last executing test programs: 15.96126258s ago: executing program 0 (id=674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioprio_get$pid(0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x2, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@const={0xf, 0x0, 0x0, 0xa, 0x1}, @fwd={0x5}, @volatile={0x4, 0x0, 0x0, 0x9, 0x2}, @struct={0xe, 0x1, 0x0, 0x4, 0x0, 0x40000000, [{0x4, 0x2, 0x1}]}]}}, 0x0, 0x56, 0x0, 0x1, 0xe0000000, 0x0, @void, @value}, 0x28) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000074020440fd07010099482102030109021b00ca000000010904"], 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x400000000000174, 0x4008890) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x18bf, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 13.703237803s ago: executing program 4 (id=677): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x56, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xe47e, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') lseek(r3, 0x2, 0x1) 13.645877506s ago: executing program 1 (id=678): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x200004, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x2}}}, 0x118) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x407, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r8}, 0x8) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYRES8=r6], 0x0, 0x42, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r10, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a", 0x23}], 0x1}, 0x0) 13.551913181s ago: executing program 2 (id=679): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 12.421753547s ago: executing program 4 (id=680): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x8008, 0x8000, 0x1, 0x7, {{0x5, 0x4, 0x1, 0x1, 0x14, 0x64, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xc9, 0xffff4350, 0xc, @private0, @rand_addr=' \x01\x00', 0x1, 0x40, 0x4, 0x7fffffff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x6d, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xbe, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x238, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x224, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x98, 0x1, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_LABEL={0x8, 0x5, 0xca921}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7f, 0xa, 0x8, 0x4, 0x8}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6005}]}, {0x2d, 0x6, "849932ff8ef3b749a710db9df8c0f3e082e2e710652463187ebd57cefaf1d293557f0705f6c6f560d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x7}}}}, @m_mirred={0x144, 0xc, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xb, 0x6, 0x7, 0x1}, 0x4, r0}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0x3, 0xf, 0x8}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x5, 0x4, 0x1}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x51, 0x3, 0x8, 0x2}, 0x2}}]}, {0x98, 0x6, "4a2aec9f7f0638c7260ac069cb1a0d1abe47c75286624e0f0646dc8c7ecbf40c3979ed67df69facec5b9c1eca3c0e53aab5e1ee0fae8ab0adddedc867ef0543330400b1fce09ba0f091d0da16da69d91a1c51811fdf84d0134fa8e093652289f9c2fa8f3292732a5c3adb2526e705eb888c825b13c81c77b924a999c71799c994d9352837bf26d6b35975b0b292a8ad0e146ab5a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) 11.691695482s ago: executing program 2 (id=682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x400c094) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000020, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xd) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, 0x0, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x800000000008}}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) 11.616835839s ago: executing program 0 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) 10.570482857s ago: executing program 4 (id=685): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f0000000040)=0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x114, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) ioctl$TCSETSF(r1, 0x5404, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}], 0x1) 10.519791077s ago: executing program 2 (id=686): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000440), 0x3, r4, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f0000000400)=[r4], &(0x7f0000000180), &(0x7f0000000380)=[r5], &(0x7f0000000280)}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sigaltstack(&(0x7f0000000200)={0x0, 0x0, 0xfffffca4}, 0x0) ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xee00}) socket$nl_route(0x10, 0x3, 0x0) 8.349694934s ago: executing program 2 (id=687): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x403, 0x0, 0x3, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xa98}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4fc}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x60}}, 0x0) 8.28800951s ago: executing program 0 (id=688): set_mempolicy(0x3, 0x0, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x1, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 8.257984004s ago: executing program 1 (id=689): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x182) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 8.149353505s ago: executing program 4 (id=690): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e"], 0x24) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x14) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r6, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) socket$nl_generic(0x10, 0x3, 0x10) 8.112141555s ago: executing program 0 (id=691): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, 0x0, &(0x7f00000000c0)) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008, 0x810, 0xffffffffffffffff, 0x1e47d000) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff) 8.059962476s ago: executing program 3 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x6, 0x0) r4 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xa838, 0x10, 0x2, 0xaa, 0x0, r3}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000001c0)=0x304008000) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.057973634s ago: executing program 1 (id=693): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioperm(0x8, 0xae4, 0x10000000000002) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r6, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8.008486686s ago: executing program 2 (id=694): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x3, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x5e, &(0x7f00000009c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466fb19f71e96642faa2300"}]}}}}}}}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 6.491403144s ago: executing program 3 (id=695): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x8008, 0x8000, 0x1, 0x7, {{0x5, 0x4, 0x1, 0x1, 0x14, 0x64, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xc9, 0xffff4350, 0xc, @private0, @rand_addr=' \x01\x00', 0x1, 0x40, 0x4, 0x7fffffff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x6d, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xbe, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x238, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x224, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x98, 0x1, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_LABEL={0x8, 0x5, 0xca921}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7f, 0xa, 0x8, 0x4, 0x8}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6005}]}, {0x2d, 0x6, "849932ff8ef3b749a710db9df8c0f3e082e2e710652463187ebd57cefaf1d293557f0705f6c6f560d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x7}}}}, @m_mirred={0x144, 0xc, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xb, 0x6, 0x7, 0x1}, 0x4, r0}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0x3, 0xf, 0x8}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x5, 0x4, 0x1}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x51, 0x3, 0x8, 0x2}, 0x2}}]}, {0x98, 0x6, "4a2aec9f7f0638c7260ac069cb1a0d1abe47c75286624e0f0646dc8c7ecbf40c3979ed67df69facec5b9c1eca3c0e53aab5e1ee0fae8ab0adddedc867ef0543330400b1fce09ba0f091d0da16da69d91a1c51811fdf84d0134fa8e093652289f9c2fa8f3292732a5c3adb2526e705eb888c825b13c81c77b924a999c71799c994d9352837bf26d6b35975b0b292a8ad0e146ab5a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) 6.401039344s ago: executing program 4 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x400c094) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000020, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xd) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, 0x0, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0x800000000008}}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) 4.019363444s ago: executing program 3 (id=697): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) close(r0) sendmmsg(r1, 0x0, 0x0, 0x20040054) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 3.79608609s ago: executing program 1 (id=698): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x220010, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}]}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) accept4(r5, 0x0, 0x0, 0x0) 2.967696303s ago: executing program 4 (id=699): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x200004, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x2}}}, 0x118) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x407, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r8}, 0x8) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYRES8=r6], 0x0, 0x42, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r10, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a", 0x23}], 0x1}, 0x0) 2.967254735s ago: executing program 0 (id=700): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f0000000040)=0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x114, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) ioctl$TCSETSF(r1, 0x5404, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}], 0x1) 2.955475318s ago: executing program 3 (id=701): set_mempolicy(0x3, 0x0, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x1, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.922861234s ago: executing program 2 (id=702): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() sigaltstack(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000c00)=ANY=[@ANYBLOB="18080000feffff3f000000000000001c85100000060000008510000004000000660800000000000018000000000000000000000000000000950000000000000095000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000a334625215feb3080b8749a22377a1344fc773854ebebd3f3a36248532ae6e312c0080430c21b2dad957214289bae450fe07122ab3adfa15bc43243b8b204a1b8ada9bad1a51a7a2121dc92a5d20fb5794c0950b25b7333953d6d0b28b42e3b5b7e2d5e92e6a836efd91a594f992de1e21db4152d60815e732e0b3ac8f98ea0d503428c6ef534e0cde4015392b8dd7d0f5b9731d0e9486ba7fb278bff2f36fa210c86a76c34acf4006524c66fc130d54091552947ed3edfc8dd2b620b3a34f49c2a512af39c39ef812ce0ec919f1df875221a9dc638c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 1.773851s ago: executing program 1 (id=703): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0) munmap(&(0x7f0000002000/0x3000)=nil, 0x3000) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$ax25(0x3, 0x5, 0x1) writev(r1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0x601, 0x10, 0x1, 0x8b}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x29c780, 0x23456}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 1.711703828s ago: executing program 3 (id=704): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x20000005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x4) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r8, 0x852dd6c070cd7e4d, 0xffffffff, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0xfd}, 0x0) 1.082160431s ago: executing program 0 (id=705): syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x8, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x5, {0x9, 0x21, 0x804, 0x1, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x4, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0xfa, 0x6}}]}}}]}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x24040840) socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(r2, &(0x7f0000000500)='net/ip6_tables_matches\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x1000000, 0xc19) 98.033481ms ago: executing program 3 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) open(&(0x7f0000000000)='./file0\x00', 0x3f9541, 0x5) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x42281, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x20, r5, 0xe23, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x80) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008040) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x700, 0xfffffffe}, 0x1c) 0s ago: executing program 1 (id=707): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010"], 0x24, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x874}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts. [ 83.747043][ T5832] cgroup: Unknown subsys name 'net' [ 83.861703][ T5832] cgroup: Unknown subsys name 'cpuset' [ 83.872419][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.559373][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.365334][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.373869][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.383752][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.392899][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.401804][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.410084][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.418308][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.428169][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.435551][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.447361][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.467956][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.503031][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.519824][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.534859][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.538353][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.543194][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.549720][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.569677][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.577577][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.587473][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.595236][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.605465][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.614038][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.639553][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.652749][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.264957][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.423404][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 89.495388][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 89.594464][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.605112][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.612816][ T5842] bridge_slave_0: entered allmulticast mode [ 89.620410][ T5842] bridge_slave_0: entered promiscuous mode [ 89.629510][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 89.664606][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 89.683664][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.692008][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.699286][ T5842] bridge_slave_1: entered allmulticast mode [ 89.706984][ T5842] bridge_slave_1: entered promiscuous mode [ 89.821633][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.884858][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.960889][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.968633][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.975857][ T5843] bridge_slave_0: entered allmulticast mode [ 89.984580][ T5843] bridge_slave_0: entered promiscuous mode [ 89.999478][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.006984][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.014867][ T5849] bridge_slave_0: entered allmulticast mode [ 90.022793][ T5849] bridge_slave_0: entered promiscuous mode [ 90.050759][ T5842] team0: Port device team_slave_0 added [ 90.065358][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.072824][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.081052][ T5843] bridge_slave_1: entered allmulticast mode [ 90.089308][ T5843] bridge_slave_1: entered promiscuous mode [ 90.110774][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.119180][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.126394][ T5849] bridge_slave_1: entered allmulticast mode [ 90.134994][ T5849] bridge_slave_1: entered promiscuous mode [ 90.160488][ T5842] team0: Port device team_slave_1 added [ 90.248013][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.285600][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.293361][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.300905][ T5854] bridge_slave_0: entered allmulticast mode [ 90.309290][ T5854] bridge_slave_0: entered promiscuous mode [ 90.334719][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.360613][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.368151][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.375341][ T5859] bridge_slave_0: entered allmulticast mode [ 90.382963][ T5859] bridge_slave_0: entered promiscuous mode [ 90.395912][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.410731][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.420394][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.427650][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.434831][ T5854] bridge_slave_1: entered allmulticast mode [ 90.442600][ T5854] bridge_slave_1: entered promiscuous mode [ 90.451138][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.458172][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.484504][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.498430][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.505419][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.532647][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.547448][ T5858] Bluetooth: hci0: command tx timeout [ 90.561277][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.568647][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.575868][ T5859] bridge_slave_1: entered allmulticast mode [ 90.583975][ T5859] bridge_slave_1: entered promiscuous mode [ 90.626697][ T5858] Bluetooth: hci1: command tx timeout [ 90.635492][ T5849] team0: Port device team_slave_0 added [ 90.691359][ T5843] team0: Port device team_slave_0 added [ 90.706912][ T5857] Bluetooth: hci2: command tx timeout [ 90.712773][ T5156] Bluetooth: hci3: command tx timeout [ 90.718384][ T5858] Bluetooth: hci4: command tx timeout [ 90.728495][ T5849] team0: Port device team_slave_1 added [ 90.738642][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.750617][ T5843] team0: Port device team_slave_1 added [ 90.777629][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.833355][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.878139][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.894042][ T5842] hsr_slave_0: entered promiscuous mode [ 90.903305][ T5842] hsr_slave_1: entered promiscuous mode [ 