx timeout [ 81.081794][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.964729][ T5914] loop1: detected capacity change from 0 to 128 [ 82.309166][ T5920] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5784] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5920] [ 83.074639][ T5929] loop3: detected capacity change from 0 to 8 [ 83.449617][ T5931] SQUASHFS error: Failed to read block 0x4de: -5 [ 83.460918][ T5931] SQUASHFS error: Failed to read block 0x4de: -5 [ 83.545574][ T27] audit: type=1800 audit(1794134850.668:2): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 84.103847][ T5935] loop2: detected capacity change from 0 to 128 [ 84.510759][ T5939] loop1: detected capacity change from 0 to 1024 [ 85.498203][ T5945] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5786] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5945] [ 85.593648][ T5938] loop3: detected capacity change from 0 to 32768 [ 85.608792][ T5944] loop1: detected capacity change from 0 to 128 [ 85.715248][ T5938] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.14 (5938) [ 86.020805][ T5946] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5784] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5946] [ 86.025862][ T5938] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.077867][ T5938] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 86.104255][ T5938] BTRFS info (device loop3): using free space tree [ 86.167114][ T5938] BTRFS info (device loop3): enabling ssd optimizations [ 86.174112][ T5938] BTRFS info (device loop3): auto enabling async discard [ 86.436083][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.922534][ T56] cfg80211: failed to load regulatory.db [ 88.015895][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 88.146520][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.157775][ T42] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.168771][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.202104][ T42] usb 1-1: config 0 descriptor?? [ 88.343758][ T5785] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.452998][ T42] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 89.039274][ T8] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.143548][ T8] usb 1-1: USB disconnect, device number 2 [ 89.353587][ T6006] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.601323][ T6018] loop2: detected capacity change from 0 to 128 [ 89.727776][ T6009] block device autoloading is deprecated and will be removed. [ 89.934427][ T6024] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5786] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6024] [ 90.536277][ T6027] loop0: detected capacity change from 0 to 128 [ 90.551283][ T5877] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 90.816213][ T6033] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5783] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6033] [ 90.868332][ T5877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.878661][ T5877] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 90.894666][ T5877] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 90.903862][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.911968][ T5877] usb 4-1: Product: syz [ 90.916257][ T5877] usb 4-1: Manufacturer: syz [ 90.920896][ T5877] usb 4-1: SerialNumber: syz [ 92.168844][ T5877] usb 4-1: unable to init card! (ret=-71) [ 92.177333][ T5877] snd-usb-caiaq: probe of 4-1:1.0 failed with error -71 [ 92.191995][ T5877] usb 4-1: USB disconnect, device number 2 [ 92.504574][ T6059] loop2: detected capacity change from 0 to 128 [ 92.834427][ T6068] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5786] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6068] [ 94.752176][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.124572][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 95.221590][ T42] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.295636][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.347369][ T42] usb 2-1: config 0 has no interface number 0 [ 95.369032][ T42] usb 2-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.430672][ T42] usb 2-1: config 0 interface 1 has no altsetting 0 [ 95.442800][ T42] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 95.457726][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.469305][ T42] usb 2-1: Product: syz [ 95.473498][ T42] usb 2-1: Manufacturer: syz [ 95.481556][ T42] usb 2-1: SerialNumber: syz [ 95.547807][ T6091] syz.2.46 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 