last executing test programs: 7m42.94491294s ago: executing program 32 (id=300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x163342) fsopen(&(0x7f0000000100)='erofs\x00', 0x1) 6m10.992413652s ago: executing program 33 (id=517): socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xe, &(0x7f0000000000)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10) request_key(&(0x7f0000001080)='id_resolver\x00', &(0x7f00000010c0)={'syz', 0x3}, &(0x7f0000001100)=':\x00', 0x0) 5m36.447000538s ago: executing program 4 (id=598): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) 5m34.922274566s ago: executing program 4 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x7, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m28.274560475s ago: executing program 4 (id=610): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xb375) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) 5m27.089721182s ago: executing program 4 (id=612): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b11060000000000c6000000000000009500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) 5m20.682872354s ago: executing program 4 (id=622): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xb375) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) 5m17.763485016s ago: executing program 4 (id=627): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x15) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x5, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0xfffffe2c) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) close_range(r3, r3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000000000e3fffff7000006", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030008e7eebc872f0000180012800e0001007769726567756172640000"], 0x44}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500003800000000000190ac1414aa04009078e00000e0450000000000000000110000ac1414aaac1e0001341d17c1b7df60c70000000000"], 0x0) 5m2.282479852s ago: executing program 34 (id=627): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x15) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x5, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0xfffffe2c) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) close_range(r3, r3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000000000e3fffff7000006", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030008e7eebc872f0000180012800e0001007769726567756172640000"], 0x44}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500003800000000000190ac1414aa04009078e00000e0450000000000000000110000ac1414aaac1e0001341d17c1b7df60c70000000000"], 0x0) 4m36.533061412s ago: executing program 6 (id=715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x1, @remote, @local, {[], {{0x20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x4, "914f"}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x1a, [0x1, 0xfffffffe, 0x3, 0x6, 0x1, 0x10001]}]}}}}}}}}, 0x0) 4m36.266520131s ago: executing program 6 (id=716): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket(0xa, 0x3, 0x6) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) 4m35.34006015s ago: executing program 6 (id=719): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"a2e3ad214fc752f91b2538f70e06d038e7ff7fc6e5539b3250078b089b3908386d090890e0878f0e1ac6e7049b3367959b619a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0936cd3b78130daa66d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8c8c855ab79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14056c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x94a}}, 0x1006) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0xec776000) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000003000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x50007a2) 4m32.663114164s ago: executing program 6 (id=725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000020104000000000000000000000000000900020073797a32000000000400000000000900020073797a3100000000040007770a913bb785d6bcc780056a32b16000000013000300686173683a6e65742c"], 0x54}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = open(&(0x7f0000000000)='./file0\x00', 0x500, 0xc1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xc, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000004da82f080ad3e9f79a2095e48e090000009500"/39], 0x0, 0x50ea5a0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xd, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1, @ANYRESDEC=r3], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xd2c}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000c40)={@broadcast, @random="b7feff1eff00", @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "4a9e6c", 0x44, 0x2f, 0xe78c6d029ffc7582, @empty, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0xca88, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0xc289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x2, 0x4}, 0x2, {0x3, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000340), 0x3, 0xac43) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r5, 0x1) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r8, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @addr={0x5b, 0x5d}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x5}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x100, {}, {}, @connect={{0x7, 0x5f}, {0x2, 0x1}}}, {0x1, 0x0, 0x1, 0x0, @time={0x80000000, 0xfff}, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xd) readv(r9, &(0x7f0000000200)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1) landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x18, 0x0) io_setup(0x142e, &(0x7f0000000000)) 4m30.190006772s ago: executing program 6 (id=729): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4480, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) stat(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040010) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, 0x0, 0x4000) setsockopt$sock_attach_bpf(r2, 0x84, 0x1f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4m28.888928713s ago: executing program 6 (id=732): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 4m13.264608704s ago: executing program 35 (id=732): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 3m44.070978322s ago: executing program 8 (id=763): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4480, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) stat(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040010) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, 0x0, 0x4000) setsockopt$sock_attach_bpf(r2, 0x84, 0x1f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m43.333183405s ago: executing program 8 (id=816): gettid() timer_create(0x3, 0x0, &(0x7f0000044000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 3m28.303777688s ago: executing program 36 (id=816): gettid() timer_create(0x3, 0x0, &(0x7f0000044000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 3m28.174309502s ago: executing program 0 (id=868): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) move_pages(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xfffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@empty, 0x4d5, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, {}, {}, {0x7, 0xfffffffd}, 0x0, 0x0, 0x2}, 0x0, 0x4}}, 0xf8}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x80000300, 0x80000330, 0x80000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000e4ffffff0000000000000000000000000000000800000000000000000000000000000000000000ffffffff0002000000000000000000000000000004000000eeff00000000000000000000000000000000000000000000feffffff00060000"]}, 0x108) r6 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x204450, 0x0) syz_io_uring_setup(0x49d, &(0x7f0000000100)={0x0, 0x79af, 0x2, 0x8000, 0x400246}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) io_setup(0x1, &(0x7f0000000000)) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) 3m26.829449425s ago: executing program 0 (id=869): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{0xffff, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00'}) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000040), 0x0, 0x0) 3m26.624306711s ago: executing program 0 (id=870): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0xf88, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4}, @ptr={0x70742a85, 0x7fffc, 0x0, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 3m26.466891376s ago: executing program 0 (id=872): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) r4 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000280)=ANY=[@ANYBLOB="0372616e733d66642c7266646e6f3d8092f51c4aae285fd90688f5dcd4c5820259f20851b6630b99adb6eeb0ea53df9053620810086a156849881c809146620147bb45dcec48029168d96835", @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX=r4, @ANYBLOB]) 3m26.209533874s ago: executing program 0 (id=874): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) mlockall(0x3) 3m25.084625179s ago: executing program 0 (id=876): syz_open_dev$usbmon(0x0, 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 3m9.326302895s ago: executing program 37 (id=876): syz_open_dev$usbmon(0x0, 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 58.580498108s ago: executing program 7 (id=1268): futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x0) 57.065189635s ago: executing program 7 (id=1271): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000003240)) 56.995117767s ago: executing program 7 (id=1272): socket(0x10, 0x3, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_gettime(r0, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') syz_io_uring_setup(0x7918, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000080)) 55.303422231s ago: executing program 7 (id=1276): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe67, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x2f000000, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 54.564527733s ago: executing program 7 (id=1279): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) 53.651829882s ago: executing program 7 (id=1282): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000003240)) 38.616116725s ago: executing program 38 (id=1282): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000003240)) 13.921393742s ago: executing program 2 (id=1388): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x4f}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newqdisc={0x34, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200484dd}, 0x4000080) 13.530821194s ago: executing program 2 (id=1393): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0090) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04141a0c", @ANYRES8, @ANYRES16], 0x7) openat$tun(0xffffffffffffff9c, 0x0, 0x309940, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, 0x0, 0x8180, 0x0) 13.295427082s ago: executing program 2 (id=1398): r0 = fanotify_init(0x1, 0x101000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x441, 0x0) fanotify_mark(r0, 0x1, 0x800002b, r1, 0x0) openat(r1, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d030037250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x4924924924925b9, 0x8001) 11.268601526s ago: executing program 2 (id=1400): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0xc8, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r3 = gettid() rt_tgsigqueueinfo(0x0, r3, 0x5, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2600c000}, 0x10) 9.591021698s ago: executing program 9 (id=1417): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) syz_clone(0x8004000, &(0x7f0000000000)="7b9760077c", 0x5, &(0x7f0000000040), 0x0, &(0x7f0000000180)="3508d3a623d182ef03455374ae8cfcd533f3b6a4ff03f4bb43645126d268aab9261175431b6cadea09f8ca793732266f2a492d241ec8ac2dd7b9b05955a63f907a148b93596d00a76aaaeb366eca70297a715b12a843a024b5e8e35b0db42549e4306a17370524b8342765e478dc0dac6a9501a4075a32bda2cb5ed2541f5de3e5ffa63d9179685000743fc5f37d03606210515189ce5b3e28491bcd6768e04b396748381a40ab655ef6b42122b349dacc") open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$cgroup(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x600008, &(0x7f0000000300)={[{@subsystem='cpuacct'}, {@release_agent={'release_agent', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 9.420332404s ago: executing program 2 (id=1421): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$ptmx(0xffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000f00fc00", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 8.439042175s ago: executing program 5 (id=1426): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b8, &(0x7f0000000000)={r1, r2, 0x1, 0x0, 0x1000000000000}) 8.373474617s ago: executing program 5 (id=1428): socket(0x10, 0x3, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_gettime(r0, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') syz_io_uring_setup(0x7918, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000080)) 7.157392075s ago: executing program 5 (id=1431): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0xc8, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r3 = gettid() rt_tgsigqueueinfo(0x0, r3, 0x5, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2600c000}, 0x10) 5.706953561s ago: executing program 5 (id=1433): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x4f}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newqdisc={0x34, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200484dd}, 0x4000080) 5.442384798s ago: executing program 5 (id=1434): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex, 0x2e, 0x1, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, &(0x7f00000003c0), 0x0}, 0x40) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000240), 