90.925432][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.932493][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.959406][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.988072][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.995147][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.021609][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.065209][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.072350][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.099224][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.114772][ T5859] team0: Port device team_slave_0 added [ 91.122069][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.129238][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.155796][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.175756][ T5854] team0: Port device team_slave_0 added [ 91.192160][ T5854] team0: Port device team_slave_1 added [ 91.200519][ T5859] team0: Port device team_slave_1 added [ 91.368695][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.375700][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.402181][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.415904][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.423275][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.449879][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.462908][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.470065][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.496699][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.521182][ T5843] hsr_slave_0: entered promiscuous mode [ 91.528163][ T5843] hsr_slave_1: entered promiscuous mode [ 91.534569][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.542488][ T5843] Cannot create hsr debugfs directory [ 91.564364][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.571584][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.598043][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.655048][ T5849] hsr_slave_0: entered promiscuous mode [ 91.661701][ T5849] hsr_slave_1: entered promiscuous mode [ 91.670457][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.678189][ T5849] Cannot create hsr debugfs directory [ 91.882754][ T5859] hsr_slave_0: entered promiscuous mode [ 91.889866][ T5859] hsr_slave_1: entered promiscuous mode [ 91.896103][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.903878][ T5859] Cannot create hsr debugfs directory [ 91.915023][ T5854] hsr_slave_0: entered promiscuous mode [ 91.921765][ T5854] hsr_slave_1: entered promiscuous mode [ 91.927979][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.935552][ T5854] Cannot create hsr debugfs directory [ 92.400338][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.413695][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.450853][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.490753][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.551365][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.563923][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.578005][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.592261][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.636180][ T5858] Bluetooth: hci0: command tx timeout [ 92.660480][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.685005][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.707764][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.718078][ T5858] Bluetooth: hci1: command tx timeout [ 92.724582][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.786759][ T5858] Bluetooth: hci4: command tx timeout [ 92.790877][ T5156] Bluetooth: hci2: command tx timeout [ 92.792296][ T5857] Bluetooth: hci3: command tx timeout [ 92.833101][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.892986][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.906374][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.922317][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.962520][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.986154][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.022886][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.052486][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.096065][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.157677][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.185634][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.192984][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.235239][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.242483][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.330093][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.384028][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.448842][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.471567][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.521106][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.528353][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.546065][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.564950][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.572445][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.617870][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.625209][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.672009][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.680032][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.708298][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.726471][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.766394][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.773764][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.813967][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.821181][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.872036][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.933587][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.940925][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.960984][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.968302][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.021600][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.237564][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.285876][ T5842] veth0_vlan: entered promiscuous mode [ 94.352922][ T5842] veth1_vlan: entered promiscuous mode [ 94.542124][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.603479][ T5842] veth0_macvtap: entered promiscuous mode [ 94.645472][ T5842] veth1_macvtap: entered promiscuous mode [ 94.707169][ T5857] Bluetooth: hci0: command tx timeout [ 94.765221][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.794512][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.798378][ T5857] Bluetooth: hci1: command tx timeout [ 94.832959][ T5843] veth0_vlan: entered promiscuous mode [ 94.856017][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.869112][ T5857] Bluetooth: hci3: command tx timeout [ 94.874586][ T5857] Bluetooth: hci4: command tx timeout [ 94.880556][ T5858] Bluetooth: hci2: command tx timeout [ 94.899323][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.908412][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.917500][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.926244][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.949718][ T5843] veth1_vlan: entered promiscuous mode [ 94.994705][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.088254][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.096257][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.164438][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.180976][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.181156][ T5843] veth0_macvtap: entered promiscuous mode [ 95.204384][ T5843] veth1_macvtap: entered promiscuous mode [ 95.214165][ T5854] veth0_vlan: entered promiscuous mode [ 95.292993][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.307998][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.320062][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.328826][ T5854] veth1_vlan: entered promiscuous mode [ 95.339825][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.353265][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.353548][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.365700][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.403943][ T5859] veth0_vlan: entered promiscuous mode [ 95.449042][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.473854][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.484304][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.499691][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.520573][ T5849] veth0_vlan: entered promiscuous mode [ 95.555497][ T5859] veth1_vlan: entered promiscuous mode [ 95.579478][ T5849] veth1_vlan: entered promiscuous mode [ 95.633985][ T5854] veth0_macvtap: entered promiscuous mode [ 95.677464][ T5854] veth1_macvtap: entered promiscuous mode [ 95.709096][ T5859] veth0_macvtap: entered promiscuous mode [ 95.727846][ T5898] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.737165][ T5859] veth1_macvtap: entered promiscuous mode [ 95.744808][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.766268][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.831825][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.841487][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.846101][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.865644][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.877006][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.887741][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.899782][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.910354][ T5849] veth0_macvtap: entered promiscuous mode [ 