last executing test programs: 1m12.265659908s ago: executing program 1 (id=667): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x7400}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, &(0x7f0000000180)) 1m11.323874911s ago: executing program 1 (id=669): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha3-256-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$qrtr(r2, &(0x7f0000005980)={0x0, 0x0, &(0x7f0000005900)=[{&(0x7f00000056c0)='3', 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0xa4, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x4084) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0xfa, 0x41b}}}, 0x7) 1m10.811983331s ago: executing program 1 (id=672): socket(0x10, 0x3, 0x0) r0 = userfaultfd(0x80800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$tipc(0x1e, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x100) ioctl$MON_IOCX_GET(r6, 0x400c9206, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2ce}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m7.293112547s ago: executing program 1 (id=678): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2e, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040094}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x44) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000200)={0xa000000a}) finit_module(r5, 0x0, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) 1m2.049676163s ago: executing program 1 (id=688): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = epoll_create1(0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x8, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)) syz_io_uring_setup(0x83, 0x0, 0x0, 0x0) 1m1.105893395s ago: executing program 1 (id=690): connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x7, 0x5, 0x8, 0x81, 0x9e, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/meminfo\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x21) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e22, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 45.928273366s ago: executing program 32 (id=690): connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x7, 0x5, 0x8, 0x81, 0x9e, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/meminfo\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x21) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'veth1_to_bridge\x00', {0x2, 0x4e22, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 9.573284849s ago: executing program 0 (id=815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000306010300000000000000000000000005000100070000000c"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x880) 9.513584825s ago: executing program 3 (id=816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 9.431138353s ago: executing program 3 (id=817): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000140)={{0x77359400}}, 0x0) 9.293760176s ago: executing program 0 (id=818): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x99\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7j\xd1\x8f\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\x02\x00\x00\x00\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) r3 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000400), 0x5abe40, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000440)) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x20f, 0x0, 0x439}]}) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x100a}, 0x2}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000340)={r0, 0x9, 0x6, 0x1}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000300)=0x6) sched_setattr(0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 8.14131842s ago: executing program 0 (id=826): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000100000000000000000000008500000017000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) close(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x2, 0x4, 0x3}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000a000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x1040082, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@context={'context', 0x3d, 'unconfined_u'}}]}}) 7.106691411s ago: executing program 0 (id=827): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$l2tp6(r1, &(0x7f0000000240)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x20}, 0xa}, 0x20) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80202, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r2, &(0x7f0000000100)=""/94, 0xfffffcf7) 5.952509815s ago: executing program 0 (id=831): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) listen(r2, 0xffffffff) pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed00080001"], 0x2c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x400c4) r4 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x1, 0x80, 0xfffffffd, 0xfffffffd, "01e60000000000000034dbb39fe6083a", 0xff, 0x0, 0x0, 0x0, 0x1}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 5.649324884s ago: executing program 3 (id=833): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2b, 0x80801, 0x1) shutdown(r3, 0x7ffffffe) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newnexthop={0x4c, 0x68, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x9}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@remote}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_OIF={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004010}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r9, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e246a570c"], 0x27) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0/file0/..\x00') ioctl$PIO_FONTRESET(r7, 0x4b6d, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 5.635839606s ago: executing program 2 (id=834): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22001) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) 5.321161336s ago: executing program 2 (id=836): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000200)=ANY=[]) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000380)) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000300)={0x0, 0xfff6}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1}, 0x8) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.639539943s ago: executing program 3 (id=839): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4814) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 3.387984707s ago: executing program 3 (id=841): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 3.318892243s ago: executing program 4 (id=842): r0 = syz_open_dev$dri(0x0, 0x1, 0x400000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r1 = gettid() sched_setscheduler(r1, 0x6, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001780), 0xa00, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000017c0), 0x44003, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000000c0)={0xf, r0, 0x10, {0xc4, 0x1}, 0x83}, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$SIOCRSACCEPT(r8, 0x89e3) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2.979871397s ago: executing program 0 (id=843): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000001480)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) dup(r0) 2.74497422s ago: executing program 4 (id=844): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socket$netlink(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 2.499884014s ago: executing program 2 (id=845): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20001, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0xa0, 0x258, 0x690, 0x384, 0xda, 0x10000, 0x20, 0x0, {0x4, 0x7}, {0x5, 0x1}, {0xfffffffe, 0x2, 0x1}, {0x800, 0x5, 0x1}, 0x5, 0x1, 0x3ff, 0x1000, 0x1, 0x7, 0x63, 0x10002, 0x5, 0x7fff, 0x10001, 0x7, 0x24, 0x100, 0x0, 0x2}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000100000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000004c0), &(0x7f0000000000), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000001c0)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}, [@call={0x85, 0x0, 0x0, 0x73}, @jmp={0x5, 0x0, 0x4, 0x8, 0x7, 0x6, 0xfffffffffffffffc}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x7d, &(0x7f00000006c0)=ANY=[@ANYBLOB="aa8faaaaaaaaaaaaaaaaaaaa000d010000c03b0100002b4bf9cf62b937e4a7902dc82fca6d798c611eb10f311cac60cf28b39381cb09ae3591c94318960cda5291caa366416f776dfed450ca37a48067a1cb031f46e2"], 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000740)={0x1f, @none}, 0x8) 2.421350402s ago: executing program 4 (id=846): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x84) 1.289413483s ago: executing program 4 (id=847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x2008000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e6ff0000000000000000000000000000000000000000000000000000d19daff92d5f0dfe7fefa63caf7409009de29a19023b6e0e3403955740d6e5ec3629fd42021a60479540b79d"], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) accept4$llc(r1, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x10, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x6}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.289019113s ago: executing program 2 (id=848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1.207535431s ago: executing program 3 (id=849): creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) ioprio_get$uid(0x3, 0x0) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000100)=0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) 717.625839ms ago: executing program 2 (id=850): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x0) 265.332623ms ago: executing program 4 (id=851): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4682010103fcffffffffffffff03003e000500000000010000000000004000000060b8f4a67718706a00000000000000003e00380001"], 0x78) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 63.754833ms ago: executing program 2 (id=852): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) timer_create(0x6, &(0x7f0000000100)={0x0, 0x38, 0x4, @tid=r1}, &(0x7f0000000140)) timer_delete(0x0) pread64(r3, 0x0, 0x0, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 0s ago: executing program 4 (id=853): socket(0x10, 0x3, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3a, 0x2, @thr={&(0x7f0000000000), &(0x7f00000000c0)="f75c7baa39914f7177a5007e6e0781f2e62526fd09b87d715787bcd06fcbc754d5f559f50bb8b4774b82844a7c20161a9667e7308d4197f2d2b9544314"}}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x422, &(0x7f00000000c0)={0x0, 0x20079af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$kcm(0x2, 0x3, 0x2) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r6, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x801}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.64' (ED25519) to the list of known hosts. [ 81.892241][ T5777] cgroup: Unknown subsys name 'net' [ 