last executing test programs: 5.725555865s ago: executing program 4 (id=146): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) close(r4) tee(r0, r5, 0x3ff, 0x0) write(r2, 0x0, 0x0) 5.311985751s ago: executing program 4 (id=150): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={0x0, 0x0, 0x6}) 5.003904901s ago: executing program 4 (id=154): r0 = socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.147186972s ago: executing program 3 (id=162): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x11, 0x800000003, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7ff}, 0x0, &(0x7f00000003c0)={0x3ff, 0x20000, 0x0, 0x4000000000000000, 0x0, 0x0, 0x4, 0xfffffffffffffff9}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 3.503764246s ago: executing program 0 (id=168): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) r0 = io_uring_setup(0x34b, &(0x7f0000000300)={0x0, 0x4, 0x100, 0x0, 0x10}) r1 = io_uring_setup(0x605e, &(0x7f0000000040)={0x0, 0x9f9, 0x1, 0x1, 0x17a}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1c, 0x200000000000000, r2) 3.275634099s ago: executing program 0 (id=171): syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = socket(0x10, 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8943, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000240)=0x8) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xf4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r6, 0x29, 0x46, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) 3.17811386s ago: executing program 3 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.102931803s ago: executing program 2 (id=174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 2.23602514s ago: executing program 3 (id=175): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sendfile(r2, r2, 0x0, 0x7) 2.190406965s ago: executing program 4 (id=177): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x200) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x113602) 1.867940519s ago: executing program 2 (id=179): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@local, @empty, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @loopback}, {0x12, 0x0, 0x0, @private=0xa010102}}}}}, 0x0) 1.824310884s ago: executing program 4 (id=180): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r2 = dup(r1) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x1, 0x2, 0x83, 0x5, 0x0, 0x5, {0x1, 0x3, 0x3, 0x1, 0x4, 0x1, 0x1, 0x5, 0xfffffff9, 0xa000, 0x4, r3, 0x0, 0x400, 0x3}}, {0x0, 0x4}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.syz\x00', 0x0, 0x0) 1.591312221s ago: executing program 1 (id=181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x34b, &(0x7f0000000300)={0x0, 0x4, 0x100, 0x0, 0x10}) r2 = io_uring_setup(0x605e, &(0x7f0000000040)={0x0, 0x9f9, 0x1, 0x1, 0x17a}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1c, 0x200000000000000, r3) 1.55330532s ago: executing program 2 (id=182): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.48729746s ago: executing program 4 (id=183): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x12}, 0x18, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_restrict_self(r0, 0x0) 1.191883219s ago: executing program 0 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x101042, 0x40) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3a1c001, 0x0, 0x7, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = fanotify_init(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x8000003, r1, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) 1.191640564s ago: executing program 1 (id=185): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1.191417536s ago: executing program 2 (id=186): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000300)=""/92, 0x5c}], 0x1}, 0x30845aa81b581fea) 1.073026941s ago: executing program 3 (id=187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xffff}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 1.025856007s ago: executing program 1 (id=188): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000080)='./bus\x00') mknod$loop(&(0x7f0000000100)='./bus\x00', 0x4, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 977.843399ms ago: executing program 0 (id=189): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/98, 0x62}, {&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000040)=""/129, 0x81}], 0x3}, 0x10042) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a0400303a00fe800000000000"], 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x5e2, 0x2001, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) 781.848541ms ago: executing program 1 (id=190): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x200) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x113602) 679.955459ms ago: executing program 0 (id=191): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$char_usb(r2, &(0x7f0000002600)="b565", 0x2) sendfile(r0, r1, 0x0, 0x6) mknod(0x0, 0x1000, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r3, r4, 0x8, 0x2) 671.059727ms ago: executing program 3 (id=192): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)={@local, @empty, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @loopback}, {0x12, 0x0, 0x0, @private=0xa010102}}}}}, 0x0) 503.873379ms ago: executing program 1 (id=193): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r2 = dup(r1) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x1, 0x2, 0x83, 0x5, 0x0, 0x5, {0x1, 0x3, 0x3, 0x1, 0x4, 0x1, 0x1, 0x5, 0xfffffff9, 0xa000, 0x4, r3, 0x0, 0x400, 0x3}}, {0x0, 0x4}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.syz\x00', 0x0, 0x0) 433.026521ms ago: executing program 3 (id=194): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 331.94369ms ago: executing program 0 (id=195): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0bfe6ecd77084f21c01e020000000900010073797a30000000000900020073797a320000000018000480140001800b0001006c6f6f6b757000000400028007000740effafa00140000001100010000000000000000000300000a"], 0x74}}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000002080045000040000000000006907864010101ac1414aa00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bc4cda48b6d21d50159c2f1a02000090781000030306220213122313a3101166bec856214c018c3c904300"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 238.687092ms ago: executing program 2 (id=196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x34b, &(0x7f0000000300)={0x0, 0x4, 0x100, 0x0, 0x10}) r2 = io_uring_setup(0x605e, &(0x7f0000000040)={0x0, 0x9f9, 0x1, 0x1, 0x17a}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1c, 0x200000000000000, r3) 207.63784ms ago: executing program 1 (id=197): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x484800, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r5, 0x1, 0xa, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 0s ago: executing program 2 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) close(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 68.329553][ T5844] cgroup: Unknown subsys name 'net' [ 68.436093][ T5844] cgroup: Unknown subsys name 'cpuset' [ 68.444543][ T5844] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.868327][ T5844] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.296667][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.303115][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.418540][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.436968][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.452925][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.482900][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.490600][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.511099][ T5182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.519614][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.533422][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.550397][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.562947][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.606126][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.625514][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.635738][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.654301][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.662365][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.672300][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.681125][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.688924][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.696990][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.704417][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.712337][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.719897][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.729500][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.737604][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.745616][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.301864][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 73.383665][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 73.455175][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 73.645634][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.652932][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.660264][ T5854] bridge_slave_0: entered allmulticast mode [ 73.668974][ T5854] bridge_slave_0: entered promiscuous mode [ 73.677072][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 73.703997][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.711168][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.718345][ T5858] bridge_slave_0: entered allmulticast mode [ 73.726340][ T5858] bridge_slave_0: entered promiscuous mode [ 73.744362][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.751485][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.758872][ T5854] bridge_slave_1: entered allmulticast mode [ 73.766687][ T5854] bridge_slave_1: entered promiscuous mode [ 73.780240][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 73.790490][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.798111][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.805374][ T5858] bridge_slave_1: entered allmulticast mode [ 73.812277][ T5858] bridge_slave_1: entered promiscuous mode [ 73.904571][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.943966][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.964935][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.977102][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.986637][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.993957][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.001768][ T5865] bridge_slave_0: entered allmulticast mode [ 74.008907][ T5865] bridge_slave_0: entered promiscuous mode [ 74.057977][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.065619][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.072881][ T5865] bridge_slave_1: entered allmulticast mode [ 74.079862][ T5865] bridge_slave_1: entered promiscuous mode [ 74.155932][ T5854] team0: Port device team_slave_0 added [ 74.163760][ T5858] team0: Port device team_slave_0 added [ 74.204461][ T5854] team0: Port device team_slave_1 added [ 74.223646][ T5858] team0: Port device team_slave_1 added [ 74.231997][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.241330][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.249068][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.256283][ T5867] bridge_slave_0: entered allmulticast mode [ 74.263541][ T5867] bridge_slave_0: entered promiscuous mode [ 74.309669][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.335437][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.342578][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.350080][ T5867] bridge_slave_1: entered allmulticast mode [ 74.357209][ T5867] bridge_slave_1: entered promiscuous mode [ 74.388231][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.395538][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.403115][ T5863] bridge_slave_0: entered allmulticast mode [ 74.410018][ T5863] bridge_slave_0: entered promiscuous mode [ 74.458979][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.466379][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.492355][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.505965][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.513188][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.539322][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.551077][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.558657][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.565947][ T5863] bridge_slave_1: entered allmulticast mode [ 74.573283][ T5863] bridge_slave_1: entered promiscuous mode [ 74.577599][ T5873] Bluetooth: hci0: command tx timeout [ 74.596241][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.603286][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.629210][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.642388][ T5865] team0: Port device team_slave_0 added [ 74.651697][ T5865] team0: Port device team_slave_1 added [ 74.657372][ T5873] Bluetooth: hci1: command tx timeout [ 74.660884][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.681710][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.703612][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.710564][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.737164][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.806030][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.813231][ T5873] Bluetooth: hci4: command tx timeout [ 74.815688][ T52] Bluetooth: hci2: command tx timeout [ 74.820744][ T5873] Bluetooth: hci3: command tx timeout [ 74.833198][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.850918][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.857977][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.883957][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.896625][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.903636][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.929930][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.943727][ T5867] team0: Port device team_slave_0 added [ 74.995143][ T5867] team0: Port device team_slave_1 added [ 75.029291][ T5863] team0: Port device team_slave_0 added [ 75.057388][ T5854] hsr_slave_0: entered promiscuous mode [ 75.064129][ T5854] hsr_slave_1: entered promiscuous mode [ 75.084655][ T5863] team0: Port device team_slave_1 added [ 75.097031][ T5858] hsr_slave_0: entered promiscuous mode [ 75.103758][ T5858] hsr_slave_1: entered promiscuous mode [ 75.109946][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 75.115866][ T5858] Cannot create hsr debugfs directory [ 75.162080][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.169502][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.195491][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.235543][ T5865] hsr_slave_0: entered promiscuous mode [ 75.241681][ T5865] hsr_slave_1: entered promiscuous mode [ 75.248240][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 75.254003][ T5865] Cannot create hsr debugfs directory [ 75.261567][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.269135][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.295497][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.314804][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.321746][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.349865][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.397961][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.406156][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.432344][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.615815][ T5867] hsr_slave_0: entered promiscuous mode [ 75.622032][ T5867] hsr_slave_1: entered promiscuous mode [ 75.628228][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 75.634147][ T5867] Cannot create hsr debugfs directory [ 75.711986][ T5863] hsr_slave_0: entered promiscuous mode [ 75.718379][ T5863] hsr_slave_1: entered promiscuous mode [ 75.724732][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 75.730460][ T5863] Cannot create hsr debugfs directory [ 76.078050][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.092299][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.120271][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.144907][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.195285][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.207599][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.220926][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.239188][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.316501][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.328528][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.360129][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.371489][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.448324][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.460364][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.472382][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.497304][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.606638][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.619998][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.632320][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.646000][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.654763][ T5873] Bluetooth: hci0: command tx timeout [ 