last executing test programs: 7m58.569982084s ago: executing program 32 (id=852): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000300), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x100, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 7m53.369767394s ago: executing program 33 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) 7m29.980328539s ago: executing program 34 (id=988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000010, 0x0, 0x7}]}) 6m57.706434085s ago: executing program 35 (id=1135): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6m49.697186495s ago: executing program 36 (id=1163): openat$kvm(0xffffffffffffff9c, 0x0, 0xe01, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x402, &(0x7f0000000100), 0x7, 0x518, &(0x7f0000000800)="$eJzs3EFsVGUeAPD/m05pCwW6LMsuXXa3u6yxkdhCQeFgYjCaeNDEiAc9Nm0hSKGmrYkQAkNiiJ4MiVdjNPHg1YMXY9R4MZxMvOLRxJAQwwXwNObNvJlOZ6bTaZm20v5+yTDv+9735nv/973vzffexzSALWso/SeJ6I+IWxGxOyJy9QWGym/3716eeHD38kQUisVTvyXpZnEvTWeS7H1HlhjOReTeTRZW1Ji7eOnc+PT01GyWHp0//9bo3MVLT549P35m6szUhbETJ44dPXL86bGnVh5Utb6vqllpXPcGr8wc2P/iGzdenshX8nuz99o4OmUohpqFXvJYpyvbYDtrlpN8q5LPrv3O0Lb0/E+bq7vU/3dHV7RsPGATKRaLxZ5subtxdaFY71pDDvDISmKj9wDYGJUv+vT+t/JqNk7YtnZDkA1152T5BiiN+372ivhPKbPyHKS77v62k4YiH68Xfv84faXpfMPx/3SNagYAtqpvT1ZGgnXjv4GIfTXldmVzKAMR8ZeI2BMRf42IvRHxtyiX/XtE/KPu87uWqX+oLt04/szdXn10y0vHf89kc1sL47+onQUb6MpSOyMqA+apw9kxGY7untNnp6eOtKjju+d/+mCpdWn8lfFf+krrr4wFs/24ne9ZvM3k+Pz4qgOuc+daxGC+Pv4kH5FUZwKSiNgfEYPff9T25w7ULJ994vMD1UTdQ8bl4y8pNp1H68BURfGTiMfL7V+IRe2/UGPSen5ytDempw6PpmfB4aZ13Pzx+ivN8pPG+A99XR//l7/Ub/bC8W9OtdGz2pO2//aa8z8q87cL8Q8kEUl1vnZuiQ+6unQd13/ufW+pdas9/7clr/VFzX3pO+Pz87NHIrYlL0VD/lh1mreSLr1HoRz/8MHm/X9Ptk16JP4ZEelJ/K+I+HeU7xCHonj1/Yj4X0QcXDr8+OG5/7+5+vjXVhr/ZNPr36L2X5ivTxfS3NlFOePTSaFceiGnutB17r+3Hgw2r7+99j9WWhrOcppf/5JFl4jGvWi+8JCHDwAAAB4JuYjor3mW1B+53MhI+RnQ3tiem56Zmz+UzLx9YbL8G4GBmrLl58HdSeX550BNeiw+21UuVU4fzZ4bf9jVV0qPTMxMT25EwEDVjlKfT3Ij1WtBuf+nfu3MI2bgz8xPfmDrWq7/77uxTjsCrDvf/7BVzV6pSRSWKFTwP2Vgc2rn+9+zQNicmvX/Fv+f2w0DbBJF3Rm2tJX0/8Vlb+7u+M4A6yofr1aXcxu6J8B6M/6HLamtH8mveqHY03xVbzQWjt7WH9gVq9uNviZ1bchCOrJqr3BlDNawqtJqK6u9r+mqfOutKn9NYckykVvZQehZCCd5mDY9/fBtcWZfp0/+7mI2P7aKzXtaHYQv1qSfLtu458ar51qzPwseMdbf8UsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAmvgjAAD//zOezys=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) getdents(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6m16.68439708s ago: executing program 37 (id=1298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1800, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m38.040043965s ago: executing program 8 (id=1445): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 5m37.969288517s ago: executing program 8 (id=1448): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x180) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726) getdents64(r0, &(0x7f0000000080)=""/234, 0xea) 5m37.81680919s ago: executing program 8 (id=1450): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x603, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5f5, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x5e1, 0x0, @wg=@data={0x4, 0x7407, 0x7, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b1268"}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40000, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) 5m37.724673613s ago: executing program 8 (id=1452): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x640003, 0xc) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 5m37.600242886s ago: executing program 8 (id=1453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 5m37.245361735s ago: executing program 8 (id=1457): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) close(0x3) ioctl$FE_READ_SIGNAL_STRENGTH(r1, 0x80026f47, 0x0) 5m37.06400896s ago: executing program 38 (id=1457): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) close(0x3) ioctl$FE_READ_SIGNAL_STRENGTH(r1, 0x80026f47, 0x0) 5m33.062391539s ago: executing program 2 (id=1476): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7800, 0x8, 0x9, 0x1}}) unshare(0x26020480) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, 0x0, 0x0, 0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4043, 0x6f) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680)) 5m32.064178725s ago: executing program 2 (id=1479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x3, 0xff, 0xe4, 0x4, 0x6, 0x70, 0x41, 0x5, 0x9, 0x1, 0xc, 0x2, 0x0, 0xc, 0x4, 0x10}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x7, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m31.064563139s ago: executing program 2 (id=1481): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7800, 0x8, 0x9, 0x1}}) unshare(0x26020480) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, 0x0, 0x0, 0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4043, 0x6f) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680)) 5m29.968323126s ago: executing program 2 (id=1485): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18458, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x15000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) 5m29.576994446s ago: executing program 2 (id=1487): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902"], 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa}) 5m28.125201373s ago: executing program 2 (id=1491): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xc) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x141800) 5m27.985878496s ago: executing program 39 (id=1491): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xc) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x141800) 5m19.223795895s ago: executing program 5 (id=1521): socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 5m18.282970309s ago: executing program 5 (id=1512): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(0x0, 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x4000) 5m16.332524287s ago: executing program 5 (id=1516): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m16.21017588s ago: executing program 5 (id=1517): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@journal_dev={'journal_dev', 0x3d, 0x4}}, {@oldalloc}, {@barrier}, {}, {@inlinecrypt}, {@lazytime}, {@stripe={'stripe', 0x3d, 0xea4b}}, {@usrquota}, {@i_version}, {@bsdgroups}, {@quota}]}, 0xff, 0x56a, &(0x7f00000009c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5m15.907396158s ago: executing program 9 (id=1525): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7800, 0x8, 0x9, 0x1}}) unshare(0x26020480) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, 0x0, 0x0, 0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4043, 0x6f) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680)) 5m14.861563474s ago: executing program 9 (id=1529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r0) 5m14.289651988s ago: executing program 5 (id=1530): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x6c) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r1, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nq', 0x7e) 5m13.873893779s ago: executing program 9 (id=1534): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) unshare(0x26020480) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, 0x0, 0x0, 0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4043, 0x6f) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680)) 5m9.916660518s ago: executing program 5 (id=1539): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000) ioctl$SIOCSIFHWADDR(r0, 0x89fb, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 5m9.148521527s ago: executing program 40 (id=1539): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000) ioctl$SIOCSIFHWADDR(r0, 0x89fb, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 5m9.081169058s ago: executing program 9 (id=1541): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@journal_dev={'journal_dev', 0x3d, 0x4}}, {@oldalloc}, {@barrier}, {}, {@inlinecrypt}, {@lazytime}, {@stripe={'stripe', 0x3d, 0xea4b}}, {@usrquota}, {@i_version}, {@bsdgroups}, {@quota}]}, 0xff, 0x56a, &(0x7f00000009c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5m7.488025908s ago: executing program 9 (id=1551): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) unshare(0x26020480) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, 0x0, 0x0, 0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4043, 0x6f) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680)) 5m5.227857695s ago: executing program 9 (id=1556): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7800, 0x8, 0x9, 0x1}}) unshare(0x26020480) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, 0x0, 0x0, 0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4043, 0x6f) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680)) 5m4.21897042s ago: executing program 41 (id=1556): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7800, 0x8, 0x9, 0x1}}) unshare(0x26020480) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, 0x0, 0x0, 0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4043, 0x6f) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680)) 2m24.073418341s ago: executing program 7 (id=2010): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002c00)={0x2020}, 0x2020) 2m21.980850283s ago: executing program 7 (id=2014): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000d40)=@newtaction={0xb8, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xa4, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mirred={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x84, 0x8, 0xfffffffa, 0xffffffff}, 0x1, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xb8}}, 0x0) 2m19.019730437s ago: executing program 7 (id=2017): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020}, 0x2020) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9090303008cb89e08f086dd0000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m17.359130338s ago: executing program 7 (id=2028): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m16.314812834s ago: executing program 7 (id=2021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 2m14.762552054s ago: executing program 7 (id=2022): r0 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r0, 0xe7f, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) 1m59.113751534s ago: executing program 42 (id=2022): r0 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r0, 0xe7f, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) 55.333957698s ago: executing program 6 (id=2163): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1}}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x202, 0x40) ioctl$MON_IOCG_STATS(r3, 0x80089203, 0x0) socket$inet(0x2b, 0x4, 0x3f) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 49.860067855s ago: executing program 6 (id=2170): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 49.186980531s ago: executing program 6 (id=2172): r0 = syz_open_dev$vim2m(0x0, 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3f, 0x2, 0x457f1c9146f8f874, "464905e100000000000000007f00000000000000000000000000000000000100", 0x584e4f53}) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x2, 0x0, 0x0) 48.302662823s ago: executing program 6 (id=2173): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 41.085556443s ago: executing program 6 (id=2183): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000200)=""/1024, 0x400) mount$9p_unix(&(0x7f0000000080)='./trace\x00', 0x0, 0x0, 0x930006, &(0x7f0000000180)={'trans=unix,', {[], [{@measure}]}}) 37.654144179s ago: executing program 6 (id=2186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x20080058) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x7, 0x0, 0x2, 0xa}}, 0x20) 34.072107449s ago: executing program 3 (id=2191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="22000086740000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x3}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b4804000300640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 32.42991749s ago: executing program 3 (id=2195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 29.267949139s ago: executing program 3 (id=2198): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x6, r2, 0x4007) ptrace$setsig(0x4203, r2, 0xa364, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, &(0x7f0000000000)='?\x00\x00\x00', 0x4) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) accept4$unix(r1, 0x0, 0x0, 0x800) 26.498569368s ago: executing program 3 (id=2201): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(0x0, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000010801010000000000000000070000080900010073790000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x480c4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) 25.352159067s ago: executing program 4 (id=2203): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x567) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x4000, 0x102, 0x8}, 0x18) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) 22.850869079s ago: executing program 0 (id=2204): socket$kcm(0x29, 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000004c0)={r6, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) 22.634126764s ago: executing program 43 (id=2186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x20080058) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x7, 0x0, 0x2, 0xa}}, 0x20) 22.613805775s ago: executing program 3 (id=2206): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1}}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x202, 0x40) ioctl$MON_IOCG_STATS(r3, 0x80089203, 0x0) socket$inet(0x2b, 0x4, 0x3f) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 19.169532671s ago: executing program 0 (id=2207): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 17.083595963s ago: executing program 4 (id=2208): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 15.956686961s ago: executing program 0 (id=2209): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_ENDIAN(0x14, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r3, 0x0, 0x0) 12.967687556s ago: executing program 3 (id=2211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 12.188346315s ago: executing program 1 (id=2212): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x40802, 0x74) write$cgroup_int(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x80) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 9.908782952s ago: executing program 1 (id=2213): r0 = syz_open_dev$admmidi(0x0, 0x2, 0x101842) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000001080)) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 9.896011383s ago: executing program 0 (id=2214): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x3a424bc, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1, 0x0, &(0x7f0000000140)) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) 9.851240834s ago: executing program 4 (id=2215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) r6 = fsmount(r3, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000100), &(0x7f0000000140)='%pK \x00'}, 0x20) fchdir(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000009f40)={0x2020}, 0x2020) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) 7.339332747s ago: executing program 1 (id=2216): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 6.219864665s ago: executing program 0 (id=2217): r0 = socket(0x1d, 0x2, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sendmsg$key(r0, 0x0, 0x900) r4 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x1ff, 0x0, 0x4, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) 6.172825786s ago: executing program 1 (id=2218): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 3.58065413s ago: executing program 4 (id=2219): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80c0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}], 0x58}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) 2.225105624s ago: executing program 4 (id=2220): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() getrlimit(0xb, 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) syz_clone(0x10008000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.985610431s ago: executing program 0 (id=2221): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x800, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x800, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x100, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x2, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x5, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x46b, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x3, 