82.056173][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.812498][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.004634][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.027561][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.035599][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.048555][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.057833][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.077383][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.111662][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.128589][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.137962][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.159901][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.177833][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.199280][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.207781][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.215934][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.225028][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.234928][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.243531][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.252447][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.260497][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.277220][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.288238][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.307463][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.327841][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.338560][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.705096][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 86.888376][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 86.960084][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.969194][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.976592][ T5786] bridge_slave_0: entered allmulticast mode [ 86.984152][ T5786] bridge_slave_0: entered promiscuous mode [ 87.014170][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 87.028495][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.035834][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.043408][ T5786] bridge_slave_1: entered allmulticast mode [ 87.051660][ T5786] bridge_slave_1: entered promiscuous mode [ 87.129211][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.141899][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.151635][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 87.230391][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.237973][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.245185][ T5790] bridge_slave_0: entered allmulticast mode [ 87.253106][ T5790] bridge_slave_0: entered promiscuous mode [ 87.262556][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.270309][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.277642][ T5790] bridge_slave_1: entered allmulticast mode [ 87.285084][ T5790] bridge_slave_1: entered promiscuous mode [ 87.321507][ T5786] team0: Port device team_slave_0 added [ 87.331111][ T5786] team0: Port device team_slave_1 added [ 87.378975][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.426998][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.472601][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.480349][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.512609][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.573185][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.586238][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.619506][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.673572][ T5790] team0: Port device team_slave_0 added [ 87.685775][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.694741][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.707533][ T5791] bridge_slave_0: entered allmulticast mode [ 87.715070][ T5791] bridge_slave_0: entered promiscuous mode [ 87.808596][ T5790] team0: Port device team_slave_1 added [ 87.845297][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.852859][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.861416][ T5791] bridge_slave_1: entered allmulticast mode [ 87.868832][ T5791] bridge_slave_1: entered promiscuous mode [ 87.889429][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.896698][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.905546][ T5797] bridge_slave_0: entered allmulticast mode [ 87.913437][ T5797] bridge_slave_0: entered promiscuous mode [ 87.938723][ T5786] hsr_slave_0: entered promiscuous mode [ 87.945790][ T5786] hsr_slave_1: entered promiscuous mode [ 87.982355][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.989720][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.996959][ T5797] bridge_slave_1: entered allmulticast mode [ 88.005066][ T5797] bridge_slave_1: entered promiscuous mode [ 88.042637][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.052606][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.060069][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.086397][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.125828][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.148264][ T5793] Bluetooth: hci0: command tx timeout [ 88.155907][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.163500][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.190118][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.210074][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.222961][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.287553][ T5793] Bluetooth: hci2: command tx timeout [ 88.338044][ T5791] team0: Port device team_slave_0 added [ 88.365726][ T5797] team0: Port device team_slave_0 added [ 88.374014][ T5793] Bluetooth: hci3: command tx timeout [ 88.375130][ T5791] team0: Port device team_slave_1 added [ 88.385245][ T5793] Bluetooth: hci1: command tx timeout [ 88.406429][ T5790] hsr_slave_0: entered promiscuous mode [ 88.413515][ T5790] hsr_slave_1: entered promiscuous mode [ 88.421682][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.429685][ T5790] Cannot create hsr debugfs directory [ 88.444328][ T5797] team0: Port device team_slave_1 added [ 88.465548][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.472885][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.499579][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.544558][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.551899][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.578632][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.614825][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.622270][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.648609][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.661731][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.668809][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.694871][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.848120][ T5791] hsr_slave_0: entered promiscuous mode [ 88.858873][ T5791] hsr_slave_1: entered promiscuous mode [ 88.866501][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.874943][ T5791] Cannot create hsr debugfs directory [ 88.913282][ T5797] hsr_slave_0: entered promiscuous mode [ 88.920100][ T5797] hsr_slave_1: entered promiscuous mode [ 88.926711][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.934747][ T5797] Cannot create hsr debugfs directory [ 89.152292][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.190390][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.200673][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.258488][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.353793][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.381103][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.393593][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.404890][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.512595][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.526831][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.554968][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.587615][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.627197][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.640380][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.651598][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.687904][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.824187][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.893018][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.911756][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.939072][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.963689][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.994903][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.002368][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.014827][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.022044][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.036998][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.044248][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.080309][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.100153][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.107508][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.135161][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.142384][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.181349][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.188813][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.207511][ T5793] Bluetooth: hci0: command tx timeout [ 90.223950][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.343383][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.372216][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.374138][ T5793] Bluetooth: hci2: command tx timeout [ 90.419907][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.427231][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.452380][ T5793] Bluetooth: hci3: command tx timeout [ 90.452390][ T5800] Bluetooth: hci1: command tx timeout [ 90.469952][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.477247][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.771401][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.974919][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.989683][ T5790] veth0_vlan: entered promiscuous mode [ 91.004828][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.041999][ T5790] veth1_vlan: entered promiscuous mode [ 91.071770][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.156028][ T5791] veth0_vlan: entered promiscuous mode [ 91.180517][ T5790] veth0_macvtap: entered promiscuous mode [ 91.212496][ T5790] veth1_macvtap: entered promiscuous mode [ 91.235558][ T5797] veth0_vlan: entered promiscuous mode [ 91.252879][ T5786] veth0_vlan: entered promiscuous mode [ 91.268127][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.279776][ T5791] veth1_vlan: entered promiscuous mode [ 91.301277][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.315564][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.325397][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.335086][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.343987][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.359833][ T5797] veth1_vlan: entered promiscuous mode [ 91.373190][ T5786] veth1_vlan: entered promiscuous mode [ 91.505101][ T5791] veth0_macvtap: entered promiscuous mode [ 91.532679][ T5786] veth0_macvtap: entered promiscuous mode [ 91.546192][ T5791] veth1_macvtap: entered promiscuous mode [ 91.558584][ T5797] veth0_macvtap: entered promiscuous mode [ 91.588348][ T5786] veth1_macvtap: entered promiscuous mode [ 91.599997][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.616975][ T5797] veth1_macvtap: entered promiscuous mode [ 