95.920486][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.931454][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.944108][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.957940][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.970556][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.981349][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.981436][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.991838][ T5898] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.991897][ T5898] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 95.991922][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.011667][ T5898] usb 1-1: config 0 descriptor?? [ 96.014437][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.060967][ T5849] veth1_macvtap: entered promiscuous mode [ 96.079869][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.091294][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.102553][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.114725][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.128411][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.141130][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.156463][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.175511][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.186047][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.196128][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.206645][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.219306][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.234633][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.247793][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.256673][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.265411][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.283181][ T5859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.292241][ T5859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.301088][ T5859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.310677][ T5859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.415592][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.434811][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.451476][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.462616][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.474684][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.499807][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.525080][ T5934] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 96.536994][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.552660][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.564519][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.643000][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.665966][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.676299][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.688317][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.698255][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.710017][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.719935][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.730612][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.744884][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.790700][ T5156] Bluetooth: hci0: command tx timeout [ 96.791707][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.810799][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.836160][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.861565][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.870750][ T5156] Bluetooth: hci1: command tx timeout [ 96.900562][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.911436][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.920593][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.947150][ T5156] Bluetooth: hci4: command tx timeout [ 96.947182][ T5857] Bluetooth: hci2: command tx timeout [ 96.952582][ T5156] Bluetooth: hci3: command tx timeout [ 97.036090][ T9] cfg80211: failed to load regulatory.db [ 97.049057][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.073299][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.231476][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.256492][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.977604][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.023752][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.106398][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.134569][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.335531][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.420143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.429627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.438851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.480619][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.755835][ T978] usb 1-1: USB disconnect, device number 2 [ 99.033778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.136805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.238599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.869565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.938837][ T5894] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.020698][ T5982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.027712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.140199][ T5983] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.150540][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 101.156586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 101.207191][ T5894] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 101.215412][ T5894] usb 5-1: config 0 has no interface number 0 [ 101.240564][ T5894] usb 5-1: config 0 interface 12 has no altsetting 0 [ 101.264269][ T5894] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 101.424964][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.799225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.266940][ T5894] usb 5-1: Product: syz [ 102.271175][ T5894] usb 5-1: Manufacturer: syz [ 102.275816][ T5894] usb 5-1: SerialNumber: syz [ 102.325722][ T5894] usb 5-1: config 0 descriptor?? [ 102.462449][ T5988] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 102.469319][ T5988] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.478062][ T5988] vhci_hcd vhci_hcd.0: Device attached [ 102.489641][ T5997] vhci_hcd: connection closed [ 102.499772][ T36] vhci_hcd: stop threads [ 102.590562][ T36] vhci_hcd: release socket [ 102.601454][ T36] vhci_hcd: disconnect device [ 102.614944][ T5894] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 102.667117][ T975] vhci_hcd: vhci_device speed not set [ 102.676997][ T5894] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 102.806170][ T5894] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 102.815250][ T5894] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 102.841987][ T5894] usb 5-1: USB disconnect, device number 2 [ 104.043946][ T6015] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25'. [ 104.797385][ T6020] netlink: 'syz.4.25': attribute type 10 has an invalid length. [ 105.098424][ T6020] veth0_vlan: left promiscuous mode [ 105.138771][ T6020] veth0_vlan: entered promiscuous mode [ 105.194488][ T6020] team0: Device veth0_vlan failed to register rx_handler [ 105.692653][ T5895] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.846770][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 105.862951][ T5895] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.949606][ T5895] usb 4-1: config 1 interface 0 has no altsetting 0 [ 106.733965][ T5895] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 106.756634][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.764906][ T5895] usb 4-1: Product: syz [ 106.769916][ T5895] usb 4-1: Manufacturer: syz [ 106.776606][ T5895] usb 4-1: SerialNumber: syz [ 107.057569][ T6054] macsec1: entered allmulticast mode [ 107.062940][ T6054] macvlan0: entered allmulticast mode [ 107.097288][ T5895] usb 4-1: USB disconnect, device number 2 [ 107.120757][ T6054] veth1_vlan: entered allmulticast mode [ 108.171304][ T6063] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 108.194326][ T6054] macvlan0: left allmulticast mode [ 108.218834][ T6054] veth1_vlan: left allmulticast mode [ 108.334037][ T6061] ip6erspan0: entered promiscuous mode [ 108.343757][ T6062] warning: `syz.2.