0x0, 0x8, 0x8, 0x53, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0xfffffffe, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x5, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x2, 0x8, 0xf, 0x1, 0x8, 0xa, 0x3, 0x100, 0x2, 0x1, 0x40, 0x8, 0x9, 0x401, 0x80, 0xfffffff9, 0x4, 0x9, 0x7, 0x9273, 0xbf1f, 0x9, 0xef0, 0xd, 0x9, 0x9, 0x9, 0x4, 0x40, 0x6, 0x9, 0x8, 0x6, 0x4, 0x7, 0x4, 0x1, 0x81, 0x5, 0x2, 0x4, 0x7107, 0x3d3, 0x7fff, 0x3, 0x7fffffff, 0x1, 0x1, 0x0, 0x8, 0x7d77, 0x3, 0xa6b7, 0x5, 0xfffffff8, 0x0, 0x148a00, 0xfffff000, 0x2, 0x200, 0xfffffa66, 0x9, 0x5, 0xd1, 0x32d3, 0x2, 0x3ff, 0x7fff, 0xe, 0x0, 0x2, 0x2, 0x7ff, 0xff, 0x2, 0x1, 0x3, 0x85ba, 0x8, 0xff, 0x79, 0x8001, 0x7, 0x3, 0x9, 0xf, 0x4, 0xa, 0xffff, 0x3, 0x8, 0x5, 0x0, 0xe, 0xb1, 0x2, 0x6, 0xff, 0x7, 0x3ff8, 0x5, 0x752, 0xc9, 0x6, 0x1, 0x9, 0x5, 0x370e, 0xfffffffc, 0x0, 0xc, 0x18, 0x6, 0x1eb6, 0x6, 0x9ce9def, 0xf, 0x2, 0x8, 0x1, 0x241, 0xfffffffb, 0x7, 0x1, 0x10, 0x2b4, 0x3ff, 0x8, 0x3, 0x54, 0x6, 0xf107, 0xaf, 0x1, 0xa, 0x1, 0x0, 0x3, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x9, 0xeaa, 0x7, 0x6, 0x0, 0x1, 0x4, 0x23, 0x0, 0x9, 0x544, 0x4, 0x7f, 0x5, 0x7, 0xffffffff, 0xffff, 0xffffff86, 0x9db7, 0x110c00, 0x0, 0x1, 0x1, 0x5, 0x7ff, 0x80, 0x7ff, 0x9, 0xacf, 0xff, 0xffff, 0x8, 0x6, 0xffe00000, 0x9, 0x2, 0xcaa, 0xedd, 0x8, 0x7fffffff, 0x1, 0x400, 0x6, 0x3, 0x0, 0x101, 0xa24, 0x3, 0x9, 0x8, 0x5, 0xfffffffe, 0x2, 0x26c, 0x72, 0x200, 0x800, 0xffffffff, 0x2, 0x1, 0x7fffffff, 0x7fffffff, 0x7115bd5f, 0xd15, 0x2, 0x1ff, 0x8001, 0x1, 0x4a16fb1d, 0x1, 0x6, 0x10, 0x4, 0x9, 0x2, 0xcd3, 0x4, 0x1442, 0x10001, 0x6, 0x6, 0x8, 0x7fff, 0x4, 0x401, 0x9, 0x5, 0xb, 0x0, 0x2, 0xd, 0x2, 0x10000, 0x8, 0x3ff, 0x6, 0x200, 0xe03e, 0x6, 0x5, 0x1, 0xfffffeff, 0x6, 0xe9, 0x77d, 0x2, 0x2, 0x1, 0x3, 0x0, 0x9, 0x8]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1.672328308s ago: executing program 1 (id=2222): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, 0x0) 210.797845ms ago: executing program 4 (id=2223): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = gettid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) tkill(r1, 0xb) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000009b80)={0x40000012}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 0s ago: executing program 1 (id=2224): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_ENDIAN(0x14, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): ss `syz.8.1411'. [ 375.434233][ T4744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.468606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 375.657610][T10048] loop9: detected capacity change from 0 to 40427 [ 375.714507][T10074] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 375.731624][T10081] loop2: detected capacity change from 0 to 7 [ 375.793668][T10081] Dev loop2: unable to read RDB block 7 [ 375.823302][T10081] loop2: unable to read partition table [ 375.838370][T10048] F2FS-fs (loop9): invalid crc value [ 375.866486][T10081] loop2: partition table beyond EOD, truncated [ 375.874205][T10048] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 375.897648][T10077] Set syz1 is full, maxelem 2076 reached [ 375.923122][T10081] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 376.004345][ T3559] Dev loop2: unable to read RDB block 7 [ 376.010516][ T3559] loop2: unable to read partition table [ 376.037662][ T3559] loop2: partition table beyond EOD, truncated [ 376.148478][T10048] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 376.373207][ T4760] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 376.763389][ T4760] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.834600][ T4760] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 377.018755][ T4760] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 377.182144][ T4760] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.383566][ T4760] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 377.516396][ T4760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.953122][ T4772] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 377.990804][T10082] loop8: detected capacity change from 0 to 32768 [ 378.214091][T10082] XFS (loop8): Mounting V5 Filesystem [ 378.224947][T10117] loop9: detected capacity change from 0 to 4096 [ 378.337113][T10117] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 378.348452][ T4772] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 378.364371][ T4772] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 378.380755][T10082] XFS (loop8): Ending clean mount [ 378.392144][T10082] XFS (loop8): Quotacheck needed: Please wait. [ 378.425958][T10117] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: writeback. [ 378.444716][ T4772] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 378.474361][ T4772] usb 5-1: config 150 has no interface number 0 [ 378.494901][ T4772] usb 5-1: config 150 interface 204 has no altsetting 0 [ 378.543298][T10136] loop5: detected capacity change from 0 to 512 [ 378.567152][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.573642][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.635660][T10136] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1421: inode has both inline data and extents flags [ 378.636183][T10082] XFS (loop8): Quotacheck: Done. [ 378.664203][T10136] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1421: couldn't read orphan inode 15 (err -117) [ 378.722216][T10136] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 378.753199][ T4772] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 378.784721][ T4772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.796937][ T4760] [drm] Initialized gud 1.0.0 20200422 for 3-1:1.0 on minor 2 [ 378.825280][ T4772] usb 5-1: Product: syz [ 378.829496][ T4772] usb 5-1: Manufacturer: syz [ 378.846209][ T4772] usb 5-1: SerialNumber: syz [ 378.873862][ T8656] XFS (loop8): Unmounting Filesystem [ 378.975493][T10141] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 379.017601][T10141] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 379.137364][ T4764] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 379.247066][ T4772] usb 5-1: USB disconnect, device number 18 [ 379.303052][ T4760] gud 3-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 379.337056][ T4760] usb 3-1: USB disconnect, device number 9 [ 379.345928][T10161] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 379.513469][ T4764] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.534953][ T4764] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.705003][ T4764] usb 6-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 379.723465][ T4764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.731723][ T4764] usb 6-1: Product: syz [ 379.736382][ T4764] usb 6-1: Manufacturer: syz [ 379.741011][ T4764] usb 6-1: SerialNumber: syz [ 379.904797][T10191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1428'. [ 380.013044][ T9082] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 380.223198][ T4764] usb 6-1: 0:1 : does not exist [ 380.230554][ T4764] usb 6-1: 0:2 : does not exist [ 380.247221][ T4764] usb 6-1: unit 5 not found! [ 380.282523][ T4764] usb 6-1: USB disconnect, device number 13 [ 380.403294][ T9082] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.421521][ T9082] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 380.441986][ T9082] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 380.483890][ T9082] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.532985][ T9082] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 380.544662][ T9082] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.574409][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.041927][T10223] loop9: detected capacity change from 0 to 4096 [ 381.160410][T10223] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 381.280308][ T8795] ntfs3: loop9: ntfs_evict_inode r=5 failed, -22. [ 381.285668][T10214] loop2: detected capacity change from 0 to 32768 [ 381.450392][T10214] XFS (loop2): Mounting V5 Filesystem [ 381.466125][T10220] loop5: detected capacity change from 0 to 32768 [ 381.509359][T10242] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 381.709090][T10220] XFS (loop5): Mounting V5 Filesystem [ 381.725539][T10214] XFS (loop2): Ending clean mount [ 381.748978][T10214] XFS (loop2): Quotacheck needed: Please wait. [ 381.874803][T10264] netlink: 'syz.9.1439': attribute type 39 has an invalid length. [ 381.879689][T10220] XFS (loop5): Ending clean mount [ 381.966686][ T9082] [drm] Initialized gud 1.0.0 20200422 for 9-1:1.0 on minor 2 [ 382.011811][T10214] XFS (loop2): Quotacheck: Done. [ 382.271437][ T9082] gud 9-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 382.291036][ T7265] XFS (loop5): Unmounting Filesystem [ 382.327969][ T9082] usb 9-1: USB disconnect, device number 5 [ 382.503701][ T4684] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 382.511506][ T4234] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 382.563107][ T4764] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 382.800646][T10214] syz.2.1433 (10214): drop_caches: 2 [ 382.808915][ T4684] usb 3-1: Using ep0 maxpacket: 8 [ 382.956009][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.967015][ T4684] usb 3-1: config 0 has no interfaces? [ 382.980089][ T4684] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 383.006083][ T4234] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 383.016326][ T4684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.044571][ T4234] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 383.083755][ T4684] usb 3-1: config 0 descriptor?? [ 383.109791][ T4234] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 383.133200][ T4764] usb 10-1: config 150 has an invalid interface number: 204 but max is 2 [ 383.141722][ T4764] usb 10-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 383.142172][ T4234] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 383.192250][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.193106][ T4764] usb 10-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 383.237169][ T4764] usb 10-1: config 150 has no interface number 0 [ 383.251937][ T4764] usb 10-1: config 150 interface 204 has no altsetting 0 [ 383.420045][ T4684] usb 3-1: USB disconnect, device number 10 [ 383.428064][ T4764] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 383.443316][ T4764] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.453558][ T4764] usb 10-1: Product: syz [ 383.457837][ T4764] usb 10-1: Manufacturer: syz [ 383.462522][ T4764] usb 10-1: SerialNumber: syz [ 383.580964][T10320] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 383.906981][ T4764] usb 10-1: USB disconnect, device number 5 [ 383.952299][ T9512] XFS (loop2): Unmounting Filesystem [ 384.152520][ T144] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.282571][ T144] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.374519][ T4234] [drm] Initialized gud 1.0.0 20200422 for 5-1:1.0 on minor 2 [ 384.460482][ T144] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.540791][T10362] loop9: detected capacity change from 0 to 512 [ 384.585914][ T144] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.613222][T10362] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 384.724158][T10362] EXT4-fs (loop9): 1 truncate cleaned up [ 384.729883][T10362] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 384.891502][ T4234] gud 5-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 384.949742][ T4234] usb 5-1: USB disconnect, device number 19 [ 385.459300][T10365] loop2: detected capacity change from 0 to 32768 [ 385.594756][T10368] chnl_net:caif_netlink_parms(): no params data found [ 385.640068][T10365] XFS (loop2): Mounting V5 Filesystem [ 385.752746][T10420] loop9: detected capacity change from 0 to 128 [ 385.806806][T10365] XFS (loop2): Ending clean mount [ 385.867042][T10420] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 386.004015][T10368] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.013080][T10368] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.053319][ T9512] XFS (loop2): Unmounting Filesystem [ 386.074417][T10368] device bridge_slave_0 entered promiscuous mode [ 386.107229][T10368] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.147232][T10368] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.161580][T10368] device bridge_slave_1 entered promiscuous mode [ 386.573028][ T4764] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 387.013499][ T4760] Bluetooth: hci1: command 0x0409 tx timeout [ 387.058217][T10391] loop5: detected capacity change from 0 to 32768 [ 387.094268][T10368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.129325][T10368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.148603][T10391] XFS (loop5): Mounting V5 Filesystem [ 387.383312][ T4764] usb 5-1: config 0 has no interfaces? [ 387.389213][ T4764] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 387.424533][T10368] team0: Port device team_slave_0 added [ 387.438832][ T4764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.559369][ T4764] usb 5-1: config 0 descriptor?? [ 387.625751][T10391] XFS (loop5): Ending clean mount [ 387.678331][T10368] team0: Port device team_slave_1 added [ 387.758397][T10391] XFS (loop5): Quotacheck needed: Please wait. [ 388.058563][ T144] device hsr_slave_0 left promiscuous mode [ 388.068536][ T4764] usb 5-1: USB disconnect, device number 20 [ 388.221246][ T144] device hsr_slave_1 left promiscuous mode [ 388.276145][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.283766][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.313988][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.342456][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.352168][ T144] device bridge_slave_1 left promiscuous mode [ 388.359688][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.374030][ T144] device bridge_slave_0 left promiscuous mode [ 388.380741][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.416226][ T144] device veth1_macvtap left promiscuous mode [ 388.437115][ T144] device veth0_macvtap left promiscuous mode [ 388.476643][ T144] device veth1_vlan left promiscuous mode [ 388.492054][ T144] device veth0_vlan left promiscuous mode [ 389.053586][ T4549] Bluetooth: hci1: command 0x041b tx timeout [ 389.223003][T10391] XFS (loop5): Quotacheck: Done. [ 389.271954][ T7265] XFS (loop5): Unmounting Filesystem [ 390.492004][T10481] overlayfs: missing 'lowerdir' [ 391.133101][ T4549] Bluetooth: hci1: command 0x040f tx timeout [ 391.414702][T10491] loop2: detected capacity change from 0 to 128 [ 391.488733][T10491] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 391.539981][ T144] team0 (unregistering): Port device team_slave_1 removed [ 391.658223][ T144] team0 (unregistering): Port device team_slave_0 removed [ 391.693597][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.713048][T10491] loop_set_status: loop2 () has still dirty pages (nrpages=1) [ 391.735883][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.810196][ T9512] UDF-fs: error (device loop2): udf_read_inode: (ino 114) failed !bh [ 391.834838][ T9512] UDF-fs: error (device loop2): udf_read_inode: (ino 114) failed !bh [ 391.916227][ T144] bond0 (unregistering): Released all slaves [ 392.045705][T10368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.052687][T10368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.079614][ T4549] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 392.092375][T10368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.115621][T10368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.122651][T10368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.149500][T10368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.187446][T10368] device hsr_slave_0 entered promiscuous mode [ 392.223701][T10368] device hsr_slave_1 entered promiscuous mode [ 392.503102][ T4549] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 393.109070][ T4549] usb 6-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 393.120515][ T4549] usb 6-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 393.131047][ T4549] usb 6-1: config 150 has no interface number 