0x202c04, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x8, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mkdir(&(0x7f0000000180)='./file0\x00', 0xb2) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) unshare(0x28020480) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000e0010000000"], 0x24}}, 0x0) umount2(0x0, 0x4) umount2(&(0x7f0000000240)='./file0\x00', 0xc) 5.414419039s ago: executing program 9 (id=1435): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x298, 0x298, 0x298, 0x0, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0xff000000, 0x0, 0xff, 0xffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], 'ip6_vti0\x00', 'tunl0\x00', {0xff}, {}, 0x2e, 0x7, 0x5, 0x40}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x19, 0x10, 0x6}}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffffff], 'macvtap0\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0xc, 0x3, 0x4}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}, 0x29, 0x27, 0xdbd5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x298}}, {{@uncond, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@mcast2, 0xd3, 0x0, 0xa}}}, {{@ipv6={@empty, @remote, [0xffffff00, 0xff000000, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'pim6reg1\x00', 'ipvlan0\x00', {0xff}, {}, 0x32, 0x4, 0x4, 0x19}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@remote, 0x18, 0x17, 0xc1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x0, 0xfffffffb}}}}, 0x58c) 3.191328499s ago: executing program 9 (id=1438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 3.16636927s ago: executing program 3 (id=1439): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x20041, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000001c0)={"d55b00f4749074bb00008000"}) 2.038369036s ago: executing program 9 (id=1441): socket(0x10, 0x3, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_gettime(r0, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000040)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') syz_io_uring_setup(0x7918, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000080)) 1.998944637s ago: executing program 3 (id=1442): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') getdents(r0, &(0x7f0000000400)=""/205, 0xcd) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 1.90108734s ago: executing program 2 (id=1443): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0xc8, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r3 = gettid() rt_tgsigqueueinfo(0x0, r3, 0x5, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2600c000}, 0x10) 1.795872104s ago: executing program 3 (id=1445): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1.552806091s ago: executing program 3 (id=1446): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) 1.396881526s ago: executing program 3 (id=1449): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) 1.230976571s ago: executing program 1 (id=1450): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) tee(r1, r0, 0x9, 0x2) 1.160571493s ago: executing program 9 (id=1451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7f, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x102280}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0x3, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xe, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x7, 0x9, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x1, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x5, 0xff, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.051201007s ago: executing program 1 (id=1452): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 918.993701ms ago: executing program 3 (id=1453): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) 918.873141ms ago: executing program 1 (id=1454): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r0, 0x8925, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) 647.438239ms ago: executing program 5 (id=1455): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x1, r2, r1}) 630.91196ms ago: executing program 9 (id=1456): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000000c0)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000007d00000085000000a000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x60, 0x1, 0x9cd, 0x12, 0x6, 0x1]}, &(0x7f0000000180)=0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07aebe92cc85", @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) 590.309611ms ago: executing program 1 (id=1457): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x4f}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newqdisc={0x34, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200484dd}, 0x4000080) 55.153838ms ago: executing program 1 (id=1458): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x24048014) 0s ago: executing program 1 (id=1459): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x400002) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) kernel console output (not intermixed with test programs): imeout [ 292.793445][ T6352] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 292.855101][ T6352] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 292.927080][ T6352] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 292.995446][ T6352] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 293.404370][ T6352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.531097][ T6352] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.552099][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.383260][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.520217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.716935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.107898][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.114979][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.221052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.233632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 297.242791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.260359][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.267465][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.297877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.311620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.397890][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.448599][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.490282][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.529099][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.619509][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.723648][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.744576][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.767533][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 298.804213][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.852421][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.438554][ T6352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.527548][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.559062][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.628854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.652587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.715622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.758220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.800875][ T6352] device veth0_vlan entered promiscuous mode [ 305.810162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.877017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.905559][ T6352] device veth1_vlan entered promiscuous mode [ 307.057432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 307.065568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.136485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.178313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.208467][ T6352] device veth0_macvtap entered promiscuous mode [ 307.218556][ T6352] device veth1_macvtap entered promiscuous mode [ 307.292069][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.353576][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.404273][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.455489][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.495959][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.536280][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.594741][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.625644][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.653785][ T6352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.677110][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 307.685758][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.717599][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.763018][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.804442][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.845459][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.877653][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.920015][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.958499][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.995712][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.044677][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.073966][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.102540][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.143435][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.174781][ T6352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.217678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.247310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.295417][ T6352] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.346009][ T6352] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.410351][ T6352] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.471828][ T6352] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.214095][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.246326][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.360503][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 310.487609][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.505624][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.536824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 310.623770][ T4278] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.763991][ T4278] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.969835][ T4278] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.111550][ T4278] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.985603][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.025984][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.959948][ T4278] device hsr_slave_0 left promiscuous mode [ 317.966685][ T4278] device hsr_slave_1 left promiscuous mode [ 318.036644][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.044053][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.156562][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.166913][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.231192][ T4278] device bridge_slave_1 left promiscuous mode [ 318.323675][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.493156][ T4278] device bridge_slave_0 left promiscuous mode [ 319.017132][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.042798][ T4278] device veth1_macvtap left promiscuous mode [ 319.066435][ T4278] device veth0_macvtap left promiscuous mode [ 319.072991][ T4278] device veth1_vlan left promiscuous mode [ 319.579455][ T4278] device veth0_vlan left promiscuous mode [ 324.181379][ T4278] team0 (unregistering): Port device team_slave_1 removed [ 324.237046][ T4278] team0 (unregistering): Port device team_slave_0 removed [ 325.416972][ T4278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.496441][ T4278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.740231][ T4278] bond0 (unregistering): Released all slaves [ 325.756902][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 325.949066][ T6611] tipc: Started in network mode [ 325.955695][ T6611] tipc: Node identity e2c287b80a32, cluster identity 4711 [ 325.984483][ T6611] tipc: Enabled bearer , priority 0 [ 326.137854][ T6611] tipc: Disabling bearer [ 332.496027][ T6715] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 337.989455][ T6755] netlink: 6 bytes leftover after parsing attributes in process `syz.0.630'. [ 341.588865][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 348.758576][ T4235] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 349.956310][ T4235] usb 1-1: Using ep0 maxpacket: 32 [ 350.076331][ T4235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 350.120804][ T4235] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 350.336257][ T4235] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 350.412903][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 350.421510][ T4235] usb 1-1: Product: syz [ 350.425678][ T4235] usb 1-1: Manufacturer: syz [ 350.430573][ T4235] usb 1-1: SerialNumber: syz [ 350.484290][ T4235] usb 1-1: config 0 descriptor?? [ 350.925401][ T4231] usb 1-1: USB disconnect, device number 5 [ 355.598016][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 355.598030][ T26] audit: type=1326 audit(1780868282.842:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.1.667" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f492d24ce59 code=0x0 [ 357.916463][ T4291] Bluetooth: hci2: command 0x0405 tx timeout [ 358.091223][ T4295] Bluetooth: hci5: command 0x0409 tx timeout [ 359.764540][ T6910] chnl_net:caif_netlink_parms(): no params data found [ 360.166300][ T4295] Bluetooth: hci5: command 0x041b tx timeout [ 360.276487][ T6910] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.331298][ T6960] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 360.535498][ T6910] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.174812][ T6910] device bridge_slave_0 entered promiscuous mode [ 361.187025][ T6910] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.194150][ T6910] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.875185][ T6910] device bridge_slave_1 entered promiscuous mode [ 361.914905][ T6910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.097929][ T6910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.246145][ T4291] Bluetooth: hci5: command 0x040f tx timeout [ 362.296965][ T6910] team0: Port device team_slave_0 added [ 362.325476][ T6979] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 362.364176][ T6910] team0: Port device team_slave_1 added [ 362.481261][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.536485][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.704422][ T6910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.797979][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.836121][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.943253][ T6910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.583588][ T6910] device hsr_slave_0 entered promiscuous mode [ 363.749604][ T6910] device hsr_slave_1 entered promiscuous mode [ 363.796958][ T6910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.894032][ T4291] Bluetooth: hci5: command 0x0419 tx timeout [ 364.904385][ T7010] sctp: [Deprecated]: syz.3.685 (pid 7010) Use of int in maxseg socket option. [ 364.904385][ T7010] Use struct sctp_assoc_value instead [ 364.996860][ T6910] Cannot create hsr debugfs directory [ 366.807499][ T6910] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 366.828300][ T6910] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 366.863131][ T6910] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 366.908309][ T6910] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 367.159394][ T6910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.247352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 367.283805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.340258][ T6910] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.383354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 367.415178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 367.479488][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.486604][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.575564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 367.642486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 367.704292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 367.760768][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.767913][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.864682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 368.024172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 368.035240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 368.047096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 368.189435][ T6910] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.251532][ T6910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.330640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 368.357564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 368.382553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 368.455338][ T7051] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 369.234164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.244186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.254936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.266777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.275106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 369.594242][ T4405] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.771907][ T4405] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.889246][ T4405] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.940801][ T7024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.982707][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.021228][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.081699][ T4405] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.150323][ T7074] netlink: 28 bytes leftover after parsing attributes in process `syz.6.703'. [ 370.182450][ T6910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.610229][ T4405] tipc: Left network mode [ 373.463148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 373.762085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 374.109267][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 374.123560][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 374.220682][ T4405] device hsr_slave_0 left promiscuous mode [ 374.237348][ T4405] device hsr_slave_1 left promiscuous mode [ 374.259164][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.294385][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.313171][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.332796][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.354092][ T4405] device bridge_slave_1 left promiscuous mode [ 374.373304][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.387027][ T4405] device bridge_slave_0 left promiscuous mode [ 374.413795][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.444978][ T4405] device veth1_macvtap left promiscuous mode [ 374.493799][ T4405] device veth0_macvtap left promiscuous mode [ 374.514901][ T4405] device veth1_vlan left promiscuous mode [ 374.542954][ T4405] device veth0_vlan left promiscuous mode [ 374.596251][ T1325] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 374.870816][ T4405] team0 (unregistering): Port device team_slave_1 removed [ 374.893801][ T4405] team0 (unregistering): Port device team_slave_0 removed [ 374.912569][ T4405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.930878][ T4405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.976454][ T1325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.986129][ T4231] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 374.988555][ T1325] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 375.007262][ T1325] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 375.016449][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.029661][ T1325] usb 1-1: config 0 descriptor?? [ 375.056997][ T4405] bond0 (unregistering): Released all slaves [ 375.111587][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 375.120604][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 375.130651][ T6910] device veth0_vlan entered promiscuous mode [ 375.182212][ T6910] device veth1_vlan entered promiscuous mode [ 376.237510][ T4231] usb 7-1: Using ep0 maxpacket: 8 [ 376.243479][ T7123] udc-core: couldn't find an available UDC or it's busy [ 376.317731][ T7123] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 376.404635][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 376.416803][ T4231] usb 7-1: unable to get BOS descriptor or descriptor too short [ 376.443885][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 376.471019][ T6910] device veth0_macvtap entered promiscuous mode [ 376.477515][ T4231] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 376.488951][ T7144] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 376.495664][ T4231] usb 7-1: can't read configurations, error -71 [ 376.502091][ T7144] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 376.522095][ T7144] device hsr0 entered promiscuous mode [ 376.543894][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'. [ 376.661251][ T6910] device veth1_macvtap entered promiscuous mode [ 376.726304][ T1325] usb 1-1: string descriptor 0 read error: -71 [ 376.745486][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.758393][ T1325] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 376.788752][ T1325] usb 1-1: USB disconnect, device number 6 [ 376.795365][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.823201][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.838410][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.854789][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.880741][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.910402][ T6910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.996897][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 377.010564][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 377.042244][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.118964][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.163036][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.268710][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.313681][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.358865][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.417568][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.510314][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.544212][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.604496][ T6910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.660907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 377.703954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 377.988623][ T6910] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.019205][ T6910] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.089020][ T6910] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.108146][ T7172] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 378.133827][ T6910] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.410916][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.420914][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.533031][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.566905][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.329269][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 381.645106][ T4480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.655877][ T4480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.679312][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 383.106442][ T7198] sctp: failed to load transform for md5: -2 [ 383.576392][ T7211] 9pnet: Insufficient options for proto=fd [ 383.666585][ T7219] dlm: no local IP address has been set [ 383.672363][ T7219] dlm: cannot start dlm midcomms -107 [ 385.774890][ T7244] netem: change failed [ 388.807750][ T7274] binder: 7270:7274 ioctl c0285840 200000000000 returned -22 [ 390.837946][ T7282] comedi comedi0: reset error (fatal) [ 393.879429][ T7392] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 397.579670][ T7424] 9pnet_virtio: no channels available for device syz [ 401.208377][ T7444] comedi comedi0: reset error (fatal) [ 401.510721][ T7500] 9pnet: Insufficient options for proto=fd [ 401.574692][ T7500] dlm: no local IP address has been set [ 401.637638][ T7500] dlm: cannot start dlm midcomms -107 [ 402.117620][ T4405] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.292531][ T4405] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.669355][ T4405] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.839901][ T4405] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.981810][ T7513] chnl_net:caif_netlink_parms(): no params data found [ 403.932448][ T7513] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.950476][ T7513] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.176834][ T7513] device bridge_slave_0 entered promiscuous mode [ 404.246248][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 404.334757][ T7513] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.411287][ T7513] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.475703][ T7513] device bridge_slave_1 entered promiscuous mode [ 404.846567][ T7513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.909819][ T7513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.647060][ T7513] team0: Port device team_slave_0 added [ 405.653804][ T7513] team0: Port device team_slave_1 added [ 405.786248][ T21] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 405.922300][ T7513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.976784][ T7513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.076336][ T21] usb 8-1: Using ep0 maxpacket: 32 [ 406.096543][ T7513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.181865][ T7513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.201690][ T7513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.203435][ T21] usb 8-1: config 0 has no interfaces? [ 406.314269][ T7513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.326167][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 406.487060][ T7513] device hsr_slave_0 entered promiscuous mode [ 406.521044][ T7513] device hsr_slave_1 entered promiscuous mode [ 406.556561][ T7513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.576518][ T21] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 406.585578][ T21] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 406.707011][ T7513] Cannot create hsr debugfs directory [ 406.856729][ T21] usb 8-1: Product: syz [ 406.860928][ T21] usb 8-1: Manufacturer: syz [ 406.865528][ T21] usb 8-1: SerialNumber: syz [ 406.938378][ T21] usb 8-1: config 0 descriptor?? [ 406.975543][ T4405] device hsr_slave_0 left promiscuous mode [ 407.024383][ T4405] device hsr_slave_1 left promiscuous mode [ 407.047474][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.066168][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.088957][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.126688][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.142786][ T4405] device bridge_slave_1 left promiscuous mode [ 407.162935][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.202476][ T4405] device bridge_slave_0 left promiscuous mode [ 407.212921][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.270100][ T4405] device veth1_macvtap left promiscuous mode [ 407.299750][ T4405] device veth0_macvtap left promiscuous mode [ 407.305832][ T4405] device veth1_vlan left promiscuous mode [ 407.332504][ T4405] device veth0_vlan left promiscuous mode [ 407.341077][ T7557] overlayfs: upper fs does not support tmpfile. [ 407.354292][ T4291] usb 8-1: USB disconnect, device number 2 [ 407.366065][ T7583] comedi comedi0: reset error (fatal) [ 408.416188][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 410.486150][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 411.021437][ T4405] team0 (unregistering): Port device team_slave_1 removed [ 411.077669][ T4405] team0 (unregistering): Port device team_slave_0 removed [ 411.120952][ T4405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.208880][ T4405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.585319][ T4405] bond0 (unregistering): Released all slaves [ 420.847658][ T7513] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 420.937435][ T7513] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 420.982768][ T7513] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 421.032339][ T7513] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 421.378988][ T7513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.478906][ T7513] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.494748][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 421.542617][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.570474][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 421.621638][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 421.658145][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.665222][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.744374][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 421.776635][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.838909][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.845978][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.966453][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 422.005787][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 422.100987][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 422.385262][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 422.521999][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 422.846647][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 422.882665][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 422.927160][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 422.961349][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 423.033952][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 423.074871][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 423.145980][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 423.185459][ T7513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 423.566512][ T7756] tmpfs: Unknown parameter 'quota' [ 423.906168][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.920101][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.995142][ T7513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.725165][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 424.770748][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.870173][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 424.943483][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 425.078028][ T7513] device veth0_vlan entered promiscuous mode [ 425.115999][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 425.161167][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 425.294048][ T7513] device veth1_vlan entered promiscuous mode [ 425.374917][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 425.391044][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 425.419964][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 425.456465][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 425.493117][ T7513] device veth0_macvtap entered promiscuous mode [ 425.549285][ T7513] device veth1_macvtap entered promiscuous mode [ 425.677669][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.758441][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.840060][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.978818][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.052794][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.099176][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.161667][ T7513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.202047][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 426.259015][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 426.352832][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 426.428374][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 426.476412][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.544059][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.683053][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.744152][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.778217][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.856349][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.937945][ T7513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.882760][ T7513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.097437][ T7513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.109492][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 428.124598][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 428.239280][ T7819] bridge0: port 3(syz_tun) entered blocking state [ 428.254096][ T7819] bridge0: port 3(syz_tun) entered disabled state [ 428.268133][ T7819] device syz_tun entered promiscuous mode [ 428.274493][ T7819] bridge0: port 3(syz_tun) entered blocking state [ 428.281155][ T7819] bridge0: port 3(syz_tun) entered forwarding state [ 428.294382][ T7513] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.339759][ T7513] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.933922][ T7513] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.040211][ T7513] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.288448][ T7332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.310672][ T7332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.318212][ T2401] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 430.340804][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 430.365733][ T7332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.377057][ T7332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.402037][ T7332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 430.897065][ T2401] usb 2-1: unable to get BOS descriptor or descriptor too short [ 430.999198][ T2401] usb 2-1: no configurations [ 431.019818][ T2401] usb 2-1: can't read configurations, error -22 [ 435.323102][ T7940] netlink: 'syz.7.831': attribute type 10 has an invalid length. [ 435.346842][ T7940] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 435.763960][ T7940] crypto_alloc_aead failed rc=-2 [ 436.396122][ T7698] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 438.918396][ T7698] usb 1-1: Using ep0 maxpacket: 32 [ 439.056347][ T7698] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 439.086474][ T7698] usb 1-1: can't read configurations, error -71 [ 439.866042][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.872453][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.653163][ T7992] Process accounting resumed [ 440.664086][ T26] audit: type=1800 audit(1780868367.902:162): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.839" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 440.692006][ T7994] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 441.566175][ T7994] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 441.575784][ T7994] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 441.696602][ T7994] syz.7.839 (7994) used greatest stack depth: 17752 bytes left [ 442.643526][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'. [ 442.814440][ T8030] kAFS: No cell specified [ 443.106880][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 444.967345][ T8077] input: syz1 as /devices/virtual/input/input7 [ 445.206082][ T4291] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 445.496082][ T4291] usb 4-1: Using ep0 maxpacket: 16 [ 445.616276][ T4291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 445.836296][ T4291] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 445.866231][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.874249][ T4291] usb 4-1: Product: syz [ 445.936354][ T4291] usb 4-1: Manufacturer: syz [ 445.950804][ T4291] usb 4-1: SerialNumber: syz [ 445.962353][ T4291] usb 4-1: config 0 descriptor?? [ 446.048545][ T4291] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 446.071749][ T4291] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 446.607998][ T8106] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 446.696378][ T4291] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 447.706287][ T4291] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 447.757147][ T4291] em28xx 4-1:0.0: board has no eeprom [ 447.948748][ T4291] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 447.966323][ T4291] em28xx 4-1:0.0: dvb set to bulk mode. [ 448.038410][ T4291] usb 4-1: USB disconnect, device number 6 [ 448.257144][ T4291] em28xx 4-1:0.0: Disconnecting em28xx [ 449.154097][ T2401] em28xx 4-1:0.0: Binding DVB extension [ 449.215375][ T4509] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.329293][ T8109] chnl_net:caif_netlink_parms(): no params data found [ 449.398064][ T4509] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.409358][ T2401] em28xx 4-1:0.0: Registering input extension [ 449.499769][ T4291] em28xx 4-1:0.0: Closing input extension [ 449.515244][ T4236] Bluetooth: hci2: command 0x0409 tx timeout [ 449.681854][ T4291] em28xx 4-1:0.0: Freeing device [ 449.830066][ T4509] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.470870][ T8165] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 450.735781][ T4509] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.832318][ T8109] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.846164][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.916968][ T8109] device bridge_slave_0 entered promiscuous mode [ 452.514636][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 453.071715][ T8109] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.100340][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.112711][ T8109] device bridge_slave_1 entered promiscuous mode [ 453.192117][ T8190] 9pnet_virtio: no channels available for device 127.0.0.1 [ 454.585557][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 454.776396][ T8109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.897489][ T8109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.087258][ T8206] netlink: 'syz.3.890': attribute type 5 has an invalid length. [ 455.122889][ T8109] team0: Port device team_slave_0 added [ 455.156495][ T7698] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 455.170853][ T8109] team0: Port device team_slave_1 added [ 455.219387][ T8206] fuse: Bad value for 'fd' [ 455.336094][ T8109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.361028][ T8109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.406107][ T7698] usb 8-1: Using ep0 maxpacket: 32 [ 455.451971][ T8109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.517760][ T8109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.525744][ T8109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.526631][ T7698] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 455.636457][ T8109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.681090][ T7698] usb 8-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 455.819534][ T7698] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 456.373953][ T8109] device hsr_slave_0 entered promiscuous mode [ 456.404892][ T8109] device hsr_slave_1 entered promiscuous mode [ 456.427522][ T8109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.444684][ T8109] Cannot create hsr debugfs directory [ 456.516362][ T7698] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 456.545209][ T7698] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.585543][ T7698] usb 8-1: Product: syz [ 456.611951][ T7698] usb 8-1: Manufacturer: syz [ 456.636195][ T7698] usb 8-1: SerialNumber: syz [ 456.646477][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 456.718342][ T7698] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 456.752211][ T7698] imon 8-1:155.0: unable to initialize intf0, err -19 [ 456.793809][ T7698] imon:imon_probe: failed to initialize context! [ 456.851393][ T7698] imon 8-1:155.0: unable to register, err -19 [ 457.122596][ T8235] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 458.499063][ T4509] device hsr_slave_0 left promiscuous mode [ 458.597921][ T4291] usb 8-1: USB disconnect, device number 3 [ 458.648537][ T4509] device hsr_slave_1 left promiscuous mode [ 458.658674][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.779507][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.837977][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.848039][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.874085][ T4509] device bridge_slave_1 left promiscuous mode [ 459.830758][ T21] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 459.859572][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.904915][ T4509] device bridge_slave_0 left promiscuous mode [ 459.975349][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.056389][ T4509] device veth1_macvtap left promiscuous mode [ 460.077398][ T4509] device veth0_macvtap left promiscuous mode [ 460.124430][ T4509] device