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.696279][ T6081] tmpfs: Bad value for 'mpol' [ 109.783558][ T6084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.47'. [ 109.814694][ T6084] netlink: 'syz.0.47': attribute type 10 has an invalid length. [ 109.875551][ T6084] veth0_vlan: left promiscuous mode [ 109.918359][ T6084] veth0_vlan: entered promiscuous mode [ 109.997553][ T6084] team0: Device veth0_vlan failed to register rx_handler [ 111.094265][ T6098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.651976][ T6116] netlink: 132 bytes leftover after parsing attributes in process `syz.3.56'. [ 112.253336][ T6122] loop2: detected capacity change from 0 to 2048 [ 112.373194][ T6122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.457746][ T30] audit: type=1326 audit(1743436997.009:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 112.734405][ T30] audit: type=1326 audit(1743436997.279:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc415f8bad0 code=0x7ffc0000 [ 113.942197][ T30] audit: type=1326 audit(1743436997.279:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 114.054954][ T30] audit: type=1326 audit(1743436997.279:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 114.162795][ T30] audit: type=1800 audit(1743436997.289:6): pid=6139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.57" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 114.301007][ T30] audit: type=1326 audit(1743436997.329:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 114.407411][ T30] audit: type=1326 audit(1743436997.329:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 114.592433][ T30] audit: type=1326 audit(1743436997.329:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 114.942152][ T30] audit: type=1326 audit(1743436997.809:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 115.400727][ T30] audit: type=1326 audit(1743436998.019:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 115.650174][ T5857] block nbd4: Receive control failed (result -104) [ 115.730346][ T6160] block nbd4: shutting down sockets [ 116.599612][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.841907][ T6164] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.876622][ T6164] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 116.954523][ T6176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.69'. [ 117.112754][ T6164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.203318][ T6164] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 117.402253][ T6182] process 'syz.4.72' launched './file0' with NULL argv: empty string added [ 117.767195][ T6164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.786806][ T6164] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 117.925824][ T6164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.940809][ T6164] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 118.071186][ T6164] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 118.100194][ T6164] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 119.487577][ T6214] macsec1: entered allmulticast mode [ 119.512366][ T6214] macvlan0: entered allmulticast mode [ 119.524587][ T6218] loop4: detected capacity change from 0 to 2048 [ 119.528909][ T6214] veth1_vlan: entered allmulticast mode [ 119.577423][ T6214] macvlan0: left allmulticast mode [ 119.614089][ T6214] veth1_vlan: left allmulticast mode [ 119.672982][ T6218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.809727][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 119.809747][ T30] audit: type=1326 audit(1743437004.359:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b078d169 code=0x7ffc0000 [ 119.975537][ T30] audit: type=1326 audit(1743437004.399:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23b078bad0 code=0x7ffc0000 [ 120.019759][ T30] audit: type=1326 audit(1743437004.399:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b078d169 code=0x7ffc0000 [ 120.046198][ T30] audit: type=1326 audit(1743437004.409:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f23b078d169 code=0x7ffc0000 [ 120.072583][ T30] audit: type=1326 audit(1743437004.409:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b078d169 code=0x7ffc0000 [ 120.103673][ T6235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.84'. [ 120.228192][ T30] audit: type=1326 audit(1743437004.409:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f23b078d169 code=0x7ffc0000 [ 120.364227][ T30] audit: type=1326 audit(1743437004.409:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b078d169 code=0x7ffc0000 [ 120.386908][ T6239] loop3: detected capacity change from 0 to 512 [ 120.434936][ T6239] EXT4-fs (loop3): too many log groups per flexible block group [ 120.459088][ T6239] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 120.506177][ T30] audit: type=1326 audit(1743437004.409:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f23b078d169 code=0x7ffc0000 [ 120.560859][ T6239] EXT4-fs (loop3): mount failed [ 120.568705][ T30] audit: type=1800 audit(1743437004.409:25): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.82" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 120.599468][ T30] audit: type=1326 audit(1743437004.409:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b078d169 code=0x7ffc0000 [ 123.789718][ T5849] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.397811][ T6301] macsec1: entered allmulticast mode [ 124.403232][ T6301] macvlan0: entered allmulticast mode [ 124.423524][ T6301] veth1_vlan: entered allmulticast mode [ 124.509877][ T6301] macvlan0: left allmulticast mode [ 124.537311][ T6301] veth1_vlan: left allmulticast mode [ 124.557519][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.100'. [ 129.060342][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 129.070015][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 129.080644][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 129.090364][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 129.099352][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 129.110027][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 129.120084][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 129.129354][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 129.138570][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 129.612484][ T6371] __nla_validate_parse: 41 callbacks suppressed [ 129.612511][ T6371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.115'. [ 129.629837][ T6371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.115'. [ 133.939184][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.130'. [ 134.062423][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.130'. [ 138.009381][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.015855][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.152690][ T6500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.145'. [ 140.278985][ T6500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.145'. [ 144.624206][ T6542] macsec1: entered allmulticast mode [ 144.646867][ T6542] macvlan0: entered allmulticast mode [ 144.653324][ T6542] veth1_vlan: entered allmulticast mode [ 144.666174][ T6542] macvlan0: left allmulticast mode [ 144.673961][ T6542] veth1_vlan: left allmulticast mode [ 144.747802][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 144.757639][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 144.870666][ T6550] Zero length message leads to an empty skb [ 145.604389][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.836248][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 145.928128][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.271322][ T24] usb 4-1: config 0 descriptor?? [ 146.360946][ T24] cp210x 4-1:0.0: cp210x converter detected [ 146.632877][ T6572] netlink: 48 bytes leftover after parsing attributes in process `syz.2.168'. [ 146.642455][ T6572] netlink: 48 bytes leftover after parsing attributes in process `syz.2.168'. [ 146.922243][ T24] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 147.058876][ T24] cp210x 4-1:0.0: querying part number failed [ 147.267120][ T6576] netlink: 32 bytes leftover after parsing attributes in process `syz.4.169'. [ 147.289710][ T24] usb 4-1: cp210x converter now attached to ttyUSB0 [ 147.348637][ T6576] netlink: 'syz.4.169': attribute type 10 has an invalid length. [ 147.372451][ T24] usb 4-1: USB disconnect, device number 3 [ 147.390228][ T6576] veth0_vlan: left promiscuous mode [ 147.406046][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 147.426325][ T24] cp210x 4-1:0.0: device disconnected [ 147.439347][ T6576] veth0_vlan: entered promiscuous mode [ 147.464004][ T6576] team0: Device veth0_vlan failed to register rx_handler [ 149.420817][ T6584] gre1: entered promiscuous mode [ 149.425973][ T6584] gre1: entered allmulticast mode [ 149.795971][ T6588] macsec1: entered allmulticast mode [ 149.854033][ T6588] macvlan0: entered allmulticast mode [ 149.884520][ T6588] veth1_vlan: entered allmulticast mode [ 149.981754][ T6588] macvlan0: left allmulticast mode [ 150.041668][ T6588] veth1_vlan: left allmulticast mode [ 151.278617][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 151.367058][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 152.294608][ T6616] netlink: 48 bytes leftover after parsing attributes in process `syz.4.182'. [ 152.304178][ T6616] netlink: 48 bytes leftover after parsing attributes in process `syz.4.182'. [ 152.360637][ T6617] veth0_vlan: entered allmulticast mode [ 157.478526][ T6642] sctp: failed to load transform for md5: -2 [ 159.697696][ T6657] netlink: 32 bytes leftover after parsing attributes in process `syz.0.188'. [ 160.371660][ T6657] netlink: 'syz.0.188': attribute type 10 has an invalid length. [ 160.383165][ T6657] veth0_vlan: left promiscuous mode [ 160.396585][ T6657] veth0_vlan: entered promiscuous mode [ 160.412790][ T6657] team0: Device veth0_vlan failed to register rx_handler [ 160.667242][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 160.701873][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 162.094125][ T6683] macsec1: entered allmulticast mode [ 162.118216][ T6683] macvlan0: entered allmulticast mode [ 162.123815][ T6683] veth1_vlan: entered allmulticast mode [ 162.147738][ T6683] macvlan0: left allmulticast mode [ 162.154210][ T6683] veth1_vlan: left allmulticast mode [ 163.765843][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 163.794361][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 167.197704][ T6729] netlink: 32 bytes leftover after parsing attributes in process `syz.3.213'. [ 167.299013][ T6729] netlink: 'syz.3.213': attribute type 10 has an invalid length. [ 167.419040][ T6729] veth0_vlan: left promiscuous mode [ 167.457133][ T6729] veth0_vlan: entered promiscuous mode [ 167.510302][ T6729] team0: Device veth0_vlan failed to register rx_handler [ 168.218783][ T6745] macsec1: entered allmulticast mode [ 168.228693][ T6745] macvlan0: entered allmulticast mode [ 168.234507][ T6745] veth1_vlan: entered allmulticast mode [ 168.250659][ T6745] macvlan0: left allmulticast mode [ 168.256998][ T6745] veth1_vlan: left allmulticast mode [ 172.286479][ T6779] netlink: 32 bytes leftover after parsing attributes in process `syz.4.231'. [ 172.307592][ T6779] netlink: 'syz.4.231': attribute type 10 has an invalid length. [ 172.332203][ T6779] veth0_vlan: left allmulticast mode [ 172.353300][ T6779] veth0_vlan: left promiscuous mode [ 172.369970][ T6779] veth0_vlan: entered promiscuous mode [ 172.389551][ T6779] team0: Device veth0_vlan failed to register rx_handler [ 172.589267][ T6789] tmpfs: Bad value for 'mpol' [ 174.630596][ T6810] mmap: syz.3.242 (6810) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 178.507929][ T6839] netlink: 32 bytes leftover after parsing attributes in process `syz.0.250'. [ 178.579833][ T6839] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 178.658611][ T6839] veth0_vlan: left promiscuous mode [ 178.936037][ T6839] veth0_vlan: entered promiscuous mode [ 179.554661][ T6839] team0: Device veth0_vlan failed to register rx_handler [ 179.777175][ T6838] tipc: Started in network mode [ 179.782317][ T6838] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 179.846166][ T6838] tipc: Enabled bearer , priority 0 [ 180.968344][ T5898] tipc: Node number set to 11578026 [ 181.557218][ T6877] netlink: 32 bytes leftover after parsing attributes in process `syz.1.264'. [ 181.607834][ T6877] netlink: 'syz.1.264': attribute type 10 has an invalid length. [ 181.672216][ T6877] veth0_vlan: left promiscuous mode [ 181.691267][ T6877] veth0_vlan: entered promiscuous mode [ 181.712371][ T6877] team0: Device veth0_vlan failed to register rx_handler [ 183.966375][ T6917] netlink: 32 bytes leftover after parsing attributes in process `syz.4.278'. [ 184.143075][ T6927] netlink: 48 bytes leftover after parsing attributes in process `syz.3.281'. [ 184.153041][ T6927] netlink: 48 bytes leftover after parsing attributes in process `syz.3.281'. [ 187.743031][ T6944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.286'. [ 187.793096][ T6944] netlink: 'syz.1.286': attribute type 10 has an invalid length. [ 187.801308][ T6944] veth0_vlan: left promiscuous mode [ 187.870784][ T6944] veth0_vlan: entered promiscuous mode [ 187.909163][ T6944] team0: Device veth0_vlan failed to register rx_handler [ 191.526338][ T6985] netlink: 48 bytes leftover after parsing attributes in process `syz.0.300'. [ 191.536013][ T6985] netlink: 48 bytes leftover after parsing attributes in process `syz.0.300'. [ 191.591429][ T6986] veth0_vlan: entered allmulticast mode [ 197.047126][ T7008] netlink: 32 bytes leftover after parsing attributes in process `syz.1.305'. [ 197.112512][ T7008] netlink: 'syz.1.305': attribute type 10 has an invalid length. [ 197.701694][ T7008] veth0_vlan: left promiscuous mode [ 197.821759][ T7008] veth0_vlan: entered promiscuous mode [ 197.871820][ T7008] team0: Device veth0_vlan failed to register rx_handler [ 199.496278][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.502933][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.418762][ T7040] netlink: 48 bytes leftover after parsing attributes in process `syz.0.314'. [ 200.438483][ T7040] netlink: 48 bytes leftover after parsing attributes in process `syz.0.314'. [ 203.516058][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 203.516080][ T30] audit: type=1804 audit(1743437088.049:47): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.318" name="/newroot/55/file0" dev="tmpfs" ino=303 res=1 errno=0 [ 206.150759][ T7095] netlink: 48 bytes leftover after parsing attributes in process `syz.0.329'. [ 206.160882][ T7095] netlink: 48 bytes leftover after parsing attributes in process `syz.0.329'. [ 206.170142][ T7096] tmpfs: Bad value for 'mpol' [ 211.924353][ T30] audit: type=1326 audit(1743437095.489:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698fb8d169 code=0x7ffc0000 [ 212.243970][ T30] audit: type=1326 audit(1743437095.489:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f698fb8bad0 code=0x7ffc0000 [ 212.374139][ T30] audit: type=1326 audit(1743437095.489:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698fb8d169 code=0x7ffc0000 [ 212.436601][ T30] audit: type=1326 audit(1743437095.489:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f698fb8d169 code=0x7ffc0000 [ 212.483789][ T30] audit: type=1326 audit(1743437095.489:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698fb8d169 code=0x7ffc0000 [ 212.533366][ T30] audit: type=1326 audit(1743437095.489:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f698fb8d169 code=0x7ffc0000 [ 212.613320][ T30] audit: type=1326 audit(1743437095.499:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698fb8d169 code=0x7ffc0000 [ 212.677381][ T30] audit: type=1326 audit(1743437095.499:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f698fb8d169 code=0x7ffc0000 [ 212.726605][ T30] audit: type=1326 audit(1743437095.499:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698fb8d169 code=0x7ffc0000 [ 212.791956][ T30] audit: type=1326 audit(1743437095.499:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698fb8d169 code=0x7ffc0000 [ 213.247157][ T5895] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 213.458649][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 213.468077][ T7137] tmpfs: Bad value for 'mpol' [ 214.146891][ T5895] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 214.187167][ T5895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.201228][ T5895] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.214006][ T5895] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.225346][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.233559][ T5895] usb 5-1: Product: syz [ 214.237965][ T5895] usb 5-1: Manufacturer: syz [ 214.242610][ T5895] usb 5-1: SerialNumber: syz [ 214.675089][ T5895] usb 5-1: 0:2 : does not exist [ 215.480985][ T5895] usb 5-1: USB disconnect, device number 3 [ 216.922085][ T7153] udevd[7153]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.069272][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 217.069292][ T30] audit: type=1326 audit(1743437101.629:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 217.197331][ T30] audit: type=1326 audit(1743437101.739:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 217.316011][ T7177] tmpfs: Bad value for 'mpol' [ 217.872812][ T30] audit: type=1326 audit(1743437101.749:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc415f8bad0 code=0x7ffc0000 [ 217.896326][ T30] audit: type=1326 audit(1743437101.749:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 217.976691][ T30] audit: type=1326 audit(1743437101.749:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 218.081548][ T30] audit: type=1326 audit(1743437101.749:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 218.149648][ T30] audit: type=1326 audit(1743437101.749:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 218.175474][ T30] audit: type=1326 audit(1743437101.749:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 218.259925][ T30] audit: type=1326 audit(1743437101.749:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 218.440794][ T30] audit: type=1326 audit(1743437101.749:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc415f8d169 code=0x7ffc0000 [ 218.501444][ T5895] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 218.780229][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 218.821155][ T5895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.845331][ T5895] usb 1-1: config 2 has an invalid interface number: 161 but max is 0 [ 218.882676][ T5895] usb 1-1: config 2 has an invalid descriptor of length 128, skipping remainder of the config [ 218.931030][ T5895] usb 1-1: config 2 has no interface number 0 [ 218.970623][ T5895] usb 1-1: config 2 interface 161 altsetting 16 has an invalid endpoint descriptor of length 5, skipping [ 219.003172][ T5895] usb 1-1: config 2 interface 161 has no altsetting 0 [ 219.028663][ T5895] usb 1-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=69.47 [ 219.046804][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.070345][ T5895] usb 1-1: Product: syz [ 219.075723][ T5895] usb 1-1: Manufacturer: syz [ 219.095223][ T5895] usb 1-1: SerialNumber: syz [ 222.501683][ T5895] usb 1-1: bad CDC descriptors [ 222.528473][ T5895] usb 1-1: USB disconnect, device number 3 [ 222.578536][ T7153] udevd[7153]: setting mode of /dev/bus/usb/001/003 to 020664 failed: No such file or directory [ 222.596709][ T7153] udevd[7153]: setting owner of /dev/bus/usb/001/003 to uid=0, gid=0 failed: No such file or directory [ 224.803437][ T7234] netlink: 32 bytes leftover after parsing attributes in process `syz.4.373'. [ 224.819946][ T7234] netlink: 'syz.4.373': attribute type 10 has an invalid length. [ 224.830846][ T7234] veth0_vlan: left promiscuous mode [ 224.837242][ T7234] veth0_vlan: entered promiscuous mode [ 224.845043][ T7234] team0: Device veth0_vlan failed to register rx_handler [ 225.103679][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 225.103699][ T30] audit: type=1326 audit(1743437109.659:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aedf8d169 code=0x7ffc0000 [ 225.189183][ T7241] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 225.202136][ T30] audit: type=1326 audit(1743437109.659:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aedf8d169 code=0x7ffc0000 [ 225.261379][ T30] audit: type=1326 audit(1743437109.659:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4aedf8bad0 code=0x7ffc0000 [ 225.328171][ T30] audit: type=1326 audit(1743437109.699:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aedf8d169 code=0x7ffc0000 [ 225.409546][ T30] audit: type=1326 audit(1743437109.699:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f4aedf8d169 