last executing test programs: 15.26678007s ago: executing program 2 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x2) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x809, 0x4, 0x6, 0xfffa}, 0x1d, [0x7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x40, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x6, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x101, 0x7, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x6, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x916, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x2008, 0x4, 0x8000, 0x9, 0x7fffffff, 0x404, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x4020006, 0xb, 0xa, 0x1, 0x7, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x0, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x1000, 0x38, 0x800003, 0x200, 0x80, 0x800001, 0xcc52, 0x950bfb0, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffbf, 0x0, 0x6, 0x1c, 0x40120000, 0x3, 0x6, 0xaaed, 0x4, 0x7], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7ffd, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0x9, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0xffff0001, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xd, 0x7, 0x1, 0x6c1b, 0x0, 0x5, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x4d, 0xffffefff}, {0x6, 0x0, 0xff}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 11.031366105s ago: executing program 3 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000008, 0xd1940e8b8329fa71, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x600}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000264000/0x4000)=nil, 0x800000, 0x1}) 10.938562417s ago: executing program 2 (id=191): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x101d0) 9.177057677s ago: executing program 3 (id=192): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0xff, 0xb6, '\x00', 0x2}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000001600)=""/58, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000300)=""/228}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001580)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 8.259216199s ago: executing program 3 (id=194): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r1, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x10120, 0x0, 0x0) 7.358354289s ago: executing program 1 (id=196): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r3, r4, 0x0) 7.257031373s ago: executing program 2 (id=197): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000060c0)='./binderfs/binder-control\x00', 0x1002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100, 0x2c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0x3000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.506209923s ago: executing program 1 (id=199): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x72, {"b8010000000f01d966ba2000b047eeb9800000c00f3235000400000f30410f01f80fc77dd1c744240200000000c744240600000000c482f2f7500048b83c000000000000000f23d8420f210035000000e00f23f8e999b90000c48285bce4f3dfcd"}}], 0x72}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x5, 0x4, 0x5, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xe, 0x8, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xfb, 0x2, 0x3, 0x1f, 0x3, 0x4, 0x7b, 0x20e}, {0xfffffffe, 0x15, 0x18, 0x34, 0x48, 0xfd, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x4, 0x0, 0x2004cb, 0x1, 0xfffffd, 0x20000000000068ff, 0x5, 0x745, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.467274304s ago: executing program 3 (id=200): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x2) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/210, 0xd2}], 0x1) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.115766776s ago: executing program 2 (id=201): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x7, 0x8, 0x6, 0x5}, {0x1, 0x5, 0x10, 0xfffffff8}, {0x800, 0x8, 0x87, 0x7}, {0x3, 0x2, 0x10, 0x7fff}, {0x9, 0xd, 0x4, 0x6}, {0x54, 0x4, 0x3, 0x2}]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 5.098291507s ago: executing program 0 (id=202): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) removexattr(0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r5}, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 4.864001135s ago: executing program 1 (id=203): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x3908, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb9, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000300)="80", 0x1, 0x4048016, &(0x7f00000003c0)={0xa, 0x4e21, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000540)=0x2350, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x3de8e7ea, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) 4.739841119s ago: executing program 0 (id=204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x9, 0x21, 0x5, 0x8, 0x1, 0x5, 0x1, 0x0, [{0x8, 0x1, 0x5, 0xa}, {0x8, 0x7, 0x1, 0x3}, {0x4, 0x9105, 0x1, 0x7fffffff}, {0xffff, 0x8, 0x80000001, 0x6}, {0x3, 0x2, 0x2}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008044) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 3.751069663s ago: executing program 2 (id=205): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x23}], 0x2) io_uring_setup(0xf08, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000380)={[{@dioread_nolock}]}, 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x2) r1 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pwrite64(r1, &(0x7f0000000080)="16", 0xff8d, 0x8000c5d) 3.646147406s ago: executing program 0 (id=206): socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r5, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x0, 0x0, 0x130, 0x0, 0x130, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x1, 0x3b}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'wg2\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @empty, 0x0, 0x0, 'vlan1\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'veth0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) r6 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.792592545s ago: executing program 0 (id=207): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 2.517532455s ago: executing program 1 (id=208): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000e00)='./file1\x00', 0xc000, &(0x7f0000000680)={[{@lastblock}, {@umask={'umask', 0x3d, 0x5}}, {@undelete}, {@gid_ignore}, {@shortad}, {@dmode={'dmode', 0x3d, 0x1}}, {@undelete}, {@nostrict}, {@gid_forget}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@dmode={'dmode', 0x3d, 0x9}}, {@nostrict}, {@session}, {@adinicb}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x2}}, {@partition={'partition', 0x3d, 0x9}}]}, 0x2, 0xc39, &(0x7f0000000f40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521) 2.116626228s ago: executing program 0 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.116267238s ago: executing program 2 (id=210): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000060000000c00000040"], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESDEC=0x0, @ANYBLOB="2c6a71666d743d76667376312c7573726a71756f74613d2d29242d2e25272a2c2c00a40988e362019a69db5cb2a8b125934e5652c7c1af7aa1b29a3326b2ca0000000000"], 0xff, 0x5512, &(0x7f00000079c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x80301, 0xc32a4cddd55770f9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 2.073558399s ago: executing program 3 (id=211): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x3, 0x0, 0x8001, 0x529c2970, 0x79e, 0x4, {0x2, 0xfffffffffffffffb, 0xd, 0xfe, 0xe, 0x2000000000000009, 0x9, 0x4, 0x8, 0x1000, 0x0, 0x0, 0x0, 0x9, 0x8}}, {0x2, 0x1, 0x6, 0xfffff1e2, 'bond0\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) 1.001791376s ago: executing program 1 (id=212): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x1, 0x1, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 813.936522ms ago: executing program 3 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4000, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="2703", 0x2}], 0x1}, 0x0) 37.736229ms ago: executing program 1 (id=214): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x121100, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000a06000/0x2000)=nil, 0x2000, 0x200000c, 0x100030, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0xc0044dff, &(0x7f0000004000)) 0s ago: executing program 0 (id=215): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x4) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r4 = open(&(0x7f0000000200)='.