95.590340][ T42] usb 2-1: config 0 descriptor?? [ 95.805529][ T8] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 96.008763][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.075247][ T8] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 96.209088][ T8] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 96.251025][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.345196][ T8] usb 1-1: Product: syz [ 96.359616][ T8] usb 1-1: Manufacturer: syz [ 96.374533][ T8] usb 1-1: SerialNumber: syz [ 96.427772][ T42] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 96.439839][ T42] cx231xx 2-1:0.1: Not found matching IAD interface [ 96.455846][ T42] usb 2-1: USB disconnect, device number 2 [ 96.787707][ T6105] loop2: detected capacity change from 0 to 128 [ 96.830307][ T8] usb 1-1: unable to init card! (ret=-110) [ 96.878057][ T8] snd-usb-caiaq: probe of 1-1:1.0 failed with error -110 [ 97.077054][ T42] usb 1-1: USB disconnect, device number 3 [ 97.211770][ T6111] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5786] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6111] [ 97.922085][ T6117] loop3: detected capacity change from 0 to 256 [ 97.959556][ T6117] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 101.623940][ T6152] loop3: detected capacity change from 0 to 128 [ 101.902488][ T6155] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5785] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6155] [ 103.443535][ T6164] loop2: detected capacity change from 0 to 256 [ 103.523754][ T6164] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.332410][ T6194] loop1: detected capacity change from 0 to 128 [ 106.592741][ T6197] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5784] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6197] [ 109.639051][ T6224] loop0: detected capacity change from 0 to 512 [ 110.397814][ T6208] loop1: detected capacity change from 0 to 32768 [ 110.470505][ T6208] (syz.1.81,6208,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 110.489789][ T6208] (syz.1.81,6208,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 110.514049][ T6208] (syz.1.81,6208,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 110.604929][ T6208] JBD2: Ignoring recovery information on journal [ 110.819446][ T6208] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 110.839912][ T6239] loop2: detected capacity change from 0 to 128 [ 112.767678][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 114.173633][ T6262] futex_wake_op: syz.0.94 tries to shift op by 144; fix this program [ 114.182907][ T6262] futex_wake_op: syz.0.94 tries to shift op by 144; fix this program [ 115.697692][ T6268] loop0: detected capacity change from 0 to 512 [ 115.761247][ T6268] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.102301][ T6268] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.398439][ T6268] EXT4-fs (loop0): 1 truncate cleaned up [ 116.405283][ T6268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.617114][ T6289] loop1: detected capacity change from 0 to 128 [ 118.390189][ T6290] sctp: failed to load transform for md5: -2 [ 119.018025][ T5792] Bluetooth: hci1: link tx timeout [ 119.023448][ T5792] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 119.355916][ T6294] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 120.387938][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.685801][ T6312] FAULT_INJECTION: forcing a failure. [ 120.685801][ T6312] name failslab, interval 1, probability 0, space 0, times 1 [ 120.770773][ T6312] CPU: 0 PID: 6312 Comm: syz.0.105 Not tainted syzkaller #0 [ 120.778124][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 120.788216][ T6312] Call Trace: [ 120.791509][ T6312] [ 120.794452][ T6312] dump_stack_lvl+0x18c/0x250 [ 120.799173][ T6312] ? show_regs_print_info+0x20/0x20 [ 120.804393][ T6312] ? load_image+0x420/0x420 [ 120.808911][ T6312] ? __might_sleep+0xe0/0xe0 [ 120.813516][ T6312] ? __lock_acquire+0x7eb0/0x7eb0 [ 120.818573][ T6312] should_fail_ex+0x394/0x4c0 [ 120.823311][ T6312] should_failslab+0x9/0x20 [ 120.827846][ T6312] slab_pre_alloc_hook+0x59/0x300 [ 120.832900][ T6312] ? security_task_alloc+0x46/0x130 [ 120.838125][ T6312] ? security_task_alloc+0x46/0x130 [ 120.843345][ T6312] __kmem_cache_alloc_node+0x53/0x260 [ 120.848751][ T6312] ? security_task_alloc+0x46/0x130 [ 120.853970][ T6312] __kmalloc+0xa7/0x240 [ 120.858157][ T6312] security_task_alloc+0x46/0x130 [ 120.863209][ T6312] copy_process+0x14fb/0x3da0 [ 