0 [ 393.137733][ T4549] usb 6-1: config 150 interface 204 has no altsetting 0 [ 393.203235][ T4630] Bluetooth: hci1: command 0x0419 tx timeout [ 393.303178][ T4549] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 393.330001][ T4549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.349593][ T4549] usb 6-1: Product: syz [ 393.363678][ T4549] usb 6-1: Manufacturer: syz [ 393.368349][ T4549] usb 6-1: SerialNumber: syz [ 393.807573][ T4549] usb 6-1: USB disconnect, device number 14 [ 394.138044][T10519] chnl_net:caif_netlink_parms(): no params data found [ 394.276959][T10368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 394.316065][T10368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 394.342255][T10368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 394.392585][T10368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 394.463950][T10519] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.475524][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.498647][T10519] device bridge_slave_0 entered promiscuous mode [ 394.552764][T10519] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.560428][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.592876][T10519] device bridge_slave_1 entered promiscuous mode [ 394.633703][T10519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.655425][T10519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.727036][T10519] team0: Port device team_slave_0 added [ 394.740683][T10519] team0: Port device team_slave_1 added [ 394.767465][T10519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.793212][T10519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.830018][T10519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.858402][T10368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.866010][T10519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.873881][T10519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.900551][T10519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.920923][T10368] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.941498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 394.964612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 394.999180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 395.014517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 395.035443][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.042546][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.073397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 395.083762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 395.103332][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.110423][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.156209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 395.165378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 395.175169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 395.186477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 395.199837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 395.217824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 395.233934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 395.266445][T10519] device hsr_slave_0 entered promiscuous mode [ 395.283172][ T9082] Bluetooth: hci1: command 0x0405 tx timeout [ 395.294554][T10519] device hsr_slave_1 entered promiscuous mode [ 395.313427][T10519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.321195][T10519] Cannot create hsr debugfs directory [ 395.360827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 395.396008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 395.409637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.418845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 395.428577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 395.444090][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 395.763774][ T4234] Bluetooth: hci0: command 0x0409 tx timeout [ 395.944218][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 395.951997][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 395.985641][T10368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.081416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 396.098384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 396.122449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 396.139393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 396.158698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 396.170635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 396.184775][T10368] device veth0_vlan entered promiscuous mode [ 396.235144][T10368] device veth1_vlan entered promiscuous mode [ 396.319817][T10519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 396.343701][T10519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 396.369123][T10368] device veth0_macvtap entered promiscuous mode [ 396.385449][T10368] device veth1_macvtap entered promiscuous mode [ 396.393628][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 396.411867][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 396.446119][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.461019][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.475501][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 396.484421][T10519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 396.505155][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 396.515241][T10519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 396.532594][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.545509][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.564593][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.575588][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.586115][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.597664][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.607572][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.618560][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.628499][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.639039][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.650349][T10368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.664912][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.674661][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.690914][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.708359][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.721648][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.732024][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.742848][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.753918][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.764632][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.774624][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.786588][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.796835][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.807711][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.820080][T10368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.832783][T10368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.841763][T10368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.850788][T10368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.860341][T10368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.872677][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 396.881752][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 396.914129][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.018945][T10519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.039606][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.061887][T10519] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.063038][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.074719][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.085277][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.101158][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.118424][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.134905][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 397.143680][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.152318][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.161057][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.168171][ T4524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.176580][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.185521][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.194091][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.201142][ T4524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.210365][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.219786][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.242427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.254257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.266323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 397.277828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 397.288220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 397.297644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.309897][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.318137][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.328355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 397.339886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.349139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 397.441972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 397.610664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.812564][T10519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 398.269438][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 399.111318][T10519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.157386][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 399.179673][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 399.261449][T10652] overlayfs: missing 'lowerdir' [ 400.002160][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 400.012289][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 400.033306][T10655] loop_set_status: loop4 () has still dirty pages (nrpages=2) [ 400.272879][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 400.306418][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 400.383137][T10519] device veth0_vlan entered promiscuous mode [ 400.416972][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 400.426173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 400.457690][T10519] device veth1_vlan entered promiscuous mode [ 400.549917][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 400.567933][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 400.580991][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 400.599381][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 400.621700][ T4549] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 400.645085][T10519] device veth0_macvtap entered promiscuous mode [ 400.658733][T10519] device veth1_macvtap entered promiscuous mode [ 400.681307][T10519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.698872][T10519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.710908][T10519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.721642][T10519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.732203][ T4760] Bluetooth: hci0: command 0x040f tx timeout [ 400.738566][T10519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.749629][T10519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.759957][T10519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.771077][T10519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.781305][T10519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.792635][T10519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.804118][T10519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.816903][T10519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.828183][T10519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.849177][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 400.860881][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 400.871786][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 400.891569][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 400.902132][T10519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.917447][T10519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.928125][T10519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.940720][T10519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.951401][T10519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.963493][T10519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.973675][T10519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.983143][ T4549] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 400.992279][T10519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.002416][T10519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.002511][ T4549] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 401.014192][T10519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.035500][T10519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.047763][ T4549] usb 5-1: config 179 has no interface number 0 [ 401.054930][ T4549] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 8 [ 401.064813][T10519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.073661][ T4549] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 19 [ 401.084352][T10519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.090014][ T4549] usb 5-1: config 179 interface 65 has no altsetting 0 [ 401.108504][T10519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.117516][T10519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.127648][T10519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.136874][ T4549] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 401.143004][T10519] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.160150][ T4549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.168671][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 401.181647][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.204928][T10672] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 401.318785][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.338494][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.374168][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 401.395926][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.444204][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.445522][ T4770] usb 5-1: USB disconnect, device number 21 [ 401.461910][ T144] device hsr_slave_0 left promiscuous mode [ 401.473796][ T144] device hsr_slave_1 left promiscuous mode [ 401.489861][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.499829][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.510544][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.518978][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.531119][ T144] device bridge_slave_1 left promiscuous mode [ 401.546360][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.559792][ T144] device bridge_slave_0 left promiscuous mode [ 401.571109][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.600884][ T144] device veth1_macvtap left promiscuous mode [ 401.617110][ T144] device veth0_macvtap left promiscuous mode [ 401.623911][ T144] device veth1_vlan left promiscuous mode [ 401.629731][ T144] device veth0_vlan left promiscuous mode [ 401.864686][ T144] team0 (unregistering): Port device team_slave_1 removed [ 401.881850][ T144] team0 (unregistering): Port device team_slave_0 removed [ 401.896304][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.909662][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.985223][ T144] bond0 (unregistering): Released all slaves [ 402.047008][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 402.939350][ T4770] Bluetooth: hci0: command 0x0419 tx timeout [ 403.783008][ T4630] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 404.272437][T10757] overlayfs: missing 'lowerdir' [ 404.419531][ T4630] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 404.999014][ T4630] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 405.008312][ T4630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.084034][T10739] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 405.105313][ T4630] opticon 1-1:1.0: opticon converter detected [ 405.124911][ T4630] usb 1-1: opticon converter now attached to ttyUSB0 [ 