last executing test programs: 21.965914342s ago: executing program 0 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(0x0, 0x80ff, 0x88) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffff81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x4001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fanotify_init(0xf02, 0x2) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_mark(r5, 0x105, 0x4800003a, r6, 0x0) io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x200d, 0x80, 0x3, 0x0, 0x0, r6}) getpgid(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "68c4502393926b50", "09f700", "1ab6c0ff"}, 0x28) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x400c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) 14.739105485s ago: executing program 2 (id=80): fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fchdir(0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 14.639015325s ago: executing program 0 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1be14000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(r1, &(0x7f0000000540)=0x0, 0x0) r3 = timerfd_create(0x8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x20, &(0x7f0000000880)={&(0x7f0000000700)=""/196, 0xc4, 0x0, &(0x7f0000000800)=""/102, 0x66}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r4, 0x4) timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2805cbc, 0x0) 12.135033441s ago: executing program 0 (id=82): io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000100)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@codepage={'codepage', 0x3d, 'koi8-ru'}}, {}, {@uid}, {@file_umask={'file_umask', 0x3d, 0x2b4}}, {@creator={'creator', 0x3d, "8c10b081"}}, {@file_umask={'file_umask', 0x3d, 0x2}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$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") getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 12.132511272s ago: executing program 1 (id=83): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbbd, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x8001, 0xfffffffa, 0x32314247, 0x5, 0xc, 0xf, 0x2, 0x5, 0x0, 0x8, 0x2, 0x5}}) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x19, 0x6, 0x7}, 0x10) getrlimit(0xd, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x1, 0xfffffffffffffffd, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) 11.977972977s ago: executing program 3 (id=84): openat$sndseq(0xffffffffffffff9c, 0x0, 0x4500) r0 = socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004044, 0x0, 0x0) shmget(0x0, 0x2000, 0x479d3507544a0730, &(0x7f0000ffd000/0x2000)=nil) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 9.734916609s ago: executing program 2 (id=85): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/fscaps', 0x80001, 0xd1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) pread64(r4, &(0x7f0000000140)=""/170, 0xaa, 0x20000000000004) 9.041922347s ago: executing program 3 (id=86): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000b869000000000000040000008400000036000000850008007d0000002e616e628de645c9d4d59500000000000d00fdac1961443a8c23a7de6746a0642a331f41214d053786b35089b5e4ed84803cbf43da6448d280cab1534f1adc3b89991cd28472ba313ba74616684918d5935add3884028e1fad981bd346d34edea08cb069a6236852a3eb8e53e1c75bdbf45f1803309310eafc420000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) preadv(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x30, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x4, 0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x30}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf250100000004000780187abcf9d7163cb72f097480eb5ac804fa8b8a3d571144"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) landlock_restrict_self(0xffffffffffffffff, 0x0) 8.933933428s ago: executing program 1 (id=87): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0x2, 0x4a7, &(0x7f0000001140)="$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") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002040)) socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(0x0, 0x0, 0x36) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x7fffffffffff8, 0x0) rt_sigqueueinfo(0x0, 0x3c, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) 8.60231764s ago: executing program 2 (id=88): pipe2$9p(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host}, {@hyper}, 0x400, "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"}, 0x418, 0xfffffffe}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) io_submit(r5, 0x0, &(0x7f0000000240)) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f0000000100)={{0x3, @name="2b9040db9895e157243cff977f2f7d159acff04cb25ffe49358b754b91c0e8a3"}, 0x8, 0x3, 0x1}) dup3(r4, r2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) 8.19800968s ago: executing program 0 (id=89): r0 = socket$packet(0x11, 0x3, 0x300) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x37, 0x2, {0x1, 0x0, 0x2, 0x0, 0x6, 'minix\x00'}}, 0x24) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x18, &(0x7f0000000000), 0x1) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioprio_get$uid(0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="4797"], 0x50) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) syz_emit_ethernet(0x6a, &(0x7f0000000600)=ANY=[@ANYBLOB="e904a20000000180c200000008004500005c0000e0000011907800000000000000000000000000489078030000000300000054607aa823262351a6f6e9f2e160489ac596e374782d663c37122e715e3be2c4a90e74aff5bb5c6d00f4ebb1cba553081bb5cb4322d87d53"], 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r3) r4 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 7.018297566s ago: executing program 2 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1be14000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(r1, &(0x7f0000000540)=0x0, 0x0) r3 = timerfd_create(0x8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x20, &(0x7f0000000880)={&(0x7f0000000700)=""/196, 0xc4, 0x0, &(0x7f0000000800)=""/102, 0x66}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r4, 0x4) timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2805cbc, 0x0) 5.780424739s ago: executing program 2 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000080)='net/route\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020}, 0x2020) preadv(r4, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/93, 0x5d}], 0x1, 0x8, 0x5) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1ea, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) umount2(&(0x7f00000000c0)='./file1\x00', 