120.867914][ T6312] ? copy_process+0x98e/0x3da0 [ 120.872708][ T6312] ? __pidfd_prepare+0x140/0x140 [ 120.877659][ T6312] ? __might_fault+0xaa/0x120 [ 120.882361][ T6312] ? __asan_memset+0x22/0x40 [ 120.886978][ T6312] kernel_clone+0x24b/0x8a0 [ 120.891503][ T6312] ? create_io_thread+0x190/0x190 [ 120.896540][ T6312] ? futex_wake+0x42a/0x4f0 [ 120.901125][ T6312] __se_sys_clone3+0x334/0x350 [ 120.905910][ T6312] ? __x64_sys_clone3+0x60/0x60 [ 120.910773][ T6312] ? do_futex+0x35d/0x3e0 [ 120.915150][ T6312] ? lockdep_hardirqs_on+0x98/0x150 [ 120.920377][ T6312] do_syscall_64+0x55/0xb0 [ 120.924809][ T6312] ? clear_bhb_loop+0x40/0x90 [ 120.929503][ T6312] ? clear_bhb_loop+0x40/0x90 [ 120.934201][ T6312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.940131][ T6312] RIP: 0033:0x7f442bb9fb19 [ 120.944566][ T6312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.964191][ T6312] RSP: 002b:00007f442ca3eef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 120.972622][ T6312] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f442bb9fb19 [ 120.980608][ T6312] RDX: 00007f442ca3ef10 RSI: 0000000000000058 RDI: 00007f442ca3ef10 [ 120.988595][ T6312] RBP: 00007f442bc37b70 R08: 0000000000000000 R09: 0000000000000058 [ 120.996576][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.004554][ T6312] R13: 00007f442be26038 R14: 00007f442be25fa0 R15: 00007ffe2cd3cb28 [ 121.012556][ T6312] [ 121.091139][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 121.726317][ T6321] capability: warning: `syz.0.110' uses deprecated v2 capabilities in a way that may be insecure [ 121.739217][ T6321] Zero length message leads to an empty skb [ 121.751836][ T6321] loop0: detected capacity change from 0 to 1024 [ 121.865799][ T5798] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.971773][ T6328] loop2: detected capacity change from 0 to 128 [ 121.980841][ T6327] loop1: detected capacity change from 0 to 512 [ 122.247230][ T5788] Bluetooth: hci3: link tx timeout [ 122.252821][ T5788] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 122.861656][ T6327] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.016926][ T6327] EXT4-fs (loop1): 1 truncate cleaned up [ 123.058471][ T6327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.697495][ T6345] FAULT_INJECTION: forcing a failure. [ 123.697495][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 123.713384][ T6345] CPU: 1 PID: 6345 Comm: syz.2.118 Not tainted syzkaller #0 [ 123.720707][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 123.730778][ T6345] Call Trace: [ 123.734064][ T6345] [ 123.736984][ T6345] dump_stack_lvl+0x18c/0x250 [ 123.741660][ T6345] ? show_regs_print_info+0x20/0x20 [ 123.746848][ T6345] ? load_image+0x420/0x420 [ 123.751338][ T6345] ? __might_sleep+0xe0/0xe0 [ 123.755917][ T6345] ? __lock_acquire+0x7eb0/0x7eb0 [ 123.760955][ T6345] ? get_random_u64+0x170/0x8f0 [ 123.765792][ T6345] should_fail_ex+0x394/0x4c0 [ 123.770464][ T6345] should_failslab+0x9/0x20 [ 123.774951][ T6345] slab_pre_alloc_hook+0x59/0x300 [ 123.779980][ T6345] kmem_cache_alloc+0x5a/0x2d0 [ 123.784762][ T6345] ? prepare_creds+0x30/0x5d0 [ 123.789468][ T6345] prepare_creds+0x30/0x5d0 [ 123.793995][ T6345] copy_creds+0x105/0xa70 [ 123.798363][ T6345] copy_process+0x973/0x3da0 [ 123.802993][ T6345] ? __pidfd_prepare+0x140/0x140 [ 123.807964][ T6345] ? __might_fault+0xaa/0x120 [ 123.812656][ T6345] ? __asan_memset+0x22/0x40 [ 123.817246][ T6345] kernel_clone+0x24b/0x8a0 [ 123.821759][ T6345] ? create_io_thread+0x190/0x190 [ 123.826829][ T6345] __se_sys_clone3+0x334/0x350 [ 123.831586][ T6345] ? __x64_sys_clone3+0x60/0x60 [ 123.836426][ T6345] ? do_futex+0x2ff/0x3e0 [ 123.840766][ T6345] ? lockdep_hardirqs_on+0x98/0x150 [ 123.845956][ T6345] do_syscall_64+0x55/0xb0 [ 123.850361][ T6345] ? clear_bhb_loop+0x40/0x90 [ 123.855030][ T6345] ? clear_bhb_loop+0x40/0x90 [ 123.859703][ T6345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.865604][ T6345] RIP: 0033:0x7f384f59fb19 [ 123.870011][ T6345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.889611][ T6345] RSP: 002b:00007f385047eef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 123.898042][ T6345] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f384f59fb19 [ 123.906020][ T6345] RDX: 00007f385047ef10 RSI: 0000000000000058 RDI: 00007f385047ef10 [ 123.913988][ T6345] RBP: 00007f384f637b70 R08: 0000000000000000 R09: 0000000000000058 [ 123.921951][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.930099][ T6345] R13: 00007f384f826038 