veth1_vlan left promiscuous mode [ 460.155602][ T4509] device veth0_vlan left promiscuous mode [ 460.206405][ T21] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 460.214542][ T21] usb 2-1: config 0 has no interface number 0 [ 460.283498][ T21] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 460.338810][ T21] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 460.371537][ T21] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 460.414793][ T21] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 460.442538][ T21] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 460.452531][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.463939][ T21] usb 2-1: config 0 descriptor?? [ 460.493985][ T8242] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 460.520838][ T8242] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 460.557607][ T21] ldusb 2-1:0.55: Interrupt in endpoint not found [ 460.826931][ T21] usb 2-1: USB disconnect, device number 6 [ 461.350325][ T4509] team0 (unregistering): Port device team_slave_1 removed [ 461.371580][ T4509] team0 (unregistering): Port device team_slave_0 removed [ 461.396620][ T4509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.458198][ T4509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.626206][ T21] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 461.785616][ T4509] bond0 (unregistering): Released all slaves [ 461.916414][ T21] usb 8-1: too many configurations: 239, using maximum allowed: 8 [ 462.006509][ T8109] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 462.072483][ T8109] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 462.104556][ T8109] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 462.151935][ T8109] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 462.404412][ T8109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.876491][ T21] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 462.896644][ T21] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.908589][ T21] usb 8-1: Product: syz [ 462.926463][ T21] usb 8-1: Manufacturer: syz [ 462.931358][ T21] usb 8-1: SerialNumber: syz [ 463.026394][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 463.111894][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.268718][ T8109] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.336133][ T8294] 9pnet_virtio: no channels available for device 127.0.0.1 [ 463.377634][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 463.413248][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.442299][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.449447][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.458230][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 463.470582][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.480417][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.487474][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.499615][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 463.515503][ T8294] tipc: Started in network mode [ 463.523456][ T8294] tipc: Node identity 4, cluster identity 4711 [ 463.538337][ T8294] tipc: Node number set to 4 [ 463.546485][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 463.574707][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 463.605871][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 463.823006][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 464.290040][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 465.107584][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 465.324520][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 465.409513][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 465.490005][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 465.582063][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 465.631062][ T8301] Process accounting resumed [ 465.650862][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 465.701920][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 466.285738][ T21] rtl8150 8-1:1.0: couldn't reset the device [ 466.626338][ T21] rtl8150: probe of 8-1:1.0 failed with error -5 [ 466.647649][ T21] usb 8-1: USB disconnect, device number 4 [ 467.034987][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 467.053826][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 467.102421][ T8109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.133643][ T8325] chnl_net:caif_netlink_parms(): no params data found [ 467.461842][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.501168][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.629978][ T8325] device bridge_slave_0 entered promiscuous mode [ 467.673110][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.165095][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.293906][ T4232] Bluetooth: hci1: command 0x0409 tx timeout [ 468.317168][ T8325] device bridge_slave_1 entered promiscuous mode [ 468.436109][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 468.486374][ T8325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.513793][ T8325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.603942][ T8325] team0: Port device team_slave_0 added [ 468.612837][ T8325] team0: Port device team_slave_1 added [ 468.637317][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.817391][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.970031][ T8325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.327028][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 469.362762][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 469.467583][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.575591][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.462338][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 470.465566][ T8325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.529542][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 470.566822][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 470.630521][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.472332][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 472.080016][ T8109] device veth0_vlan entered promiscuous mode [ 472.165977][ T8325] device hsr_slave_0 entered promiscuous mode [ 472.233756][ T8325] device hsr_slave_1 entered promiscuous mode [ 472.268069][ T8325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.303785][ T8325] Cannot create hsr debugfs directory [ 472.328693][ T8109] device veth1_vlan entered promiscuous mode [ 472.600397][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 472.623895][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 472.656157][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 472.695101][ T8109] device veth0_macvtap entered promiscuous mode [ 472.732052][ T8109] device veth1_macvtap entered promiscuous mode [ 472.865254][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.940796][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.988368][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.048391][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.116263][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.136117][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.183882][ T8109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.221579][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 473.232114][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 473.246360][ T4235] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 473.274903][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 473.316834][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 473.358420][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.426075][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.624002][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.841780][ T4235] usb 2-1: Using ep0 maxpacket: 16 [ 473.847019][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.847081][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.987050][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.998985][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.016967][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.071216][ T8109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.093615][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 474.106605][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 474.174431][ T8109] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.196291][ T8109] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.264718][ T8109] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.306310][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 475.146108][ T8109] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.166259][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 475.280419][ T8438] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 475.326164][ T4235] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 475.402858][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.423165][ T4235] usb 2-1: Product: syz [ 475.497417][ T4235] usb 2-1: Manufacturer: syz [ 475.517166][ T4235] usb 2-1: SerialNumber: syz [ 475.553871][ T4235] usb 2-1: config 0 descriptor?? [ 476.522454][ T4235] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 476.556178][ T4235] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 476.562163][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.593129][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.749187][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 476.773358][ T6303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.796774][ T6303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.806411][ T4235] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 476.822113][ T4509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.872163][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 476.992337][ T4509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.516445][ T4232] Bluetooth: hci5: command 0x0406 tx timeout [ 478.536525][ T4235] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 479.377009][ T8459] input: syz0 as /devices/virtual/input/input9 [ 479.517435][ T4235] em28xx 2-1:0.0: board has no eeprom [ 480.244297][ T4509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.272235][ T8472] 9pnet_virtio: no channels available for device syz [ 480.336076][ T4235] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 481.050848][ T4235] em28xx 2-1:0.0: dvb set to bulk mode. [ 481.121388][ T4235] usb 2-1: USB disconnect, device number 7 [ 481.149083][ T4232] em28xx 2-1:0.0: Binding DVB extension [ 481.167131][ T4235] em28xx 2-1:0.0: Disconnecting em28xx [ 481.200895][ T4509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.298179][ T4232] em28xx 2-1:0.0: Registering input extension [ 482.256557][ T4235] em28xx 2-1:0.0: Closing input extension [ 482.326952][ T4235] em28xx 2-1:0.0: Freeing device [ 482.608079][ T4509] tipc: Left network mode [ 482.624205][ T8499] fuse: Bad value for 'fd' [ 482.701672][ T8325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 482.755974][ T8325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 482.825016][ T8325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 482.882982][ T8325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 482.936157][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 483.140432][ T8325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.186299][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 483.258439][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 483.285282][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 483.306327][ T21] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 483.337456][ T21] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 483.374366][ T8325] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.409637][ T21] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 483.460639][ T21] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.622501][ T21] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 483.721607][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.924247][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 484.020211][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 484.111794][ T7496] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.118928][ T7496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.146451][ T21] usb 4-1: GET_CAPABILITIES returned 0 [ 484.152322][ T21] usbtmc 4-1:16.0: can't read capabilities [ 484.385987][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 484.444375][ T7336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 484.454718][ T1106] usb 4-1: USB disconnect, device number 7 [ 484.467765][ T7336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.496670][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.503737][ T7336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.771388][ T7336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 485.135763][ T7336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 485.554007][ T7336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 485.769314][ T7336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 486.204737][ T7336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 487.007571][ T7336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 487.028128][ T7336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 487.088268][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 487.133835][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 487.251432][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.320283][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.189344][ T8550] 9pnet: Insufficient options for proto=fd [ 