405.234818][T10771] loop5: detected capacity change from 0 to 1024 [ 405.306404][T10771] EXT4-fs (loop5): Ignoring removed oldalloc option [ 405.341011][T10771] EXT4-fs (loop5): inline encryption not supported [ 405.394145][T10771] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000004,oldalloc,barrier,bsddf,inlinecrypt,lazytime,stripe=0x000000000000ea4b,usrquota,i_version,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 405.909047][ T4760] usb 1-1: USB disconnect, device number 6 [ 406.077626][ T4760] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 406.260432][ T4760] opticon 1-1:1.0: device disconnected [ 407.604500][T10822] overlayfs: missing 'workdir' [ 412.450533][T10848] loop9: detected capacity change from 0 to 1024 [ 412.547082][T10848] EXT4-fs (loop9): Ignoring removed oldalloc option [ 412.673603][T10848] EXT4-fs (loop9): inline encryption not supported [ 412.882111][T10848] EXT4-fs (loop9): mounted filesystem without journal. Opts: journal_dev=0x0000000000000004,oldalloc,barrier,bsddf,inlinecrypt,lazytime,stripe=0x000000000000ea4b,usrquota,i_version,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 414.110715][T10870] chnl_net:caif_netlink_parms(): no params data found [ 414.207939][T10870] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.230173][T10870] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.239649][T10870] device bridge_slave_0 entered promiscuous mode [ 414.303920][T10870] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.320730][T10870] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.351895][T10870] device bridge_slave_1 entered promiscuous mode [ 414.466622][T10870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.523950][T10870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.535883][ T4754] Bluetooth: hci3: command 0x0409 tx timeout [ 416.818398][T10870] team0: Port device team_slave_0 added [ 417.009218][T10870] team0: Port device team_slave_1 added [ 417.093968][T10870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.101312][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.135247][T10870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.183271][T10870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.190264][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.306391][T10870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.439090][T10930] vcan0: tx drop: invalid da for name 0x0000000000008000 [ 417.466345][T10870] device hsr_slave_0 entered promiscuous mode [ 417.487952][T10870] device hsr_slave_1 entered promiscuous mode [ 417.530749][T10870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.552998][T10870] Cannot create hsr debugfs directory [ 417.603005][ T4754] Bluetooth: hci3: command 0x041b tx timeout [ 417.756304][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.839172][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.909193][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.929172][T10933] chnl_net:caif_netlink_parms(): no params data found [ 417.974379][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.056617][T10933] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.073254][T10933] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.081817][T10933] device bridge_slave_0 entered promiscuous mode [ 418.139775][T10933] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.155528][T10933] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.171685][T10933] device bridge_slave_1 entered promiscuous mode [ 418.520967][T10933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.715420][ T144] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.815101][T10933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.069598][ T144] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.106959][T10933] team0: Port device team_slave_0 added [ 419.128685][T10933] team0: Port device team_slave_1 added [ 419.149304][T10933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.156494][T10933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.185838][T10933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.201921][ T144] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.225231][T10933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.233165][T10933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.264241][T10933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.285742][ T144] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.683023][ T9082] Bluetooth: hci3: command 0x040f tx timeout [ 419.807708][T10933] device hsr_slave_0 entered promiscuous mode [ 419.842640][T10933] device hsr_slave_1 entered promiscuous mode [ 419.884908][T10933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.924962][T10933] Cannot create hsr debugfs directory [ 420.085546][ T4770] Bluetooth: hci2: command 0x0409 tx timeout [ 420.542576][ T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.631234][ T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.833542][ T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.273544][ T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.764839][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 422.163302][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 424.537505][T11016] overlayfs: missing 'lowerdir' [ 424.694324][ T4684] Bluetooth: hci2: command 0x040f tx timeout [ 426.918220][ T4684] Bluetooth: hci2: command 0x0419 tx timeout [ 428.653618][T11059] loop2: detected capacity change from 0 to 7 [ 428.672807][T11059] loop2: [ 428.676191][T11059] loop2: partition table partially beyond EOD, truncated [ 428.737308][T10870] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 428.753651][T10870] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 428.901134][T10870] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 428.927772][T10870] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 429.045851][T10933] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 430.356854][T10933] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 430.444656][T10933] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 430.473794][T10933] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 431.484044][ T4229] Bluetooth: hci2: command 0x0405 tx timeout [ 431.658019][T10870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.713117][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 431.721695][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.762140][T10933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.771805][T10870] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.821251][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 431.855371][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.914067][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.921185][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.970696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 431.994493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 432.030106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.046826][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.054328][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.162820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 433.065952][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 433.119858][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.143970][T10933] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.238004][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 433.262205][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 433.308326][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 433.333931][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 433.362719][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 433.383497][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 433.409893][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 433.440785][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 433.465646][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 433.517739][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 433.545134][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.552282][ T4524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.596897][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 433.624791][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 433.641660][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.648840][ T4524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.657796][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 433.754555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 433.783850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 433.817538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 433.857063][T10870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 433.896507][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 433.944309][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 433.957754][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 434.008012][T11146] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 434.016833][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 434.033793][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 434.042536][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 434.054275][T11146] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 434.067648][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 434.086476][T11152] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 434.100953][T10933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.121224][T11152] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 434.146029][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 434.253628][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 434.264337][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 434.315885][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 434.790875][ T144] device hsr_slave_0 left promiscuous mode [ 434.863923][ T144] device hsr_slave_1 left promiscuous mode [ 438.671703][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.754036][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.815938][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.843097][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.860940][ T144] device bridge_slave_1 left promiscuous mode [ 438.871414][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.909287][ T144] device bridge_slave_0 left promiscuous mode [ 438.917326][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.991149][ T144] device hsr_slave_0 left promiscuous mode [ 439.021438][T11208] smpboot: CPU 1 is now offline [ 439.041888][ T144] device hsr_slave_1 left promiscuous mode [ 439.077757][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.005033][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.011336][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.273319][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.323847][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.345625][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.369460][ T144] device bridge_slave_1 left promiscuous mode [ 440.397497][T11212] x86: Booting SMP configuration: [ 440.410971][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.426559][T11212] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 440.434772][ T0] kvm-clock: cpu 1, msr f103041, secondary cpu clock [ 440.446400][ T18] kvm-guest: stealtime: cpu 1, msr b9127440 [ 440.459065][ T144] device bridge_slave_0 left promiscuous mode [ 440.484543][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.500807][ T144] device hsr_slave_0 left promiscuous mode [ 440.511002][ T144] device hsr_slave_1 left promiscuous mode [ 440.536622][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.544731][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.555568][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.563431][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.572067][ T144] device bridge_slave_1 left promiscuous mode [ 440.578461][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.587828][ T144] device bridge_slave_0 left promiscuous mode [ 440.594543][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.608944][ T144] device veth1_macvtap left promiscuous mode [ 440.615422][ T144] device veth0_macvtap left promiscuous mode [ 440.622010][ T144] device veth1_vlan left promiscuous mode [ 440.628131][ T144] device veth0_vlan left promiscuous mode [ 440.635062][ T144] device veth1_macvtap left promiscuous mode [ 440.642274][ T144] device veth0_macvtap left promiscuous mode [ 440.648918][ T144] device veth1_vlan left promiscuous mode [ 440.655598][ T144] device veth0_vlan left promiscuous mode [ 440.662832][ T144] device veth1_macvtap left promiscuous mode [ 440.669033][ T144] device veth0_macvtap left promiscuous mode [ 440.675518][ T144] device veth1_vlan left promiscuous mode [ 440.681514][ T144] device veth0_vlan left promiscuous mode [ 440.990347][ T144] team0 (unregistering): Port device team_slave_1 removed [ 441.006104][ T144] team0 (unregistering): Port device team_slave_0 removed [ 441.018914][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.035344][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.107619][ T144] bond0 (unregistering): Released all slaves [ 441.225374][ T144] team0 (unregistering): Port device team_slave_1 removed [ 441.245840][ T144] team0 (unregistering): Port device team_slave_0 removed [ 441.259339][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.274043][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.351637][ T144] bond0 (unregistering): Released all slaves [ 441.449668][ T144] team0 (unregistering): Port device team_slave_1 removed [ 441.467504][ T144] team0 (unregistering): Port device team_slave_0 removed [ 441.481814][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.497253][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.570751][ T144] bond0 (unregistering): Released all slaves [ 441.624339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.631968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.640505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.648332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.678016][T11205] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1628'. [ 441.722056][T10870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.737469][T10933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.242972][ T4560] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 442.273066][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 442.292471][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 442.353274][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 442.403955][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 442.435500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 442.488822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 442.503064][ T4560] usb 1-1: Using ep0 maxpacket: 32 [ 442.516226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 442.534356][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.559067][T10870] device veth0_vlan entered promiscuous mode [ 442.586503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 442.637867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 442.643328][ T4560] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.687937][T10933] device veth0_vlan entered promiscuous mode [ 442.718509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 442.761512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.835409][T10870] device veth1_vlan entered promiscuous mode [ 442.911645][T10933] device veth1_vlan entered promiscuous mode [ 443.199307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 443.234098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 443.302329][T10870] device veth0_macvtap entered promiscuous mode [ 443.354814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 443.382236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 443.439295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 443.520331][T10933] device veth0_macvtap entered promiscuous mode [ 443.559808][T10870] device veth1_macvtap entered promiscuous mode [ 443.592203][T10933] device veth1_macvtap entered promiscuous mode [ 443.733651][T10620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 443.759095][T10620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 443.812815][T10620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 