91.618661][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.650959][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.664758][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.679225][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.711625][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.722574][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.735690][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.763951][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.764929][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.781124][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.790301][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.792546][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.814292][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.830326][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.841037][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.853493][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.864323][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.875779][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.891857][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.902792][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.913359][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.924465][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.934407][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.945790][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.958908][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.973854][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.985618][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.995709][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.006619][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.018890][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.034743][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.045655][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.066712][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.082558][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.092790][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.103354][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.116306][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.156473][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.166315][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.180627][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.189554][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.211267][ T5797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.226778][ T5797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.237931][ T5797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.247418][ T5797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.287524][ T5793] Bluetooth: hci0: command tx timeout [ 92.393649][ T27] cfg80211: failed to load regulatory.db [ 92.458446][ T5793] Bluetooth: hci2: command tx timeout [ 92.508598][ T4807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.527578][ T5793] Bluetooth: hci1: command tx timeout [ 92.533163][ T5793] Bluetooth: hci3: command tx timeout [ 92.562515][ T4807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.420695][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.437689][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.486988][ T4807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.510917][ T4807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.538656][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.594900][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.595067][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.639431][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.810179][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.858374][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.134966][ T5892] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.207764][ T5892] syz.2.5[5892]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.345873][ T5892] loop2: detected capacity change from 0 to 2048 [ 94.373786][ T5793] Bluetooth: hci0: command tx timeout [ 94.453605][ T5892] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.464592][ T5892] NILFS (loop2): mounting unchecked fs [ 94.533825][ T5793] Bluetooth: hci2: command tx timeout [ 94.607880][ T5800] Bluetooth: hci1: command tx timeout [ 94.614165][ T5793] Bluetooth: hci3: command tx timeout [ 94.728310][ T5892] NILFS (loop2): recovery complete [ 94.757560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.279822][ T5894] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.387708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.388104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.707589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.026313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.128613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.231067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.333542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.343053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.927414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.404993][ T5919] loop1: detected capacity change from 0 to 2048 [ 99.339196][ T5919] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 99.349080][ T5919] NILFS (loop1): mounting unchecked fs [ 99.545951][ T5919] NILFS (loop1): recovery complete [ 99.554582][ T5921] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.881441][ T5933] loop0: detected capacity change from 0 to 4096 [ 100.965409][ T5927] loop2: detected capacity change from 0 to 4096 [ 101.135722][ T5932] loop3: detected capacity change from 0 to 4096 [ 102.064386][ T5926] ntfs3: loop2: ino=9, attr_set_size [ 102.213522][ T5933] ntfs3: loop0: ino=9, attr_set_size [ 103.390362][ T5942] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.944227][ T5951] loop3: detected capacity change from 0 to 2048 [ 104.422378][ T5951] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 104.432785][ T5951] NILFS (loop3): mounting unchecked fs [ 104.938151][ T5951] NILFS (loop3): recovery complete [ 105.067663][ T5952] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.148623][ T5959] netlink: 148 bytes leftover after parsing attributes in process `syz.3.21'. [ 106.158144][ T5959] netlink: 56 bytes leftover after parsing attributes in process `syz.3.21'. [ 106.167554][ T5959] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 106.215769][ T5959] loop3: detected capacity change from 0 to 2048 [ 107.309080][ T5958] sched: RT throttling activated [ 107.783394][ T5959] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 107.793272][ T5959] NILFS (loop3): mounting unchecked fs [ 107.836766][ T5959] NILFS (loop3): recovery complete [ 107.852583][ T5961] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.145943][ T5962] loop1: detected capacity change from 0 to 4096 [ 108.533872][ T5966] loop0: detected capacity change from 0 to 2048 [ 108.563360][ T5966] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 108.573094][ T5966] NILFS (loop0): mounting unchecked fs [ 109.050159][ T5966] NILFS (loop0): recovery complete [ 109.082134][ T5967] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.833944][ T5972] netlink: 148 bytes leftover after parsing attributes in process `syz.3.24'. [ 109.844478][ T5972] netlink: 56 bytes leftover after parsing attributes in process `syz.3.24'. [ 109.853551][ T5972] netlink: 'syz.3.24': attribute type 1 has an invalid length. [ 110.025411][ T5972] loop3: detected capacity change from 0 to 2048 [ 110.103240][ T5972] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.113113][ T5972] NILFS (loop3): mounting unchecked fs [ 110.261424][ T5972] NILFS (loop3): recovery complete [ 110.302505][ T5973] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.553234][ T5962] ntfs3: loop1: ino=9, attr_set_size [ 111.478606][ T5982] loop2: detected capacity change from 0 to 2048 [ 112.174378][ T5982] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 112.185605][ T5982] NILFS (loop2): mounting unchecked fs [ 112.244732][ T5982] NILFS (loop2): recovery complete [ 112.287342][ T5983] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.317855][ T5991] loop2: detected capacity change from 0 to 4096 [ 114.435499][ T5987] loop3: detected capacity change from 0 to 32768 [ 114.444836][ T5987] ======================================================= [ 114.444836][ T5987] WARNING: The mand mount option has been deprecated and [ 114.444836][ T5987] and is ignored by this kernel. Remove the mand [ 114.444836][ T5987] option from the mount to silence this warning. [ 114.444836][ T5987] ======================================================= [ 114.708562][ T5991] ntfs3: loop2: ino=9, attr_set_size [ 114.729534][ T5987] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 114.882981][ T6009] overlay: filesystem on ./file0 not supported as upperdir [ 115.115383][ T5791] ocfs2: Unmounting device (7,3) on (node local) [ 118.882633][ T6036] Zero length message leads to an empty skb [ 122.099480][ T6055] overlay: filesystem on ./file0 not supported as upperdir [ 125.871402][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 125.881746][ T6086] hsr0: entered promiscuous mode [ 125.886750][ T6086] hsr0: entered allmulticast mode [ 125.892580][ T6086] hsr_slave_0: entered allmulticast mode [ 125.898840][ T6086] hsr_slave_1: entered allmulticast mode [ 128.624838][ T6094] overlay: filesystem on ./file0 not supported as upperdir [ 129.197250][ T6105] loop1: detected capacity change from 0 to 2048 [ 130.960173][ T6105] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 130.970589][ T6105] NILFS (loop1): mounting unchecked fs [ 131.011202][ T6105] NILFS (loop1): recovery complete [ 131.030174][ T6107] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.250565][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 133.259843][ T6120] veth1_virt_wifi: entered promiscuous mode [ 133.265827][ T6120] veth1_virt_wifi: entered allmulticast mode [ 133.332248][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.344440][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.306242][ T6130] loop3: detected capacity change from 0 to 4096 [ 138.940726][ T6173] loop2: detected capacity change from 0 to 2048 [ 139.048778][ T6173] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 139.058729][ T6173] NILFS (loop2): mounting unchecked fs [ 139.523904][ T6173] NILFS (loop2): recovery complete [ 139.539579][ T6176] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.710802][ T6204] kvm: pic: non byte write [ 151.794107][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 151.850377][ T6273] team_slave_0: entered promiscuous mode [ 151.856367][ T6273] team_slave_1: entered promiscuous mode [ 151.908797][ T6273] macvtap1: entered promiscuous mode [ 151.925055][ T6273] team0: entered promiscuous mode [ 151.997764][ T6273] macvtap1: entered allmulticast mode [ 152.003229][ T6273] team0: entered allmulticast mode [ 152.027167][ T6273] team_slave_0: entered allmulticast mode [ 152.032995][ T6273] team_slave_1: entered allmulticast mode [ 152.068682][ T6273] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 152.152549][ T6274] team0: left allmulticast mode [ 152.175527][ T6274] team_slave_0: left allmulticast mode [ 152.182587][ T6274] team_slave_1: left allmulticast mode [ 152.188810][ T6274] team0: left promiscuous mode [ 