\x00', 0x400, 0x0) renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlink(&(0x7f00000001c0)='./file0/file1\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. [ 70.593182][ T5758] cgroup: Unknown subsys name 'net' [ 70.714826][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.590138][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.596829][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.383849][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.833813][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.847478][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.866696][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.876329][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.887661][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.906916][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.959528][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.969882][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.977311][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.987667][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.995221][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.003150][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.012290][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.021361][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.029412][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.037410][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.045106][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.052330][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.061235][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.066606][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.077447][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.079283][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.092043][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.092583][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.412901][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 74.587806][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.595008][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.604796][ T5769] bridge_slave_0: entered allmulticast mode [ 74.612814][ T5769] bridge_slave_0: entered promiscuous mode [ 74.628656][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.635875][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.643775][ T5769] bridge_slave_1: entered allmulticast mode [ 74.651352][ T5769] bridge_slave_1: entered promiscuous mode [ 74.692188][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.701521][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 74.722296][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.776297][ T5769] team0: Port device team_slave_0 added [ 74.783215][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 74.793869][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 74.811940][ T5769] team0: Port device team_slave_1 added [ 74.909474][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.916746][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.942792][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.970718][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.978218][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.985360][ T5772] bridge_slave_0: entered allmulticast mode [ 74.992367][ T5772] bridge_slave_0: entered promiscuous mode [ 75.005920][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.013222][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.042035][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.066137][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.073425][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.080704][ T5772] bridge_slave_1: entered allmulticast mode [ 75.087788][ T5772] bridge_slave_1: entered promiscuous mode [ 75.155643][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.163261][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.171413][ T5776] bridge_slave_0: entered allmulticast mode [ 75.178500][ T5776] bridge_slave_0: entered promiscuous mode [ 75.185909][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.196248][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.203505][ T5777] bridge_slave_0: entered allmulticast mode [ 75.211656][ T5777] bridge_slave_0: entered promiscuous mode [ 75.239662][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.249480][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.256805][ T5776] bridge_slave_1: entered allmulticast mode [ 75.263580][ T5776] bridge_slave_1: entered promiscuous mode [ 75.282321][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.290765][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.298049][ T5777] bridge_slave_1: entered allmulticast mode [ 75.304839][ T5777] bridge_slave_1: entered promiscuous mode [ 75.324654][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.366208][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.382470][ T5769] hsr_slave_0: entered promiscuous mode [ 75.389266][ T5769] hsr_slave_1: entered promiscuous mode [ 75.402440][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.414374][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.444030][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.457840][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.480762][ T5772] team0: Port device team_slave_0 added [ 75.536306][ T5772] team0: Port device team_slave_1 added [ 75.548729][ T5777] team0: Port device team_slave_0 added [ 75.574261][ T5776] team0: Port device team_slave_0 added [ 75.593333][ T5777] team0: Port device team_slave_1 added [ 75.617613][ T5776] team0: Port device team_slave_1 added [ 75.642131][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.649235][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.675956][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.694109][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.701185][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.727610][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.759292][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.766372][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.792462][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.830580][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.837768][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.863797][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.877038][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.884021][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.910075][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.921775][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.929104][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.955499][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.987485][ T5780] Bluetooth: hci0: command tx timeout [ 76.065625][ T5777] hsr_slave_0: entered promiscuous mode [ 76.071588][ T5780] Bluetooth: hci1: command tx timeout [ 76.078687][ T5777] hsr_slave_1: entered promiscuous mode [ 76.085056][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.093148][ T5777] Cannot create hsr debugfs directory [ 76.105206][ T5772] hsr_slave_0: entered promiscuous mode [ 76.111554][ T5772] hsr_slave_1: entered promiscuous mode [ 76.118217][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.125776][ T5772] Cannot create hsr debugfs directory [ 76.146605][ T5780] Bluetooth: hci3: command tx timeout [ 76.147762][ T5084] Bluetooth: hci2: command tx timeout [ 76.195296][ T5776] hsr_slave_0: entered promiscuous mode [ 76.204470][ T5776] hsr_slave_1: entered promiscuous mode [ 76.211369][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.219464][ T5776] Cannot create hsr debugfs directory [ 