76.683641][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.715474][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.733733][ T5873] Bluetooth: hci1: command tx timeout [ 76.753470][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.792105][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.799332][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.811226][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.818329][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.847644][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.893545][ T5855] Bluetooth: hci2: command tx timeout [ 76.894632][ T52] Bluetooth: hci4: command tx timeout [ 76.899019][ T5873] Bluetooth: hci3: command tx timeout [ 76.927142][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.934296][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.971054][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.978225][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.008731][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.062234][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.129211][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.136409][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.150982][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.158138][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.199858][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.221065][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.279881][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.321222][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.355342][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.362500][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.375569][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.411357][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.428223][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.435393][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.475978][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.483159][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.546367][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.553559][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.625555][ T5863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.636063][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.759830][ T5854] veth0_vlan: entered promiscuous mode [ 77.808554][ T5854] veth1_vlan: entered promiscuous mode [ 77.849222][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.869639][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.954952][ T5854] veth0_macvtap: entered promiscuous mode [ 77.976286][ T5854] veth1_macvtap: entered promiscuous mode [ 78.088523][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.138168][ T5858] veth0_vlan: entered promiscuous mode [ 78.150922][ T5865] veth0_vlan: entered promiscuous mode [ 78.170594][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.191888][ T5858] veth1_vlan: entered promiscuous mode [ 78.205723][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.217507][ T5865] veth1_vlan: entered promiscuous mode [ 78.229892][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.254600][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.264625][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.279126][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.298257][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.380612][ T5865] veth0_macvtap: entered promiscuous mode [ 78.448300][ T5865] veth1_macvtap: entered promiscuous mode [ 78.488091][ T5858] veth0_macvtap: entered promiscuous mode [ 78.521776][ T5867] veth0_vlan: entered promiscuous mode [ 78.550324][ T5858] veth1_macvtap: entered promiscuous mode [ 78.591413][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.607637][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.616473][ T5867] veth1_vlan: entered promiscuous mode [ 78.631682][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.711289][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.726699][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.735251][ T5873] Bluetooth: hci0: command tx timeout [ 78.759571][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.761023][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.786725][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.793107][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.804990][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.814831][ T5873] Bluetooth: hci1: command tx timeout [ 78.846884][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.856909][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.882143][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.902015][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.914659][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.951184][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.973524][ T5873] Bluetooth: hci3: command tx timeout [ 78.974457][ T52] Bluetooth: hci2: command tx timeout [ 78.978929][ T5855] Bluetooth: hci4: command tx timeout [ 79.007569][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.085848][ T5867] veth0_macvtap: entered promiscuous mode [ 79.165323][ T5867] veth1_macvtap: entered promiscuous mode [ 79.257036][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.269037][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.289755][ T5863] veth0_vlan: entered promiscuous mode [ 79.294674][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.362525][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.381170][ T5863] veth1_vlan: entered promiscuous mode [ 