488.227470][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.234900][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.258446][ T4509] device bridge_slave_1 left promiscuous mode [ 488.268895][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.311350][ T4509] device bridge_slave_0 left promiscuous mode [ 488.324110][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.343061][ T4509] device veth1_macvtap left promiscuous mode [ 488.408559][ T4509] device veth0_macvtap left promiscuous mode [ 488.414959][ T4509] device veth1_vlan left promiscuous mode [ 488.431759][ T4509] device veth0_vlan left promiscuous mode [ 489.469303][ T4509] bond1 (unregistering): Released all slaves [ 492.743928][ T4509] team0 (unregistering): Port device team_slave_1 removed [ 492.838552][ T4509] team0 (unregistering): Port device team_slave_0 removed [ 492.912682][ T4509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.035081][ T4509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.757563][ T4509] bond0 (unregistering): Released all slaves [ 493.990952][ T8325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.063570][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 494.219455][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 494.309722][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 495.133624][ T8622] netlink: 'syz.9.979': attribute type 10 has an invalid length. [ 495.514165][ T8622] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 496.292534][ T8623] crypto_alloc_aead failed rc=-2 [ 497.508245][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.516431][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.820627][ T8325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.996715][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 498.027759][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 498.191145][ T8663] trusted_key: encrypted_key: insufficient parameters specified [ 498.595754][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 498.653290][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 498.823579][ T8325] device veth0_vlan entered promiscuous mode [ 498.948688][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 499.010237][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 499.080999][ T8325] device veth1_vlan entered promiscuous mode [ 499.378816][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 499.850906][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 499.941143][ T8325] device veth0_macvtap entered promiscuous mode [ 500.019542][ T8325] device veth1_macvtap entered promiscuous mode [ 500.108152][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.211722][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! xA fd=0x0000000000000004,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)mA"[ 500.292388][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0  [ 500.394174][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.495294][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.612722][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! ./file0fuse.file0ރm#։!f۪y&jAcaAC|D9 ^瀘hyfH8fC2l%S`-$mRFZ|H7M[ >Q,EGXIQ5J?V9g4aS3% FhM^6)Q7:L]>]bHYv€r8`)5ݺŦ.=W&W!s.)#>01A'^䮅nȈgQR~UvCD/p%E:b& Zq`CJjM37`xl!Xۀv`6o{FН,gIKL,gPe[^++ǀ bQ=䌸+?0?Znv?60EFy#H5LⅯ unK"qYBfQdiq kxcK]۠y18_MQAİ"Ϸ RUZWlˌ[dtgvb-Bl\[;ΑŏqM?Xdr ]O "?]:n6Sq\R`V U]Q\@|ή)tP3H8dh.gjo9j|:5yX566 ڔX$ogX?q=w2H*xxBaubrx;21#[v#U~vv'1A T!kmzMxqFQe[ԙcS[K@|ZYŸ 'ĩÊU^B0Sd ;޻p) 5G~M(ylU ou&&3+ 1u䦗fCU-mΖQ0qD"^._g|t>ˊ6y#!rb6hԘki$әhN.v^wkXȔn; 6#< ޏ*t\^M9y [qU7f!:; Nѫ.a w*uU@m`K|0e)^ޔ8c~)$Kt^x,Q ;*5'e\ݖ~sq :,D)0RP=1HT{OM,᐀x(P6M4>s~z͡]y"inkP&;t(v>%`lOsZO6qԑ]8G\{E_Q;CLa M&Fn67I4W֘E-&xܥKJR[hCB:n 8ȿAr'J4-g qĕQQo!˱&]sLr])U;:y]-`Bxo rI?ǒvCfJ52 о j$l6Wƹ܃zCީH`cs̄"M3"Bȕ@uqg86ʹaUj`dfSEz֮"IFBxH`"s٠ϠڎrG^ND(7QI4G>ն>@HMUK?.x?L:5dPU:}"BWXYyTՌt*lv2knRsd$MC?ȁ? *$3Ij{ E* r=ڏem!{U4+\<|뻝OLf]EMҋ!~a1x^ڼH&q}ZX6;K9/PHto^FPByF FN9SM3Ke5)h* mF/.X{7.b!HqqW[ 501.291626][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 ]Dž^zg[ 501.299239][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 1ZFhd`ڷjc̀&:IUkHz X_-LAFg|J,K^Jtk~oKqKp(I (wk¨|ao 2G?';[:@Ic}̼/ zfq|YlV h^[ 501.538895][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.554838][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.565526][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.575847][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.586681][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.600047][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.614295][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.624274][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.635027][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.645903][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.659643][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 501.710028][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 502.831058][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 502.881342][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 502.895009][ T8325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.910501][ T8325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.006474][ T8325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.146105][ T8325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.292387][ T8709] netlink: 'syz.3.995': attribute type 10 has an invalid length. [ 503.413967][ T8709] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 503.799018][ T8722] 9pnet_virtio: no channels available for device syz [ 503.846345][ T4480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.875023][ T4480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.890324][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 503.915737][ T7334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.949255][ T7334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.001183][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 504.113417][ T8730] trusted_key: encrypted_key: insufficient parameters specified xA fd=0x0000000000000004,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)mA" ./file0fuse.file0ރm#։!f۪y&jAcaAC|D9 ^瀘hyfH8fC2l%S`-$mRFZ|H7M[ >Q,EGXIQ5J?V9g4aS3% FhM^6)Q7:L]>]bHYv€r8`)5ݺŦ.=W&W!s.)#>01A'^䮅nȈgQR~UvCD/p%E:b& Zq`CJjM37`xl!Xۀv`6o{FН,gIKL,gPe[^++ǀ bQ=䌸+?0?Znv?60EFy#H5LⅯ unK"qYBfQdiq kxcK]۠y18_MQAİ"Ϸ RUZWlˌ[dtgvb-Bl\[;ΑŏqM?Xdr ]O "?]:n6Sq\R`V U]Q\@|ή)tP3H8dh.gjo9j|:5yX566 ڔX$ogX?q=w2H*xxBaubrx;21#[v#U~vv'1A T!kmzMxqFQe[ԙcS[K@|ZYŸ 'ĩÊU^B0Sd ;޻p) 5G~M(ylU ou&&3+ 1u䦗fCU-mΖQ0qD"^._g|t>ˊ6y#!rb6hԘki$әhN.v^wkXȔn; 6#< ޏ*t\^M9y [qU7f!:; Nѫ.a w*uU@m`K|0e)^ޔ8c~)$Kt^x,Q ;*5'e\ݖ~sq :,D)0RP=1HT{OM,᐀x(P6M4>s~z͡]y"inkP&;t(v>%`lOsZO6qԑ]8G\{E_Q;CLa M&Fn67I4W֘E-&xܥKJR[hCB:n 8ȿAr'J4-g qĕQQo!˱&]sLr])U;:y]-`Bxo rI?ǒvCfJ52 о j$l6Wƹ܃zCީH`cs̄"M3"Bȕ@uqg86ʹaUj`dfSEz֮"IFBxH`"s٠ϠڎrG^ND(7QI4G>ն>@HMUK?.x?L:5dPU:}"BWXYyTՌt*lv2knRsd$MC?ȁ? *$3Ij{ E* r=ڏem!{U4+\<|뻝OLf]EMҋ!~a1x^ڼH&q}ZX6;K9/PHto^FPByF FN9SM3Ke5)h* mF/.X{7.b!HqqW]Dž^zg1ZFhd`ڷjc̀&:IUkHz X_-LAFg|J,K^Jtk~oKqKp(I (wk¨|ao 2G?';[:@Ic}̼/[ 508.071197][ T4264] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 508.327086][ T4264] usb 3-1: Using ep0 maxpacket: 8 [ 509.216320][ T4264] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.265841][ T4264] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.916042][ T4264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 510.046885][ T8775] netlink: 'syz.7.1012': attribute type 10 has an invalid length. [ 510.213619][ T4264] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 510.284407][ T4264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.368218][ T4264] usb 3-1: config 0 descriptor?? [ 510.936340][ T4264] usbhid 3-1:0.0: can't add hid device: -71 [ 511.133043][ T4264] usbhid: probe of 3-1:0.0 failed with error -71 [ 511.221282][ T4264] usb 3-1: USB disconnect, device number 4 [ 512.916174][ T8824] netlink: 'syz.1.1025': attribute type 4 has an invalid length. [ 512.965484][ T8824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1025'. [ 513.021189][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1026'. [ 514.016154][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 515.886562][ T8856] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.973791][ T8856] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.996319][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.025011][ T21] usb 3-1: config 0 has no interfaces? [ 516.036240][ T21] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 516.342944][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.391086][ T21] usb 3-1: config 0 descriptor?? [ 516.444478][ T8856] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.475261][ T8863] netlink: 'syz.9.1035': attribute type 10 has an invalid length. [ 516.582137][ T8856] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.638661][ T8870] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 516.699556][ T21] usb 3-1: USB disconnect, device number 5 [ 516.768292][ T8856] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.779813][ T8856] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.791159][ T8856] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.802150][ T8856] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.521019][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1036'. [ 519.073945][ T8878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 519.102704][ T8878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.110556][ T8878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 521.402171][ T8913] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 521.649302][ T8911] Process accounting resumed [ 522.072155][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'. [ 525.366198][ T7866] Bluetooth: hci0: command 0x0c1a tx timeout [ 525.747183][ T7866] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 526.006196][ T7866] usb 4-1: Using ep0 maxpacket: 32 [ 526.173424][ T7866] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 526.197980][ T7866] usb 4-1: config 0 has no interface number 0 [ 526.208791][ T7866] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 526.220387][ T7866] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 526.236076][ T7866] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.427173][ T7866] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 526.536384][ T7866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.606259][ T7866] usb 4-1: Product: syz [ 526.623712][ T7866] usb 4-1: Manufacturer: syz [ 526.666228][ T7866] usb 4-1: SerialNumber: syz [ 526.681602][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.688823][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.695606][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.702407][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.709218][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.713871][ T7866] usb 4-1: config 0 descriptor?? [ 526.716018][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.716083][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.734535][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.741337][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.746456][ T8983] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 526.748128][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.761790][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.768599][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.771126][ T7866] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input11 [ 526.775363][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.775375][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.775384][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.775392][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.775400][ T8999] tc action pedit offset must be on 32 bit boundaries [ 526.818553][ T8999] 0: reclassify loop, rule prio 0, protocol 800 [ 526.998741][ T7866] usb 4-1: USB disconnect, device number 8 [ 527.366011][ T9017] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 527.378435][ T9017] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 527.497099][ T7866] Bluetooth: hci0: command 0x0406 tx timeout [ 529.964576][ T9053] program syz.7.1076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.702858][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.709744][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.716559][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.723326][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.730122][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.736924][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.743697][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.750489][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.757280][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.764054][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.770838][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.777624][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.784388][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.791201][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.798012][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.804775][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.811560][ T9067] tc action pedit offset must be on 32 bit boundaries [ 530.818342][ T9067] 0: reclassify loop, rule prio 0, protocol 800 [ 531.339259][ T26] audit: type=1326 audit(1780868458.582:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b28576e59 code=0x7ffc0000 [ 531.548140][ T26] audit: type=1326 audit(1780868458.582:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b28576e59 code=0x7ffc0000 [ 531.670513][ T26] audit: type=1326 audit(1780868458.582:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1b28576e59 code=0x7ffc0000 [ 531.887969][ T26] audit: type=1326 audit(1780868458.582:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b28576e59 code=0x7ffc0000 [ 531.902011][ T9077] Process accounting resumed [ 533.221072][ T26] audit: type=1326 audit(1780868458.582:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b28576e59 code=0x7ffc0000 [ 533.394445][ T26] audit: type=1326 audit(1780868458.582:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1b28576e59 code=0x7ffc0000 [ 533.420215][ T26] audit: type=1326 audit(1780868458.582:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b28576e59 code=0x7ffc0000 [ 533.624708][ T26] audit: type=1326 audit(1780868458.582:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b28576e59 code=0x7ffc0000 [ 533.780019][ T26] audit: type=1326 audit(1780868458.582:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9033 comm="syz.3.1071" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1b28576e59 code=0x7ffc0000 [ 534.387690][ T9120] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 537.170045][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.176878][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.183674][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.190480][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.197268][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.204031][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.210819][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.217602][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.224399][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.231242][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.238045][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.244807][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.251627][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.258419][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.265196][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.271986][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.278771][ T9158] tc action pedit offset must be on 32 bit boundaries [ 537.285530][ T9158] 0: reclassify loop, rule prio 0, protocol 800 [ 538.612067][ T4235] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 538.836432][ T9189] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1104'. [ 539.059067][ T4235] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 539.651167][ T9199] fido_id[9199]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 540.138523][ T9216] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 541.440416][ T9221] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 541.956761][ T9221] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 542.868217][ T9241] device batadv_slave_1 entered promiscuous mode [ 543.018435][ T9239] device batadv_slave_1 left promiscuous mode [ 543.218764][ T9252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1116'. [ 543.228884][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 545.581899][ T9281] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 546.560067][ T9277] Process accounting resumed [ 548.151902][ T9307] process 'syz.9.1128' launched './file0' with NULL argv: empty string added [ 550.382893][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'. [ 551.149304][ T9359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.696048][ T4236] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 552.739285][ T9380] Process accounting resumed [ 553.079232][ T9396] siw: device registration error -23 [ 553.236545][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 553.393617][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 553.763844][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 553.816168][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 554.536196][ T4236] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 554.555875][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.614258][ T4236] usb 3-1: Product: syz [ 554.659441][ T4236] usb 3-1: Manufacturer: syz [ 554.681693][ T4236] usb 3-1: SerialNumber: syz [ 554.712032][ T4236] usb 3-1: config 0 descriptor?? [ 555.820486][ T4236] adutux 3-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 555.878572][ T4236] usb 3-1: USB disconnect, device number 6 [ 558.384344][ T9446] Process accounting resumed [ 558.463185][ T9458] device syzkaller0 entered promiscuous mode [ 562.729521][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.735799][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.856036][ T4236] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 565.266806][ T4236] usb 2-1: config 0 has no interfaces? [ 565.274787][ T4236] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 565.318106][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.416844][ T4236] usb 2-1: config 0 descriptor?? [ 565.726281][ T4236] usb 2-1: string descriptor 0 read error: -71 [ 565.743777][ T4236] usb 2-1: USB disconnect, device number 8 [ 567.536562][ T4236] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 567.996239][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 568.088710][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 568.298716][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 568.521816][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 568.906207][ T4236] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 569.027653][ T9855] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 569.034722][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.127018][ T4236] usb 2-1: Product: syz [ 569.142386][ T4236] usb 2-1: Manufacturer: syz [ 569.152792][ T4236] usb 2-1: SerialNumber: syz [ 569.190218][ T4236] usb 2-1: config 0 descriptor?? [ 570.629145][ T1106] Bluetooth: hci2: command 0x0406 tx timeout [ 570.827835][ T4236] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 570.876262][ T4236] usb 2-1: USB disconnect, device number 9 [ 574.006215][ T4264] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 575.066113][ T4264] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 576.306029][ T4264] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 576.316106][ T4264] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 576.327260][ T4264] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 576.556155][ T4264] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 576.598886][ T4264] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.736765][ T4264] usb 10-1: Product: syz [ 579.176925][ T4264] usb 10-1: Manufacturer: syz [ 579.876774][ T4264] usb 10-1: SerialNumber: syz [ 579.994323][ T4264] usb 10-1: config 0 descriptor?? [ 580.036119][ T4264] usb 10-1: can't set config #0, error -71 [ 581.318825][ T4264] usb 10-1: USB disconnect, device number 2 [ 584.116812][T10019] Process accounting resumed [ 584.274167][T10035] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 590.557121][T10115] netlink: 'syz.1.1249': attribute type 10 has an invalid length. [ 590.565169][T10115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1249'. [ 590.585250][T10115] device dummy0 entered promiscuous mode [ 590.608286][T10115] bridge0: port 4(dummy0) entered blocking state [ 590.615243][T10115] bridge0: port 4(dummy0) entered disabled state [ 590.675639][T10115] bridge0: port 4(dummy0) entered blocking state [ 590.682508][T10115] bridge0: port 4(dummy0) entered forwarding state [ 593.471064][T10164] Process accounting resumed [ 594.732771][T10177] fuse: Unknown parameter '' [ 600.126182][T10252] 9pnet_virtio: no channels available for device syz [ 603.323839][T10304] Process accounting resumed [ 608.286100][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 608.389793][T10374] fuse: Unknown parameter '' [ 608.546142][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 609.616517][ T7] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 609.647059][ T7] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 609.697901][ T7] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 609.732944][T10386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1303'. [ 609.742585][T10386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1303'. [ 609.754876][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 609.876289][ T7] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 609.922945][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.982171][ T7] usb 4-1: Product: syz [ 609.993941][ T7] usb 4-1: Manufacturer: syz [ 610.019441][ T7] usb 4-1: SerialNumber: syz [ 610.107263][ T7] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 610.125244][ T7] imon 4-1:155.0: unable to initialize intf0, err -19 [ 610.158895][ T7] imon:imon_probe: failed to initialize context! [ 610.186162][ T7] imon 4-1:155.0: unable to register, err -19 [ 611.594628][ T4232] usb 4-1: USB disconnect, device number 9 [ 612.263943][T10434] fuse: Bad value for 'fd' [ 615.204714][T10473] autofs4:pid:10473:autofs_fill_super: called with bogus options [ 616.615327][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 619.313674][ T7336] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.638541][ T7336] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.948011][ T7336] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.088317][ T7336] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.406290][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 620.508796][T10508] chnl_net:caif_netlink_parms(): no params data found [ 620.518558][T10557] 9pnet_virtio: no channels available for device syz [ 620.762369][T10508] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.789234][T10508] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.816071][ T7698] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 620.828605][T10508] device bridge_slave_0 entered promiscuous mode [ 620.880910][T10508] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.930054][T10508] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.958583][T10508] device bridge_slave_1 entered promiscuous mode [ 621.072651][T10508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.081993][ T7698] usb 3-1: Using ep0 maxpacket: 16 [ 621.127009][T10508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.206368][ T7698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.231708][ T7698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 621.285853][ T7698] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 621.291211][T10508] team0: Port device team_slave_0 added [ 621.314296][ T7698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.363165][ T7698] usb 3-1: config 0 descriptor?? [ 621.372083][T10508] team0: Port device team_slave_1 added [ 621.531135][T10508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.564054][T10508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.965731][T10508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.010197][T10508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.021240][T10508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.056503][T10508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.195300][T10607] fuse: Unknown parameter 'user_i00000000000000000000' [ 622.216526][T10508] device hsr_slave_0 entered promiscuous mode [ 622.236115][ T7698] usbhid 3-1:0.0: can't add hid device: -71 [ 622.242126][ T7698] usbhid: probe of 3-1:0.0 failed with error -71 [ 622.296272][ T7698] usb 3-1: USB disconnect, device number 7 [ 622.343685][T10508] device hsr_slave_1 entered promiscuous mode [ 622.353039][T10508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.384109][T10508] Cannot create hsr debugfs directory [ 622.489413][T10609] Bluetooth: hci3: command 0x041b tx timeout [ 624.178597][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.185328][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.566150][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 624.724745][ T7336] device hsr_slave_0 left promiscuous mode [ 624.734547][ T7336] device hsr_slave_1 left promiscuous mode [ 624.786871][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.908923][ T7336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.918675][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.930984][ T7336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.479925][ T7336] device bridge_slave_1 left promiscuous mode [ 626.486321][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.494955][ T7336] device bridge_slave_0 left promiscuous mode [ 626.501919][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.527839][ T7336] device veth1_macvtap left promiscuous mode [ 626.534047][ T7336] device veth0_macvtap left promiscuous mode [ 626.554393][ T7336] device veth1_vlan left promiscuous mode [ 626.571607][ T7336] device veth0_vlan left promiscuous mode [ 626.646150][ T4236] Bluetooth: hci3: command 0x0419 tx timeout [ 626.938480][ T7336] team0 (unregistering): Port device team_slave_1 removed [ 626.966896][ T7336] team0 (unregistering): Port device team_slave_0 removed [ 627.016214][ T7336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.050225][ T7336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.240306][ T7336] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 627.308167][ T7336] bond0 (unregistering): Released all slaves [ 627.611714][T10667] 9pnet_virtio: no channels available for device syz [ 628.138320][T10674] 9pnet_virtio: no channels available for device syz [ 630.294483][ T7332] Bluetooth: Error in BCSP hdr checksum [ 632.073768][ T2401] Bluetooth: hci5: command 0x1003 tx timeout [ 632.080723][ T4205] Bluetooth: hci5: sending frame failed (-49) [ 634.221637][ T4236] Bluetooth: hci5: command 0x1001 tx timeout [ 634.228135][ T4205] Bluetooth: hci5: sending frame failed (-49) [ 635.573474][T10508] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 