152.194571][ T6274] team_slave_0: left promiscuous mode [ 152.200148][ T6274] team_slave_1: left promiscuous mode [ 152.586379][ T6291] mmap: syz.2.112 (6291) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.424360][ T6298] loop1: detected capacity change from 0 to 32768 [ 157.493356][ T6298] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 160.207664][ T5797] ocfs2: Unmounting device (7,1) on (node local) [ 160.260488][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 160.276820][ T6321] team_slave_0: entered promiscuous mode [ 160.282634][ T6321] team_slave_1: entered promiscuous mode [ 160.289677][ T6321] macvtap1: entered promiscuous mode [ 160.295079][ T6321] team0: entered promiscuous mode [ 160.301524][ T6321] macvtap1: entered allmulticast mode [ 160.306996][ T6321] team0: entered allmulticast mode [ 160.315066][ T6321] team_slave_0: entered allmulticast mode [ 160.347174][ T6321] team_slave_1: entered allmulticast mode [ 160.402331][ T6321] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 160.428439][ T6324] team0: left allmulticast mode [ 160.433408][ T6324] team_slave_0: left allmulticast mode [ 160.457371][ T6324] team_slave_1: left allmulticast mode [ 160.462958][ T6324] team0: left promiscuous mode [ 160.488511][ T6324] team_slave_0: left promiscuous mode [ 160.494106][ T6324] team_slave_1: left promiscuous mode [ 160.776115][ T6328] loop1: detected capacity change from 0 to 2048 [ 167.874644][ T6363] loop2: detected capacity change from 0 to 2048 [ 170.499525][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 170.594462][ T6370] team_slave_0: entered promiscuous mode [ 170.600491][ T6370] team_slave_1: entered promiscuous mode [ 170.617818][ T6370] macvtap2: entered promiscuous mode [ 170.649810][ T6370] team0: entered promiscuous mode [ 170.681357][ T6370] macvtap2: entered allmulticast mode [ 170.686833][ T6370] team0: entered allmulticast mode [ 170.703522][ T6370] team_slave_0: entered allmulticast mode [ 170.711332][ T6370] team_slave_1: entered allmulticast mode [ 170.878511][ T6370] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 170.986111][ T6374] team0: left allmulticast mode [ 170.991320][ T6374] team_slave_0: left allmulticast mode [ 170.996915][ T6374] team_slave_1: left allmulticast mode [ 171.007287][ T6374] team0: left promiscuous mode [ 171.015355][ T6374] team_slave_0: left promiscuous mode [ 171.021081][ T6374] team_slave_1: left promiscuous mode [ 175.046576][ T6400] loop3: detected capacity change from 0 to 4096 [ 175.297472][ T6400] ntfs3: loop3: ino=9, attr_set_size [ 177.525521][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 177.585177][ T6421] team_slave_0: entered promiscuous mode [ 177.591154][ T6421] team_slave_1: entered promiscuous mode [ 177.633481][ T6421] macvtap1: entered promiscuous mode [ 177.652114][ T6421] team0: entered promiscuous mode [ 177.667914][ T6421] macvtap1: entered allmulticast mode [ 177.678934][ T6421] team0: entered allmulticast mode [ 177.688885][ T6421] team_slave_0: entered allmulticast mode [ 177.694803][ T6421] team_slave_1: entered allmulticast mode [ 177.704284][ T6421] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 177.718382][ T6422] team0: left allmulticast mode [ 177.757353][ T6422] team_slave_0: left allmulticast mode [ 177.777243][ T6422] team_slave_1: left allmulticast mode [ 177.989039][ T6422] team0: left promiscuous mode [ 177.994617][ T6422] team_slave_0: left promiscuous mode [ 178.001152][ T6422] team_slave_1: left promiscuous mode [ 182.333738][ T6453] loop1: detected capacity change from 0 to 2048 [ 188.362186][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 188.399641][ T6486] team_slave_0: entered promiscuous mode [ 188.405431][ T6486] team_slave_1: entered promiscuous mode [ 188.417314][ T6486] macvtap1: entered promiscuous mode [ 188.422816][ T6486] team0: entered promiscuous mode [ 188.437690][ T6486] macvtap1: entered allmulticast mode [ 188.443192][ T6486] team0: entered allmulticast mode [ 188.457417][ T6486] team_slave_0: entered allmulticast mode [ 188.463336][ T6486] team_slave_1: entered allmulticast mode [ 188.479987][ T6486] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 188.530983][ T6487] team0: left allmulticast mode [ 188.547064][ T6487] team_slave_0: left allmulticast mode [ 188.587145][ T6487] team_slave_1: left allmulticast mode [ 188.608343][ T6487] team0: left promiscuous mode [ 188.627927][ T6487] team_slave_0: left promiscuous mode [ 188.633709][ T6487] team_slave_1: left promiscuous mode [ 190.225546][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 190.259361][ T6497] batadv0: entered promiscuous mode [ 190.265251][ T6497] macvtap2: entered promiscuous mode [ 190.277361][ T6497] macvtap2: entered allmulticast mode [ 190.283185][ T6497] batadv0: entered allmulticast mode [ 190.299362][ T6497] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 190.317123][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 190.332179][ T6500] batadv0: left allmulticast mode [ 190.338103][ T6500] batadv0: left promiscuous mode [ 194.771387][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.927331][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.230986][ T6546] loop1: detected capacity change from 0 to 2048 [ 199.115580][ T6548] loop3: detected capacity change from 0 to 2048 [ 206.574173][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 206.905683][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 209.679870][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 209.719684][ T6602] team_slave_0: entered promiscuous mode [ 209.725452][ T6602] team_slave_1: entered promiscuous mode [ 209.758446][ T6602] macvtap3: entered promiscuous mode [ 209.764006][ T6602] team0: entered promiscuous mode [ 209.788153][ T6602] macvtap3: entered allmulticast mode [ 209.793730][ T6602] team0: entered allmulticast mode [ 209.819496][ T6602] team_slave_0: entered allmulticast mode [ 209.825318][ T6602] team_slave_1: entered allmulticast mode [ 209.852915][ T6602] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 209.885406][ T6605] team0: left allmulticast mode [ 209.903784][ T6605] team_slave_0: left allmulticast mode [ 209.918484][ T6605] team_slave_1: left allmulticast mode [ 209.932770][ T6605] team0: left promiscuous mode [ 209.959943][ T6605] team_slave_0: left promiscuous mode [ 209.965556][ T6605] team_slave_1: left promiscuous mode [ 210.045216][ T6607] loop3: detected capacity change from 0 to 4096 [ 210.952346][ T6607] ntfs3: loop3: ino=9, attr_set_size [ 212.210796][ T5104] Bluetooth: hci0: command 0x0406 tx timeout [ 212.217817][ T5104] Bluetooth: hci2: command 0x0406 tx timeout [ 212.219272][ T5795] Bluetooth: hci1: command 0x0406 tx timeout [ 212.223875][ T5104] Bluetooth: hci3: command 0x0406 tx timeout [ 213.541739][ T6632] loop0: detected capacity change from 0 to 2048 [ 218.162527][ T6648] loop3: detected capacity change from 0 to 32768 [ 218.936883][ T6648] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 218.937344][ T6648] (syz.3.211,6648,1):ocfs2_initialize_super:2287 ERROR: status = -12 [ 218.977855][ T6648] (syz.3.211,6648,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 224.745282][ T6689] loop0: detected capacity change from 0 to 2048 [ 228.275741][ T6714] loop3: detected capacity change from 0 to 2048 [ 230.701945][ T6731] loop2: detected capacity change from 0 to 4096 [ 231.519832][ T6731] ntfs3: loop2: ino=9, attr_set_size [ 233.756887][ T6745] loop2: detected capacity change from 0 to 131072 [ 233.797932][ T6745] F2FS-fs (loop2): invalid crc value [ 233.873913][ T6745] F2FS-fs (loop2): Found nat_bits in checkpoint [ 233.925261][ T6745] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 236.291232][ T6762] tipc: Started in network mode [ 236.297174][ T6762] tipc: Node identity 080211, cluster identity 4711 [ 236.304145][ T6762] tipc: Enabled bearer , priority 0 [ 236.330090][ T6762] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 236.357504][ T6762] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 236.430461][ T6762] tipc: Resetting bearer [ 237.508159][ T5827] tipc: Node number set to 134353152 [ 239.385640][ T5827] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 239.394033][ T5827] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 239.402481][ T5827] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 239.410840][ T5827] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 239.419531][ T5827] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 239.427745][ T5827] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 239.435543][ T5827] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 239.451166][ T5827] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 239.504221][ T5827] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 239.533825][ T5827] hid-generic 0000:0040:30383231.0001: hidraw0: HID v303038.78 Device [syz1] on syz0 [ 243.050362][ T6800] netlink: 'syz.1.250': attribute type 4 has an invalid length. [ 243.953006][ T6805] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 251.295965][ T5827] hid-generic 0000:0040:30383231.0002: unknown main item tag 0x0 [ 251.324558][ T5827] hid-generic 0000:0040:30383231.0002: unknown main item tag 0x0 [ 251.339327][ T5827] hid-generic 0000:0040:30383231.0002: unknown main item tag 0x0 [ 251.354836][ T5827] hid-generic 0000:0040:30383231.0002: unknown main item tag 0x0 [ 251.366364][ T5827] hid-generic 0000:0040:30383231.0002: unknown main item tag 0x0 [ 251.381750][ T5827] hid-generic 0000:0040:30383231.0002: unknown main item tag 0x0 [ 251.401153][ T5827] hid-generic 0000:0040:30383231.0002: unknown main item tag 0x0 [ 251.418434][ T5827] hid-generic 0000:0040:30383231.0002: unknown main item tag 0x0 [ 251.447059][ T5827] hid-generic 0000:0040:30383231.0002: unknown main item tag 0x0 [ 251.536866][ T5827] hid-generic 0000:0040:30383231.0002: hidraw0: HID v303038.78 Device [syz1] on syz0 [ 253.568154][ T27] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 253.575996][ T27] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 253.731334][ T27] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 253.757237][ T27] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 253.775500][ T27] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 253.927131][ T27] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 253.965901][ T27] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 253.975198][ T27] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 253.994501][ T27] hid-generic 0000:0040:30383231.0003: unknown main item tag 0x0 [ 254.030688][ T27] hid-generic 0000:0040:30383231.0003: hidraw0: HID v303038.78 Device [syz1] on syz0 [ 255.631228][ T6890] fido_id[6890]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 256.167147][ T6901] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 256.224985][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.413205][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.709249][ T6920] tipc: Started in network mode [ 259.714235][ T6920] tipc: Node identity 080211, cluster identity 4711 [ 259.756498][ T6920] tipc: Enabled bearer , priority 0 [ 259.809787][ T6920] tipc: Resetting bearer [ 259.864334][ T6927] netlink: 'syz.0.285': attribute type 4 has an invalid length. [ 260.878166][ T5827] tipc: Node number set to 134353152 [ 261.646522][ T6936] loop0: detected capacity change from 0 to 512 [ 261.722105][ T6936] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 261.808100][ T6936] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 261.872503][ T6936] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 261.897980][ T6936] EXT4-fs (loop0): 1 truncate cleaned up [ 261.905229][ T6936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.515183][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.141502][ T6964] loop1: detected capacity change from 0 to 512 [ 266.051234][ T5802] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 267.954520][ T6983] loop2: detected capacity change from 0 to 4096 [ 268.245127][ T6983] ntfs3: loop2: ino=9, attr_set_size [ 268.269192][ T6978] loop3: detected capacity change from 0 to 32768 [ 268.430806][ T6978] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 269.653442][ T5791] ocfs2: Unmounting device (7,3) on (node local) [ 278.459282][ T7043] bond1: entered allmulticast mode [ 278.464842][ T7043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.519802][ T7054] netlink: 'syz.0.324': attribute type 4 has an invalid length. [ 284.495946][ T7090] bond1: entered allmulticast mode [ 284.521289][ T7090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.217680][ T7105] loop2: detected capacity change from 0 to 512 [ 286.035209][ T7105] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 286.207811][ T7105] EXT4-fs (loop2): 1 truncate cleaned up [ 286.216792][ T7105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.264955][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 286.304778][ T7112] dummy0: entered promiscuous mode [ 286.310718][ T7112] macvtap2: entered promiscuous mode [ 286.387410][ T7112] macvtap2: entered allmulticast mode [ 286.404958][ T7112] dummy0: entered allmulticast mode [ 286.480087][ T7113] dummy0: left allmulticast mode [ 286.490426][ T7113] dummy0: left promiscuous mode [ 286.714568][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.187933][ T7135] bond1: entered allmulticast mode [ 289.193566][ T7135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.558186][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 290.596505][ T7145] dummy0: entered promiscuous mode [ 290.616229][ T7145] macvtap3: entered promiscuous mode [ 290.625118][ T7145] macvtap3: entered allmulticast mode [ 290.636848][ T7145] dummy0: entered allmulticast mode [ 292.202944][ T7165] loop2: detected capacity change from 0 to 2048 [ 302.346843][ T7218] loop0: detected capacity change from 0 to 4096 [ 303.588836][ T7218] ntfs3: loop0: ino=9, attr_set_size [ 307.404397][ T7259] loop1: detected capacity change from 0 to 4096 [ 308.112640][ T7259] ntfs3: loop1: ino=9, attr_set_size [ 308.165122][ T7263] loop3: detected capacity change from 0 to 4096 [ 308.515985][ T7263] ntfs3: loop3: ino=9, attr_set_size [ 309.491617][ T7282] loop3: detected capacity change from 0 to 2048 [ 312.420016][ T7298] loop1: detected capacity change from 0 to 512 [ 312.452056][ T7298] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 312.525974][ T7298] EXT4-fs (loop1): 1 truncate cleaned up [ 312.554739][ T7298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.564137][ T7319] loop3: detected capacity change from 0 to 2048 [ 317.650829][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.657541][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.016885][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.189938][ T7331] loop2: detected capacity change from 0 to 32768 [ 322.300230][ T7331] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 322.300593][ T7331] (syz.2.404,7331,1):ocfs2_initialize_super:2287 ERROR: status = -12 [ 322.363052][ T7331] (syz.2.404,7331,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 323.558876][ T7352] loop1: detected capacity change from 0 to 32768 [ 324.873666][ T7352] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 325.319322][ T7368] loop0: detected capacity change from 0 to 2048 [ 327.864682][ T5797] ocfs2: Unmounting device (7,1) on (node local) [ 331.175089][ T7387] loop2: detected capacity change from 0 to 512 [ 331.213576][ T7387] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 331.303624][ T7387] EXT4-fs (loop2): 1 truncate cleaned up [ 331.344289][ T7387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.606181][ T7397] loop1: detected capacity change from 0 to 2048 [ 334.524797][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.049499][ T7438] loop2: detected capacity change from 0 to 512 [ 339.332138][ T7438] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 339.425724][ T7438] EXT4-fs (loop2): 1 truncate cleaned up [ 339.442829][ T7438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.551928][ T5860] hid-generic 0000:0040:30383231.0004: unknown main item tag 0x0 [ 341.584651][ T5860] hid-generic 0000:0040:30383231.0004: unknown main item tag 0x0 [ 341.615235][ T5860] hid-generic 0000:0040:30383231.0004: unknown main item tag 0x0 [ 341.640351][ T5860] hid-generic 0000:0040:30383231.0004: unknown main item tag 0x0 [ 341.671587][ T5860] hid-generic 0000:0040:30383231.0004: unknown main item tag 0x0 [ 341.688604][ T5860] hid-generic 0000:0040:30383231.0004: unknown main item tag 0x0 [ 341.710807][ T5860] hid-generic 0000:0040:30383231.0004: unknown main item tag 0x0 [ 341.738795][ T5860] hid-generic 0000:0040:30383231.0004: unknown main item tag 0x0 [ 341.746598][ T5860] hid-generic 0000:0040:30383231.0004: unknown main item tag 0x0 [ 341.814102][ T5860] hid-generic 0000:0040:30383231.0004: hidraw0: HID v303038.78 Device [syz1] on syz0 [ 342.229115][ T7457] fido_id[7457]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 345.801853][ T7481] bond2: entered allmulticast mode [ 345.809086][ T7481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.865389][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.541974][ T7504] loop3: detected capacity change from 0 to 2048 [ 350.685527][ T7513] bond1: entered allmulticast mode [ 350.702627][ T7513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.674915][ T7571] bond2: entered allmulticast mode [ 359.681221][ T7571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.380235][ T7583] bond3: entered allmulticast mode [ 360.388362][ T7583] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.252844][ T7607] loop2: detected capacity change from 0 to 512 [ 363.331396][ T7607] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 363.411411][ T7607] EXT4-fs (loop2): 1 truncate cleaned up [ 363.452274][ T7607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.340243][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.662908][ T7671] nbd0: detected capacity change from 0 to 127 [ 374.718150][ T50] block nbd0: Receive control failed (result -32) [ 374.761524][ T6331] block nbd0: Dead connection, failed to find a fallback [ 374.770182][ T6331] block nbd0: shutting down sockets [ 374.775754][ T6331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 374.790561][ T6331] Buffer I/O error on dev nbd0, logical block 0, async page read [ 374.807140][ T6331] Buffer I/O error on dev nbd0, logical block 1, async page read [ 374.814959][ T6331] Buffer I/O error on dev nbd0, logical block 2, async page read [ 374.823070][ T6331] Buffer I/O error on dev nbd0, logical block 3, async page read [ 374.839328][ T6331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 374.849180][ T6331] Buffer I/O error on dev nbd0, logical block 0, async page read [ 374.857203][ T6331] Buffer I/O error on dev nbd0, logical block 1, async page read [ 374.865937][ T6331] Buffer I/O error on dev nbd0, logical block 2, async page read [ 374.873890][ T6331] Buffer I/O error on dev nbd0, logical block 3, async page read [ 374.882146][ T6331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 374.891870][ T6331] Buffer I/O error on dev nbd0, logical block 0, async page read [ 374.899905][ T6331] Buffer I/O error on dev nbd0, logical block 1, async page read [ 374.908286][ T6331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 374.917879][ T6331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 374.927386][ T6331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 374.936900][ T6331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 374.947721][ T6331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 374.956885][ T5787] ldm_validate_partition_table(): Disk read failed. [ 374.964111][ T6331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.973516][ T6331] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.984850][ T5787] Dev nbd0: unable to read RDB block 0 [ 374.992681][ T5787] nbd0: unable to read partition table [ 375.112002][ T5787] ldm_validate_partition_table(): Disk read failed. [ 375.158889][ T5787] Dev nbd0: unable to read RDB block 0 [ 375.167112][ T5787] nbd0: unable to read partition table [ 376.505609][ T7686] bond2: entered allmulticast mode [ 376.588843][ T7686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.155902][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.163096][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.412382][ T7727] bond4: entered allmulticast mode [ 381.441186][ T7727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 381.578153][ T7734] bond3: entered allmulticast mode [ 381.584000][ T7734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.979970][ T50] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 384.313294][ T7747] sctp: failed to load transform for md5: -2 [ 384.785556][ T7767] syzkaller1: entered promiscuous mode [ 384.811522][ T7767] syzkaller1: entered allmulticast mode [ 384.821610][ T7769] tipc: Started in network mode [ 384.821670][ T7769] tipc: Node identity 4, cluster identity 4711 [ 384.821683][ T7769] tipc: Node number set to 4 [ 385.354276][ T7779] syz.1.530 uses obsolete (PF_INET,SOCK_PACKET) [ 385.444820][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'. [ 387.377296][ T7791] 9pnet_virtio: no channels available for device syz [ 389.838648][ T7831] IPv6: NLM_F_CREATE should be specified when creating new route [ 389.846807][ T7831] IPv6: Can't replace route, no match found [ 390.162088][ T7834] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 390.551905][ T7842] trusted_key: encrypted_key: master key parameter 'efcult' is invalid [ 390.826721][ T7834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 390.907379][ T7837] bond3: (slave veth3): Enslaving as an active interface with a down link [ 390.931414][ T7841] bond3: (slave veth0_to_bond): making interface the new active one [ 390.944691][ T7841] veth0_to_bond: entered promiscuous mode [ 390.952139][ T7841] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 390.993682][ T7845] vlan2: entered allmulticast mode [ 391.012268][ T7845] veth0_to_bond: entered allmulticast mode [ 391.035514][ T7845] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 391.103953][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 391.981568][ T7841] syz.2.550 (7841) used greatest stack depth: 20136 bytes left [ 392.209072][ T7871] 9pnet_virtio: no channels available for device syz [ 392.522876][ T7877] Bluetooth: MGMT ver 1.22 [ 397.354848][ T7930] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 397.401177][ T7930] netlink: 224 bytes leftover after parsing attributes in process `syz.3.580'. [ 