79.409287][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.413168][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.433403][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.441795][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.458796][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.487857][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.537400][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.578844][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.608785][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.609808][ T5863] veth0_macvtap: entered promiscuous mode [ 79.653776][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.741633][ T5863] veth1_macvtap: entered promiscuous mode [ 79.809059][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.834572][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.868557][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.957518][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.010446][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.029747][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.045904][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.053829][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.068654][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.098733][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.289855][ T5996] loop3: detected capacity change from 0 to 512 [ 80.322248][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.357248][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.491334][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.510446][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.763390][ T6008] overlayfs: missing 'lowerdir' [ 80.813601][ T5855] Bluetooth: hci0: command tx timeout [ 80.893429][ T5855] Bluetooth: hci1: command tx timeout [ 81.053499][ T5855] Bluetooth: hci2: command tx timeout [ 81.053541][ T5855] Bluetooth: hci4: command tx timeout [ 81.053572][ T5855] Bluetooth: hci3: command tx timeout [ 82.573275][ T6072] 9pnet_fd: Insufficient options for proto=fd [ 83.060992][ T6088] loop1: detected capacity change from 0 to 164 [ 83.111266][ T6088] Unable to read rock-ridge attributes [ 83.151845][ T6088] Unable to read rock-ridge attributes [ 83.194628][ T6088] ./file0: Can't lookup blockdev [ 83.408975][ T6096] 9pnet_fd: Insufficient options for proto=fd [ 83.420301][ T6098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.517131][ T6101] loop3: detected capacity change from 0 to 764 [ 83.766441][ T6109] loop4: detected capacity change from 0 to 256 [ 84.205994][ T6121] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.221536][ T6121] block device autoloading is deprecated and will be removed. [ 84.864819][ T6124] loop2: detected capacity change from 0 to 2048 [ 85.087287][ T6124] loop2: p1 p2 < > p3 < p5 > p4 [ 85.092754][ T6124] loop2: partition table partially beyond EOD, truncated [ 85.099971][ T6124] loop2: p1 size 917504 extends beyond EOD, truncated [ 85.110667][ T6124] loop2: p2 start 4278190080 is beyond EOD, truncated [ 85.129665][ T6124] loop2: p4 start 150994949 is beyond EOD, truncated [ 85.137311][ T6124] loop2: p5 size 917504 extends beyond EOD, truncated [ 85.198264][ T6131] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.233117][ T5231] loop2: p1 p2 < > p3 < p5 > p4 [ 85.245761][ T5231] loop2: partition table partially beyond EOD, truncated [ 85.286022][ T5231] loop2: p1 size 917504 extends beyond EOD, truncated [ 85.308238][ T5231] loop2: p2 start 4278190080 is beyond EOD, truncated [ 85.327738][ T5231] loop2: p4 start 150994949 is beyond EOD, truncated [ 85.341341][ T5231] loop2: p5 size 917504 extends beyond EOD, truncated [ 85.349791][ T6135] 9pnet_fd: Insufficient options for proto=fd [ 85.364401][ T6137] loop3: detected capacity change from 0 to 764 [ 85.556335][ T6145] team0: No ports can be present during mode change [ 85.745109][ T5874] udevd[5874]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 85.755504][ T5864] udevd[5864]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 85.940757][ T5864] udevd[5864]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 86.118421][ T6023] udevd[6023]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 86.138672][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 86.161847][ T5864] udevd[5864]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 86.254662][ T6177] loop1: detected capacity change from 0 to 764 [ 86.662712][ T981] cfg80211: failed to load regulatory.db [ 86.864420][ T6195] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 86.925594][ T6195] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 86.963255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.008462][ T5926] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 87.059306][ T5926] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 87.229622][ T5926] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 87.247406][ T5926] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 87.256934][ T6208] netlink: 84 bytes leftover after parsing attributes in process `syz.1.100'. [ 87.273289][ T6208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 87.346238][ T5926] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 87.396452][ T5926] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 87.418182][ T5926] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 87.445340][ T5926] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 87.457505][ T5926] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 87.559419][ T5926] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 87.583347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.592400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.623616][ T6224] netlink: 172 bytes leftover after parsing attributes in process `syz.4.106'. [ 87.693100][ T6224] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 87.734312][ T5926] hid-generic 00A0:0008:0003.