76.393151][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.427477][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.487487][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.498712][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.653335][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.665906][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.683770][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.694812][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.781775][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.796377][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.821128][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.843493][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.912456][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.933725][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.968713][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.980268][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.990921][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.041013][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.066175][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.092389][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.099746][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.114715][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.140765][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.147979][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.173945][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.181495][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.221457][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.228693][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.257754][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.353292][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.374368][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.398907][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.406033][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.444102][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.451358][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.467991][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.503053][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.510277][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.562902][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.570272][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.954251][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.990046][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.068784][ T5084] Bluetooth: hci0: command tx timeout [ 78.091831][ T5769] veth0_vlan: entered promiscuous mode [ 78.115752][ T5777] veth0_vlan: entered promiscuous mode [ 78.130565][ T5769] veth1_vlan: entered promiscuous mode [ 78.152970][ T5084] Bluetooth: hci1: command tx timeout [ 78.165949][ T5777] veth1_vlan: entered promiscuous mode [ 78.204962][ T5769] veth0_macvtap: entered promiscuous mode [ 78.229144][ T5084] Bluetooth: hci2: command tx timeout [ 78.234624][ T5084] Bluetooth: hci3: command tx timeout [ 78.252261][ T5769] veth1_macvtap: entered promiscuous mode [ 78.278814][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.308702][ T5777] veth0_macvtap: entered promiscuous mode [ 78.324812][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.348413][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.381769][ T5777] veth1_macvtap: entered promiscuous mode [ 78.402100][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.414038][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.423021][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.432314][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.442887][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.490443][ T5772] veth0_vlan: entered promiscuous mode [ 78.512410][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.524835][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.540293][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.572654][ T5776] veth0_vlan: entered promiscuous mode [ 78.584190][ T5772] veth1_vlan: entered promiscuous mode [ 78.602493][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.615805][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.629912][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.641534][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.651029][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.660020][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.668984][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.684431][ T5776] veth1_vlan: entered promiscuous mode [ 78.743322][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.752330][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.803583][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.820202][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.868466][ T5772] veth0_macvtap: entered promiscuous mode [ 78.900149][ T5772] veth1_macvtap: entered promiscuous mode [ 78.921835][ T5776] veth0_macvtap: entered promiscuous mode [ 78.972360][ T5776] veth1_macvtap: entered promiscuous mode [ 78.990065][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.001409][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.011879][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.022379][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.035799][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.069058][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.082135][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.092122][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.103098][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.117145][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.140208][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.165458][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.176992][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.195104][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.205479][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.223022][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.233389][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.251333][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.263470][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.288683][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.300252][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.310070][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.319416][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.362296][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.373221][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.384291][ T5830] (null): rxe_set_mtu: Set mtu to 1024 [ 79.390970][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.402997][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.413529][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.426343][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.439176][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.480710][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.490579][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.500003][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.510499][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.539271][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.559241][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.744310][ T4726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.790740][ T4726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.835988][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.867656][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.935986][ T5834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 79.975790][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.994624][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.071370][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.120285][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.146968][ T5084] Bluetooth: hci0: command tx timeout [ 80.227229][ T5084] Bluetooth: hci1: command tx timeout [ 80.307441][ T5084] Bluetooth: hci3: command tx timeout [ 80.308031][ T5780] Bluetooth: hci2: command tx timeout [ 80.319014][ T28] audit: type=1326 audit(1775147515.665:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.5" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc02179c819 code=0x0 [ 80.462028][ T5830] infiniband syz1: set active [ 80.486082][ T5830] infiniband syz1: added syz_tun [ 80.829620][ T5848] binder_alloc: 5840: binder_alloc_buf, no vma [ 81.499244][ T5830] RDS/IB: syz1: added [ 81.503647][ T5830] smc: adding ib device syz1 with port count 1 [ 81.572188][ T5830] smc: ib device syz1 port 1 has pnetid [ 81.685950][ T5854] bridge0: entered promiscuous mode [ 81.710688][ T5854] bridge0: left promiscuous mode [ 82.104646][ T5861] syz.2.10[5861]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.135681][ T5861] loop2: detected capacity change from 0 to 1024 [ 82.149686][ T5861] ======================================================= [ 82.149686][ T5861] WARNING: The mand mount option has been deprecated and [ 82.149686][ T5861] and is ignored by this kernel. Remove the mand [ 82.149686][ T5861] option from the mount to silence this warning. [ 82.149686][ T5861] ======================================================= [ 82.190121][ T5862] netlink: 'syz.3.7': attribute type 10 has an invalid length. [ 82.227141][ T5780] Bluetooth: hci0: command tx timeout [ 82.307768][ T5780] Bluetooth: hci1: command tx timeout [ 82.334371][ T5861] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.388130][ T5780] Bluetooth: hci3: command tx timeout [ 82.393923][ T5780] Bluetooth: hci2: command tx timeout [ 82.433224][ T5861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.588221][ T5862] veth0_vlan: left promiscuous mode [ 82.599790][ T5862] veth0_vlan: entered promiscuous mode [ 82.610533][ T5862] team0: Device veth0_vlan failed to register rx_handler [ 82.904133][ T5861] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.10: Allocating blocks 497-513 which overlap fs metadata [ 82.980629][ T5861] EXT4-fs (loop2): pa ffff88807fa0f828: logic 256, phys. 385, len 8 [ 82.989128][ T5861] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5393: group 0, free 0, pa_free 1 [ 83.022011][ T5873] loop3: detected capacity change from 0 to 256 [ 83.734954][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.937024][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.961719][ T5895] loop3: detected capacity change from 0 to 64 [ 84.977210][ T5895] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 85.029067][ T5760] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 85.137842][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 85.165286][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.230188][ T787] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 85.250757][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.257484][ T5760] usb 3-1: config 0 has too many interfaces: 229, using maximum allowed: 32 [ 85.266944][ T787] usb 2-1: Product: syz [ 85.280080][ T787] usb 2-1: Manufacturer: syz [ 85.291311][ T787] usb 2-1: SerialNumber: syz [ 85.297202][ T5760] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 229 [ 85.308817][ T787] usb 2-1: config 0 descriptor?? [ 85.324116][ T5760] usb 3-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 85.341937][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=31 [ 85.362577][ T5760] usb 3-1: SerialNumber: syz [ 85.380230][ T5760] usb 3-1: config 0 descriptor?? [ 85.596570][ T1204] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.662787][ T5893] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16'. [ 85.719829][ T787] usb 3-1: USB disconnect, device number 2 [ 85.799083][ T1204] usb 4-1: Using ep0 maxpacket: 32 [ 85.809193][ T1204] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 85.818245][ T1204] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 85.832907][ T1204] usb 4-1: config 4 has no interface number 0 [ 85.842034][ T1204] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 85.852592][ T1204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.873194][ T1204] hub 4-1:4.128: bad descriptor, ignoring hub [ 85.881674][ T5883] usb 2-1: USB disconnect, device number 2 [ 85.909743][ T1204] hub: probe of 4-1:4.128 failed with error -5 [ 86.131072][ T5883] IPVS: starting estimator thread 0... [ 86.178729][ T5899] bridge_slave_0: left allmulticast mode [ 86.186713][ T5899] bridge_slave_0: left promiscuous mode [ 86.193020][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.219916][ T5899] bridge_slave_1: left allmulticast mode [ 86.229992][ T5899] bridge_slave_1: left promiscuous mode [ 86.246780][ T5902] IPVS: using max 18 ests per chain, 43200 per kthread [ 86.282354][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.371585][ T5899] bond0: (slave bond_slave_0): Releasing backup interface [ 86.505348][ T5899] bond0: (slave bond_slave_1): Releasing backup interface [ 86.535497][ T5905] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.688378][ T5899] team0: Port device team_slave_0 removed [ 86.777583][ T5899] team0: Port device team_slave_1 removed [ 86.814697][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.845921][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.893991][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.958419][ T788] cfg80211: failed to load regulatory.db [ 86.967744][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.062044][ T5907] tipc: Started in network mode [ 87.069623][ T5907] tipc: Node identity ac1414aa, cluster identity 4711 [ 87.085778][ T5907] tipc: Enabled bearer , priority 10 [ 87.309124][ T5911] tipc: Enabled bearer , priority 0 [ 87.377456][ T27] usb 4-1: USB disconnect, device number 2 [ 88.893486][ T23] tipc: Node number set to 2886997162 [ 89.092794][ T5950] loop0: detected capacity change from 0 to 32768 [ 89.110242][ T5950] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.30 (5950) [ 89.181158][ T5950] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 89.193190][ T5950] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 89.202218][ T5950] BTRFS info (device loop0): using free space tree [ 89.540380][ T5950] BTRFS info (device loop0): enabling ssd optimizations [ 89.547619][ T5950] BTRFS info (device loop0): auto enabling async discard [ 91.200944][ T5769] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.198683][ T5984] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 92.737023][ T1204] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.745074][ T5991] loop0: detected capacity change from 0 to 512 [ 92.748994][ T5991] EXT4-fs: Ignoring removed nobh option [ 92.763025][ T5991] EXT4-fs: Ignoring removed bh option [ 92.781415][ T5991] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.796314][ T5991] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.835984][ T5991] EXT4-fs (loop0): 1 truncate cleaned up [ 92.844685][ T5991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.940058][ T1204] usb 2-1: Using ep0 maxpacket: 32 [ 93.010045][ T1204] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 93.056624][ T1204] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 93.100897][ T1204] usb 2-1: config 4 has no interface number 0 [ 93.129296][ T1204] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 93.159545][ T5997] loop3: detected capacity change from 0 to 8 [ 93.219013][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.619125][ T6001] SQUASHFS error: lzo decompression failed, data probably corrupt [ 93.627463][ T6001] SQUASHFS error: Failed to read block 0x0: -5 [ 93.633742][ T6001] SQUASHFS error: Failed to read block 0xff: -5 [ 93.640510][ T6001] SQUASHFS error: lzo decompression failed, data probably corrupt [ 93.649546][ T6001] SQUASHFS error: Failed to read block 0x0: -5 [ 93.665350][ T6001] SQUASHFS error: lzo decompression failed, data probably corrupt [ 93.673326][ T6001] SQUASHFS error: Failed to read block 0x0: -5 [ 93.712740][ T6001] SQUASHFS error: Failed to read block 0x6a4: -5 [ 93.719419][ T6001] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 93.726834][ T6001] SQUASHFS error: read_indexes: reading block [6a2:0] [ 93.733727][ T6001] SQUASHFS error: Failed to read block 0x0: -5 [ 93.741108][ T6001] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 93.749568][ T6001] SQUASHFS error: read_indexes: reading block [6a2:0] [ 93.756546][ T6001] SQUASHFS error: Failed to read block 0x0: -5 [ 93.770880][ T28] audit: type=1800 audit(1775147529.005:3): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.40" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 93.799609][ T1204] hub 2-1:4.128: bad descriptor, ignoring hub [ 93.842689][ T1204] hub: probe of 2-1:4.128 failed with error -5 [ 93.869499][ T28] audit: type=1800 audit(1775147529.045:4): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.40" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 93.883747][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.416384][ T788] IPVS: starting estimator thread 0... [ 94.516775][ T6009] IPVS: using max 17 ests per chain, 40800 per kthread [ 95.098237][ T5987] bridge_slave_0: left allmulticast mode [ 95.125678][ T5987] bridge_slave_0: left promiscuous mode [ 95.216542][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.411563][ T5987] bridge_slave_1: left allmulticast mode [ 95.453878][ T5987] bridge_slave_1: left promiscuous mode [ 95.461927][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.519121][ T6020] xt_HMARK: spi-set and port-set can't be combined [ 96.312032][ T5987] bond0: (slave bond_slave_0): Releasing backup interface [ 96.467182][ T5987] bond0: (slave bond_slave_1): Releasing backup interface [ 96.695343][ T6028] loop2: detected capacity change from 0 to 32768 [ 96.744821][ T6028] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.47 (6028) [ 96.768622][ T6028] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 96.779152][ T6028] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 96.788789][ T6028] BTRFS info (device loop2): enabling disk space caching [ 96.795872][ T6028] BTRFS info (device loop2): force clearing of disk cache [ 