397.912909][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'. [ 400.259492][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 400.283688][ T7950] bridge0: entered promiscuous mode [ 400.323410][ T7950] macsec1: entered allmulticast mode [ 400.357128][ T7950] bridge0: entered allmulticast mode [ 400.383793][ T7950] bridge0: port 3(macsec1) entered blocking state [ 400.437562][ T7950] bridge0: port 3(macsec1) entered disabled state [ 400.465830][ T7950] bridge0: left allmulticast mode [ 400.477328][ T7950] bridge0: left promiscuous mode [ 400.827835][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 400.855138][ T28] audit: type=1326 audit(1760650591.735:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52878eec9 code=0x7ffc0000 [ 400.932708][ T28] audit: type=1326 audit(1760650591.785:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52878eec9 code=0x7ffc0000 [ 401.028288][ T28] audit: type=1326 audit(1760650591.785:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb52878eec9 code=0x7ffc0000 [ 401.083553][ T28] audit: type=1326 audit(1760650591.795:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52878eec9 code=0x7ffc0000 [ 401.095222][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 401.153225][ T9] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 401.164711][ T28] audit: type=1326 audit(1760650591.795:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb52878eec9 code=0x7ffc0000 [ 401.164762][ T28] audit: type=1326 audit(1760650591.795:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb52872af79 code=0x7ffc0000 [ 401.164808][ T28] audit: type=1326 audit(1760650591.795:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb52872af79 code=0x7ffc0000 [ 401.164852][ T28] audit: type=1326 audit(1760650591.795:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb52872af79 code=0x7ffc0000 [ 401.164896][ T28] audit: type=1326 audit(1760650591.795:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb52872af79 code=0x7ffc0000 [ 401.164940][ T28] audit: type=1326 audit(1760650591.795:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb52872af79 code=0x7ffc0000 [ 401.395730][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 401.405240][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 401.455915][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 401.477520][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 401.485963][ T9] usb 1-1: Product: syz [ 401.491384][ T9] usb 1-1: Manufacturer: syz [ 401.514762][ T7952] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 401.576892][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 401.582898][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 401.597684][ T9] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 402.149907][ T23] usb 1-1: USB disconnect, device number 2 [ 402.518029][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 402.934343][ T50] Bluetooth: hci0: hcon ffff888061698000 sent 1 < count 6 [ 402.949968][ T50] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 404.602712][ T8006] random: crng reseeded on system resumption [ 406.205340][ T50] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 408.129030][ T2922] veth0_to_bond: left promiscuous mode [ 409.054511][ T8033] usb usb8: usbfs: process 8033 (syz.1.616) did not claim interface 0 before use [ 409.752054][ T8042] comedi comedi3: s526: I/O port conflict (0x5,64) [ 410.662564][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 410.674840][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 410.685401][ T5800] Bluetooth: hci3: hardware error 0x00 [ 410.829717][ T8045] tipc: Can't bind to reserved service type 0 [ 412.708201][ T8062] mkiss: ax0: crc mode is auto. [ 412.772500][ T5800] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 412.854433][ T8062] fuse: Bad value for 'rootmode' [ 412.952247][ T8068] trusted_key: syz.0.625 sent an empty control message without MSG_MORE. [ 414.112246][ T8083] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 414.473430][ T8084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.628'. [ 415.709114][ T8100] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 415.811852][ T8102] 9pnet_virtio: no channels available for device syz [ 418.011638][ T5860] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 418.217428][ T5860] usb 1-1: Using ep0 maxpacket: 8 [ 418.224575][ T5860] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 418.240578][ T5860] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.273400][ T5860] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.297141][ T5860] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.317399][ T5860] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.387163][ T5860] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 418.413581][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.446673][ T5860] usb 1-1: GET_CAPABILITIES returned 0 [ 419.477168][ T5860] usbtmc 1-1:16.0: can't read capabilities [ 419.590747][ T5860] usb 1-1: USB disconnect, device number 3 [ 422.607619][ T5800] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 422.614343][ T50] Bluetooth: hci4: command 0x1003 tx timeout [ 427.367171][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 427.584670][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 427.728741][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.756962][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.766777][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 427.859992][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 427.904063][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.945349][ T27] usb 4-1: config 0 descriptor?? [ 428.501302][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 428.560973][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 428.688510][ T27] usb 4-1: USB disconnect, device number 2 [ 428.713833][ T8229] ubi31: attaching mtd0 [ 428.947239][ T8229] ubi31: scanning is finished [ 428.961525][ T8229] ubi31: empty MTD device detected [ 429.794532][ T8229] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 429.860086][ T8229] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 429.925066][ T8229] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 430.027017][ T8229] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 430.099425][ T8229] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 430.144892][ T8229] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 430.203314][ T8229] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2115301425 [ 430.383647][ T8229] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 430.442081][ T8236] ubi31: background thread "ubi_bgt31d" started, PID 8236 [ 433.398334][ T8271] sp0: Synchronizing with TNC [ 435.737140][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 436.197126][ T5860] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 436.427960][ T5860] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 436.446578][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.465522][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.480448][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 436.516551][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.556608][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.567895][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.580843][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 436.594634][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.605535][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.622140][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.633107][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 436.646018][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.654102][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.663276][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.674591][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 436.684884][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.712874][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.722059][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.737084][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 436.747056][ T5880] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 436.755827][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.769318][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.818955][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.848241][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 436.897794][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.905870][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.915523][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.932316][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 436.942374][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 436.957060][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.980011][ T5880] usb 4-1: config 0 has no interfaces? [ 436.991614][ T5880] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 437.003674][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.027134][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 437.044689][ T5880] usb 4-1: config 0 descriptor?? [ 437.050487][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 437.061994][ T5860] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 437.072716][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 437.114622][ T5860] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 437.133039][ T5860] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 437.169450][ T5860] usb 3-1: Product: syz [ 437.179499][ T5860] usb 3-1: Manufacturer: syz [ 437.194152][ T5860] usb 3-1: SerialNumber: syz [ 437.227197][ T5860] usb 3-1: config 0 descriptor?? [ 437.256868][ T5860] yurex 3-1:0.0: Could not submitting URB [ 437.277192][ T5860] yurex: probe of 3-1:0.0 failed with error -5 [ 437.611136][ T23] usb 3-1: USB disconnect, device number 2 [ 439.148056][ T8388] Bluetooth: MGMT ver 1.22 [ 439.157240][ T8388] Bluetooth: hci0: service_discovery: too big uuid_count value 48429 [ 440.191050][ T5880] usb 4-1: USB disconnect, device number 3 [ 440.530422][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.537145][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.467123][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.704'. [ 441.534091][ T8414] vlan2: entered promiscuous mode [ 441.544428][ T8414] bond0: entered promiscuous mode [ 441.560872][ T8414] bond_slave_0: entered promiscuous mode [ 441.593393][ T8414] bond_slave_1: entered promiscuous mode [ 443.483410][ T8471] hub 8-0:1.0: USB hub found [ 443.548227][ T8471] hub 8-0:1.0: 1 port detected [ 444.797785][ T8478] tipc: Enabled bearer , priority 0 [ 444.830557][ T8478] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 444.867235][ T8478] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 445.001520][ T8478] tipc: Resetting bearer [ 447.273952][ T8489] Illegal XDP return value 4294967274 on prog (id 137) dev N/A, expect packet loss! [ 447.621515][ T8495] 9pnet_virtio: no channels available for device syz [ 448.108675][ T8505] binder: 8500:8505 ioctl 81e8943c 200000000880 returned -22 [ 448.384744][ T8505] (null): rxe_set_mtu: Set mtu to 256 [ 448.397242][ T8505] lo speed is unknown, defaulting to 1000 [ 448.413368][ T8505] lo speed is unknown, defaulting to 1000 [ 448.431631][ T8505] lo speed