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 88.061372][ T6235] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.087484][ T6229] fido_id[6229]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.403551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.411762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.557330][ T6242] process 'syz.2.111' launched './file2' with NULL argv: empty string added [ 88.753247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.882866][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.221717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.276950][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 89.296567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.330617][ T5859] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.433129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.631399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.727420][ T5859] usb 2-1: Using ep0 maxpacket: 16 [ 89.794277][ T5859] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 89.804322][ T5859] usb 2-1: config 0 has no interface number 0 [ 89.837105][ T5859] usb 2-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 89.977602][ T5859] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 90.026816][ T5859] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 90.058459][ T5859] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 90.076128][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 90.106806][ T5859] usb 2-1: Product: syz [ 90.115298][ T5859] usb 2-1: SerialNumber: syz [ 90.158930][ T5859] usb 2-1: config 0 descriptor?? [ 90.462616][ T5859] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.558678][ T5859] usb 2-1: invalid MIDI out EP 0 [ 91.069289][ T5859] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 91.151381][ T5950] IPVS: starting estimator thread 0... [ 91.244730][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.264405][ T6275] IPVS: using max 28 ests per chain, 67200 per kthread [ 91.273714][ T5859] usb 2-1: USB disconnect, device number 2 [ 91.391935][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.414572][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 91.439647][ T10] usb 3-1: can't read configurations, error -71 [ 91.958445][ T6298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.130'. [ 92.019718][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.130'. [ 92.090122][ T6298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.130'. [ 92.146168][ T6298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.130'. [ 92.450761][ T5926] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.651870][ T6313] trusted_key: syz.1.135 sent an empty control message without MSG_MORE. [ 92.667807][ T6313] fuse: Bad value for 'group_id' [ 92.674090][ T6313] fuse: Bad value for 'group_id' [ 92.772802][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 92.964549][ T5859] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.974371][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 93.011350][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.063360][ T6317] loop4: detected capacity change from 0 to 764 [ 93.124280][ T5859] usb 2-1: Using ep0 maxpacket: 8 [ 93.141162][ T5859] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.153062][ T5859] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.166024][ T5859] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.180325][ T5859] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.198027][ T5859] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.211854][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.231424][ T5926] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 93.352751][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.426363][ T6321] netlink: 'syz.4.139': attribute type 11 has an invalid length. [ 93.488181][ T5859] usb 2-1: usb_control_msg returned -32 [ 93.498245][ T5859] usbtmc 2-1:16.0: can't read capabilities [ 93.531330][ T5926] usb 4-1: Product: syz [ 93.712526][ T5926] usb 4-1: Manufacturer: syz [ 93.729000][ T5926] usb 4-1: SerialNumber: syz [ 93.749674][ T5926] usb 4-1: config 0 descriptor?? [ 93.764609][ T5926] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 93.785164][ T5926] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 94.377909][ T5926] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 94.385562][ T5926] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 94.791637][ T6343] loop2: detected capacity change from 0 to 764 [ 94.794605][ T6346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.149'. [ 95.008110][ T5926] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 95.017115][ T5926] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 95.029742][ T5926] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 95.050043][ T5926] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 95.084908][ T5926] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 95.100764][ T5926] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 95.313171][ T5926] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 95.325050][ T5926] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 95.345706][ T5926] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 95.425232][ T5926] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 95.432417][ T5926] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 95.464263][ T5926] usb 4-1: USB disconnect, device number 2 [ 95.995716][ T6373] tipc: Started in network mode [ 96.011985][ T6373] tipc: Node identity 7f000001, cluster identity 4711 [ 96.103830][ T6373] tipc: Enabled bearer , priority 10 [ 96.173663][ T6373] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 96.214142][ T6373] tipc: Enabled bearer , priority 10 [ 96.325517][ T5859] usb 2-1: USB disconnect, device number 3 [ 96.519840][ T6388] loop2: detected capacity change from 0 to 764 [ 97.818647][ T5926] tipc: Node number