code=0x7ffc0000 [ 225.639507][ T30] audit: type=1326 audit(1743437109.699:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aedf8d169 code=0x7ffc0000 [ 225.805423][ T30] audit: type=1326 audit(1743437109.699:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4aedf8d169 code=0x7ffc0000 [ 226.034616][ T30] audit: type=1326 audit(1743437109.699:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aedf8d169 code=0x7ffc0000 [ 226.147143][ T30] audit: type=1326 audit(1743437109.699:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f4aedf8d169 code=0x7ffc0000 [ 226.169579][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.264409][ T30] audit: type=1326 audit(1743437109.699:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aedf8d169 code=0x7ffc0000 [ 226.291617][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.901006][ T7380] gre1: entered promiscuous mode [ 238.906043][ T7380] gre1: entered allmulticast mode [ 240.804070][ T7389] lo speed is unknown, defaulting to 1000 [ 240.810110][ T7389] lo speed is unknown, defaulting to 1000 [ 240.818579][ T7389] lo speed is unknown, defaulting to 1000 [ 240.829465][ T7389] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 240.844312][ T7389] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 240.873372][ T7389] lo speed is unknown, defaulting to 1000 [ 240.881195][ T7389] lo speed is unknown, defaulting to 1000 [ 240.888998][ T7389] lo speed is unknown, defaulting to 1000 [ 240.896648][ T7389] lo speed is unknown, defaulting to 1000 [ 240.904029][ T7389] lo speed is unknown, defaulting to 1000 [ 244.706627][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 245.546637][ T5895] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 246.494067][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 246.514098][ T5895] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 246.534924][ T5895] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 246.556034][ T5895] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.567286][ T5895] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.582718][ T5895] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.592849][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.845437][ T5895] usb 1-1: GET_CAPABILITIES returned 0 [ 246.853265][ T5895] usbtmc 1-1:16.0: can't read capabilities [ 248.799085][ T5895] usb 1-1: USB disconnect, device number 4 [ 250.216833][ T5894] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 251.763245][ T7485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.448'. [ 251.818981][ T7485] erspan0: entered promiscuous mode [ 253.037030][ T5895] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 253.326689][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 253.339246][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 253.373540][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 253.506088][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 253.782269][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.139165][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.150567][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.400040][ T7513] netlink: 'syz.4.458': attribute type 10 has an invalid length. [ 254.408597][ T7513] veth0_vlan: left promiscuous mode [ 254.419003][ T7513] veth0_vlan: entered promiscuous mode [ 254.427651][ T7513] team0: Device veth0_vlan failed to register rx_handler [ 254.452722][ T5895] usb 3-1: GET_CAPABILITIES returned 0 [ 254.516961][ T5895] usbtmc 3-1:16.0: can't read capabilities [ 256.158655][ T5895] usb 3-1: USB disconnect, device number 2 [ 257.462289][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -110 [ 257.747330][ T5894] usb 2-1: can't read configurations, error -110 [ 257.901144][ T5894] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 258.056621][ T5894] usb 2-1: device descriptor read/64, error -32 [ 258.187107][ T5894] usb usb2-port1: attempt power cycle [ 259.256635][ T5894] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 259.308636][ T5894] usb 2-1: device descriptor read/8, error -71 [ 261.358552][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.365014][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.086816][ T5895] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 265.249446][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 265.261803][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 265.283061][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 265.295327][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.310129][ T7576] trusted_key: syz.3.476 sent an empty control message without MSG_MORE. [ 265.319698][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.354817][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.528823][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.063290][ T7587] overlayfs: failed to clone upperpath [ 266.076593][ T5895] usb 3-1: GET_CAPABILITIES returned 0 [ 266.082179][ T5895] usbtmc 3-1:16.0: can't read capabilities [ 266.981547][ T5895] usb 3-1: USB disconnect, device number 3 [ 267.110879][ T7602] netlink: 48 bytes leftover after parsing attributes in process `syz.3.484'. [ 267.120540][ T7602] netlink: 48 bytes leftover after parsing attributes in process `syz.3.484'. [ 267.174425][ T7603] veth0_vlan: entered allmulticast mode [ 269.911986][ T7627] tipc: Failed to remove unknown binding: 66,1,1/0:110436538/110436540 [ 269.920744][ T7627] tipc: Failed to remove unknown binding: 66,1,1/0:110436538/110436540 [ 271.701673][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 271.822923][ T7645] netlink: 48 bytes leftover after parsing attributes in process `syz.1.496'. [ 271.832509][ T7645] netlink: 48 bytes leftover after parsing attributes in process `syz.1.496'. [ 272.888666][ T7646] veth0_vlan: entered allmulticast mode [ 273.057884][ T7651] fuse: Bad value for 'fd' [ 278.251964][ T7689] netlink: 48 bytes leftover after parsing attributes in process `syz.1.509'. [ 278.261592][ T7689] netlink: 48 bytes leftover after parsing attributes in process `syz.1.509'. [ 279.745057][ T7698] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 282.107139][ T6341] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 282.536571][ T6341] usb 2-1: Using ep0 maxpacket: 32 [ 282.633754][ T6341] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.685189][ T6341] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.875524][ T6341] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 282.905923][ T5898] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 283.028578][ T6341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.187639][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 283.273677][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.299372][ T6341] hub 2-1:4.0: USB hub found [ 283.334251][ T5898] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 283.419953][ T5898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.485088][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.517515][ T5898] usb 3-1: Product: syz [ 283.530480][ T6341] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 283.541361][ T5898] usb 3-1: Manufacturer: syz [ 283.546060][ T5898] usb 3-1: SerialNumber: syz [ 285.176278][ T6341] usb 2-1: USB disconnect, device number 6 [ 286.342229][ T5898] usb 3-1: 0:2 : does not exist [ 286.588139][ T5898] usb 3-1: USB disconnect, device number 4 [ 286.716143][ T7769] netlink: 20 bytes leftover after parsing attributes in process `syz.4.526'. [ 286.734432][ T7769] netlink: 56 bytes leftover after parsing attributes in process `syz.4.526'. [ 287.608744][ T7705] udevd[7705]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.791606][ T7846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.556'. [ 299.212106][ T7888] kAFS: No cell specified [ 299.410287][ T5861] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 299.841194][ T5861] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 300.257147][ T5861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 300.301423][ T5861] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 300.326734][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 300.334982][ T5861] usb 1-1: Product: syz [ 301.756548][ T5861] usb 1-1: Manufacturer: syz [ 301.761241][ T5861] usb 1-1: SerialNumber: syz [ 301.802823][ T5861] usb 1-1: config 0 descriptor?? [ 301.845644][ T5861] usb 1-1: selecting invalid altsetting 0 [ 302.167062][ T5861] usb 1-1: USB disconnect, device number 5 [ 302.633595][ T7885] udevd[7885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.705422][ T7951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.587'. [ 309.860589][ T7981] lo speed is unknown, defaulting to 1000 [ 311.416124][ T7993] syz.2.598: attempt to access beyond end of device [ 311.416124][ T7993] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 311.431262][ T7993] vxfs: unable to read disk superblock at 1 [ 311.446956][ T7993] syz.2.598: attempt to access beyond end of device [ 311.446956][ T7993] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 311.461321][ T7993] vxfs: unable to read disk superblock at 8 [ 311.467769][ T7993] vxfs: can't find superblock. [ 314.209757][ T5917] libceph: connect (1)[c::]:6789 error -22 [ 315.089311][ T8008] ceph: No mds server is up or the cluster is laggy [ 315.196183][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 316.282375][ T8022] syz.3.608 (8022) used greatest stack depth: 18848 bytes left [ 317.955476][ T8040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.610'. [ 318.207176][ T6341] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 319.154157][ T6341] usb 2-1: device descriptor read/all, error -71 [ 321.298789][ T8070] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 322.316159][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.325861][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.754054][ T8084] veth1_macvtap: left promiscuous mode [ 322.789371][ T8084] macsec0: entered promiscuous mode [ 325.115403][ T8116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.635'. [ 329.297154][ T5897] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 330.713562][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 330.723733][ T5897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.736059][ T5897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 330.749306][ T5897] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 330.758589][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.766788][ T5897] usb 1-1: Product: syz [ 330.771072][ T5897] usb 1-1: Manufacturer: syz [ 330.776269][ T5897] usb 1-1: SerialNumber: syz [ 330.804807][ T5897] smsusb:smsusb_probe: board id=8, interface number 0 [ 330.827650][ T5897] smsusb:smsusb_probe: Device initialized with return code -19 [ 331.216574][ T5897] usb 1-1: USB disconnect, device number 6 [ 331.462383][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 331.477835][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 331.497157][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 331.508042][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 334.501227][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 334.501247][ T30] audit: type=1326 audit(1743437219.059:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23b078d169 code=0x0 [ 334.688499][ T8200] netlink: 'syz.2.661': attribute type 4 has an invalid length. [ 335.797540][ T30] audit: type=1326 audit(1743437220.339:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b078d169 code=0x7fc00000 [ 335.902305][ T8216] netlink: 32 bytes leftover after parsing attributes in process `syz.2.664'. [ 335.996696][ T30] audit: type=1326 audit(1743437220.339:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23b078d169 code=0x7fc00000 [ 336.056689][ T30] audit: type=1326 audit(1743437220.339:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b078d169 code=0x7fc00000 [ 336.097145][ T30] audit: type=1326 audit(1743437220.339:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b078d169 code=0x7fc00000 [ 336.144905][ T30] audit: type=1326 audit(1743437220.339:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b078d169 code=0x7fc00000 [ 336.190416][ T30] audit: type=1326 audit(1743437220.339:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b078d169 code=0x7fc00000 [ 336.256376][ T30] audit: type=1326 audit(1743437220.339:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b078d169 code=0x7fc00000 [ 336.279322][ T5917] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 336.306610][ T30] audit: type=1326 audit(1743437220.339:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b078d169 code=0x7fc00000 [ 336.336548][ T30] audit: type=1326 audit(1743437220.339:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b078d169 code=0x7fc00000 [ 336.456524][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 336.469126][ T5917] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 336.477859][ T5917] usb 2-1: config 0 has no interface number 0 [ 336.484011][ T5917] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.544231][ T5917] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 336.576692][ T5917] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 336.617646][ T5917] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.654181][ T5917] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 337.432246][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.443602][ T5917] usb 2-1: Product: syz [ 337.448045][ T5917] usb 2-1: Manufacturer: syz [ 337.452836][ T5917] usb 2-1: SerialNumber: syz [ 337.461475][ T5917] usb 2-1: config 0 descriptor?? [ 339.390185][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 339.805868][ T5917] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 339.806238][ T5854] block device autoloading is deprecated and will be removed. [ 339.925053][ T5917] usb 2-1: USB disconnect, device number 9 [ 339.934914][ T9] usb 1-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 340.168936][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.179326][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 340.920489][ T9] usb 1-1: config 0 has no interface number 0 [ 341.690667][ T9] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 341.700266][ T8254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.678'. [ 341.711537][ T9] usb 1-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 341.762530][ T9] usb 1-1: config 0 descriptor?? [ 341.784212][ T9] usb 1-1: can't set config #0, error -71 [ 341.839080][ T9] usb 1-1: USB disconnect, device number 7 [ 345.322133][ T8286] gretap1: entered promiscuous mode [ 345.348549][ T8286] gretap1: entered allmulticast mode [ 345.399627][ T8286] team0: Port device gretap1 added [ 345.833140][ T8300] fuse: Bad value for 'fd' [ 350.499979][ T8317] 9pnet_fd: Insufficient options for proto=fd [ 351.577648][ T8330] sctp: failed to load transform for md5: -2 [ 352.670554][ T8337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.699'. [ 352.758488][ T5895] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 353.550954][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 353.582084][ T5895] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 353.643160][ T8352] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 353.655428][ T8352] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 353.663883][ T8352] CPU: 1 UID: 0 PID: 8352 Comm: syz.3.706 Not tainted 6.14.0-next-20250331-syzkaller #0 PREEMPT(full) [ 353.674907][ T8352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.684969][ T8352] RIP: 0010:__se_sys_mremap+0x25fa/0x2c00 [ 353.690905][ T8352] Code: c0 0f 85 0e 05 00 00 0f b6 9c 24 20 03 00 00 31 ff 89 de e8 c8 16 ab ff 85 db 0f 84 7b 01 00 00 e8 bb 13 ab ff e9 9e 00 00 00 <80> 78 04 00 74 0a bf 20 00 00 00 e8 c6 2d 15 00 4c 8b 34 25 20 00 [ 353.710558][ T8352] RSP: 0018:ffffc900037f7b40 EFLAGS: 00010246 [ 353.716663][ T8352] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff920006fefca [ 353.724643][ T8352] RDX: ffffc9000caf5000 RSI: 00000000000000bc RDI: 00000000000000bd [ 353.732620][ T8352] RBP: ffffc900037f7f00 R08: ffffffff821d1414 R09: ffffffff8c2734a7 [ 353.740598][ T8352] R10: 0000000000000004 R11: ffff888025db1e00 R12: 0000200000ff8000 [ 353.748591][ T8352] R13: ffff888033366780 R14: 0000000018000098 R15: ffffc900037f7cd0 [ 353.756571][ T8352] FS: 00007f07277f66c0(0000) GS:ffff888125095000(0000) knlGS:0000000000000000 [ 353.765501][ T8352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.772086][ T8352] CR2: 00007f07299705a0 CR3: 000000004b4f4000 CR4: 00000000003526f0 [ 353.780063][ T8352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.788051][ T8352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.796039][ T8352] Call Trace: [ 353.799316][ T8352] [ 353.802253][ T8352] ? futex_wait+0x287/0x370 [ 353.806796][ T8352] ? __pfx___se_sys_mremap+0x10/0x10 [ 353.812091][ T8352] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 353.818343][ T8352] ? do_futex+0x37c/0x5a0 [ 353.822695][ T8352] ? __pfx_do_futex+0x10/0x10 [ 353.827382][ T8352] ? __vm_munmap+0x452/0x520 [ 353.831987][ T8352] ? __x64_sys_mremap+0x20/0xc0 [ 353.836858][ T8352] do_syscall_64+0xf3/0x230 [ 353.841366][ T8352] ? clear_bhb_loop+0x45/0xa0 [ 353.846129][ T8352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.852037][ T8352] RIP: 0033:0x7f072998d169 [ 353.856467][ T8352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.876086][ T8352] RSP: 002b:00007f07277f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 353.884517][ T8352] RAX: ffffffffffffffda RBX: 00007f0729ba5fa0 RCX: 00007f072998d169 [ 353.892576][ T8352] RDX: 0000000000002000 RSI: 0000000000001000 RDI: 0000200000ff8000 [ 353.900545][ T8352] RBP: 00007f0729a0e2a0 R08: 0000200000ff8000 R09: 0000000000000000 [ 353.908553][ T8352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.917067][ T8352] R13: 0000000000000000 R14: 00007f0729ba5fa0 R15: 00007fff13381988 [ 353.925056][ T8352] [ 353.928080][ T8352] Modules linked in: [ 353.932530][ T8352] ---[ end trace 0000000000000000 ]--- [ 353.938080][ T8352] RIP: 0010:__se_sys_mremap+0x25fa/0x2c00 [ 353.943811][ T8352] Code: c0 0f 85 0e 05 00 00 0f b6 9c 24 20 03 00 00 31 ff 89 de e8 c8 16 ab ff 85 db 0f 84 7b 01 00 00 e8 bb 13 ab ff e9 9e 00 00 00 <80> 78 04 00 74 0a bf 20 00 00 00 e8 c6 2d 15 00 4c 8b 34 25 20 00 [ 353.963499][ T8352] RSP: 0018:ffffc900037f7b40 EFLAGS: 00010246 [ 353.971271][ T8352] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff920006fefca [ 353.979272][ T8352] RDX: ffffc9000caf5000 RSI: 00000000000000bc RDI: 00000000000000bd [ 353.987298][ T8352] RBP: ffffc900037f7f00 R08: ffffffff821d1414 R09: ffffffff8c2734a7 [ 353.995276][ T8352] R10: 0000000000000004 R11: ffff888025db1e00 R12: 0000200000ff8000 [ 354.003272][ T8352] R13: ffff888033366780 R14: 0000000018000098 R15: ffffc900037f7cd0 [ 354.011371][ T8352] FS: 00007f07277f66c0(0000) GS:ffff888125095000(0000) knlGS:0000000000000000 [ 354.020333][ T8352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.026947][ T8352] CR2: 00007f07299705a0 CR3: 000000004b4f4000 CR4: 00000000003526f0 [ 354.034945][ T8352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.042942][ T8352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 354.050954][ T8352] Kernel panic - not syncing: Fatal exception [ 354.057301][ T8352] Kernel Offset: disabled [ 354.061631][ T8352] Rebooting in 86400 seconds..