R14: 00007f384f825fa0 R15: 00007ffdc038d0d8 [ 123.938109][ T6345] [ 124.365625][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 124.818363][ T6364] loop3: detected capacity change from 0 to 128 [ 124.881114][ T6366] loop0: detected capacity change from 0 to 512 [ 124.936662][ T6366] EXT4-fs: Ignoring removed nobh option [ 125.131312][ T6369] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5785] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6369] [ 125.748663][ T6371] Bluetooth: MGMT ver 1.22 [ 125.791341][ T6366] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.125: invalid indirect mapped block 256 (level 2) [ 125.848499][ T6366] EXT4-fs (loop0): 2 truncates cleaned up [ 125.855506][ T6366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.049254][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.647541][ T6365] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.125: bg 0: block 5: invalid block bitmap [ 126.675779][ T6365] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 126.688526][ T6365] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.688526][ T6365] [ 126.698416][ T6365] EXT4-fs (loop0): Total free blocks count 0 [ 126.704508][ T6365] EXT4-fs (loop0): Free/Dirty block details [ 126.710551][ T6365] EXT4-fs (loop0): free_blocks=0 [ 126.715661][ T6365] EXT4-fs (loop0): dirty_blocks=33 [ 126.720822][ T6365] EXT4-fs (loop0): Block reservation details [ 126.726877][ T6365] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 126.971146][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.177199][ T6385] FAULT_INJECTION: forcing a failure. [ 127.177199][ T6385] name failslab, interval 1, probability 0, space 0, times 0 [ 127.200732][ T6385] CPU: 1 PID: 6385 Comm: syz.2.133 Not tainted syzkaller #0 [ 127.208079][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 127.218149][ T6385] Call Trace: [ 127.221449][ T6385] [ 127.224381][ T6385] dump_stack_lvl+0x18c/0x250 [ 127.229058][ T6385] ? show_regs_print_info+0x20/0x20 [ 127.234274][ T6385] ? load_image+0x420/0x420 [ 127.238771][ T6385] ? __might_sleep+0xe0/0xe0 [ 127.243356][ T6385] ? __lock_acquire+0x7eb0/0x7eb0 [ 127.248375][ T6385] should_fail_ex+0x394/0x4c0 [ 127.253046][ T6385] should_failslab+0x9/0x20 [ 127.257540][ T6385] slab_pre_alloc_hook+0x59/0x300 [ 127.262553][ T6385] ? security_task_alloc+0x46/0x130 [ 127.267740][ T6385] ? security_task_alloc+0x46/0x130 [ 127.272927][ T6385] __kmem_cache_alloc_node+0x53/0x260 [ 127.278294][ T6385] ? security_task_alloc+0x46/0x130 [ 127.283611][ T6385] __kmalloc+0xa7/0x240 [ 127.287776][ T6385] security_task_alloc+0x46/0x130 [ 127.292802][ T6385] copy_process+0x14fb/0x3da0 [ 127.297483][ T6385] ? copy_process+0x98e/0x3da0 [ 127.302248][ T6385] ? __pidfd_prepare+0x140/0x140 [ 127.307179][ T6385] ? __might_fault+0xaa/0x120 [ 127.311850][ T6385] ? __asan_memset+0x22/0x40 [ 127.316446][ T6385] kernel_clone+0x24b/0x8a0 [ 127.320955][ T6385] ? create_io_thread+0x190/0x190 [ 127.325973][ T6385] ? futex_wake+0x42a/0x4f0 [ 127.330472][ T6385] __se_sys_clone3+0x334/0x350 [ 127.335229][ T6385] ? __x64_sys_clone3+0x60/0x60 [ 127.340070][ T6385] ? do_futex+0x35d/0x3e0 [ 127.344410][ T6385] ? lockdep_hardirqs_on+0x98/0x150 [ 127.349603][ T6385] do_syscall_64+0x55/0xb0 [ 127.354011][ T6385] ? clear_bhb_loop+0x40/0x90 [ 127.358678][ T6385] ? clear_bhb_loop+0x40/0x90 [ 127.363348][ T6385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.369234][ T6385] RIP: 0033:0x7f384f59fb19 [ 127.373659][ T6385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.393269][ T6385] RSP: 002b:00007f385047eef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 127.401731][ T6385] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f384f59fb19 [ 127.409697][ T6385] RDX: 00007f385047ef10 RSI: 0000000000000058 RDI: 00007f385047ef10 [ 127.417664][ T6385] RBP: 00007f384f637b70 R08: 0000000000000000 R09: 0000000000000058 [ 127.425659][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.433644][ T6385] R13: 00007f384f826038 R14: 00007f384f825fa0 R15: 00007ffdc038d0d8 [ 127.441618][ T6385] [ 127.444736][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.183673][ T6394] loop3: detected capacity change from 0 to 512 [ 128.201285][ T6394] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.234213][ T6398] loop0: detected capacity change from 0 to 128 [ 128.552033][ T6406] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5783] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6406] [ 128.617532][ T6402] loop1: detected capacity