443.892224][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.939276][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.989427][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.053278][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.112097][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.169812][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.275608][T10870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.309109][T10933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.316231][ T4560] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 444.339253][T10933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.390898][T10933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.455734][T10933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.539441][T10933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.593696][T10933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.655013][T10933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.706590][T10933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.781653][T10933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.826838][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 444.857422][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 444.910587][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 444.999870][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 445.097461][T10933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.176927][T10933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.231311][T10933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.286367][T10933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.330643][ T4560] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.331127][T10933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.400756][T10933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.423062][ T4560] usb 1-1: string descriptor 0 read error: -71 [ 445.433407][T10933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.441786][ T4560] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.443916][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.478346][ T4560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.512918][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.522810][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.527477][ T4560] usb 1-1: can't set config #1, error -71 [ 445.600590][ T4560] usb 1-1: USB disconnect, device number 7 [ 445.609952][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.629507][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.645398][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.663065][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.684446][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.721030][T10870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.741768][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 445.761212][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 445.793346][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 445.831297][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 445.846546][T10933] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.867888][T10933] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.895908][T10933] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.922934][T10933] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.969867][T10870] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.988173][T10870] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.997778][T10870] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.008538][T10870] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.295159][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.323222][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.375853][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 446.411706][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.423496][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.432292][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.446734][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 446.457702][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.525664][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 446.566254][ T4528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.582127][ T4528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.593565][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 446.806787][T11311] loop7: detected capacity change from 0 to 2048 [ 446.874878][T11309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.924038][T11309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.996780][T11311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 448.966240][ T4771] Bluetooth: hci5: command 0x1003 tx timeout [ 448.972396][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 449.257303][T11355] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 449.301065][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1651'. [ 450.212431][T11364] loop7: detected capacity change from 0 to 131072 [ 450.278805][T11364] F2FS-fs (loop7): invalid crc value [ 450.390085][T11364] F2FS-fs (loop7): Found nat_bits in checkpoint [ 450.425717][T11364] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 450.451730][T11364] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 450.784484][T11409] loop6: detected capacity change from 0 to 512 [ 450.959228][T11409] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,barrier,,errors=continue. Quota mode: writeback. [ 451.027746][T11409] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 451.053048][ T4771] Bluetooth: hci5: command 0x1001 tx timeout [ 451.079288][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 451.216791][T11409] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Out of memory [ 451.246697][T11409] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #4: comm syz.6.1657: mark_inode_dirty error [ 451.300011][T11409] EXT4-fs warning (device loop6): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 38402 [ 451.383164][T11409] EXT4-fs warning (device loop6): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 38402 [ 451.433109][T11409] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Out of memory [ 451.508732][T11409] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #4: comm syz.6.1657: mark_inode_dirty error [ 451.583190][T11409] Quota error (device loop6): write_blk: dquota write failed [ 451.663020][T11409] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 451.672156][T11409] Quota error (device loop6): qtree_write_dquot: Error -12 occurred while creating quota [ 453.789663][ T4754] Bluetooth: hci5: command 0x1009 tx timeout [ 453.933001][ T4560] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 454.646857][T11409] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.1657: Failed to acquire dquot type 1 [ 454.782994][ T4560] usb 5-1: device descriptor read/all, error -71 [ 457.733932][T10933] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Out of memory [ 457.838735][T10933] EXT4-fs error (device loop6): ext4_quota_off:6542: inode #4: comm syz-executor: mark_inode_dirty error [ 460.592980][ T4771] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 461.558685][T11547] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 461.633110][ T4771] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 461.674863][ T4771] usb 8-1: config 1 interface 0 has no altsetting 0 [ 461.743088][ T4771] usb 8-1: string descriptor 0 read error: -71 [ 461.751806][ T4771] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 461.805037][T11562] file system registered [ 461.818287][ T4771] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.866551][T11562] No source specified [ 461.893502][ T4771] usb 8-1: can't set config #1, error -71 [ 461.919839][ T4771] usb 8-1: USB disconnect, device number 3 [ 462.210155][T11585] loop7: detected capacity change from 0 to 512 [ 462.333022][T11585] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.1681: iget: bad i_size value: 38620345925642 [ 462.400841][T11585] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1681: couldn't read orphan inode 15 (err -117) [ 462.473272][T11585] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 462.626249][T11609] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.1681: bg 0: block 5: invalid block bitmap [ 462.647438][T10933] ffs_data_put(): freeing [ 462.680909][T11585] EXT4-fs (loop7): shut down requested (1) [ 462.712985][ T4754] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 462.984517][T11628] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 463.003107][ T4754] usb 1-1: Using ep0 maxpacket: 16 [ 463.123076][ T4754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.620671][ T4754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.023252][ T4754] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 466.080636][ T4754] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 469.115350][ T4754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.155620][ T4754] usb 1-1: config 0 descriptor?? [ 469.186195][ T4754] usb 1-1: can't set config #0, error -71 [ 469.206558][ T4754] usb 1-1: USB disconnect, device number 8 [ 469.793911][T11719] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 470.258077][T11691] loop6: detected capacity change from 0 to 32768 [ 470.627487][ T4771] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 470.651193][ T4771] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 471.165918][T11794] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 472.084539][T11838] loop7: detected capacity change from 0 to 1024 [ 472.227148][T11838] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 472.396816][T11852] autofs4:pid:11852:autofs_fill_super: called with bogus options [ 472.407406][T11838] VFS: Lookup of 'file0' in ext4 loop7 would have caused loop [ 472.921058][T11881] loop7: detected capacity change from 0 to 512 [ 473.369768][T11881] EXT4-fs (loop7): Ignoring removed orlov option [ 474.958849][T11881] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 475.873005][T11881] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.1727: corrupted in-inode xattr [ 475.957073][T11881] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1727: couldn't read orphan inode 15 (err -117) [ 476.032993][T11881] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 476.216039][ T4754] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 476.272919][ T4754] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 477.409841][T11933] loop6: detected capacity change from 0 to 32768 [ 477.550920][T11933] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1736 (11933) [ 477.581165][T11940] loop7: detected capacity change from 0 to 32768 [ 477.616726][T11933] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 477.669900][T11933] BTRFS info (device loop6): allowing degraded mounts [ 477.703777][T11933] BTRFS info (device loop6): setting nodatasum [ 477.735725][T11933] BTRFS info (device loop6): disabling tree log [ 477.743699][T11940] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 477.783216][T11933] BTRFS info (device loop6): max_inline at 0 [ 477.789322][T11933] BTRFS info (device loop6): using free space tree [ 477.855704][T11933] BTRFS info (device loop6): has skinny extents [ 477.913886][ T26] audit: type=1800 audit(2000000533.726:35): pid=11940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1735" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 478.081887][T10870] ocfs2: Unmounting device (7,7) on (node local) [ 478.242374][T11933] BTRFS info (device loop6): enabling ssd optimizations [ 482.761740][T12182] loop7: detected capacity change from 0 to 512 [ 482.871084][T12182] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 482.943793][T12182] EXT4-fs (loop7): 1 truncate cleaned up [ 482.949658][T12182] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 486.944295][T12263] binder: 12262:12263 ioctl c0306201 200000000080 returned -14 [ 486.990950][T12263] binder: BINDER_SET_CONTEXT_MGR already set [ 487.028986][T12263] binder: 12262:12263 ioctl 4018620d 200000000040 returned -16 [ 487.057907][T12274] binder: 12262:12274 ioctl c0306201 2000000003c0 returned -14 [ 487.243073][ T4560] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 487.873231][ T4560] usb 7-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 487.893888][ T4560] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.927765][ T4560] usb 7-1: Product: syz [ 487.946058][ T4560] usb 7-1: Manufacturer: syz [ 487.962109][ T4560] usb 7-1: SerialNumber: syz [ 488.353187][ T4560] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 488.373249][ T4560] usb 7-1: unit 10 not found! [ 488.435855][T12335] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 488.470807][T12342] binder: 12341:12342 ioctl c0306201 200000000080 returned -14 [ 488.483161][T12335] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 488.514104][ T4560] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 488.523525][T12342] binder: BINDER_SET_CONTEXT_MGR already set [ 488.542723][T12342] binder: 12341:12342 ioctl 4018620d 200000000040 returned -16 [ 488.565720][ T4560] usb 7-1: USB disconnect, device number 7 [ 488.575668][T12345] binder: 12341:12345 ioctl c0306201 2000000003c0 returned -14 [ 488.837646][T12292] udevd[12292]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.283026][ T9082] Bluetooth: hci4: command 0x0406 tx timeout [ 498.470407][T12498] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 498.521446][T12498] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 498.863609][T12521] kvm: emulating exchange as write [ 501.447199][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.454748][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.317726][T12579] binder: 12575:12579 ioctl c0306201 200000000080 returned -14 [ 502.386590][T12579] binder: 12575:12579 ioctl c0306201 2000000003c0 returned -14 [ 504.160876][T12635] loop7: detected capacity change from 0 to 32768 [ 504.221834][T12635] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1812 (12635) [ 504.295382][T12635] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 504.344009][T12635] BTRFS info (device loop7): setting nodatacow, compression disabled [ 504.352136][T12635] BTRFS info (device loop7): turning on flush-on-commit [ 504.403108][T12635] BTRFS info (device loop7): trying to use backup root at mount time [ 504.462124][T12635] BTRFS info (device loop7): max_inline at 0 [ 504.502609][T12635] BTRFS info (device loop7): using free space tree [ 504.545207][T12635] BTRFS info (device loop7): has skinny extents [ 504.754700][ T4528] BTRFS warning (device loop7): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 504.830039][T12635] BTRFS warning (device loop7): failed to read root (objectid=2): -5 [ 504.855308][ T4528] BTRFS warning (device loop7): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 504.896949][T12635] BTRFS warning (device loop7): couldn't read tree root [ 504.923500][T12635] BTRFS error (device loop7): parent transid verify failed on 5255168 wanted 5 found 7 [ 504.953212][T12635] BTRFS warning (device loop7): couldn't read tree root [ 505.005916][T12635] BTRFS info (device loop7): enabling ssd optimizations [ 505.033731][T12635] BTRFS info (device loop7): clearing free space tree [ 505.040570][T12635] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 505.051154][ T4770] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 505.101961][T12635] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 505.193801][T12635] BTRFS info (device loop7): creating free space tree [ 505.230004][T12635] BTRFS info (device loop7): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 505.263984][T12635] BTRFS info (device loop7): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 505.470603][T12738] loop6: detected capacity change from 0 to 512 [ 505.615654][ T4770] usb 1-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 505.624963][T12738] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 505.652697][ T4770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.686549][ T4770] usb 1-1: Product: syz [ 505.703484][ T4770] usb 1-1: Manufacturer: syz [ 505.714462][T12738] EXT4-fs (loop6): 1 truncate cleaned up [ 505.720180][T12738] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 505.747549][ T4770] usb 1-1: SerialNumber: syz [ 505.989069][T12738] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 506.017967][T12738] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 506.153179][ T4770] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 506.213743][ T4770] usb 1-1: unit 10 not found! [ 506.289720][ T4770] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 506.302709][ T4770] usb 1-1: USB disconnect, device number 9 [ 506.595457][T12460] udevd[12460]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.240012][ T4404] Bluetooth: hci5: Frame reassembly failed (-84) [ 507.254212][ T4404] Bluetooth: hci5: Frame reassembly failed (-84) [ 507.316620][T12822] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 509.247542][ T4192] Bluetooth: hci1: command 0x0406 tx timeout [ 509.282998][ T5456] Bluetooth: hci5: command 0x1003 tx timeout [ 509.291598][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 511.178393][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 511.363004][ T5456] Bluetooth: hci5: command 0x1001 tx timeout [ 511.369210][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 511.895135][T12896] loop6: detected capacity change from 0 to 32768 [ 511.952402][T12896] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1840 (12896) [ 512.015658][T12896] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 512.040102][T12896] BTRFS info (device loop6): setting nodatacow, compression disabled [ 512.075899][T12896] BTRFS info (device loop6): turning on flush-on-commit [ 512.113142][T12896] BTRFS info (device loop6): trying to use backup root at mount time [ 512.137992][T12896] BTRFS info (device loop6): max_inline at 0 [ 512.157531][T12896] BTRFS info (device loop6): using free space tree [ 512.187248][T12896] BTRFS info (device loop6): has skinny extents [ 512.848602][ T4404] BTRFS warning (device loop6): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 512.929433][T12896] BTRFS warning (device loop6): failed to read root (objectid=2): -5 [ 513.442944][ T5456] Bluetooth: hci5: command 0x1009 tx timeout [ 515.208233][ T4528] BTRFS warning (device loop6): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 515.451187][T12896] BTRFS warning (device loop6): couldn't read tree root [ 515.558307][T12896] BTRFS error (device loop6): parent transid verify failed on 5255168 wanted 5 found 7 [ 516.532178][T12896] BTRFS warning (device loop6): couldn't read tree root [ 516.756122][T12977] netlink: 'syz.4.1847': attribute type 32 has an invalid length. [ 516.765056][T12977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1847'. [ 517.573060][T12896] BTRFS error (device loop6): open_ctree failed: -22 [ 517.629646][T13062] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 517.982395][T13081] loop7: detected capacity change from 0 to 512 [ 518.097704][T13081] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 518.125563][T13081] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 518.200531][T13081] EXT4-fs (loop7): 1 truncate cleaned up [ 518.220845][T13081] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 518.740113][T13111] overlayfs: upper fs needs to support d_type. [ 518.928886][T13111] overlayfs: conflicting lowerdir path [ 534.261536][T13442] device gretap0 entered promiscuous mode [ 534.318968][T13442] device macvlan2 entered promiscuous mode [ 534.357007][T13442] device vlan2 entered promiscuous mode [ 534.388401][T13442] device vlan2 left promiscuous mode [ 534.407348][T13442] device gretap0 left promiscuous mode [ 535.299000][T13475] kvm: pic: single mode not supported [ 535.299911][T13475] kvm: pic: single mode not supported [ 535.364379][T13475] kvm: pic: single mode not supported [ 535.370202][T13475] kvm: pic: level sensitive irq not supported [ 535.433631][T13475] kvm: pic: single mode not supported [ 535.486401][T13475] kvm: pic: single mode not supported [ 535.516220][T13475] kvm: pic: single mode not supported [ 535.521688][T13475] kvm: pic: level sensitive irq not supported [ 535.574836][T13475] kvm: pic: single mode not supported [ 535.813947][T13506] binder: 13502:13506 unknown command 0 [ 535.868090][T13506] binder: 13502:13506 ioctl c0306201 2000000001c0 returned -22 [ 535.990899][T13508] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 536.036035][T13522] tipc: Failed to remove unknown binding: 66,0,0/0:1698276314/1698276316 [ 536.112632][T13527] loop6: detected capacity change from 0 to 512 [ 536.143345][T13522] tipc: Failed to remove unknown binding: 66,0,0/0:1698276314/1698276315 [ 536.176132][T13530] tipc: Failed to remove unknown binding: 66,0,0/0:1698276314/1698276316 [ 536.208103][T13527] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 536.249659][T13530] tipc: Failed to remove unknown binding: 66,0,0/0:1698276314/1698276315 [ 536.258331][T13527] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 536.352680][T13527] EXT4-fs (loop6): 1 truncate cleaned up [ 536.368999][T13527] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 539.190853][T13604] device syzkaller0 entered promiscuous mode [ 540.173025][T13656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1909'. [ 540.655980][ T4770] Bluetooth: hci3: command 0x0406 tx timeout [ 540.866980][T13689] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 540.945595][T13689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.973909][T13695] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 541.139309][T13707] tipc: Failed to remove unknown binding: 66,0,0/0:73683506/73683508 [ 541.209691][T13707] tipc: Failed to remove unknown binding: 66,0,0/0:73683506/73683507 [ 541.432944][T13707] tipc: Failed to remove unknown binding: 66,0,0/0:73683506/73683508 [ 541.449149][T13706] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 542.874811][T13727] loop7: detected capacity change from 0 to 1024 [ 542.930183][T13727] EXT4-fs (loop7): Unrecognized mount option "context=system_u" or missing value [ 543.253172][ T4770] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 543.618705][T13812] binder: 13810:13812 ioctl 8010661b 0 returned -22 [ 543.663146][ T4770] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.688009][ T4770] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 545.143353][T13839] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1926'. [ 545.364152][ T4770] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 546.387985][ T4770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 546.436721][ T4770] usb 1-1: SerialNumber: syz [ 546.509761][ T4770] usb 1-1: can't set config #1, error -71 [ 546.540304][ T4770] usb 1-1: USB disconnect, device number 10 [ 546.710055][T13918] kvm: pic: single mode not supported [ 546.710828][T13918] kvm: pic: single mode not supported [ 546.735145][T13935] tipc: Failed to remove unknown binding: 66,0,0/0:2782399951/2782399953 [ 546.770659][T13918] kvm: pic: single mode not supported [ 546.770682][T13918] kvm: pic: level sensitive irq not supported [ 546.809495][T13918] kvm: pic: single mode not supported [ 546.833686][T13935] tipc: Failed to remove unknown binding: 66,0,0/0:2782399951/2782399952 [ 546.870096][T13918] kvm: pic: single mode not supported [ 546.870251][T13918] kvm: pic: single mode not supported [ 546.875930][T13918] kvm: pic: level sensitive irq not supported [ 547.093330][T13935] tipc: Failed to remove unknown binding: 66,0,0/0:2782399951/2782399953 [ 547.114944][T13918] kvm: pic: single mode not supported [ 549.109495][ T4528] Bluetooth: hci5: Frame reassembly failed (-84) [ 551.125961][ T4549] Bluetooth: hci5: command 0x1003 tx timeout [ 551.132080][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 551.390682][T14045] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1939'. [ 553.209151][ T5456] Bluetooth: hci5: command 0x1001 tx timeout [ 553.225038][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 554.658626][T14247] device syzkaller0 entered promiscuous mode [ 555.102396][T14268] FAULT_INJECTION: forcing a failure. [ 555.102396][T14268] name failslab, interval 1, probability 100, space 0, times 1 [ 555.103036][ C1] FAULT_INJECTION: forcing a failure. [ 555.103036][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 555.115390][ C0] FAULT_INJECTION: forcing a failure. [ 555.115390][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 555.128438][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 555.148612][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.158696][ C1] Call Trace: [ 555.162068][ C1] [ 555.165061][ C1] dump_stack_lvl+0x188/0x250 [ 555.169923][ C1] ? show_regs_print_info+0x20/0x20 [ 555.175128][ C1] ? load_image+0x410/0x410 [ 555.179736][ C1] ? prandom_u32+0x217/0x250 [ 555.184491][ C1] should_fail+0x383/0x4b0 [ 555.188948][ C1] should_failslab+0x5/0x20 [ 555.193535][ C1] slab_pre_alloc_hook+0x51/0xc0 [ 555.198521][ C1] kmem_cache_alloc_node+0x47/0x2c0 [ 555.203713][ C1] ? __alloc_skb+0xf4/0x750 [ 555.208648][ C1] __alloc_skb+0xf4/0x750 [ 555.213130][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 555.218259][ C1] ? __alloc_skb+0x750/0x750 [ 555.222884][ C1] ? mark_lock+0x94/0x320 [ 555.227427][ C1] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 555.233037][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 555.239029][ C1] ? verify_lock_unused+0x140/0x140 [ 555.244352][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 555.249840][ C1] mac80211_hwsim_beacon_tx+0x104/0x900 [ 555.255574][ C1] __iterate_interfaces+0x225/0x4c0 [ 555.260776][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 555.267103][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 555.273342][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 555.280456][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 555.285650][ C1] ? hw_scan_work+0xef0/0xef0 [ 555.290325][ C1] __hrtimer_run_queues+0x4ea/0xb60 [ 555.295711][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 555.300847][ C1] hrtimer_run_softirq+0x176/0x240 [ 555.306065][ C1] handle_softirqs+0x336/0x830 [ 555.310951][ C1] ? run_ksoftirqd+0xa4/0x100 [ 555.315658][ C1] ? do_softirq+0x210/0x210 [ 555.320163][ C1] ? run_ksoftirqd+0x81/0x100 [ 555.324944][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 555.330154][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 555.335468][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 555.340681][ C1] run_ksoftirqd+0xa4/0x100 [ 555.345191][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 555.350480][ C1] smpboot_thread_fn+0x520/0x990 [ 555.355536][ C1] kthread+0x42e/0x520 [ 555.359625][ C1] ? cpu_report_death+0x180/0x180 [ 555.364699][ C1] ? kthread_blkcg+0xd0/0xd0 [ 555.369283][ C1] ret_from_fork+0x1f/0x30 [ 555.373754][ C1] [ 555.376848][ C0] CPU: 0 PID: 14268 Comm: syz.0.1950 Not tainted syzkaller #0 [ 555.378051][ T5664] Bluetooth: hci5: command 0x1009 tx timeout [ 555.384308][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.384322][ C0] Call Trace: [ 555.384330][ C0] [ 555.384338][ C0] dump_stack_lvl+0x188/0x250 [ 555.384369][ C0] ? show_regs_print_info+0x20/0x20 [ 555.416859][ C0] ? load_image+0x410/0x410 [ 555.421652][ C0] ? mark_lock+0x94/0x320 [ 555.426818][ C0] ? prandom_u32+0x217/0x250 [ 555.431447][ C0] should_fail+0x383/0x4b0 [ 555.435984][ C0] should_failslab+0x5/0x20 [ 555.440510][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 555.445562][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 555.450791][ C0] ? __alloc_skb+0xf4/0x750 [ 555.455404][ C0] __alloc_skb+0xf4/0x750 [ 555.459767][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 555.464909][ C0] ? __alloc_skb+0x750/0x750 [ 555.469529][ C0] ? mark_lock+0x94/0x320 [ 555.473886][ C0] __ieee80211_beacon_get+0xa8f/0x1ff0 [ 555.479389][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 555.485404][ C0] ? verify_lock_unused+0x140/0x140 [ 555.490662][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 555.496157][ C0] mac80211_hwsim_beacon_tx+0x104/0x900 [ 555.501751][ C0] __iterate_interfaces+0x225/0x4c0 [ 555.506987][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 555.513264][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 555.519547][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 555.526646][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 555.531879][ C0] ? hw_scan_work+0xef0/0xef0 [ 555.536694][ C0] __hrtimer_run_queues+0x4ea/0xb60 [ 555.541947][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 555.547097][ C0] hrtimer_run_softirq+0x176/0x240 [ 555.552244][ C0] handle_softirqs+0x336/0x830 [ 555.557036][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 555.561921][ C0] ? do_softirq+0x210/0x210 [ 555.566450][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 555.571591][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 555.576895][ C0] __irq_exit_rcu+0x13b/0x230 [ 555.581609][ C0] ? irq_exit_rcu+0x20/0x20 [ 555.586181][ C0] irq_exit_rcu+0x5/0x20 [ 555.590715][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 555.596390][ C0] [ 555.599335][ C0] [ 555.602284][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 555.608387][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 555.614084][ C0] Code: 75 11 e8 13 df 18 00 4d 85 e4 75 16 e8 09 df 18 00 eb 15 e8 02 df 18 00 e8 dd f6 5f 08 4d 85 e4 74 ea e8 f3 de 18 00 fb 31 ff <89> de e8 49 e2 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 d7 [ 555.634236][ C0] RSP: 0018:ffffc900045cf9a0 EFLAGS: 00000246 [ 555.640420][ C0] RAX: ffffffff81601dbd RBX: 0000000000000001 RCX: 0000000000080000 [ 555.648409][ C0] RDX: ffffc900106b1000 RSI: 0000000000004808 RDI: 0000000000000000 [ 555.656401][ C0] RBP: ffffc900045cfc10 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 555.664478][ C0] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000200 [ 555.672468][ C0] R13: 000000000000008f R14: 0000000000000000 R15: dffffc0000000000 [ 555.680472][ C0] ? console_unlock+0xc8d/0x10f0 [ 555.685448][ C0] ? read_lock_is_recursive+0x10/0x10 [ 555.690854][ C0] ? console_trylock_spinning+0x370/0x370 [ 555.696594][ C0] ? __down_trylock_console_sem+0xf2/0x1f0 [ 555.702426][ C0] ? __down_trylock_console_sem+0x19f/0x1f0 [ 555.708345][ C0] ? vprintk_emit+0xa7/0x150 [ 555.713003][ C0] ? printk_parse_prefix+0x310/0x310 [ 555.718403][ C0] ? vprintk_emit+0xa7/0x150 [ 555.723008][ C0] ? console_trylock+0x70/0x70 [ 555.727814][ C0] ? vprintk_emit+0x150/0x150 [ 555.732579][ C0] vprintk_emit+0xc0/0x150 [ 555.737029][ C0] _printk+0xda/0x130 [ 555.741040][ C0] ? load_image+0x410/0x410 [ 555.745562][ C0] ? prandom_u32+0x217/0x250 [ 555.750188][ C0] should_fail+0x364/0x4b0 [ 555.754635][ C0] should_failslab+0x5/0x20 [ 555.759328][ C0] slab_pre_alloc_hook+0x51/0xc0 [ 555.764277][ C0] ? __sys_setsockopt+0x2bf/0x3d0 [ 555.769412][ C0] __kmalloc_track_caller+0x69/0x330 [ 555.774722][ C0] ? __sys_setsockopt+0x2bf/0x3d0 [ 555.779899][ C0] sctp_setsockopt+0x7d/0xf80 [ 555.784793][ C0] ? sock_common_recvmsg+0x1c0/0x1c0 [ 555.790106][ C0] __sys_setsockopt+0x2bf/0x3d0 [ 555.794987][ C0] __x64_sys_setsockopt+0xb1/0xc0 [ 555.800034][ C0] do_syscall_64+0x4c/0xa0 [ 555.804472][ C0] ? clear_bhb_loop+0x30/0x80 [ 555.809163][ C0] ? clear_bhb_loop+0x30/0x80 [ 555.813860][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 555.819770][ C0] RIP: 0033:0x7fc2cdc860d9 [ 555.824201][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.843824][ C0] RSP: 002b:00007fc2cbede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 555.852259][ C0] RAX: ffffffffffffffda RBX: 00007fc2cdf0dfa0 RCX: 00007fc2cdc860d9 [ 555.860253][ C0] RDX: 000000000000001e RSI: 0000000000000084 RDI: 0000000000000003 [ 555.868243][ C0] RBP: 00007fc2cdd1d024 R08: 0000000000000021 R09: 0000000000000000 [ 555.876240][ C0] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 555.884225][ C0] R13: 00007fc2cdf0e038 R14: 00007fc2cdf0dfa0 R15: 00007ffd9143ad88 [ 555.892319][ C0] [ 556.458698][T14268] CPU: 0 PID: 14268 Comm: syz.0.1950 Not tainted syzkaller #0 [ 556.466220][T14268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 556.476305][T14268] Call Trace: [ 556.479611][T14268] [ 556.482557][T14268] dump_stack_lvl+0x188/0x250 [ 556.487262][T14268] ? show_regs_print_info+0x20/0x20 [ 556.492485][T14268] ? load_image+0x410/0x410 [ 556.497019][T14268] ? prandom_u32+0x217/0x250 [ 556.501646][T14268] should_fail+0x383/0x4b0 [ 556.506096][T14268] should_failslab+0x5/0x20 [ 556.510615][T14268] slab_pre_alloc_hook+0x51/0xc0 [ 