set to 2130706433 [ 98.163575][ T6419] loop4: detected capacity change from 0 to 764 [ 98.859916][ T6408] syz.0.171 (6408): drop_caches: 2 [ 99.560809][ T6455] loop1: detected capacity change from 0 to 764 [ 100.168656][ T6475] ================================================================== [ 100.176747][ T6475] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 100.185174][ T6475] Read of size 8 at addr ffff8880766580e0 by task syz.0.195/6475 [ 100.192882][ T6475] [ 100.195211][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.0.195 Not tainted syzkaller #0 PREEMPT(full) [ 100.195232][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.195248][ T6475] Call Trace: [ 100.195255][ T6475] [ 100.195262][ T6475] dump_stack_lvl+0x189/0x250 [ 100.195284][ T6475] ? __kasan_check_byte+0x12/0x40 [ 100.195310][ T6475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.195329][ T6475] ? lock_release+0x4b/0x3e0 [ 100.195353][ T6475] ? __virt_addr_valid+0x4a5/0x5c0 [ 100.195372][ T6475] print_report+0xca/0x240 [ 100.195389][ T6475] ? change_page_attr_set_clr+0x625/0xfc0 [ 100.195411][ T6475] kasan_report+0x118/0x150 [ 100.195434][ T6475] ? change_page_attr_set_clr+0x625/0xfc0 [ 100.195459][ T6475] change_page_attr_set_clr+0x625/0xfc0 [ 100.195484][ T6475] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 100.195506][ T6475] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 100.195525][ T6475] ? memtype_reserve+0x874/0xb30 [ 100.195550][ T6475] _set_pages_array+0x145/0x270 [ 100.195576][ T6475] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 100.195598][ T6475] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 100.195621][ T6475] drm_gem_shmem_pin_locked+0x22c/0x460 [ 100.195641][ T6475] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 100.195675][ T6475] ? ww_mutex_lock+0x3f/0x1c0 [ 100.195698][ T6475] drm_gem_map_attach+0x19c/0x1f0 [ 100.195720][ T6475] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 100.195745][ T6475] ? __fget_files+0x3a0/0x420 [ 100.195768][ T6475] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 100.195789][ T6475] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 100.195810][ T6475] ? drm_gem_prime_fd_to_handle+0x185/0x4d0 [ 100.195830][ T6475] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 100.195851][ T6475] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 100.195872][ T6475] drm_ioctl_kernel+0x2cc/0x390 [ 100.195889][ T6475] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 100.195909][ T6475] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 100.195928][ T6475] drm_ioctl+0x67f/0xb10 [ 100.195945][ T6475] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 100.195967][ T6475] ? __pfx_drm_ioctl+0x10/0x10 [ 100.195987][ T6475] ? __fget_files+0x3a0/0x420 [ 100.196008][ T6475] ? __fget_files+0x2a/0x420 [ 100.196031][ T6475] ? bpf_lsm_file_ioctl+0x9/0x20 [ 100.196050][ T6475] ? __pfx_drm_ioctl+0x10/0x10 [ 100.196065][ T6475] __se_sys_ioctl+0xf9/0x170 [ 100.196083][ T6475] do_syscall_64+0xfa/0xfa0 [ 100.196099][ T6475] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.196114][ T6475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.196130][ T6475] ? clear_bhb_loop+0x60/0xb0 [ 100.196149][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.196165][ T6475] RIP: 0033:0x7f067458ebe9 [ 100.196185][ T6475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.196199][ T6475] RSP: 002b:00007f06753a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.196217][ T6475] RAX: ffffffffffffffda RBX: 00007f06747c6180 RCX: 00007f067458ebe9 [ 100.196230][ T6475] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000008 [ 100.196241][ T6475] RBP: 00007f0674611e19 R08: 0000000000000000 R09: 0000000000000000 [ 100.196252][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.196262][ T6475] R13: 00007f06747c6218 R14: 00007f06747c6180 R15: 00007fff10728eb8 [ 100.196281][ T6475] [ 100.196287][ T6475] [ 100.527970][ T6475] Allocated by task 6475: [ 100.532279][ T6475] kasan_save_track+0x3e/0x80 [ 100.536945][ T6475] __kasan_kmalloc+0x93/0xb0 [ 100.541526][ T6475] __kvmalloc_node_noprof+0x5cd/0x910 [ 100.546896][ T6475] drm_gem_get_pages+0x166/0xa20 [ 100.551841][ T6475] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 100.557896][ T6475] drm_gem_shmem_pin_locked+0x22c/0x460 [ 100.563428][ T6475] drm_gem_map_attach+0x19c/0x1f0 [ 100.568438][ T6475] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 100.573801][ T6475] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 100.580030][ T6475] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 100.585748][ T6475] drm_ioctl_kernel+0x2cc/0x390 [ 100.590584][ T6475] drm_ioctl+0x67f/0xb10 [ 100.594809][ T6475] __se_sys_ioctl+0xf9/0x170 [ 100.599388][ T6475] do_syscall_64+0xfa/0xfa0 [ 100.603905][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.609784][ T6475] [ 100.612099][ T6475] The buggy address belongs to the object at ffff888076658080 [ 100.612099][ T6475] which belongs to the cache kmalloc-96 of size 96 [ 100.625961][ T6475] The buggy address is located 0 bytes to the right of [ 100.625961][ T6475] allocated 96-byte region [ffff888076658080, ffff8880766580e0) [ 100.640348][ T6475] [ 100.642660][ T6475] The buggy address belongs to the physical page: [ 100.649062][ T6475] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076658a00 pfn:0x76658 [ 100.659123][ T6475] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 100.667174][ T6475] page_type: f5(slab) [ 100.671140][ T6475] raw: 00fff00000000200 ffff88801a841280 ffffea0000c44d50 ffffea0001d4ab10 [ 100.679707][ T6475] raw: ffff888076658a00 000000000020001f 00000000f5000000 0000000000000000 [ 100.688268][ T6475] page dumped because: kasan: bad access detected [ 100.694676][ T6475] page_owner tracks the page as allocated [ 100.700374][ T6475] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 12, tgid 12 (kworker/u8:0), ts 79241535738, free_ts 79202995093 [ 100.719544][ T6475] post_alloc_hook+0x240/0x2a0 [ 100.724305][ T6475] get_page_from_freelist+0x21e4/0x22c0 [ 100.729845][ T6475] __alloc_frozen_pages_noprof+0x181/0x370 [ 100.735647][ T6475] allocate_slab+0x65/0x330 [ 100.740142][ T6475] ___slab_alloc+0xbd1/0x13f0 [ 100.744889][ T6475] __slab_alloc+0x55/0xa0 [ 100.749202][ T6475] __kmalloc_node_noprof+0x5cc/0x800 [ 100.754477][ T6475] allocate_slab+0x160/0x330 [ 100.759052][ T6475] ___slab_alloc+0xbd1/0x13f0 [ 100.763721][ T6475] __slab_alloc+0x55/0xa0 [ 100.768051][ T6475] kmem_cache_alloc_noprof+0x3f9/0x6e0 [ 100.773532][ T6475] dst_alloc+0x105/0x170 [ 100.777762][ T6475] icmp6_dst_alloc+0x75/0x420 [ 100.782433][ T6475] ndisc_send_skb+0x3f1/0x1510 [ 100.787215][ T6475] addrconf_dad_completed+0x7ae/0xd60 [ 100.792600][ T6475] addrconf_dad_work+0xc36/0x14b0 [ 100.797625][ T6475] page last free pid 5972 tgid 5971 stack trace: [ 100.803936][ T6475] register_dummy_stack+0x89/0xe0 [ 100.808954][ T6475] init_page_owner+0x2e/0x620 [ 100.813623][ T6475] page_ext_init+0x511/0x550 [ 100.818209][ T6475] mm_core_init+0x56/0x70 [ 100.822523][ T6475] [ 100.824828][ T6475] Memory state around the buggy address: [ 100.830436][ T6475] ffff888076657f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 100.838481][ T6475] ffff888076658000: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 100.846523][ T6475] >ffff888076658080: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 100.854562][ T6475] ^ [ 100.861734][ T6475] ffff888076658100: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 100.869776][ T6475] ffff888076658180: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 100.877816][ T6475] ================================================================== [ 100.960356][ T6475] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 100.967592][ T6475] CPU: 1 UID: 0 PID: 6475 Comm: syz.0.195 Not tainted syzkaller #0 PREEMPT(full) [ 100.976783][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.986825][ T6475] Call Trace: [ 100.990095][ T6475] [ 100.993013][ T6475] dump_stack_lvl+0x99/0x250 [ 100.997686][ T6475] ? __asan_memcpy+0x40/0x70 [ 101.002273][ T6475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.007482][ T6475] ? __pfx__printk+0x10/0x10 [ 101.012076][ T6475] vpanic+0x237/0x6d0 [ 101.016062][ T6475] ? __pfx_vpanic+0x10/0x10 [ 101.020669][ T6475] ? preempt_schedule+0xae/0xc0 [ 101.025510][ T6475] ? __pfx_preempt_schedule+0x10/0x10 [ 101.030871][ T6475] panic+0xb9/0xc0 [ 101.034584][ T6475] ? __pfx_panic+0x10/0x10 [ 101.038990][ T6475] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 101.044884][ T6475] ? change_page_attr_set_clr+0x625/0xfc0 [ 101.050598][ T6475] check_panic_on_warn+0x89/0xb0 [ 101.055525][ T6475] ? change_page_attr_set_clr+0x625/0xfc0 [ 101.061249][ T6475] end_report+0x78/0x160 [ 101.065485][ T6475] kasan_report+0x129/0x150 [ 101.069984][ T6475] ? change_page_attr_set_clr+0x625/0xfc0 [ 101.075702][ T6475] change_page_attr_set_clr+0x625/0xfc0 [ 101.081242][ T6475] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 101.087299][ T6475] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 101.093441][ T6475] ? memtype_reserve+0x874/0xb30 [ 101.098400][ T6475] _set_pages_array+0x145/0x270 [ 101.103249][ T6475] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 101.109311][ T6475] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 101.115891][ T6475] drm_gem_shmem_pin_locked+0x22c/0x460 [ 101.121518][ T6475] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 101.127596][ T6475] ? ww_mutex_lock+0x3f/0x1c0 [ 101.132277][ T6475] drm_gem_map_attach+0x19c/0x1f0 [ 101.137300][ T6475] dma_buf_dynamic_attach+0x1ea/0x3d0 [ 101.142677][ T6475] ? __fget_files+0x3a0/0x420 [ 101.147356][ T6475] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 101.154200][ T6475] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 101.160440][ T6475] ? drm_gem_prime_fd_to_handle+0x185/0x4d0 [ 101.166326][ T6475] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 101.173172][ T6475] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 101.178884][ T6475] drm_ioctl_kernel+0x2cc/0x390 [ 101.183726][ T6475] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 101.190130][ T6475] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 101.195503][ T6475] drm_ioctl+0x67f/0xb10 [ 101.199737][ T6475] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 101.206145][ T6475] ? __pfx_drm_ioctl+0x10/0x10 [ 101.210903][ T6475] ? __fget_files+0x3a0/0x420 [ 101.215588][ T6475] ? __fget_files+0x2a/0x420 [ 101.220171][ T6475] ? bpf_lsm_file_ioctl+0x9/0x20 [ 101.225102][ T6475] ? __pfx_drm_ioctl+0x10/0x10 [ 101.229851][ T6475] __se_sys_ioctl+0xf9/0x170 [ 101.234435][ T6475] do_syscall_64+0xfa/0xfa0 [ 101.238926][ T6475] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.244120][ T6475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.250173][ T6475] ? clear_bhb_loop+0x60/0xb0 [ 101.254850][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.260740][ T6475] RIP: 0033:0x7f067458ebe9 [ 101.265146][ T6475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.284736][ T6475] RSP: 002b:00007f06753a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.293138][ T6475] RAX: ffffffffffffffda RBX: 00007f06747c6180 RCX: 00007f067458ebe9 [ 101.301098][ T6475] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000008 [ 101.309055][ T6475] RBP: 00007f0674611e19 R08: 0000000000000000 R09: 0000000000000000 [ 101.317015][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.324973][ T6475] R13: 00007f06747c6218 R14: 00007f06747c6180 R15: 00007fff10728eb8 [ 101.332937][ T6475] [ 101.336190][ T6475] Kernel Offset: disabled [ 101.340515][ T6475] Rebooting in 86400 seconds..