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001680)=""/4091, 0xffb}, {0x0}], 0x2}}], 0x1, 0x12000, 0x0) 5.719404425s ago: executing program 0 (id=92): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02111743b60000040000002003b80f22bf0000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setreuid(0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.587837068s ago: executing program 1 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 4.328691992s ago: executing program 1 (id=94): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="186a33b0fa6cfb8215c76ecc5f8544c1e5010019"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc6b, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peekuser(0x3, r1, 0x4) unshare(0x8000000) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 3.536226081s ago: executing program 3 (id=95): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) 2.458059386s ago: executing program 1 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT=r1], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x6b929545a606890f) r2 = inotify_init() r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000084ffe4006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x76, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$usbmon(0x0, 0x400, 0x208000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000001c0)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1\x00'}}, 0x1e) ioctl$SNDRV_PCM_IOCTL_INFO(r3, 0x81204101, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc}) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 2.388577324s ago: executing program 3 (id=97): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @map_idx={0x18, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000340)=""/205, 0x41100, 0x4, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000600)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x2, 0x8, 0x9d7f}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x2, 0x1, 0x2002, 0xb}, {0x1, 0x1, 0x6, 0x3}], 0x10, 0x9}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.289423212s ago: executing program 3 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.076212493s ago: executing program 1 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1be14000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(r1, &(0x7f0000000540)=0x0, 0x0) r3 = timerfd_create(0x8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x20, &(0x7f0000000880)={&(0x7f0000000700)=""/196, 0xc4, 0x0, &(0x7f0000000800)=""/102, 0x66}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r4, 0x4) timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2805cbc, 0x0) 1.069143024s ago: executing program 0 (id=100): r0 = socket$packet(0x11, 0x3, 0x300) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x37, 0x2, {0x1, 0x0, 0x2, 0x0, 0x6, 'minix\x00'}}, 0x24) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x18, &(0x7f0000000000), 0x1) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioprio_get$uid(0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="4797"], 0x50) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) syz_emit_ethernet(0x6a, &(0x7f0000000600)=ANY=[@ANYBLOB="e904a20000000180c200000008004500005c0000e0000011907800000000000000000000000000489078030000000300000054607aa823262351a6f6e9f2e160489ac596e374782d663c37122e715e3be2c4a90e74aff5bb5c6d00f4ebb1cba553081bb5cb4322d87d53"], 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r3) r4 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 121.754678ms ago: executing program 2 (id=101): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f00000002c0)={[{@grpquota}]}, 0x3, 0x26d, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="000000004c900200dfff00000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000100000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 0s ago: executing program 3 (id=102): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) sched_setscheduler(0x0, 0x2, 0x0) creat(&(0x7f0000000e00)='./file0\x00', 0xc) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000200), 0x0, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 71.324309][ T5776] cgroup: Unknown subsys name 'net' [ 71.463599][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.994981][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.650316][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.658502][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.667513][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.675222][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.683816][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.691591][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.699156][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.708446][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.716688][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.718060][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.727459][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.739086][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.748222][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.749667][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.756403][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.763929][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.772728][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.777417][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.785389][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.790753][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.798301][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.806109][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.824858][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.832323][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.330872][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 75.374516][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 75.406767][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 75.453279][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 75.586335][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.593503][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.601198][ T5788] bridge_slave_0: entered allmulticast mode [ 75.608771][ T5788] bridge_slave_0: entered promiscuous mode [ 75.629701][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.637008][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.644139][ T5787] bridge_slave_0: entered allmulticast mode [ 75.651652][ T5787] bridge_slave_0: entered promiscuous mode [ 