change from 0 to 512 [ 128.635871][ T6402] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.094574][ T27] audit: type=1326 audit(1794134895.648:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576999fb19 code=0x7ffc0000 [ 129.118306][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.133016][ T6404] loop2: detected capacity change from 0 to 128 [ 129.476995][ T6394] EXT4-fs (loop3): 1 truncate cleaned up [ 129.615539][ C0] sched: RT throttling activated [ 129.621505][ T27] audit: type=1326 audit(1794134895.648:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576999fb19 code=0x7ffc0000 [ 129.646792][ T6394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.751969][ T27] audit: type=1326 audit(1794134895.658:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f576999fb19 code=0x7ffc0000 [ 129.861037][ T27] audit: type=1326 audit(1794134895.678:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576999fb19 code=0x7ffc0000 [ 130.076630][ T27] audit: type=1326 audit(1794134895.678:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576999fb19 code=0x7ffc0000 [ 130.336818][ T27] audit: type=1326 audit(1794134895.678:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6405 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f576996034e code=0x7ffc0000 [ 130.563075][ T27] audit: type=1326 audit(1794134895.718:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f576999fb19 code=0x7ffc0000 [ 130.726536][ T27] audit: type=1326 audit(1794134895.718:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576999fb19 code=0x7ffc0000 [ 130.833592][ T27] audit: type=1326 audit(1794134895.718:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576999fb19 code=0x7ffc0000 [ 130.858359][ T27] audit: type=1326 audit(1794134895.728:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f576999fb19 code=0x7ffc0000 [ 131.148121][ T6422] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5786] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6422] [ 131.839306][ T6420] syz.0.143 (6420) used greatest stack depth: 20696 bytes left [ 132.418296][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.930650][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.976781][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.261474][ T6437] loop3: detected capacity change from 0 to 512 [ 133.315699][ T6437] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 134.480254][ T6437] EXT4-fs (loop3): 1 truncate cleaned up [ 134.514716][ T6437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.107600][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 135.107636][ T27] audit: type=1800 audit(1794134902.208:55): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.147" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 135.417340][ T6467] loop1: detected capacity change from 0 to 512 [ 135.438288][ T6467] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.448998][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.560467][ T6467] EXT4-fs (loop1): 1 truncate cleaned up [ 135.601966][ T6467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.865822][ T6461] comedi comedi1: reset error (fatal) [ 136.871210][ T6490] loop0: detected capacity change from 0 to 1024 [ 136.884456][ T6490] EXT4-fs: Ignoring removed nobh option [ 136.903902][ T6490] EXT4-fs: Ignoring removed oldalloc option [ 136.932051][ T6490] EXT4-fs (loop0): Invalid log cluster size: 10756 [ 137.977158][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.048442][ T6536] loop1: detected capacity change from 0 to 512 [ 141.062865][ T6536] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.139010][ T6536] EXT4-fs (loop1): 1 truncate cleaned up [ 141.218563][ T6536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.282316][ T6559] loop2: detected capacity change from 0 to 512 [ 143.374384][ T6559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.395819][ T6559] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.524111][ T27] audit: type=1800 audit(1794134910.718:56): pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.182" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 143.565474][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.523539][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.843609][ T6593] loop1: detected capacity change from 0 to 512 [ 148.873209][ T6593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.891898][ T6595] loop3: detected capacity change from 0 to 512 [ 148.910391][ T6593] EXT4-fs (loop1): 1 truncate cleaned up [ 