556.515554][T14268] ? __sys_setsockopt+0x2bf/0x3d0 [ 556.520605][T14268] __kmalloc_track_caller+0x69/0x330 [ 556.525916][T14268] ? __sys_setsockopt+0x2bf/0x3d0 [ 556.530974][T14268] sctp_setsockopt+0x7d/0xf80 [ 556.535724][T14268] ? sock_common_recvmsg+0x1c0/0x1c0 [ 556.541040][T14268] __sys_setsockopt+0x2bf/0x3d0 [ 556.545926][T14268] __x64_sys_setsockopt+0xb1/0xc0 [ 556.550982][T14268] do_syscall_64+0x4c/0xa0 [ 556.555418][T14268] ? clear_bhb_loop+0x30/0x80 [ 556.560118][T14268] ? clear_bhb_loop+0x30/0x80 [ 556.564828][T14268] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 556.570746][T14268] RIP: 0033:0x7fc2cdc860d9 [ 556.575187][T14268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.594863][T14268] RSP: 002b:00007fc2cbede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 556.603797][T14268] RAX: ffffffffffffffda RBX: 00007fc2cdf0dfa0 RCX: 00007fc2cdc860d9 [ 556.611801][T14268] RDX: 000000000000001e RSI: 0000000000000084 RDI: 0000000000000003 [ 556.619888][T14268] RBP: 00007fc2cdd1d024 R08: 0000000000000021 R09: 0000000000000000 [ 556.627883][T14268] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 556.635875][T14268] R13: 00007fc2cdf0e038 R14: 00007fc2cdf0dfa0 R15: 00007ffd9143ad88 [ 556.643884][T14268] [ 556.705422][T14340] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1956'. [ 556.729608][T14340] loop7: detected capacity change from 0 to 64 [ 556.817700][T14340] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop7 [ 556.956905][T14340] loop7: detected capacity change from 0 to 8 [ 557.219158][T14340] SQUASHFS error: zlib decompression failed, data probably corrupt [ 557.233090][T14340] SQUASHFS error: Failed to read block 0x9b: -5 [ 557.247510][T14340] SQUASHFS error: Unable to read metadata cache entry [99] [ 558.566832][T14340] SQUASHFS error: Unable to read inode 0x127 [ 558.736346][T14393] kvm: pic: non byte write [ 558.775061][T14393] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2943232592 (2943232592 ns) > initial count (1420284373 ns). Using initial count to start timer. [ 559.021609][T14398] device syzkaller0 entered promiscuous mode [ 559.619286][T14343] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1957'. [ 560.308987][T14431] loop7: detected capacity change from 0 to 4096 [ 560.559520][T14431] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 560.839031][T14431] EXT4-fs (loop7): shut down requested (2) [ 563.296089][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.302468][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.912592][T14627] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1975'. [ 565.005210][T14629] device syzkaller0 entered promiscuous mode [ 565.037406][T14627] bridge1: port 1(erspan0) entered blocking state [ 565.063494][T14627] bridge1: port 1(erspan0) entered disabled state [ 565.085309][T14627] device erspan0 entered promiscuous mode [ 565.207117][T14627] bridge1: port 1(erspan0) entered blocking state [ 565.213771][T14627] bridge1: port 1(erspan0) entered forwarding state [ 569.054347][T14690] device syzkaller0 entered promiscuous mode [ 569.860041][T14729] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 569.911251][T14736] batman_adv: batadv0: Adding interface: dummy0 [ 569.952957][T14736] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.453173][T14736] batman_adv: batadv0: Interface activated: dummy0 [ 570.504285][T14744] batadv0: mtu less than device minimum [ 570.531984][T14744] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.545578][T14744] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.558195][T14744] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.570675][T14744] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.583217][T14744] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.594753][T14744] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.606493][T14744] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.618593][T14744] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.630223][T14744] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 571.502112][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1998'. [ 571.515051][T14759] device syzkaller0 entered promiscuous mode [ 571.585808][T14736] device geneve2 entered promiscuous mode [ 571.630675][T14736] batman_adv: batadv0: Adding interface: geneve2 [ 571.683358][T14736] batman_adv: batadv0: Interface activated: geneve2 [ 575.583580][T14827] device syzkaller0 entered promiscuous mode [ 579.207060][T14866] device syzkaller0 entered promiscuous mode [ 579.233251][T14891] netlink: 'syz.1.2011': attribute type 1 has an invalid length. [ 579.573196][T14891] device bond1 entered promiscuous mode [ 580.988204][T14891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.652996][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'. [ 581.662959][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'. [ 581.671893][T14917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2013'. [ 582.024157][T14892] bond1: (slave erspan1): making interface the new active one [ 582.062346][T14892] device erspan1 entered promiscuous mode [ 582.115043][T14892] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 582.225147][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 585.442882][ T5664] Bluetooth: hci2: command 0x0406 tx timeout [ 588.028607][T15073] device syzkaller0 entered promiscuous mode [ 596.419187][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'. [ 602.844658][T15305] chnl_net:caif_netlink_parms(): no params data found [ 602.980784][T15305] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.007288][T15305] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.024203][T15305] device bridge_slave_0 entered promiscuous mode [ 603.049747][T15305] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.073000][T15305] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.094331][T15305] device bridge_slave_1 entered promiscuous mode [ 603.159162][T15305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.207172][T15305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.303862][T15305] team0: Port device team_slave_0 added [ 603.322756][T15305] team0: Port device team_slave_1 added [ 603.385685][T15305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.392668][T15305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.483144][T15305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.514727][T15305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.521710][T15305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.623043][T15305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.723293][T15305] device hsr_slave_0 entered promiscuous mode [ 603.742868][T15305] device hsr_slave_1 entered promiscuous mode [ 603.771305][T15305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.779610][T15305] Cannot create hsr debugfs directory [ 604.499738][ T4684] Bluetooth: hci5: command 0x0409 tx timeout [ 605.010069][T15317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 605.390265][T15317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.173597][T15305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 606.203153][T15305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 606.226595][T15305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 606.291614][T15305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 606.546773][T15305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.573173][ T4841] Bluetooth: hci5: command 0x041b tx timeout [ 606.591282][T15305] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.611549][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 606.637846][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 606.679583][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 606.699267][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 606.737014][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.744174][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.773256][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 606.796776][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 606.833364][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.840566][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.910801][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 606.921690][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 606.947283][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 606.972128][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 607.008306][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 607.034706][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 607.061495][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 607.087026][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 607.120105][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 607.141179][T15305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 607.180119][T15305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 607.213528][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 607.230840][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 607.260996][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 608.631948][T15305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.642941][ T4684] Bluetooth: hci5: command 0x040f tx timeout [ 608.670498][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.683592][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 608.752016][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 608.793658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 608.864920][ T4524] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.917733][T15305] device veth0_vlan entered promiscuous mode [ 608.946589][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 608.961049][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 608.988032][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 609.017308][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 609.059751][ T4524] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.136344][T15305] device veth1_vlan entered promiscuous mode [ 609.191005][ T4524] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.250806][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 609.267264][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 609.288512][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 609.313810][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 609.334948][T15305] device veth0_macvtap entered promiscuous mode [ 609.351823][T15305] device veth1_macvtap entered promiscuous mode [ 609.377297][ T4524] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.442222][T15305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.522866][T15305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.532731][T15305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.580098][T15305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.603072][T15305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.639517][T15305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.660212][T15305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.692966][T15305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.722062][T15305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.749217][T15305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.778629][T15305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.820507][T15305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.861259][T15305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.887333][T15305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.916225][T15305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.948553][T15305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.984228][T15305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.023000][T15305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.048369][T15305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.081557][T15305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.122845][T15305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.140900][T15305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.174713][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 610.183830][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 610.209990][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 610.242714][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 610.273679][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 610.297696][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 610.325188][T15305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.352869][T15305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.361619][T15305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.395600][T15305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.584669][ T4528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.592540][ T4528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.641786][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 610.681519][ T4528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.698495][ T4528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.723012][ T9082] Bluetooth: hci5: command 0x0419 tx timeout [ 610.738042][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 612.152954][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2061'. [ 612.161907][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2061'. [ 612.170874][T15549] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2061'. [ 612.895465][T15594] loop6: detected capacity change from 0 to 40427 [ 612.935289][T15594] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 612.943628][T15594] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 612.986463][T15594] F2FS-fs (loop6): Found nat_bits in checkpoint [ 613.116173][T15594] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 613.123428][T15594] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 613.410735][ T4524] bridge1: port 1(erspan0) entered disabled state [ 613.431483][ T4524] device erspan0 left promiscuous mode [ 613.462544][ T4524] bridge1: port 1(erspan0) entered disabled state [ 613.497525][T15594] attempt to access beyond end of device [ 613.497525][T15594] loop6: rw=2049, want=79384, limit=40427 [ 613.531739][T15616] attempt to access beyond end of device [ 613.531739][T15616] loop6: rw=2049, want=81448, limit=40427 [ 613.554210][T15616] attempt to access beyond end of device [ 613.554210][T15616] loop6: rw=2049, want=81920, limit=40427 [ 613.594834][T15616] attempt to access beyond end of device [ 613.594834][T15616] loop6: rw=2049, want=51224, limit=40427 [ 613.719246][T15616] attempt to access beyond end of device [ 613.719246][T15616] loop6: rw=2049, want=53248, limit=40427 [ 613.745732][T15616] attempt to access beyond end of device [ 613.745732][T15616] loop6: rw=2049, want=59392, limit=40427 [ 613.771619][T15616] attempt to access beyond end of device [ 613.771619][T15616] loop6: rw=2049, want=61448, limit=40427 [ 613.800643][T15616] attempt to access beyond end of device [ 613.800643][T15616] loop6: rw=2049, want=63496, limit=40427 [ 613.863194][T15616] attempt to access beyond end of device [ 613.863194][T15616] loop6: rw=2049, want=65896, limit=40427 [ 613.894087][T15616] attempt to access beyond end of device [ 613.894087][T15616] loop6: rw=2049, want=68504, limit=40427 [ 614.072178][T15614] device syzkaller0 entered promiscuous mode [ 614.126143][T15644] tipc: Started in network mode [ 614.171602][T15644] tipc: Node identity 5eaad5c9c341, cluster identity 4711 [ 614.205973][T15644] tipc: Enabled bearer , priority 0 [ 614.646550][T10933] F2FS-fs (loop6): Issue discard(6144, 6144, 512) failed, ret: -5 [ 614.646589][T10933] F2FS-fs (loop6): Issue discard(9728, 9728, 512) failed, ret: -5 [ 614.655786][T15613] tipc: Resetting bearer [ 614.676067][T10933] F2FS-fs (loop6): Issue discard(7168, 7168, 513) failed, ret: -5 [ 614.719919][T15613] tipc: Disabling bearer [ 615.540333][ T4524] device hsr_slave_0 left promiscuous mode [ 615.554962][ T4524] device hsr_slave_1 left promiscuous mode [ 615.811959][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.814397][T15687] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 615.820138][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.037106][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.071518][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.080161][ T4524] device bridge_slave_1 