75.689297][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.696470][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.703627][ T5788] bridge_slave_1: entered allmulticast mode [ 75.711026][ T5788] bridge_slave_1: entered promiscuous mode [ 75.718060][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.725182][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.733018][ T5787] bridge_slave_1: entered allmulticast mode [ 75.740030][ T5787] bridge_slave_1: entered promiscuous mode [ 75.803843][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.811311][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.818647][ T5786] bridge_slave_0: entered allmulticast mode [ 75.825577][ T5786] bridge_slave_0: entered promiscuous mode [ 75.834315][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.841669][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.849489][ T5785] bridge_slave_0: entered allmulticast mode [ 75.856814][ T5785] bridge_slave_0: entered promiscuous mode [ 75.877350][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.886912][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.894050][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.901896][ T5786] bridge_slave_1: entered allmulticast mode [ 75.908833][ T5786] bridge_slave_1: entered promiscuous mode [ 75.915600][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.922994][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.930326][ T5785] bridge_slave_1: entered allmulticast mode [ 75.937582][ T5785] bridge_slave_1: entered promiscuous mode [ 75.947868][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.959163][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.017143][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.040150][ T5787] team0: Port device team_slave_0 added [ 76.049246][ T5787] team0: Port device team_slave_1 added [ 76.079440][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.117473][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.128978][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.154322][ T5788] team0: Port device team_slave_0 added [ 76.175075][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.207741][ T5788] team0: Port device team_slave_1 added [ 76.214556][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.221796][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.247884][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.281796][ T5785] team0: Port device team_slave_0 added [ 76.290693][ T5785] team0: Port device team_slave_1 added [ 76.310286][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.318250][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.345057][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.360538][ T5786] team0: Port device team_slave_0 added [ 76.369792][ T5786] team0: Port device team_slave_1 added [ 76.430526][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.437900][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.463963][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.476561][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.483533][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.509610][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.523715][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.530810][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.557349][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.581722][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.588861][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.614827][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.651545][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.658607][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.685201][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.699411][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.706442][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.732396][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.746764][ T5797] Bluetooth: hci3: command tx timeout [ 76.764212][ T5787] hsr_slave_0: entered promiscuous mode [ 76.770878][ T5787] hsr_slave_1: entered promiscuous mode [ 76.825932][ T5797] Bluetooth: hci2: command tx timeout [ 76.826147][ T5790] Bluetooth: hci1: command tx timeout [ 76.850669][ T5785] hsr_slave_0: entered promiscuous mode [ 76.857151][ T5785] hsr_slave_1: entered promiscuous mode [ 76.863386][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.871373][ T5785] Cannot create hsr debugfs directory [ 76.906168][ T5790] Bluetooth: hci0: command tx timeout [ 76.932266][ T5788] hsr_slave_0: entered promiscuous mode [ 76.939291][ T5788] hsr_slave_1: entered promiscuous mode [ 76.945529][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.954102][ T5788] Cannot create hsr debugfs directory [ 77.001061][ T5786] hsr_slave_0: entered promiscuous mode [ 77.007922][ T5786] hsr_slave_1: entered promiscuous mode [ 77.014200][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.022463][ T5786] Cannot create hsr debugfs directory [ 77.392764][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.408264][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.419491][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.430169][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.503973][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.521696][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.533805][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.561384][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.621561][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.645457][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.658350][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.671004][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.739766][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.800542][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.811506][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.821714][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.848853][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.866603][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.911478][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.918856][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.938714][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.945909][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.991940][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.013797][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.044460][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