96.803149][ T6028] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 96.812915][ T6028] BTRFS info (device loop2): use zstd compression, level 3 [ 96.820918][ T6028] BTRFS info (device loop2): disk space caching is enabled [ 97.404436][ T5987] team0: Port device team_slave_0 removed [ 97.489538][ T6028] BTRFS info (device loop2): enabling ssd optimizations [ 97.496796][ T6028] BTRFS info (device loop2): auto enabling async discard [ 97.534974][ T6028] BTRFS info (device loop2): rebuilding free space tree [ 97.584986][ T5987] team0: Port device team_slave_1 removed [ 97.591519][ T6028] BTRFS info (device loop2): disabling free space tree [ 97.598539][ T6028] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 97.608570][ T6028] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 97.626258][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.633836][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.648582][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.656602][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.772915][ T12] tipc: Resetting bearer [ 98.144807][ T788] usb 2-1: USB disconnect, device number 3 [ 98.809824][ T5776] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 99.341916][ T5764] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop2 scanned by udevd (5764) [ 99.736990][ T6073] syzkaller0: entered promiscuous mode [ 99.784933][ T6073] syzkaller0: entered allmulticast mode [ 100.681725][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 100.748346][ T6095] macvlan2: entered promiscuous mode [ 100.756294][ T6095] macvlan2: entered allmulticast mode [ 103.088696][ T6115] Bluetooth: MGMT ver 1.22 [ 103.316702][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.449933][ T6125] loop1: detected capacity change from 0 to 1024 [ 103.457492][ T6125] EXT4-fs: Ignoring removed bh option [ 103.462922][ T6125] EXT4-fs: Ignoring removed oldalloc option [ 103.468974][ T6125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.961204][ T6122] sched: RT throttling activated [ 104.979110][ T6125] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.056574][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 105.071793][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.157167][ T6125] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 105.166735][ T6125] System zones: 0-1, 3-36 [ 105.193053][ T6125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.768275][ T8] usb 1-1: string descriptor 0 read error: -71 [ 106.848418][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 106.916172][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.029150][ T8] usb 1-1: config 0 descriptor?? [ 107.081032][ T8] usb 1-1: can't set config #0, error -71 [ 107.127740][ T8] usb 1-1: USB disconnect, device number 2 [ 107.249957][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.576591][ T6155] loop0: detected capacity change from 0 to 512 [ 112.756095][ T6201] loop1: detected capacity change from 0 to 256 [ 112.821131][ T6201] exfat: Deprecated parameter 'utf8' [ 112.856807][ T6201] exfat: Deprecated parameter 'utf8' [ 112.878002][ T6201] exfat: Deprecated parameter 'namecase' [ 112.883724][ T6201] exfat: Deprecated parameter 'utf8' [ 113.008122][ T6201] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 113.306736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 115.461443][ T6147] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.471090][ T6147] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.480058][ T6147] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.489415][ T6147] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.631493][ T6147] syz.3.67 (6147) used greatest stack depth: 19728 bytes left [ 115.781046][ T6240] loop3: detected capacity change from 0 to 64 [ 116.015403][ T6245] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 118.916786][ T6279] bad cache= option: no%e [ 118.916786][ T6279] [ 118.923566][ T6279] CIFS: VFS: bad cache= option: no%e [ 119.893653][ T6305] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 121.003153][ T6316] syzkaller0: entered promiscuous mode [ 121.009355][ T6316] syzkaller0: entered allmulticast mode [ 122.327051][ T6236] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.187340][ T6236] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 123.216562][ T6236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.225144][ T6236] usb 3-1: Product: syz [ 123.245360][ T6236] usb 3-1: Manufacturer: syz [ 123.252842][ T6236] usb 3-1: SerialNumber: syz [ 123.502121][ T6236] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 123.518963][ T5760] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.542269][ T6236] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 123.729105][ T5760] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.756550][ T5760] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.785015][ T5760] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 123.811461][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.827943][ T5760] usb 2-1: SerialNumber: syz [ 124.104808][ T5760] usb 2-1: 0:2 : does not exist [ 124.614865][ T5760] usb 2-1: USB disconnect, device number 4 [ 124.793363][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.846833][ T6236] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 125.498119][ T6236] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -71 [ 125.716956][ T6236] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 125.806752][ T6236] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 125.869719][ T6236] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 125.944002][ T6236] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 126.047036][ T6236] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 126.069816][ T6236] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 126.085742][ T6236] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 126.102146][ T6236] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 126.356226][ T6236] lan78xx: probe of 3-1:1.0 failed with error -71 [ 126.525474][ T6373] syzkaller0: entered promiscuous mode [ 126.721729][ T6373] syzkaller0: entered allmulticast mode [ 126.735993][ T6236] usb 3-1: USB disconnect, device number 3 [ 128.048714][ T6388] kvm: emulating exchange as write [ 129.076630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.592243][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 132.628717][ T6438] bond_slave_1: entered promiscuous mode [ 132.645307][ T6440] fuse: Unknown parameter 'grou00000000000000000000' [ 132.672767][ T6438] bond_slave_1: left promiscuous mode [ 133.035802][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.050171][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.357670][ T6453] loop2: detected capacity change from 0 to 128 [ 133.381120][ T6453] FAT-fs (loop2): Unrecognized mount option "ø¹ÃçHÈmì1¤Öx'éÿhÇaAÉõ‰9!­“v÷pnÒÛ/בm‡RSÞiK ¾®RçD5«}Hí°÷ [ 133.381120][ T6453]  ë<‰ [ 133.381120][ T6453] xÏr‚Ç%9I`g­ryÅÏÓ [ 133.381120][ T6453] ê" or missing value [ 134.541539][ T6466] vivid-000: disconnect [ 135.319428][ T6462] vivid-000: reconnect [ 135.815319][ T6469] process 'syz.2.128' launched './file0' with NULL argv: empty string added [ 137.637501][ T6481] loop2: detected capacity change from 0 to 4096 [ 137.820645][ T6484] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.905055][ T6483] tipc: Started in network mode [ 137.917689][ T6483] tipc: Node identity 4637e8ade52d, cluster identity 4711 [ 137.935477][ T6483] tipc: Enabled bearer , priority 0 [ 138.430521][ T6483] syzkaller0: entered promiscuous mode [ 138.486638][ T6483] syzkaller0: entered allmulticast mode [ 138.544590][ T6483] tipc: Resetting bearer [ 138.662638][ T6482] tipc: Resetting bearer [ 138.763328][ T6482] tipc: Disabling bearer [ 140.316211][ T6506] syzkaller0: entered promiscuous mode [ 140.346876][ T6506] syzkaller0: entered allmulticast mode [ 140.392168][ T6492] loop0: detected capacity change from 0 to 32768 [ 140.455460][ T6508] syzkaller0: entered promiscuous mode [ 140.477960][ T6508] syzkaller0: entered allmulticast mode [ 140.481779][ T6492] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.678470][ T6521] bond_slave_1: entered promiscuous mode [ 140.751178][ T6521] bond_slave_1: left promiscuous mode [ 140.788061][ T6492] XFS (loop0): Ending clean mount [ 140.856629][ T28] audit: type=1800 audit(1775147576.205:5): pid=6492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.137" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 140.870811][ T6492] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x18d/0x250, xfs_agfl block 0x3 [ 140.904857][ T6492] XFS (loop0): Unmount and run xfs_repair [ 140.911624][ T6492] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 140.926581][ T6492] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 140.960384][ T6492] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 140.983545][ T6492] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 140.994866][ T6492] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 141.040989][ T6492] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.107058][ T6492] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.115995][ T6492] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.164057][ T6492] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 141.175569][ T6492] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x21e/0x3d0" at daddr 0x3 len 1 error 74 [ 141.197289][ T6528] bond_slave_0: entered promiscuous mode [ 141.203345][ T6528] bond_slave_1: entered promiscuous mode [ 141.220468][ T6492] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x183c/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 141.236568][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 141.236761][ T6528] bond_slave_0: left promiscuous mode [ 141.251230][ T6528] bond_slave_1: left promiscuous mode [ 141.262428][ T6492] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 141.340513][ T6534] tipc: Failed to remove unknown binding: 66,1,1/0:2257267070/2257267072 [ 141.354000][ T6534] tipc: Failed to remove unknown binding: 66,1,1/0:2257267070/2257267072 [ 141.366057][ T6534] tipc: Failed to remove unknown binding: 66,1,1/0:2257267070/2257267072 [ 141.454620][ T5769] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.833199][ T6234] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.016494][ T6234] usb 3-1: Using ep0 maxpacket: 16 [ 143.028601][ T6234] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.051843][ T6234] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.068710][ T6234] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.082755][ T6234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.091602][ T6234] usb 3-1: Product: syz [ 143.095908][ T6234] usb 3-1: Manufacturer: syz [ 143.108472][ T6234] usb 3-1: SerialNumber: syz [ 143.359442][ T6234] usb 3-1: 0:2 : does not exist [ 143.381188][ T6234] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 143.418900][ T6234] usb 3-1: USB disconnect, device number 4 [ 143.612528][ T6368] udevd[6368]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.665085][ T6552] loop3: detected capacity change from 0 to 2048 [ 143.724166][ T6552] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.493794][ T6557] capability: warning: `syz.0.156' uses deprecated v2 capabilities in a way that may be insecure [ 146.307175][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.158'. [ 147.591934][ T6574] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 147.894492][ T6582] syzkaller0: entered promiscuous mode [ 147.900150][ T6582] syzkaller0: entered allmulticast mode [ 149.141234][ T6589] loop3: detected capacity change from 0 to 512 [ 149.177012][ T6589] EXT4-fs: Ignoring removed i_version option [ 149.555325][ T6589] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.570731][ T6579] syz.0.161 (6579): drop_caches: 2 [ 149.576744][ T6589] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 149.612436][ T6589] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 149.631257][ T6589] System zones: 1-12 [ 149.635367][ T6589] EXT4-fs (loop3): orphan cleanup on readonly fs [ 149.662247][ T6589] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33619980: comm syz.3.166: invalid block [ 149.679215][ T6589] EXT4-fs (loop3): Remounting filesystem read-only [ 149.687054][ T6589] EXT4-fs (loop3): 1 truncate cleaned up [ 149.693532][ T6589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 149.827318][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 151.706490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 152.455850][ T6606] binder_alloc: 6605: pid 6605 spamming oneway? 2 buffers allocated for a total size of 5120 [ 152.490586][ T6606] binder_alloc: 6605: pid 6605 spamming oneway? 3 buffers allocated for a total size of 5128 [ 154.460078][ T6623] syzkaller0: entered promiscuous mode [ 154.465618][ T6623] syzkaller0: entered allmulticast mode [ 156.321090][ T6639] warning: `syz.1.183' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 156.388516][ T6639] tipc: Resetting bearer [ 156.885328][ T6639] netlink: 'syz.1.183': attribute type 10 has an invalid length. [ 156.980728][ T6639] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 158.192056][ T6649] netlink: 'syz.0.184': attribute type 13 has an invalid length. [ 159.569523][ T6649] infiniband syz1: set active [ 160.456663][ T787] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.626598][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 161.091748][ T787] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 161.338838][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.354442][ T787] usb 2-1: config 0 descriptor?? [ 164.573540][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.062097][ T787] usb 2-1: Cannot set autoneg [ 165.068751][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 165.077154][ T787] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 165.086451][ T9] usb 1-1: can't read configurations, error -71 [ 165.096656][ T787] usb 2-1: USB disconnect, device number 5 [ 167.155189][ T6708] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 167.193425][ T6708] kvm: pic: single mode not supported [ 167.355918][ T28] audit: type=1326 audit(1775147602.705:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6719 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911f9c819 code=0x7ffc0000 [ 167.383731][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.466491][ T28] audit: type=1326 audit(1775147602.745:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6719 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911f9c819 code=0x7ffc0000 [ 167.594269][ T28] audit: type=1326 audit(1775147602.745:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6719 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd911f9c819 code=0x7ffc0000 [ 167.616360][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.677553][ T6726] syzkaller0: entered promiscuous mode [ 167.683427][ T6726] syzkaller0: entered allmulticast mode [ 167.797819][ T6728] loop2: detected capacity change from 0 to 128 [ 167.816731][ T6728] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.862843][ T28] audit: type=1326 audit(1775147602.745:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6719 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911f9c819 code=0x7ffc0000 [ 167.923894][ T6728] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.516469][ T28] audit: type=1326 audit(1775147602.755:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6719 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911f9c819 code=0x7ffc0000 [ 168.637997][ T28] audit: type=1326 audit(1775147602.755:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6719 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd911f9c819 code=0x7ffc0000 [ 168.661240][ T28] audit: type=1326 audit(1775147602.755:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6719 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911f9c819 code=0x7ffc0000 [ 168.684023][ T28] audit: type=1326 audit(1775147602.755:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6719 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911f9c819 code=0x7ffc0000 [ 168.753424][ T28] audit: type=1326 audit(1775147602.755:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6719 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd911f9c819 code=0x7ffc0000 [ 168.775507][ T6732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.206'. [ 168.830087][ T28] audit: type=1326 audit(1775147602.755:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6719 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911f9c819 code=0x7ffc0000 [ 168.852268][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.921610][ T6735] loop2: detected capacity change from 0 to 512 [ 168.936893][ T6735] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.236813][ T6735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.228808][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.324918][ T6745] loop1: detected capacity change from 0 to 2048 [ 170.735694][ T6754] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 171.525029][ T6757] vlan2: entered promiscuous mode [ 171.552039][ T6757] team0: entered promiscuous