148.921366][ T6595] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 148.942131][ T6593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.972671][ T6595] EXT4-fs (loop3): 1 truncate cleaned up [ 148.988138][ T6595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.025994][ T27] audit: type=1800 audit(1794134916.218:57): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.192" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 149.650855][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.186867][ T6609] input: syz1 as /devices/virtual/input/input5 [ 151.332231][ T27] audit: type=1800 audit(1794134918.528:58): pid=6622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.202" name="p_chmask" dev="configfs" ino=9666 res=0 errno=0 [ 151.360304][ T6622] Need at least one configuration in g1. [ 151.377518][ T6622] udc dummy_udc.0: failed to start g1: -22 [ 151.430861][ T6622] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 151.536500][ T6625] ip_tables: iptables: counters copy to user failed while replacing table [ 151.584146][ T27] audit: type=1800 audit(1794134918.558:59): pid=6622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.202" name="UDC" dev="configfs" ino=9667 res=0 errno=0 [ 151.711558][ T6622] UDC core: g1: couldn't find an available UDC or it's busy [ 152.492947][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.497630][ T6631] process 'syz.0.205' launched '/dev/fd/9' with NULL argv: empty string added [ 153.020044][ T6634] vlan2: entered allmulticast mode [ 153.225640][ T6634] bond0: entered allmulticast mode [ 153.270786][ T6634] bond_slave_0: entered allmulticast mode [ 153.283310][ T6634] bond_slave_1: entered allmulticast mode [ 153.293616][ T6634] bridge0: port 3(vlan2) entered blocking state [ 153.301194][ T6634] bridge0: port 3(vlan2) entered disabled state [ 153.315359][ T6634] vlan2: entered promiscuous mode [ 153.320773][ T6634] bond0: entered promiscuous mode [ 153.326202][ T6634] bond_slave_0: entered promiscuous mode [ 153.332040][ T6634] bond_slave_1: entered promiscuous mode [ 153.339908][ T6634] bridge0: port 3(vlan2) entered blocking state [ 153.347232][ T6634] bridge0: port 3(vlan2) entered forwarding state [ 153.372372][ T6631] bridge_slave_0: left allmulticast mode [ 153.380799][ T6631] bridge_slave_0: left promiscuous mode [ 153.387459][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.446407][ T6631] bridge_slave_1: left allmulticast mode [ 153.468257][ T6631] bridge_slave_1: left promiscuous mode [ 153.513597][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.539313][ T6631] bond0: (slave bond_slave_0): Releasing backup interface [ 153.550496][ T6631] bond_slave_0: left promiscuous mode [ 153.562921][ T6631] bond_slave_0: left allmulticast mode [ 153.590568][ T6631] bond0: (slave bond_slave_1): Releasing backup interface [ 153.719936][ T6631] bond_slave_1: left promiscuous mode [ 153.728263][ T6631] bond_slave_1: left allmulticast mode [ 154.006921][ C0] ------------[ cut here ]------------ [ 154.012814][ C0] WARNING: CPU: 0 PID: 6649 at net/mac80211/tx.c:5135 __ieee80211_beacon_get+0x1141/0x1520 [ 154.022848][ C0] Modules linked in: [ 154.026773][ C0] CPU: 0 PID: 6649 Comm: syz.2.208 Not tainted syzkaller #0 [ 154.034055][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 154.044138][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 154.050489][ C0] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 154.070136][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 154.076220][ C0] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff88805f71bc00 [ 154.084205][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.092192][ C0] RBP: 0000000000000000 R08: ffff88805f71bc00 R09: 0000000000000003 [ 154.100175][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805def2420 [ 154.108164][ C0] R13: ffff88805e37e824 R14: ffff88805def2910 R15: ffff88805e37e800 [ 154.116168][ C0] FS: 00007f385045e6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 154.125099][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.131700][ C0] CR2: 00007fc79f817990 CR3: 000000002ffde000 CR4: 00000000003506f0 [ 154.139682][ C0] Call Trace: [ 154.142958][ C0] [ 154.145815][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 154.151359][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 154.156831][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 154.163589][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 154.169176][ C0] __iterate_interfaces+0x225/0x4c0 [ 