left promiscuous mode [ 617.104785][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.115348][ T4524] device bridge_slave_0 left promiscuous mode [ 617.128629][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.208894][ T4524] device veth1_macvtap left promiscuous mode [ 617.230482][ T4524] device veth0_macvtap left promiscuous mode [ 617.253550][ T4524] device veth1_vlan left promiscuous mode [ 617.276074][ T4524] device veth0_vlan left promiscuous mode [ 618.458296][ T4524] team0 (unregistering): Port device team_slave_1 removed [ 618.500354][ T4524] team0 (unregistering): Port device team_slave_0 removed [ 618.554479][ T4524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.614611][ T4524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.746063][ T4524] bond0 (unregistering): Released all slaves [ 624.331069][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.338469][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.769887][T15802] device syzkaller0 entered promiscuous mode [ 624.792689][T15810] device syzkaller0 entered promiscuous mode [ 624.836896][T15802] tipc: Started in network mode [ 624.842358][T15802] tipc: Node identity fa3437387d8e, cluster identity 4711 [ 624.881187][T15802] tipc: Enabled bearer , priority 0 [ 626.467528][T15801] tipc: Resetting bearer [ 626.491714][T15801] tipc: Disabling bearer [ 626.507911][ T4558] tipc: Node number set to 2277127992 [ 626.673552][T15853] loop3: detected capacity change from 0 to 128 [ 628.153064][T15853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 628.170413][T15853] System zones: 1-3, 19-19, 35-36 [ 628.186311][T15859] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 628.234657][T15853] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 628.277347][T15859] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 628.298339][T15853] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 630.686453][T15992] device syzkaller0 entered promiscuous mode [ 633.696412][ T4766] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 633.818006][T16044] device syzkaller0 entered promiscuous mode [ 633.952977][ T4766] usb 4-1: Using ep0 maxpacket: 8 [ 636.982932][ T4766] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 636.990666][ T4766] usb 4-1: can't read configurations, error -71 [ 637.430584][T16082] device syzkaller0 entered promiscuous mode [ 637.470337][T16081] device syzkaller0 entered promiscuous mode [ 638.108876][T16099] No source specified [ 642.362066][T16182] netlink: 'syz.6.2121': attribute type 4 has an invalid length. [ 642.375510][T16176] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 646.731697][T16213] tipc: Started in network mode [ 646.773715][T16213] tipc: Node identity 2007ff, cluster identity 4711 [ 646.854584][T16213] tipc: Node number set to 2099199 [ 653.662940][ T4233] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 656.432907][ T4233] usb 7-1: Using ep0 maxpacket: 8 [ 656.842972][ T4233] usb 7-1: device descriptor read/all, error -71 [ 660.992469][ T4233] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 663.024206][T16449] loop6: detected capacity change from 0 to 512 [ 663.610535][T16449] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 663.634101][T16452] tc action pedit 'at' offset 5 out of bounds [ 663.641330][T16452] tc action pedit 'at' offset 5 out of bounds [ 663.647528][T16452] tc action pedit 'at' offset 5 out of bounds [ 663.653662][T16452] tc action pedit 'at' offset 5 out of bounds [ 663.659752][T16452] tc action pedit 'at' offset 5 out of bounds [ 663.665897][T16452] tc action pedit 'at' offset 5 out of bounds [ 663.671985][T16452] tc action pedit 'at' offset 5 out of bounds [ 663.678156][T16452] tc action pedit 'at' offset 5 out of bounds [ 663.684291][T16452] tc action pedit 'at' offset 5 out of bounds [ 663.690461][T16452] tc action pedit 'at' offset 5 out of bounds [ 663.696625][T16452] net_ratelimit: 30 callbacks suppressed [ 663.696708][T16452] 0: reclassify loop, rule prio 0, protocol 800 [ 663.768222][T16449] EXT4-fs (loop6): 1 truncate cleaned up [ 663.788405][T16449] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 671.484507][T16496] tc action pedit offset must be on 32 bit boundaries [ 671.491373][T16496] tc action pedit offset must be on 32 bit boundaries [ 671.498363][T16496] tc action pedit offset must be on 32 bit boundaries [ 671.505224][T16496] tc action pedit offset must be on 32 bit boundaries [ 671.512151][T16496] tc action pedit offset must be on 32 bit boundaries [ 671.519691][T16496] tc action pedit offset must be on 32 bit boundaries [ 671.526799][T16496] tc action pedit offset must be on 32 bit boundaries [ 671.533732][T16496] tc action pedit offset must be on 32 bit boundaries [ 671.540532][T16496] tc action pedit offset must be on 32 bit boundaries [ 671.547535][T16496] tc action pedit offset must be on 32 bit boundaries [ 671.554372][T16496] TC_ACT_REPEAT abuse ? [ 671.560249][T16498] tcf_pedit_act: 7 callbacks suppressed [ 671.560324][T16498] tc action pedit 'at' offset 2 out of bounds [ 671.572162][T16498] tc action pedit 'at' offset 2 out of bounds [ 671.578471][T16498] tc action pedit 'at' offset 2 out of bounds [ 671.584903][T16498] tc action pedit 'at' offset 2 out of bounds [ 671.591270][T16498] tc action pedit 'at' offset 2 out of bounds [ 671.597408][T16498] tc action pedit 'at' offset 2 out of bounds [ 671.603680][T16498] tc action pedit 'at' offset 2 out of bounds [ 671.609851][T16498] tc action pedit 'at' offset 2 out of bounds [ 671.616090][T16498] tc action pedit 'at' offset 2 out of bounds [ 671.622191][T16498] tc action pedit 'at' offset 2 out of bounds [ 671.628348][T16498] TC_ACT_REPEAT abuse ? [ 685.770172][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.776645][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.764479][T16597] device ip6gretap0 entered promiscuous mode [ 688.784384][T10368] ffs_data_put(): freeing [ 694.879861][T16634] tipc: Started in network mode [ 695.963719][T16634] tipc: Node identity 2007ff, cluster identity 4711 [ 700.215851][T16634] tipc: Node number set to 2099199 [ 701.762996][ T5456] Bluetooth: hci3: command 0x0409 tx timeout [ 703.852981][ T4549] Bluetooth: hci3: command 0x041b tx timeout [ 704.815119][T16649] chnl_net:caif_netlink_parms(): no params data found [ 704.891122][T16649] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.898455][T16649] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.913370][T16649] device bridge_slave_0 entered promiscuous mode [ 704.923048][T16649] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.930735][T16649] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.946945][T16649] device bridge_slave_1 entered promiscuous mode [ 704.969213][T16649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.992180][T16649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.031501][T16649] team0: Port device team_slave_0 added [ 705.047109][T16649] team0: Port device team_slave_1 added [ 705.079491][T16649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.089167][T16649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.124282][T16649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.147611][T16649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.158565][T16649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.193003][T16649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.394838][T16649] device hsr_slave_0 entered promiscuous mode [ 705.933010][ T9082] Bluetooth: hci3: command 0x040f tx timeout [ 707.246068][T16649] device hsr_slave_1 entered promiscuous mode [ 707.266285][T16649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 707.291689][T16649] Cannot create hsr debugfs directory [ 708.026508][ T4840] Bluetooth: hci3: command 0x0419 tx timeout [ 709.136772][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2208'. [ 711.502585][T16707] syzkaller0: create flow: hash 703498107 index 2 [ 714.882846][ C0] syzkaller0: delete flow: hash 703498107 index 2 [ 715.259182][ T4769] syzkaller0: tun_net_xmit 76 [ 716.767228][ T4769] syzkaller0: tun_net_xmit 48 [ 718.222487][ T4766] syzkaller0: tun_net_xmit 76 [ 718.657127][ T4769] syzkaller0: tun_net_xmit 76 [ 719.160533][ T4769] syzkaller0: tun_net_xmit 76 [ 719.608611][T16880] UBIFS error (pid: 16880): cannot open "(null)", error -22 [ 722.031132][T16892] ================================================================== [ 722.031203][T16892] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0 [ 722.031346][T16892] Write of size 4 at addr ffffc900045a1fc0 by task syz.4.2223/16892 [ 722.031357][T16892] [ 722.031368][T16892] CPU: 0 PID: 16892 Comm: syz.4.2223 Not tainted syzkaller #0 [ 722.031381][T16892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 722.031389][T16892] Call Trace: [ 722.031394][T16892] [ 722.031401][T16892] dump_stack_lvl+0x188/0x250 [ 722.031426][T16892] ? show_regs_print_info+0x20/0x20 [ 722.031449][T16892] ? load_image+0x410/0x410 [ 722.031463][T16892] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 722.031481][T16892] ? drm_fb_helper_setcmap+0x2974/0x2b30 [ 722.031543][T16892] print_address_description+0x60/0x2d0 [ 722.031557][T16892] ? sys_imageblit+0x1ba8/0x25d0 [ 722.031568][T16892] kasan_report+0xdf/0x130 [ 722.031597][T16892] ? sys_imageblit+0x1ba8/0x25d0 [ 722.031610][T16892] sys_imageblit+0x1ba8/0x25d0 [ 722.031629][T16892] ? sys_copyarea+0x2530/0x2530 [ 722.031645][T16892] ? __lock_acquire+0x7b50/0x7b50 [ 722.031661][T16892] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 722.031672][T16892] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 722.031686][T16892] cw_putcs+0x15ef/0x18a0 [ 722.031698][T16892] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 722.031754][T16892] ? cw_clear+0x250/0x250 [ 722.031770][T16892] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 722.031788][T16892] fbcon_putcs+0x2c8/0x450 [ 722.031801][T16892] ? cw_clear+0x250/0x250 [ 722.031813][T16892] do_update_region+0x4e5/0x640 [ 722.031874][T16892] ? hide_cursor+0x320/0x320 [ 722.031887][T16892] ? fbcon_set_palette+0x54a/0x660 [ 722.031902][T16892] redraw_screen+0xa2c/0x1000 [ 722.031914][T16892] ? _raw_spin_unlock+0x40/0x40 [ 722.031929][T16892] ? clear_buffer_attributes+0x320/0x320 [ 722.031947][T16892] ? tty_do_resize+0xeb/0x160 [ 722.031985][T16892] vc_do_resize+0x122c/0x17b0 [ 722.032010][T16892] ? read_lock_is_recursive+0x10/0x10 [ 722.032023][T16892] ? vc_resize+0x50/0x50 [ 722.032033][T16892] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 722.032046][T16892] ? _raw_spin_unlock+0x40/0x40 [ 722.032062][T16892] vt_resizex+0x3ec/0x5a0 [ 722.032078][T16892] ? vt_disallocate+0x90/0x90 [ 722.032091][T16892] ? security_capable+0x85/0xb0 [ 722.032139][T16892] vt_ioctl+0xffa/0x1cb0 [ 722.032155][T16892] ? __vt_event_wait+0x260/0x260 [ 722.032178][T16892] ? tty_jobctrl_ioctl+0x164/0xae0 [ 722.032193][T16892] tty_ioctl+0x848/0xc30 [ 722.032205][T16892] ? security_file_ioctl+0x7c/0xa0 [ 722.032217][T16892] ? tty_get_icount+0xa0/0xa0 [ 722.032229][T16892] __se_sys_ioctl+0xfa/0x170 [ 722.032247][T16892] do_syscall_64+0x4c/0xa0 [ 722.032257][T16892] ? clear_bhb_loop+0x30/0x80 [ 722.032268][T16892] ? clear_bhb_loop+0x30/0x80 [ 722.032280][T16892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 722.032293][T16892] RIP: 0033:0x7f9bc83580d9 [ 722.032306][T16892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.032317][T16892] RSP: 002b:00007f9bc65b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.032332][T16892] RAX: ffffffffffffffda RBX: 00007f9bc85dffa0 RCX: 00007f9bc83580d9 [ 722.032342][T16892] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 0000000000000006 [ 722.032349][T16892] RBP: 00007f9bc83ef024 R08: 0000000000000000 R09: 0000000000000000 [ 722.032357][T16892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.032364][T16892] R13: 00007f9bc85e0038 R14: 00007f9bc85dffa0 R15: 00007ffe11a68898 [ 722.032381][T16892] [ 722.032386][T16892] [ 722.032389][T16892] [ 722.032391][T16892] Memory state around the buggy address: [ 722.032419][T16892] ffffc900045a1e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 722.032427][T16892] ffffc900045a1f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 722.032434][T16892] >ffffc900045a1f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 722.032447][T16892] ^ [ 722.032454][T16892] ffffc900045a2000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 722.032461][T16892] ffffc900045a2080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 722.032467][T16892] ================================================================== [ 722.032471][T16892] Disabling lock debugging due to kernel taint [ 722.032527][T16892] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 722.032534][T16892] CPU: 0 PID: 16892 Comm: syz.4.2223 Tainted: G B syzkaller #0 [ 722.032546][T16892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 722.032552][T16892] Call Trace: [ 722.032556][T16892] [ 722.032561][T16892] dump_stack_lvl+0x188/0x250 [ 722.032575][T16892] ? show_regs_print_info+0x20/0x20 [ 722.032587][T16892] ? load_image+0x410/0x410 [ 722.032601][T16892] panic+0x2f8/0x850 [ 722.032614][T16892] ? bpf_jit_dump+0xd0/0xd0 [ 722.032625][T16892] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 722.032636][T16892] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 722.032646][T16892] ? _raw_spin_unlock+0x40/0x40 [ 722.032656][T16892] ? sys_imageblit+0x1ba8/0x25d0 [ 722.032667][T16892] check_panic_on_warn+0x80/0xa0 [ 722.032680][T16892] ? sys_imageblit+0x1ba8/0x25d0 [ 722.032691][T16892] end_report+0x6d/0xf0 [ 722.032705][T16892] kasan_report+0x102/0x130 [ 722.032717][T16892] ? sys_imageblit+0x1ba8/0x25d0 [ 722.032731][T16892] sys_imageblit+0x1ba8/0x25d0 [ 722.032744][T16892] ? sys_copyarea+0x2530/0x2530 [ 722.032765][T16892] ? __lock_acquire+0x7b50/0x7b50 [ 722.032784][T16892] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 722.032801][T16892] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 722.032820][T16892] cw_putcs+0x15ef/0x18a0 [ 722.032834][T16892] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 722.032854][T16892] ? cw_clear+0x250/0x250 [ 722.032866][T16892] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 722.032878][T16892] fbcon_putcs+0x2c8/0x450 [ 722.032889][T16892] ? cw_clear+0x250/0x250 [ 722.032900][T16892] do_update_region+0x4e5/0x640 [ 722.032914][T16892] ? hide_cursor+0x320/0x320 [ 722.032925][T16892] ? fbcon_set_palette+0x54a/0x660 [ 722.032936][T16892] redraw_screen+0xa2c/0x1000 [ 722.032949][T16892] ? _raw_spin_unlock+0x40/0x40 [ 722.032960][T16892] ? clear_buffer_attributes+0x320/0x320 [ 722.032972][T16892] ? tty_do_resize+0xeb/0x160 [ 722.032983][T16892] vc_do_resize+0x122c/0x17b0 [ 722.032999][T16892] ? read_lock_is_recursive+0x10/0x10 [ 722.033010][T16892] ? vc_resize+0x50/0x50 [ 722.033020][T16892] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 722.033030][T16892] ? _raw_spin_unlock+0x40/0x40 [ 722.033041][T16892] vt_resizex+0x3ec/0x5a0 [ 722.033054][T16892] ? vt_disallocate+0x90/0x90 [ 722.033065][T16892] ? security_capable+0x85/0xb0 [ 722.033076][T16892] vt_ioctl+0xffa/0x1cb0 [ 722.033095][T16892] ? __vt_event_wait+0x260/0x260 [ 722.033111][T16892] ? tty_jobctrl_ioctl+0x164/0xae0 [ 722.033123][T16892] tty_ioctl+0x848/0xc30 [ 722.033133][T16892] ? security_file_ioctl+0x7c/0xa0 [ 722.033144][T16892] ? tty_get_icount+0xa0/0xa0 [ 722.033155][T16892] __se_sys_ioctl+0xfa/0x170 [ 722.033165][T16892] do_syscall_64+0x4c/0xa0 [ 722.033176][T16892] ? clear_bhb_loop+0x30/0x80 [ 722.033186][T16892] ? clear_bhb_loop+0x30/0x80 [ 722.033196][T16892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 722.033207][T16892] RIP: 0033:0x7f9bc83580d9 [ 722.033217][T16892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.033225][T16892] RSP: 002b:00007f9bc65b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.033238][T16892] RAX: ffffffffffffffda RBX: 00007f9bc85dffa0 RCX: 00007f9bc83580d9 [ 722.033246][T16892] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 0000000000000006 [ 722.033253][T16892] RBP: 00007f9bc83ef024 R08: 0000000000000000 R09: 0000000000000000 [ 722.033260][T16892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.033267][T16892] R13: 00007f9bc85e0038 R14: 00007f9bc85dffa0 R15: 00007ffe11a68898 [ 722.033279][T16892] [ 722.033484][T16892] Kernel Offset: disabled [ 722.823742][T16892] Rebooting in 86400 seconds..