is unknown, defaulting to 1000 [ 449.028862][ T8505] infiniband syz2: set down [ 449.033912][ T8505] infiniband syz2: added lo [ 449.168072][ T5880] lo speed is unknown, defaulting to 1000 [ 449.421444][ T8505] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 449.529957][ T8505] infiniband syz2: Couldn't open port 1 [ 450.243435][ T8505] RDS/IB: syz2: added [ 450.261932][ T8505] smc: adding ib device syz2 with port count 1 [ 450.300592][ T8505] smc: ib device syz2 port 1 has pnetid SYZ0 (user defined) [ 450.313794][ T27] lo speed is unknown, defaulting to 1000 [ 450.330828][ T8505] lo speed is unknown, defaulting to 1000 [ 454.729373][ T8505] lo speed is unknown, defaulting to 1000 [ 455.427670][ T8505] lo speed is unknown, defaulting to 1000 [ 455.458086][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 455.470549][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 455.479252][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 455.487584][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 455.495612][ T5800] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 455.503382][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 456.401428][ T8537] tipc: Enabling of bearer rejected, already enabled [ 456.499570][ T8532] lo speed is unknown, defaulting to 1000 [ 456.959292][ T8505] lo speed is unknown, defaulting to 1000 [ 457.570326][ T5800] Bluetooth: hci4: command tx timeout [ 458.022989][ T8555] fuse: Unknown parameter '0x0000000000000005' [ 458.112988][ T8532] chnl_net:caif_netlink_parms(): no params data found [ 458.343690][ T8532] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.362479][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.389306][ T8532] bridge_slave_0: entered allmulticast mode [ 458.429975][ T8532] bridge_slave_0: entered promiscuous mode [ 458.470384][ T8532] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.483467][ T8532] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.493697][ T8532] bridge_slave_1: entered allmulticast mode [ 458.513937][ T8532] bridge_slave_1: entered promiscuous mode [ 458.651469][ T8532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.689966][ T8532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.922751][ T8532] team0: Port device team_slave_0 added [ 459.131304][ T8532] team0: Port device team_slave_1 added [ 459.747023][ T5800] Bluetooth: hci4: command tx timeout [ 460.157118][ T8580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.733'. [ 460.828264][ T8532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.844577][ T8532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.977045][ T8532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.035748][ T8532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.055463][ T8532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.143110][ T8532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.803108][ T8532] hsr_slave_0: entered promiscuous mode [ 461.839518][ T5800] Bluetooth: hci4: command tx timeout [ 461.852710][ T8532] hsr_slave_1: entered promiscuous mode [ 461.859505][ T8532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.867477][ T8532] Cannot create hsr debugfs directory [ 462.307593][ T8532] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 462.329966][ T8532] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 462.361506][ T8532] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 462.415673][ T8532] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 462.920177][ T8532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.030428][ T8532] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.123704][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.131196][ T8345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.181617][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.188839][ T8345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.887459][ T5800] Bluetooth: hci4: command tx timeout [ 464.045424][ T8618] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.741'. [ 464.086767][ T8618] TCP: TCP_TX_DELAY enabled [ 464.670160][ T8532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.779171][ T8625] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 465.674224][ T8532] veth0_vlan: entered promiscuous mode [ 465.722918][ T8532] veth1_vlan: entered promiscuous mode [ 465.796585][ T8532] veth0_macvtap: entered promiscuous mode [ 465.853870][ T8532] veth1_macvtap: entered promiscuous mode [ 466.032515][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.078725][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.106973][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.136992][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.167176][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.203774][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.234563][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.262817][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.301028][ T8532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.339662][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.377133][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.413065][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.492923][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.528522][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.567521][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.627529][ T8532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.677028][ T8532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.717917][ T8532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.900229][ T8646] wireguard0: entered promiscuous mode [ 466.978676][ T8646] wireguard0: entered allmulticast mode [ 467.001439][ T8532] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.051490][ T8532] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.097118][ T8532] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.128809][ T8532] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.447547][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.480916][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.572237][ T8355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.601013][ T8355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.459642][ T8685] process 'syz.4.753' launched '/dev/fd/-1/./file0/file0' with NULL argv: empty string added [ 471.577870][ T8687] usb usb5: usbfs: process 8687 (syz.4.753) did not claim interface 0 before use [ 473.784305][ T8685] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.793778][ T8685] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.139750][ T8685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.237677][ T8685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.040617][ T8685] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.053205][ T8685] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.066076][ T8685] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.077323][ T8685] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.658512][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 476.697679][ T8735] 8021q: VLANs not supported on hsr0 [ 476.722018][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 476.753513][ T8735] 8021q: VLANs not supported on hsr0 [ 477.180538][ T8745] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 477.521743][ T8754] block device autoloading is deprecated and will be removed. [ 477.657269][ T5880] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 477.891144][ T5880] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 477.902835][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.925433][ T5880] usb 4-1: Product: syz [ 477.937501][ T5880] usb 4-1: Manufacturer: syz [ 477.949207][ T5880] usb 4-1: SerialNumber: syz [ 478.575538][ T5880] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 478.636692][ T5880] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 478.661538][ T5880] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 478.702202][ T5880] lan78xx: probe of 4-1:1.0 failed with error -32 [ 478.751997][ T5880] usb 4-1: USB disconnect, device number 4 [ 481.330635][ T8799] netlink: 'syz.0.775': attribute type 10 has an invalid length. [ 481.360800][ T8799] syz_tun: entered promiscuous mode [ 481.401839][ T8799] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 481.515388][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 481.693170][ T5800] Bluetooth: hci0: unexpected event for opcode 0x042c [ 481.727733][ T8815] netlink: 68 bytes leftover after parsing attributes in process `syz.3.778'. [ 482.047886][ T8819] (null): rxe_set_mtu: Set mtu to 1024 [ 482.054779][ T8819] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 482.695739][ T8824] 9pnet_virtio: no channels available for device syz [ 484.365079][ T8853] 9pnet_virtio: no channels available for device syz [ 484.560196][ T8855] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 485.637867][ T8887] sctp: [Deprecated]: syz.0.804 (pid 8887) Use of int in max_burst socket option deprecated. [ 485.637867][ T8887] Use struct sctp_assoc_value instead [ 489.602008][ T28] kauditd_printk_skb: 2094 callbacks suppressed [ 489.602024][ T28] audit: type=1326 audit(1760650680.485:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172658eec9 code=0x7ffc0000 [ 489.652149][ T28] audit: type=1326 audit(1760650680.485:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f172658eec9 code=0x7ffc0000 [ 489.690380][ T28] audit: type=1326 audit(1760650680.485:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172658eec9 code=0x7ffc0000 [ 489.724818][ T28] audit: type=1326 audit(1760650680.485:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172658eec9 code=0x7ffc0000 [ 490.295428][ T28] audit: type=1326 audit(1760650680.485:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f172658eec9 code=0x7ffc0000 [ 490.341069][ T28] audit: type=1326 audit(1760650680.485:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172658eec9 code=0x7ffc0000 [ 490.424285][ T28] audit: type=1326 audit(1760650680.485:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f172658eec9 code=0x7ffc0000 [ 490.533287][ T28] audit: type=1326 audit(1760650680.485:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172658eec9 code=0x7ffc0000 [ 490.652001][ T28] audit: type=1326 audit(1760650680.485:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172658eec9 code=0x7ffc0000 [ 490.735729][ T28] audit: type=1326 audit(1760650680.485:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f172658eec9 code=0x7ffc0000 [ 491.182722][ T5800] Bluetooth: hci1: unexpected event for opcode 0x0c57 [ 491.358547][ T8970] siw: device registration error -23 [ 491.526482][ T8978] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.010523][ T8978] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.302104][ T8978] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.554219][ T8978] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.755699][ T8978] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.803682][ T8978] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.832710][ T8978] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.898870][ T8978] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.037514][ T9008] random: crng reseeded on system resumption [ 496.693676][ C1] ------------[ cut here ]------------ [ 