154.174398][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 154.180666][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 154.187896][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 154.194131][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 154.201167][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 154.206375][ C0] ? hw_scan_work+0xf10/0xf10 [ 154.211053][ C0] __hrtimer_run_queues+0x525/0xc10 [ 154.216292][ C0] ? hrtimer_interrupt+0x980/0x980 [ 154.221405][ C0] ? read_tsc+0x9/0x20 [ 154.225490][ C0] hrtimer_run_softirq+0x177/0x290 [ 154.230653][ C0] handle_softirqs+0x27d/0x820 [ 154.235416][ C0] ? read_tsc+0x9/0x20 [ 154.239496][ C0] ? ktime_get+0x24b/0x280 [ 154.243907][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 154.248691][ C0] ? do_softirq+0x1a0/0x1a0 [ 154.253194][ C0] __irq_exit_rcu+0xd3/0x190 [ 154.257795][ C0] ? irq_exit_rcu+0x20/0x20 [ 154.262300][ C0] irq_exit_rcu+0x9/0x20 [ 154.266551][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 154.272213][ C0] [ 154.275140][ C0] [ 154.278076][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 154.284058][ C0] RIP: 0010:____sys_recvmsg+0x3a9/0x5d0 [ 154.289620][ C0] Code: 48 8b 44 24 28 23 18 bf ff ff ff ff 44 89 e6 e8 5d 47 08 f9 49 8d 4f 18 49 8d 47 30 45 85 e4 48 0f 49 c8 89 d8 e8 07 01 0c 02 <48> 89 cb 49 89 ce 49 c1 e6 20 31 ff 4c 89 f6 e8 c3 47 08 f9 4d 85 [ 154.309244][ C0] RSP: 0018:ffffc90018d278e0 EFLAGS: 00000246 [ 154.315316][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 154.323301][ C0] RDX: ffff88805f71bc00 RSI: 0000000000000002 RDI: 00000000ffffffff [ 154.331284][ C0] RBP: ffffc90018d27a70 R08: ffffc90018d276a7 R09: 1ffff920031a4ed4 [ 154.339267][ C0] R10: dffffc0000000000 R11: fffff520031a4ed5 R12: 0000000000000002 [ 154.347245][ C0] R13: 0000000000000000 R14: 00000000000068d9 R15: 00002000001a3700 [ 154.355226][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 154.360272][ C0] ? import_iovec+0x73/0xa0 [ 154.364797][ C0] ___sys_recvmsg+0x214/0x590 [ 154.369488][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 154.374259][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 154.379311][ C0] ? __might_fault+0xc6/0x120 [ 154.383992][ C0] ? __might_fault+0xaa/0x120 [ 154.388678][ C0] do_recvmmsg+0x377/0x810 [ 154.393096][ C0] ? __sys_recvmmsg+0x290/0x290 [ 154.397965][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 154.403848][ C0] ? rcu_read_lock_sched_held+0x8a/0x110 [ 154.409502][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 154.414524][ C0] ? do_recvmmsg+0x810/0x810 [ 154.419163][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 154.424387][ C0] do_syscall_64+0x55/0xb0 [ 154.428958][ C0] ? clear_bhb_loop+0x40/0x90 [ 154.433656][ C0] ? clear_bhb_loop+0x40/0x90 [ 154.438350][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.444230][ C0] RIP: 0033:0x7f384f59fb19 [ 154.448681][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.468357][ C0] RSP: 002b:00007f385045e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 154.476800][ C0] RAX: ffffffffffffffda RBX: 00007f384f826090 RCX: 00007f384f59fb19 [ 154.484776][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 154.492760][ C0] RBP: 00007f384f637b70 R08: 0000000000000000 R09: 0000000000000000 [ 154.500745][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 154.508722][ C0] R13: 00007f384f826128 R14: 00007f384f826090 R15: 00007ffdc038d0d8 [ 154.516738][ C0] [ 154.519749][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 154.527012][ C0] CPU: 0 PID: 6649 Comm: syz.2.208 Not tainted syzkaller #0 [ 154.534277][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 154.544315][ C0] Call Trace: [ 154.547581][ C0] [ 154.550411][ C0] dump_stack_lvl+0x18c/0x250 [ 154.555085][ C0] ? show_regs_print_info+0x20/0x20 [ 154.560271][ C0] ? load_image+0x420/0x420 [ 154.564764][ C0] panic+0x2ca/0x720 [ 154.568670][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 154.573180][ C0] __warn+0x2e0/0x470 [ 154.577147][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 154.582853][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 154.588730][ C0] report_bug+0x2be/0x4f0 [ 154.593044][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 154.598744][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 154.604443][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 154.610146][ C0] handle_bug+0xcf/0x120 [ 154.614381][ C0] exc_invalid_op+0x1a/0x50 [ 154.618872][ C0] asm_exc_invalid_op+0x1a/0x20 [ 154.623713][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 