635.641474][T10508] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 635.737502][T10508] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 635.770052][T10508] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 636.027844][T10508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.096592][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 636.121816][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.150160][T10508] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.174597][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 636.193858][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.245584][ T7496] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.252683][ T7496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.271943][T10609] Bluetooth: hci5: command 0x1009 tx timeout [ 636.346530][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 636.392635][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 636.430214][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.467710][ T7496] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.474813][ T7496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.493867][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 636.507221][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 636.556132][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 636.587830][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 636.614992][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 636.646569][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 636.694100][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 636.725094][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 636.754411][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 636.778802][T10508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 636.804079][T10508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 636.854541][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 636.874503][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 637.216221][T10773] 9pnet_virtio: no channels available for device syz [ 637.228689][T10772] autofs4:pid:10772:autofs_fill_super: called with bogus options [ 637.468156][T10508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.536410][ T7332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 637.569726][ T7332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 638.168355][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 638.190610][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 638.263196][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 638.280243][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 638.301419][T10508] device veth0_vlan entered promiscuous mode [ 638.322054][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 638.337840][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 638.360067][T10508] device veth1_vlan entered promiscuous mode [ 638.456417][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 638.481240][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 638.508408][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 639.971560][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 640.042387][T10508] device veth0_macvtap entered promiscuous mode [ 640.056503][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 640.070785][T10508] device veth1_macvtap entered promiscuous mode [ 640.118642][T10799] Process accounting resumed [ 640.126535][T10508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.139180][T10508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.153847][T10508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.164382][T10508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.179070][T10508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.293541][T10508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.554793][T10508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.599699][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 640.622613][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 640.637028][T10508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.697831][T10508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.699880][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1389'. [ 640.714302][T10508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.732526][T10508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.733194][T10814] tmpfs: Bad value for 'mpol' [ 640.749764][T10508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.791447][T10508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.831076][T10508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.875203][T10508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.901796][ T4232] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 640.914660][T10508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.929892][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 640.948891][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 640.974247][T10508] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.980518][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 640.991958][T10508] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.041187][T10508] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.098339][T10508] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.173539][T10838] 9pnet_virtio: no channels available for device syz [ 641.276209][ T4232] usb 4-1: config 0 has no interfaces? [ 641.566137][ T4232] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 642.954433][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 643.209656][ T4232] usb 4-1: Product: syz [ 643.213843][ T4232] usb 4-1: Manufacturer: syz [ 643.219747][ T4232] usb 4-1: SerialNumber: syz [ 643.232509][ T4232] usb 4-1: config 0 descriptor?? [ 643.251944][ T7496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.301061][ T7496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.379822][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 643.435042][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.458321][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.493132][ T4232] usb 4-1: USB disconnect, device number 10 [ 643.518487][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 643.955365][T10875] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1405'. [ 644.107181][T10884] device syzkaller0 entered promiscuous mode [ 644.545155][T10910] siw: device registration error -23 [ 644.988043][T10930] overlayfs: missing 'lowerdir' [ 645.286642][T10945] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 648.046603][T10984] overlayfs: missing 'lowerdir' [ 648.347158][T10609] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 648.809294][T10609] usb 2-1: Using ep0 maxpacket: 32 [ 648.968403][T10609] usb 2-1: unable to get BOS descriptor or descriptor too short [ 649.086124][T10609] usb 2-1: config 8 has an invalid interface number: 188 but max is 0 [ 649.118267][T10609] usb 2-1: config 8 has no interface number 0 [ 649.149591][T10609] usb 2-1: config 8 interface 188 has no altsetting 0 [ 649.256045][T10609] usb 2-1: string descriptor 0 read error: -71 [ 649.277513][T10609] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 649.348957][T10609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.413773][T10609] usb 2-1: can't set config #8, error -71 [ 649.463994][T10609] usb 2-1: USB disconnect, device number 10 [ 652.626674][T11031] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 654.686313][T11114] ------------[ cut here ]------------ [ 654.741755][T11114] WARNING: CPU: 1 PID: 11114 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0 [ 654.805755][T11119] hub 8-0:1.0: USB hub found [ 654.813891][T11114] Modules linked in: [ 654.829149][T11119] hub 8-0:1.0: 1 port detected [ 654.850487][T11114] CPU: 0 PID: 11114 Comm: syz.1.1459 Not tainted syzkaller #0 [ 654.887089][T11114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 654.950691][T11114] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 654.992857][T11114] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 65 ad bf ff 0f 0b e9 62 fe ff ff e8 59 ad bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 84 3a 8a 8d 80 e1 07 80 c1 03 38 c1 [ 655.069300][T11114] RSP: 0018:ffffc900032cfac8 EFLAGS: 00010287 [ 655.154025][T11114] RAX: ffffffff81b99b97 RBX: 0000200000400000 RCX: 0000000000080000 [ 655.289939][T11114] RDX: ffffc90004114000 RSI: 0000000000000af5 RDI: 0000000000000af6 [ 655.300296][T11114] RBP: 0000000000000000 R08: ffff88802c569cbf R09: 1ffff110058ad397 [ 655.311449][T11114] R10: dffffc0000000000 R11: ffffed10058ad398 R12: ffff888075f253b8 [ 655.321421][T11114] R13: dffffc0000000000 R14: ffff888075f25318 R15: ffff88801beedac0 [ 655.333652][T11114] FS: 00007f492b4a66c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 655.343467][T11114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 655.354804][T11114] CR2: 00007fdbf43da6b0 CR3: 0000000047ff9000 CR4: 00000000003506e0 [ 655.394751][T11114] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 655.435293][T11114] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 655.484073][T11114] Call Trace: [ 655.499748][T11114] [ 655.502787][T11114] __vma_adjust+0x2b6/0x1c10 [ 655.511923][T11114] ? memset+0x1e/0x40 [ 655.517923][T11114] __split_vma+0x34b/0x410 [ 655.548521][T11114] __do_munmap+0x383/0xdf0 [ 655.558608][T11114] mremap_to+0x363/0x6b0 [ 655.564040][T11114] __se_sys_mremap+0x412/0x980 [ 655.572866][T11114] ? __x64_sys_mremap+0xc0/0xc0 [ 655.581055][T11114] ? lock_chain_count+0x20/0x20 [ 655.588539][T11114] ? lockdep_hardirqs_on+0x94/0x140 [ 655.595191][T11114] ? __x64_sys_mremap+0x1c/0xc0 [ 655.601853][T11114] do_syscall_64+0x4c/0xa0 [ 655.614140][T11114] ? clear_bhb_loop+0x30/0x80 [ 655.622018][T11114] ? clear_bhb_loop+0x30/0x80 [ 655.629479][T11114] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 655.635406][T11114] RIP: 0033:0x7f492d24ce59 [ 655.642041][T11114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.666616][T11114] RSP: 002b:00007f492b4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 655.692519][T11114] RAX: ffffffffffffffda RBX: 00007f492d4c5fa0 RCX: 00007f492d24ce59 [ 655.715031][T11114] RDX: 0000000000400000 RSI: 0000000000800000 RDI: 0000200000800000 [ 655.724000][T11114] RBP: 00007f492d2e2d6f R08: 0000200000000000 R09: 0000000000000000 [ 655.732309][T11114] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 655.740585][T11114] R13: 00007f492d4c6038 R14: 00007f492d4c5fa0 R15: 00007ffcd8370e28 [ 655.749734][T11114] [ 655.752800][T11114] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 655.760084][T11114] CPU: 1 PID: 11114 Comm: syz.1.1459 Not tainted syzkaller #0 [ 655.767550][T11114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.777599][T11114] Call Trace: [ 655.780875][T11114] [ 655.783807][T11114] dump_stack_lvl+0x188/0x250 [ 655.788499][T11114] ? show_regs_print_info+0x20/0x20 [ 655.793683][T11114] ? load_image+0x400/0x400 [ 655.798195][T11114] panic+0x2e5/0x810 [ 655.802137][T11114] ? bpf_jit_dump+0xd0/0xd0 [ 655.806642][T11114] ? hugetlb_split+0x237/0x2a0 [ 655.811414][T11114] __warn+0x248/0x2b0 [ 655.815380][T11114] ? hugetlb_split+0x237/0x2a0 [ 655.820128][T11114] report_bug+0x1b7/0x2e0 [ 655.824503][T11114] handle_bug+0x3a/0x70 [ 655.828649][T11114] exc_invalid_op+0x16/0x40 [ 655.833160][T11114] asm_exc_invalid_op+0x16/0x20 [ 655.837991][T11114] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 655.843348][T11114] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 65 ad bf ff 0f 0b e9 62 fe ff ff e8 59 ad bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 84 3a 8a 8d 80 e1 07 80 c1 03 38 c1 [ 655.862938][T11114] RSP: 0018:ffffc900032cfac8 EFLAGS: 00010287 [ 655.868996][T11114] RAX: ffffffff81b99b97 RBX: 0000200000400000 RCX: 0000000000080000 [ 655.876956][T11114] RDX: ffffc90004114000 RSI: 0000000000000af5 RDI: 0000000000000af6 [ 655.884915][T11114] RBP: 0000000000000000 R08: ffff88802c569cbf R09: 1ffff110058ad397 [ 655.892867][T11114] R10: dffffc0000000000 R11: ffffed10058ad398 R12: ffff888075f253b8 [ 655.900825][T11114] R13: dffffc0000000000 R14: ffff888075f25318 R15: ffff88801beedac0 [ 655.908791][T11114] ? hugetlb_split+0x237/0x2a0 [ 655.913546][T11114] ? hugetlb_split+0x237/0x2a0 [ 655.918295][T11114] __vma_adjust+0x2b6/0x1c10 [ 655.922890][T11114] ? memset+0x1e/0x40 [ 655.926869][T11114] __split_vma+0x34b/0x410 [ 655.931274][T11114] __do_munmap+0x383/0xdf0 [ 655.935676][T11114] mremap_to+0x363/0x6b0 [ 655.939912][T11114] __se_sys_mremap+0x412/0x980 [ 655.944664][T11114] ? __x64_sys_mremap+0xc0/0xc0 [ 655.949497][T11114] ? lock_chain_count+0x20/0x20 [ 655.954335][T11114] ? lockdep_hardirqs_on+0x94/0x140 [ 655.959516][T11114] ? __x64_sys_mremap+0x1c/0xc0 [ 655.964359][T11114] do_syscall_64+0x4c/0xa0 [ 655.968762][T11114] ? clear_bhb_loop+0x30/0x80 [ 655.973423][T11114] ? clear_bhb_loop+0x30/0x80 [ 655.978083][T11114] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 655.984046][T11114] RIP: 0033:0x7f492d24ce59 [ 655.988442][T11114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.008031][T11114] RSP: 002b:00007f492b4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 656.016430][T11114] RAX: ffffffffffffffda RBX: 00007f492d4c5fa0 RCX: 00007f492d24ce59 [ 656.024390][T11114] RDX: 0000000000400000 RSI: 0000000000800000 RDI: 0000200000800000 [ 656.032346][T11114] RBP: 00007f492d2e2d6f R08: 0000200000000000 R09: 0000000000000000 [ 656.040302][T11114] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 656.048289][T11114] R13: 00007f492d4c6038 R14: 00007f492d4c5fa0 R15: 00007ffcd8370e28 [ 656.056251][T11114] [ 656.059480][T11114] Kernel Offset: disabled [ 656.070902][T11114] Rebooting in 86400 seconds..