mode [ 171.689819][ T6759] syzkaller0: entered promiscuous mode [ 171.820435][ T6759] syzkaller0: entered allmulticast mode [ 172.596286][ C0] ------------[ cut here ]------------ [ 172.602155][ C0] WARNING: CPU: 0 PID: 6767 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 172.612192][ C0] Modules linked in: [ 172.616106][ C0] CPU: 0 PID: 6767 Comm: syz.1.214 Not tainted syzkaller #0 [ 172.623407][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.633583][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 172.639953][ C0] Code: 24 4c 89 e7 e8 4e d5 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 c9 0e 83 f7 0f 0b e9 f6 f7 ff ff e8 bd 0e 83 f7 <0f> 0b e9 48 fb ff ff e8 b1 0e 83 f7 48 c7 c7 40 73 64 8e 4c 89 e6 [ 172.659723][ C0] RSP: 0000:ffffc90000007a18 EFLAGS: 00010246 [ 172.665804][ C0] RAX: ffffffff8a041163 RBX: ffffffff8a03ff66 RCX: ffff888028d8bc00 [ 172.673880][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.681991][ C0] RBP: 0000000000000000 R08: ffff888028d8bc00 R09: 0000000000000003 [ 172.689994][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805d5623c0 [ 172.697995][ C0] R13: dffffc0000000000 R14: ffff88805d5628b0 R15: ffff88805dec5424 [ 172.705973][ C0] FS: 00007f1ba9bb36c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 172.714929][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.721537][ C0] CR2: 0000000000000030 CR3: 000000007d18c000 CR4: 00000000003506f0 [ 172.729531][ C0] Call Trace: [ 172.732824][ C0] [ 172.735666][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 172.741237][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 172.746725][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 172.753490][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 172.759060][ C0] __iterate_interfaces+0x243/0x500 [ 172.764273][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 172.770529][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 172.777749][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 172.784010][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 172.791060][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 172.796273][ C0] __hrtimer_run_queues+0x520/0xc40 [ 172.801517][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 172.807522][ C0] ? hw_scan_work+0xf60/0xf60 [ 172.812198][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 172.817334][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 172.823403][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 172.828534][ C0] handle_softirqs+0x280/0x820 [ 172.833311][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 172.838094][ C0] ? do_softirq+0x1a0/0x1a0 [ 172.842604][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 172.847835][ C0] __irq_exit_rcu+0xd3/0x190 [ 172.852423][ C0] ? irq_exit_rcu+0x20/0x20 [ 172.856971][ C0] irq_exit_rcu+0x9/0x20 [ 172.861210][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 172.866898][ C0] [ 172.869826][ C0] [ 172.872767][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 172.878782][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 172.884962][ C0] Code: 90 95 7c 7e 65 8b 15 91 95 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 172.904599][ C0] RSP: 0000:ffffc90003a9e528 EFLAGS: 00000246 [ 172.910700][ C0] RAX: ffffffff813b6419 RBX: ffffffff8f0d8f13 RCX: ffff888028d8bc00 [ 172.918695][ C0] RDX: 0000000000000000 RSI: ffffc90003a9e6b8 RDI: ffffc90003a9e6c8 [ 172.926694][ C0] RBP: dffffc0000000000 R08: ffff888028d8bc00 R09: 0000000000000003 [ 172.934684][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc90003a9e6c8 [ 172.942851][ C0] R13: dffffc0000000000 R14: ffffffff8f0d8f12 R15: ffffc90003a9e6c8 [ 172.950853][ C0] ? deref_stack_reg+0x29/0x240 [ 172.955726][ C0] deref_stack_reg+0x29/0x240 [ 172.960426][ C0] unwind_next_frame+0x1789/0x2970 [ 172.965555][ C0] ? __unwind_start+0x2d2/0x7e0 [ 172.970427][ C0] __unwind_start+0x66a/0x7e0 [ 172.975102][ C0] ? stack_trace_save+0x100/0x100 [ 172.980152][ C0] arch_stack_walk+0xf8/0x190 [ 172.984843][ C0] ? arch_stack_walk+0xf8/0x190 [ 172.989711][ C0] stack_trace_save+0xaa/0x100 [ 172.994468][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 172.999609][ C0] ? mark_lock+0x94/0x320 [ 173.004041][ C0] save_stack+0x125/0x230 [ 173.008390][ C0] ? __reset_page_owner+0x190/0x190 [ 173.013599][ C0] ? seqcount_lockdep_reader_access+0x10a/0x190 [ 173.019864][ C0] ? get_page_from_freelist+0x6a8/0x19e0 [ 173.025580][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 173.030631][ C0] __set_page_owner+0x1d/0x60 [ 173.035306][ C0] post_alloc_hook+0x1c1/0x200 [ 173.040113][ C0] get_page_from_freelist+0x1951/0x19e0 [ 173.045678][ C0] ? mark_lock+0x94/0x320 [ 173.050039][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 173.055417][ C0] ? prepare_alloc_pages+0x366/0x5f0 [ 173.060722][ C0] __alloc_pages+0x1f0/0x460 [ 173.065330][ C0] ? zone_statistics+0x170/0x170 [ 173.070470][ C0] __folio_alloc+0x10/0x20 [ 173.074884][ C0] vma_alloc_folio+0x47a/0x8f0 [ 173.079688][ C0] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 173.085526][ C0] shmem_alloc_folio+0x1a9/0x2a0 [ 173.090489][ C0] ? folio_put+0xd0/0xd0 [ 173.094740][ C0] ? __vm_enough_memory+0x11b/0x370 [ 173.099981][ C0] ? shmem_inode_acct_block+0x35e/0x460 [ 173.105524][ C0] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 173.111429][ C0] ? put_swap_device+0x230/0x230 [ 173.116446][ C0] ? xas_load+0x12b/0x140 [ 173.120786][ C0] ? filemap_get_entry+0xce/0x3f0 [ 173.125812][ C0] ? filemap_get_entry+0xce/0x3f0 [ 173.130864][ C0] ? filemap_get_entry+0x379/0x3f0 [ 173.135971][ C0] ? page_cache_prev_miss+0x390/0x390 [ 173.141391][ C0] shmem_get_folio_gfp+0xcde/0x2aa0 [ 173.146645][ C0] shmem_write_begin+0xf2/0x420 [ 173.151526][ C0] generic_perform_write+0x2fe/0x5c0 [ 173.156920][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 173.162745][ C0] ? down_write+0x16e/0x200 [ 173.167329][ C0] ? file_update_time+0x98/0x1a0 [ 173.172291][ C0] shmem_file_write_iter+0xfb/0x120 [ 173.177625][ C0] __kernel_write_iter+0x28c/0x690 [ 173.182853][ C0] ? vfs_read+0x970/0x970 [ 173.187247][ C0] ? get_dump_page+0x156/0x200 [ 173.192015][ C0] ? __asan_memset+0x22/0x40 [ 173.196642][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 173.201324][ C0] dump_user_range+0x420/0x860 [ 173.206105][ C0] ? dump_skip+0x40/0x40 [ 173.210373][ C0] ? dump_emit+0x78/0xe0 [ 173.214641][ C0] ? dump_emit+0xa6/0xe0 [ 173.218913][ C0] ? elf_core_dump+0x2bae/0x3770 [ 173.223858][ C0] elf_core_dump+0x31d0/0x3770 [ 173.228654][ C0] ? load_elf_binary+0x2860/0x2860 [ 173.233782][ C0] ? dump_vma_snapshot+0xbe8/0x1090 [ 173.238999][ C0] ? verify_lock_unused+0x140/0x140 [ 173.244198][ C0] ? mas_next_slot+0x94f/0x980 [ 173.249117][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 173.254572][ C0] ? 0xffffffffff600000 [ 173.258746][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 173.263996][ C0] do_coredump+0x17cc/0x24d0 [ 173.268615][ C0] ? nfs_stat_to_errno+0x1a0/0x1a0 [ 173.273732][ C0] ? lock_chain_count+0x20/0x20 [ 173.278605][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.283819][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 173.289094][ C0] get_signal+0x1133/0x13f0 [ 173.293620][ C0] arch_do_signal_or_restart+0xc2/0x800 [ 173.299217][ C0] ? get_sigframe_size+0x20/0x20 [ 173.304158][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 173.310163][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 173.315717][ C0] exit_to_user_mode_loop+0x70/0x110 [ 173.321026][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 173.326696][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 173.332170][ C0] exc_page_fault+0x8c/0x100 [ 173.336782][ C0] asm_exc_page_fault+0x26/0x30 [ 173.341632][ C0] RIP: 0033:0x7f1ba8d9c821 [ 173.346040][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 173.365648][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.371676][ C0] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 173.377764][ C0] RAX: 0000000000000000 RBX: 00007f1ba9015fa0 RCX: 00007f1ba8d9c819 [ 173.385749][ C0] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 173.393736][ C0] RBP: 00007f1ba8e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 173.401779][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 173.409898][ C0] R13: 00007f1ba9016038 R14: 00007f1ba9015fa0 R15: 00007fffaec104d8 [ 173.417981][ C0] [ 173.421001][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.428277][ C0] CPU: 0 PID: 6767 Comm: syz.1.214 Not tainted syzkaller #0 [ 173.435552][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.445634][ C0] Call Trace: [ 173.448918][ C0] [ 