154.630025][ C0] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 154.649979][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 154.656036][ C0] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff88805f71bc00 [ 154.664029][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.672002][ C0] RBP: 0000000000000000 R08: ffff88805f71bc00 R09: 0000000000000003 [ 154.679973][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805def2420 [ 154.687987][ C0] R13: ffff88805e37e824 R14: ffff88805def2910 R15: ffff88805e37e800 [ 154.695986][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 154.701702][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 154.707408][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 154.712943][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 154.718407][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 154.725160][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 154.730700][ C0] __iterate_interfaces+0x225/0x4c0 [ 154.735888][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 154.742118][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 154.749298][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 154.755639][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 154.762649][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 154.767834][ C0] ? hw_scan_work+0xf10/0xf10 [ 154.772492][ C0] __hrtimer_run_queues+0x525/0xc10 [ 154.777714][ C0] ? hrtimer_interrupt+0x980/0x980 [ 154.782808][ C0] ? read_tsc+0x9/0x20 [ 154.786866][ C0] hrtimer_run_softirq+0x177/0x290 [ 154.792004][ C0] handle_softirqs+0x27d/0x820 [ 154.796764][ C0] ? read_tsc+0x9/0x20 [ 154.800825][ C0] ? ktime_get+0x24b/0x280 [ 154.805263][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 154.810017][ C0] ? do_softirq+0x1a0/0x1a0 [ 154.814619][ C0] __irq_exit_rcu+0xd3/0x190 [ 154.819203][ C0] ? irq_exit_rcu+0x20/0x20 [ 154.823694][ C0] irq_exit_rcu+0x9/0x20 [ 154.827922][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 154.833552][ C0] [ 154.836472][ C0] [ 154.839391][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 154.845359][ C0] RIP: 0010:____sys_recvmsg+0x3a9/0x5d0 [ 154.850900][ C0] Code: 48 8b 44 24 28 23 18 bf ff ff ff ff 44 89 e6 e8 5d 47 08 f9 49 8d 4f 18 49 8d 47 30 45 85 e4 48 0f 49 c8 89 d8 e8 07 01 0c 02 <48> 89 cb 49 89 ce 49 c1 e6 20 31 ff 4c 89 f6 e8 c3 47 08 f9 4d 85 [ 154.870503][ C0] RSP: 0018:ffffc90018d278e0 EFLAGS: 00000246 [ 154.876581][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 154.884541][ C0] RDX: ffff88805f71bc00 RSI: 0000000000000002 RDI: 00000000ffffffff [ 154.892495][ C0] RBP: ffffc90018d27a70 R08: ffffc90018d276a7 R09: 1ffff920031a4ed4 [ 154.900468][ C0] R10: dffffc0000000000 R11: fffff520031a4ed5 R12: 0000000000000002 [ 154.908422][ C0] R13: 0000000000000000 R14: 00000000000068d9 R15: 00002000001a3700 [ 154.916398][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 154.921429][ C0] ? import_iovec+0x73/0xa0 [ 154.925917][ C0] ___sys_recvmsg+0x214/0x590 [ 154.930584][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 154.935353][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 154.940372][ C0] ? __might_fault+0xc6/0x120 [ 154.945035][ C0] ? __might_fault+0xaa/0x120 [ 154.949696][ C0] do_recvmmsg+0x377/0x810 [ 154.954104][ C0] ? __sys_recvmmsg+0x290/0x290 [ 154.958944][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 154.964816][ C0] ? rcu_read_lock_sched_held+0x8a/0x110 [ 154.970458][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 154.975475][ C0] ? do_recvmmsg+0x810/0x810 [ 154.980073][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 154.985275][ C0] do_syscall_64+0x55/0xb0 [ 154.989682][ C0] ? clear_bhb_loop+0x40/0x90 [ 154.994351][ C0] ? clear_bhb_loop+0x40/0x90 [ 154.999018][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.004905][ C0] RIP: 0033:0x7f384f59fb19 [ 155.009308][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.028917][ C0] RSP: 002b:00007f385045e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 155.037324][ C0] RAX: ffffffffffffffda RBX: 00007f384f826090 RCX: 00007f384f59fb19 [ 155.045295][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 155.053262][ C0] RBP: 00007f384f637b70 R08: 0000000000000000 R09: 0000000000000000 [ 155.061226][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 155.069189][ C0] R13: 00007f384f826128 R14: 00007f384f826090 R15: 00007ffdc038d0d8 [ 155.077160][ C0] [ 155.080306][ C0] Kernel Offset: disabled [ 155.084655][ C0] Rebooting in 86400 seconds..