496.699970][ C1] WARNING: CPU: 1 PID: 9047 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 496.710441][ C1] Modules linked in: [ 496.714393][ C1] CPU: 1 PID: 9047 Comm: syz.4.853 Not tainted syzkaller #0 [ 496.721774][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 496.731889][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 496.738406][ C1] Code: 24 4c 89 e7 e8 9e 0b d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 e5 96 f7 0f 0b e9 f6 f7 ff ff e8 4d e5 96 f7 <0f> 0b e9 48 fb ff ff e8 41 e5 96 f7 48 c7 c7 20 ff 23 8e 4c 89 e6 [ 496.758672][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 496.764867][ C1] RAX: ffffffff89eea583 RBX: ffffffff89ee9386 RCX: ffff888029778000 [ 496.773040][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 496.781588][ C1] RBP: 0000000000000000 R08: ffff888029778000 R09: 0000000000000003 [ 496.789909][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ca1e3c0 [ 496.798131][ C1] R13: dffffc0000000000 R14: ffff88805ca1e8b0 R15: ffff88814cdfb824 [ 496.806370][ C1] FS: 00007f7ded2aa6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 496.815538][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.822191][ C1] CR2: 00007f17267e5f88 CR3: 000000002da5a000 CR4: 00000000003506e0 [ 496.830227][ C1] Call Trace: [ 496.833517][ C1] [ 496.836408][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 496.842009][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 496.847514][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 496.854421][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 496.860144][ C1] __iterate_interfaces+0x243/0x500 [ 496.865362][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 496.871702][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 496.879235][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 496.885522][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 496.892906][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 496.898193][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 496.903553][ C1] ? hw_scan_work+0xf40/0xf40 [ 496.908305][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 496.913519][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 496.919681][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 496.924841][ C1] handle_softirqs+0x280/0x820 [ 496.929976][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 496.934852][ C1] ? do_softirq+0x180/0x180 [ 496.939482][ C1] __irq_exit_rcu+0xc7/0x190 [ 496.944091][ C1] ? irq_exit_rcu+0x20/0x20 [ 496.948642][ C1] irq_exit_rcu+0x9/0x20 [ 496.952925][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 496.958867][ C1] [ 496.961904][ C1] [ 496.964899][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 496.971074][ C1] RIP: 0010:handle_mm_fault+0xb0/0x4920 [ 496.976714][ C1] Code: f3 f3 f3 f3 48 89 84 24 b0 00 00 00 66 42 c7 44 28 16 f3 f3 e8 d1 11 bd ff 4d 8d 74 24 10 4c 89 f0 48 c1 e8 03 48 89 44 24 10 <42> 80 3c 28 00 74 08 4c 89 f7 e8 b1 6a 14 00 49 8b 06 48 89 84 24 [ 496.996596][ C1] RSP: 0018:ffffc9000b477940 EFLAGS: 00000a06 [ 497.002821][ C1] RAX: 1ffff1100ec24422 RBX: 0000000000000014 RCX: 0000000000080000 [ 497.010944][ C1] RDX: ffffc90018b61000 RSI: 000000000007ffff RDI: 0000000000080000 [ 497.019263][ C1] RBP: ffffc9000b477b10 R08: ffffffff8e4a856f R09: 1ffffffff1c950ad [ 497.027386][ C1] R10: dffffc0000000000 R11: fffffbfff1c950ae R12: ffff888076122100 [ 497.035400][ C1] R13: dffffc0000000000 R14: ffff888076122110 R15: 0000000000000014 [ 497.043478][ C1] ? follow_page_pte+0x66b/0x1a70 [ 497.048707][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 497.054002][ C1] ? numa_migrate_prep+0x350/0x350 [ 497.059180][ C1] ? follow_page_pte+0x6fb/0x1a70 [ 497.064289][ C1] ? __might_sleep+0xe0/0xe0 [ 497.069037][ C1] ? pmd_lock+0x60/0x60 [ 497.073376][ C1] __get_user_pages+0x5ea/0x1470 [ 497.078413][ C1] ? mtree_destroy+0x30/0x30 [ 497.083031][ C1] ? populate_vma_page_range+0x370/0x370 [ 497.088743][ C1] populate_vma_page_range+0x2b6/0x370 [ 497.094249][ C1] ? fixup_user_fault+0x710/0x710 [ 497.099438][ C1] ? userfaultfd_unmap_complete+0x279/0x2d0 [ 497.105406][ C1] ? down_read+0x1ac/0x2e0 [ 497.109981][ C1] __mm_populate+0x24c/0x380 [ 497.114591][ C1] ? faultin_page_range+0x8f0/0x8f0 [ 497.120152][ C1] ? up_write+0x1c3/0x410 [ 497.124506][ C1] vm_mmap_pgoff+0x2e7/0x400 [ 497.129246][ C1] ? account_locked_vm+0x210/0x210 [ 497.134466][ C1] ? ksys_mmap_pgoff+0xea/0x700 [ 497.139480][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 497.144276][ C1] do_syscall_64+0x55/0xb0 [ 497.148748][ C1] ? clear_bhb_loop+0x40/0x90 [ 497.153802][ C1] ? clear_bhb_loop+0x40/0x90 [ 497.158649][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.165065][ C1] RIP: 0033:0x7f7dec38eec9 [ 497.169598][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.189401][ C1] RSP: 002b:00007f7ded2aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 497.197984][ C1] RAX: ffffffffffffffda RBX: 00007f7dec5e5fa0 RCX: 00007f7dec38eec9 [ 497.206241][ C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 497.214365][ C1] RBP: 00007f7dec411f91 R08: ffffffffffffffff R09: 0000000000000000 [ 497.222552][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 497.230618][ C1] R13: 00007f7dec5e6038 R14: 00007f7dec5e5fa0 R15: 00007ffd1078b878 [ 497.238776][ C1] [ 497.241808][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 497.249179][ C1] CPU: 1 PID: 9047 Comm: syz.4.853 Not tainted syzkaller #0 [ 497.256690][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.266796][ C1] Call Trace: [ 497.270090][ C1] [ 497.272969][ C1] dump_stack_lvl+0x16c/0x230 [ 497.277774][ C1] ? show_regs_print_info+0x20/0x20 [ 497.283163][ C1] ? load_image+0x3b0/0x3b0 [ 497.287702][ C1] panic+0x2c0/0x710 [ 497.291703][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 497.296262][ C1] __warn+0x2e0/0x470 [ 497.300617][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 497.306448][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 497.312277][ C1] report_bug+0x2be/0x4f0 [ 497.316671][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 497.322582][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 497.328426][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 497.334260][ C1] handle_bug+0xcf/0x120 [ 497.338548][ C1] exc_invalid_op+0x1a/0x50 [ 497.343200][ C1] asm_exc_invalid_op+0x1a/0x20 [ 497.348279][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 497.354865][ C1] Code: 24 4c 89 e7 e8 9e 0b d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 e5 96 f7 0f 0b e9 f6 f7 ff ff e8 4d e5 96 f7 <0f> 0b e9 48 fb ff ff e8 41 e5 96 f7 48 c7 c7 20 ff 23 8e 4c 89 e6 [ 497.375484][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 497.382189][ C1] RAX: ffffffff89eea583 RBX: ffffffff89ee9386 RCX: ffff888029778000 [ 497.390537][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.398710][ C1] RBP: 0000000000000000 R08: ffff888029778000 R09: 0000000000000003 [ 497.406798][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ca1e3c0 [ 497.414950][ C1] R13: dffffc0000000000 R14: ffff88805ca1e8b0 R15: ffff88814cdfb824 [ 497.423193][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 497.428817][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 497.434681][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 497.440424][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 497.446016][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 497.451492][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 497.458305][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 497.463877][ C1] __iterate_interfaces+0x243/0x500 [ 497.469096][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 497.475351][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 497.482669][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 497.488950][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 497.496045][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 497.501268][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 497.506599][ C1] ? hw_scan_work+0xf40/0xf40 [ 497.511352][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 497.516503][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 497.522628][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 497.527901][ C1] handle_softirqs+0x280/0x820 [ 497.532952][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 497.537734][ C1] ? do_softirq+0x180/0x180 [ 497.542342][ C1] __irq_exit_rcu+0xc7/0x190 [ 497.546982][ C1] ? irq_exit_rcu+0x20/0x20 [ 497.551531][ C1] irq_exit_rcu+0x9/0x20 [ 497.555968][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 497.561733][ C1] [ 497.564763][ C1] [ 497.567707][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 497.573698][ C1] RIP: 0010:handle_mm_fault+0xb0/0x4920 [ 497.579353][ C1] Code: f3 f3 f3 f3 48 89 84 24 b0 00 00 00 66 42 c7 44 28 16 f3 f3 e8 d1 11 bd ff 4d 8d 74 24 10 4c 89 f0 48 c1 e8 03 48 89 44 24 10 <42> 80 3c 28 00 74 08 4c 89 f7 e8 b1 6a 14 00 49 8b 06 48 89 84 24 [ 497.599072][ C1] RSP: 0018:ffffc9000b477940 EFLAGS: 00000a06 [ 497.605172][ C1] RAX: 1ffff1100ec24422 RBX: 0000000000000014 RCX: 0000000000080000 [ 497.613525][ C1] RDX: ffffc90018b61000 RSI: 000000000007ffff RDI: 0000000000080000 [ 497.621518][ C1] RBP: ffffc9000b477b10 R08: ffffffff8e4a856f R09: 1ffffffff1c950ad [ 497.629502][ C1] R10: dffffc0000000000 R11: fffffbfff1c950ae R12: ffff888076122100 [ 497.637503][ C1] R13: dffffc0000000000 R14: ffff888076122110 R15: 0000000000000014 [ 497.645596][ C1] ? follow_page_pte+0x66b/0x1a70 [ 497.650650][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 497.655725][ C1] ? numa_migrate_prep+0x350/0x350 [ 497.660873][ C1] ? follow_page_pte+0x6fb/0x1a70 [ 497.665935][ C1] ? __might_sleep+0xe0/0xe0 [ 497.670550][ C1] ? pmd_lock+0x60/0x60 [ 497.674755][ C1] __get_user_pages+0x5ea/0x1470 [ 497.680018][ C1] ? mtree_destroy+0x30/0x30 [ 497.684631][ C1] ? populate_vma_page_range+0x370/0x370 [ 497.690313][ C1] populate_vma_page_range+0x2b6/0x370 [ 497.696337][ C1] ? fixup_user_fault+0x710/0x710 [ 497.701487][ C1] ? userfaultfd_unmap_complete+0x279/0x2d0 [ 497.707586][ C1] ? down_read+0x1ac/0x2e0 [ 497.712051][ C1] __mm_populate+0x24c/0x380 [ 497.716671][ C1] ? faultin_page_range+0x8f0/0x8f0 [ 497.721921][ C1] ? up_write+0x1c3/0x410 [ 497.726266][ C1] vm_mmap_pgoff+0x2e7/0x400 [ 497.730896][ C1] ? account_locked_vm+0x210/0x210 [ 497.736072][ C1] ? ksys_mmap_pgoff+0xea/0x700 [ 497.740953][ C1] ? __x64_sys_mmap+0x7a/0x130 [ 497.745767][ C1] do_syscall_64+0x55/0xb0 [ 497.750414][ C1] ? clear_bhb_loop+0x40/0x90 [ 497.755252][ C1] ? clear_bhb_loop+0x40/0x90 [ 497.759961][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.765923][ C1] RIP: 0033:0x7f7dec38eec9 [ 497.770392][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.790206][ C1] RSP: 002b:00007f7ded2aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 497.798651][ C1] RAX: ffffffffffffffda RBX: 00007f7dec5e5fa0 RCX: 00007f7dec38eec9 [ 497.806664][ C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 497.814917][ C1] RBP: 00007f7dec411f91 R08: ffffffffffffffff R09: 0000000000000000 [ 497.823040][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 497.831037][ C1] R13: 00007f7dec5e6038 R14: 00007f7dec5e5fa0 R15: 00007ffd1078b878 [ 497.839054][ C1] [ 497.842241][ C1] Kernel Offset: disabled [ 497.846642][ C1] Rebooting in 86400 seconds..