173.451764][ C0] dump_stack_lvl+0x18c/0x250 [ 173.456462][ C0] ? show_regs_print_info+0x20/0x20 [ 173.461669][ C0] ? load_image+0x400/0x400 [ 173.466195][ C0] panic+0x2dc/0x730 [ 173.470194][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 173.474745][ C0] __warn+0x2e0/0x470 [ 173.478732][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 173.484737][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 173.490467][ C0] report_bug+0x2be/0x4f0 [ 173.494790][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 173.500509][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 173.506225][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 173.511940][ C0] handle_bug+0xcf/0x120 [ 173.516190][ C0] exc_invalid_op+0x1a/0x50 [ 173.520704][ C0] asm_exc_invalid_op+0x1a/0x20 [ 173.525548][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 173.531914][ C0] Code: 24 4c 89 e7 e8 4e d5 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 c9 0e 83 f7 0f 0b e9 f6 f7 ff ff e8 bd 0e 83 f7 <0f> 0b e9 48 fb ff ff e8 b1 0e 83 f7 48 c7 c7 40 73 64 8e 4c 89 e6 [ 173.551517][ C0] RSP: 0000:ffffc90000007a18 EFLAGS: 00010246 [ 173.557581][ C0] RAX: ffffffff8a041163 RBX: ffffffff8a03ff66 RCX: ffff888028d8bc00 [ 173.565544][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.573527][ C0] RBP: 0000000000000000 R08: ffff888028d8bc00 R09: 0000000000000003 [ 173.581517][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805d5623c0 [ 173.589482][ C0] R13: dffffc0000000000 R14: ffff88805d5628b0 R15: ffff88805dec5424 [ 173.597471][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 173.603086][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 173.608803][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 173.614532][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 173.620092][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 173.625551][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 173.632318][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 173.637868][ C0] __iterate_interfaces+0x243/0x500 [ 173.643062][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 173.649295][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 173.656492][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 173.662739][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 173.669774][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 173.674975][ C0] __hrtimer_run_queues+0x520/0xc40 [ 173.680169][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 173.686152][ C0] ? hw_scan_work+0xf60/0xf60 [ 173.691014][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 173.696134][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 173.702215][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 173.707353][ C0] handle_softirqs+0x280/0x820 [ 173.712135][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 173.716918][ C0] ? do_softirq+0x1a0/0x1a0 [ 173.721420][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 173.726642][ C0] __irq_exit_rcu+0xd3/0x190 [ 173.731240][ C0] ? irq_exit_rcu+0x20/0x20 [ 173.735740][ C0] irq_exit_rcu+0x9/0x20 [ 173.739994][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 173.745626][ C0] [ 173.748556][ C0] [ 173.751485][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.757465][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 173.763617][ C0] Code: 90 95 7c 7e 65 8b 15 91 95 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 173.783220][ C0] RSP: 0000:ffffc90003a9e528 EFLAGS: 00000246 [ 173.789288][ C0] RAX: ffffffff813b6419 RBX: ffffffff8f0d8f13 RCX: ffff888028d8bc00 [ 173.797254][ C0] RDX: 0000000000000000 RSI: ffffc90003a9e6b8 RDI: ffffc90003a9e6c8 [ 173.805233][ C0] RBP: dffffc0000000000 R08: ffff888028d8bc00 R09: 0000000000000003 [ 173.813197][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc90003a9e6c8 [ 173.821165][ C0] R13: dffffc0000000000 R14: ffffffff8f0d8f12 R15: ffffc90003a9e6c8 [ 173.829151][ C0] ? deref_stack_reg+0x29/0x240 [ 173.834080][ C0] deref_stack_reg+0x29/0x240 [ 173.838768][ C0] unwind_next_frame+0x1789/0x2970 [ 173.843889][ C0] ? __unwind_start+0x2d2/0x7e0 [ 173.848737][ C0] __unwind_start+0x66a/0x7e0 [ 173.853428][ C0] ? stack_trace_save+0x100/0x100 [ 173.858469][ C0] arch_stack_walk+0xf8/0x190 [ 173.863142][ C0] ? arch_stack_walk+0xf8/0x190 [ 173.867985][ C0] stack_trace_save+0xaa/0x100 [ 173.872756][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 173.877885][ C0] ? mark_lock+0x94/0x320 [ 173.882214][ C0] save_stack+0x125/0x230 [ 173.886642][ C0] ? __reset_page_owner+0x190/0x190 [ 173.891834][ C0] ? seqcount_lockdep_reader_access+0x10a/0x190 [ 173.898081][ C0] ? get_page_from_freelist+0x6a8/0x19e0 [ 173.903756][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 173.908775][ C0] __set_page_owner+0x1d/0x60 [ 173.913442][ C0] post_alloc_hook+0x1c1/0x200 [ 173.918206][ C0] get_page_from_freelist+0x1951/0x19e0 [ 173.923750][ C0] ? mark_lock+0x94/0x320 [ 173.928072][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 173.933441][ C0] ? prepare_alloc_pages+0x366/0x5f0 [ 173.938719][ C0] __alloc_pages+0x1f0/0x460 [ 173.943299][ C0] ? zone_statistics+0x170/0x170 [ 173.948322][ C0] __folio_alloc+0x10/0x20 [ 173.952938][ C0] vma_alloc_folio+0x47a/0x8f0 [ 173.957734][ C0] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 173.963542][ C0] shmem_alloc_folio+0x1a9/0x2a0 [ 173.968483][ C0] ? folio_put+0xd0/0xd0 [ 173.972735][ C0] ? __vm_enough_memory+0x11b/0x370 [ 173.977948][ C0] ? shmem_inode_acct_block+0x35e/0x460 [ 173.983487][ C0] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 173.989201][ C0] ? put_swap_device+0x230/0x230 [ 173.994133][ C0] ? xas_load+0x12b/0x140 [ 173.998458][ C0] ? filemap_get_entry+0xce/0x3f0 [ 174.003473][ C0] ? filemap_get_entry+0xce/0x3f0 [ 174.008496][ C0] ? filemap_get_entry+0x379/0x3f0 [ 174.013603][ C0] ? page_cache_prev_miss+0x390/0x390 [ 174.018990][ C0] shmem_get_folio_gfp+0xcde/0x2aa0 [ 174.024207][ C0] shmem_write_begin+0xf2/0x420 [ 174.029101][ C0] generic_perform_write+0x2fe/0x5c0 [ 174.034445][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 174.040259][ C0] ? down_write+0x16e/0x200 [ 174.044780][ C0] ? file_update_time+0x98/0x1a0 [ 174.049735][ C0] shmem_file_write_iter+0xfb/0x120 [ 174.054930][ C0] __kernel_write_iter+0x28c/0x690 [ 174.060043][ C0] ? vfs_read+0x970/0x970 [ 174.064364][ C0] ? get_dump_page+0x156/0x200 [ 174.069122][ C0] ? __asan_memset+0x22/0x40 [ 174.073707][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 174.078471][ C0] dump_user_range+0x420/0x860 [ 174.083251][ C0] ? dump_skip+0x40/0x40 [ 174.087500][ C0] ? dump_emit+0x78/0xe0 [ 174.091758][ C0] ? dump_emit+0xa6/0xe0 [ 174.095992][ C0] ? elf_core_dump+0x2bae/0x3770 [ 174.100931][ C0] elf_core_dump+0x31d0/0x3770 [ 174.105701][ C0] ? load_elf_binary+0x2860/0x2860 [ 174.110825][ C0] ? dump_vma_snapshot+0xbe8/0x1090 [ 174.116021][ C0] ? verify_lock_unused+0x140/0x140 [ 174.121220][ C0] ? mas_next_slot+0x94f/0x980 [ 174.126000][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 174.131453][ C0] ? 0xffffffffff600000 [ 174.135603][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 174.140805][ C0] do_coredump+0x17cc/0x24d0 [ 174.145410][ C0] ? nfs_stat_to_errno+0x1a0/0x1a0 [ 174.150525][ C0] ? lock_chain_count+0x20/0x20 [ 174.155369][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.160580][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 174.165770][ C0] get_signal+0x1133/0x13f0 [ 174.170274][ C0] arch_do_signal_or_restart+0xc2/0x800 [ 174.175831][ C0] ? get_sigframe_size+0x20/0x20 [ 174.180773][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 174.186770][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 174.192224][ C0] exit_to_user_mode_loop+0x70/0x110 [ 174.197597][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 174.203137][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 174.208590][ C0] exc_page_fault+0x8c/0x100 [ 174.213175][ C0] asm_exc_page_fault+0x26/0x30 [ 174.218019][ C0] RIP: 0033:0x7f1ba8d9c821 [ 174.222437][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 174.242051][ C0] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 174.248117][ C0] RAX: 0000000000000000 RBX: 00007f1ba9015fa0 RCX: 00007f1ba8d9c819 [ 174.256192][ C0] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 174.264179][ C0] RBP: 00007f1ba8e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 174.272156][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 174.280126][ C0] R13: 00007f1ba9016038 R14: 00007f1ba9015fa0 R15: 00007fffaec104d8 [ 174.288196][ C0] [ 174.291652][ C0] Kernel Offset: disabled [ 174.296011][ C0] Rebooting in 86400 seconds..