.063205][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.095500][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.102683][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.112185][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.119364][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.148164][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.155337][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.171241][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.178438][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.320239][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.405239][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.455261][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.462622][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.483725][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.490976][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.802889][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.827947][ T5790] Bluetooth: hci3: command tx timeout [ 78.895019][ T5785] veth0_vlan: entered promiscuous mode [ 78.906297][ T5790] Bluetooth: hci2: command tx timeout [ 78.911751][ T5790] Bluetooth: hci1: command tx timeout [ 78.939626][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.953696][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.979989][ T5785] veth1_vlan: entered promiscuous mode [ 78.986070][ T5790] Bluetooth: hci0: command tx timeout [ 79.057577][ T5787] veth0_vlan: entered promiscuous mode [ 79.073791][ T5787] veth1_vlan: entered promiscuous mode [ 79.123803][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.153440][ T5785] veth0_macvtap: entered promiscuous mode [ 79.166810][ T5786] veth0_vlan: entered promiscuous mode [ 79.182145][ T5785] veth1_macvtap: entered promiscuous mode [ 79.208808][ T5786] veth1_vlan: entered promiscuous mode [ 79.222655][ T5787] veth0_macvtap: entered promiscuous mode [ 79.235335][ T5787] veth1_macvtap: entered promiscuous mode [ 79.273921][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.301737][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.322612][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.332270][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.341655][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.350592][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.383450][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.394411][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.409375][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.435086][ T5788] veth0_vlan: entered promiscuous mode [ 79.441984][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.452801][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.464261][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.477139][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.486326][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.495047][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.503910][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.544587][ T5788] veth1_vlan: entered promiscuous mode [ 79.561662][ T5786] veth0_macvtap: entered promiscuous mode [ 79.601383][ T5786] veth1_macvtap: entered promiscuous mode [ 79.700641][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.711117][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.733722][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.747237][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.758793][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.769433][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.781588][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.790011][ T5788] veth0_macvtap: entered promiscuous mode [ 79.839100][ T5788] veth1_macvtap: entered promiscuous mode [ 79.847165][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.859044][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.871192][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.882026][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.893893][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.906195][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.914938][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.923840][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.932631][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.950526][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.961110][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.982569][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.001621][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.036480][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.047273][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.058515][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.069618][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.079800][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.090516][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.102983][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.125221][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.133813][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.155568][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.167389][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.178054][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.189450][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.199647][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.210487][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.222156][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.258243][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.279936][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.288780][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.297644][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.413068][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.433385][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.512782][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.532923][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.657074][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.698298][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.840203][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.851372][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.882165][ T5877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 80.906394][ T5790] Bluetooth: hci3: command tx timeout [ 80.972490][ T5879] syz.2.3[5879]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.996806][ T5790] Bluetooth: hci1: command tx timeout [ 80.997233][ T5797] Bluetooth: hci2: command tx timeout [ 81.009975][ T5879] loop2: detected capacity change from 0 to 256 [ 81.066716][ T5797] Bluetooth: hci0: command tx timeout [ 81.496257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 81.496346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 81.505006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.598040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 81.625905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 81.700911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.701065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.803339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.803507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.905246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 81.906063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 83.283100][ T5797] Bluetooth: hci3: command tx timeout [ 83.283125][ T5790] Bluetooth: hci1: command tx timeout [ 83.289212][ T5799] Bluetooth: hci2: command tx timeout [ 83.293989][ T5793] Bluetooth: hci0: command tx timeout [ 83.655405][ T5893] loop1: detected capacity change from 0 to 512 [ 83.713979][ T5893] ======================================================= [ 83.713979][ T5893] WARNING: The mand mount option has been deprecated and [ 83.713979][ T5893] and is ignored by this kernel. Remove the mand [ 83.713979][ T5893] option from the mount to silence this warning. [ 83.713979][ T5893] ======================================================= [ 83.980588][ T5893] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.988120][ T5893] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.7: iget: bad extended attribute block 1 [ 84.002362][ T5893] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.7: couldn't read orphan inode 15 (err -117) [ 84.790296][ T5899] input: syz1 as /devices/virtual/input/input5 [ 84.816428][ T5893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.965716][ T5899] loop2: detected capacity change from 0 to 128 [ 85.992592][ T28] audit: type=1800 audit(1760455846.679:2): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8" name="file1" dev="loop2" ino=1048594 res=0 errno=0 [ 86.076556][ T5899] syz.2.8: attempt to access beyond end of device [ 86.076556][ T5899] loop2: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 87.127208][ T1185] cfg80211: failed to load regulatory.db [ 87.818458][ T5918] loop0: detected capacity change from 0 to 16 [ 89.800038][ T5918] erofs: (device loop0): mounted with root inode @ nid 36. [ 89.815117][ T5916] syz.0.11: attempt to access beyond end of device [ 89.815117][ T5916] loop0: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 90.485489][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.287903][ T5942] loop1: detected capacity change from 0 to 256 [ 92.845381][ T5946] loop1: detected capacity change from 0 to 2048 [ 92.926461][ T5946] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.385498][ T5950] Cannot find set identified by id 65534 to match [ 93.936079][ T5952] input: syz1 as /devices/virtual/input/input6 [ 94.076957][ T5952] loop0: detected capacity change from 0 to 128 [ 95.083858][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 96.316843][ T28] audit: type=1800 audit(1760455856.999:3): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20" name="file1" dev="loop0" ino=1048597 res=0 errno=0 [ 96.325474][ T5952] syz.0.20: attempt to access beyond end of device [ 96.325474][ T5952] loop0: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 96.956602][ T5975] loop3: detected capacity change from 0 to 16 [ 97.054195][ T5975] erofs: (device loop3): mounted with root inode @ nid 36. [ 97.073965][ T5975] syz.3.22: attempt to access beyond end of device [ 97.073965][ T5975] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 100.549073][ T5995] loop2: detected capacity change from 0 to 256 [ 100.943171][ T5997] loop3: detected capacity change from 0 to 2048 [ 101.053320][ T5997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.431836][ T5998] sched: RT throttling activated [ 102.442426][ T6002] Cannot find set identified by id 65534 to match [ 102.740057][ T6000] loop0: detected capacity change from 0 to 2048 [ 102.861727][ T6003] loop1: detected capacity change from 0 to 512 [ 102.917667][ T6003] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.967272][ T6000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.990725][ T6003] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.24: iget: bad extended attribute block 1 [ 103.134479][ T6003] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.24: couldn't read orphan inode 15 (err -117) [ 103.353144][ T6003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 103.796206][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 105.736506][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35'. [ 105.851097][ T6023] input: syz1 as /devices/virtual/input/input7 [ 106.035047][ T6027] loop3: detected capacity change from 0 to 128 [ 106.043353][ T6023] loop2: detected capacity change from 0 to 128 [ 106.608980][ T28] audit: type=1800 audit(1760455867.309:4): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.34" name="file1" dev="loop2" ino=1048600 res=0 errno=0 [ 106.714264][ T6023] syz.2.34: attempt to access beyond end of device [ 106.714264][ T6023] loop2: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 107.714678][ T6033] loop2: detected capacity change from 0 to 16 [ 108.547650][ T6033] erofs: (device loop2): mounted with root inode @ nid 36. [ 108.560669][ T6032] syz.2.38: attempt to access beyond end of device [ 108.560669][ T6032] loop2: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 109.056327][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.246520][ T6048] loop2: detected capacity change from 0 to 256 [ 113.519158][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.44'. [ 115.335256][ T6065] loop3: detected capacity change from 0 to 2048 [ 115.375850][ T6065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.783567][ T6071] Cannot find set identified by id 65534 to match [ 118.401156][ T6083] loop3: detected capacity change from 0 to 128 [ 121.828997][ T6093] loop3: detected capacity change from 0 to 256 [ 121.923748][ T6096] loop2: detected capacity change from 0 to 128 [ 122.578540][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 122.816106][ T6104] loop2: detected capacity change from 0 to 2048 [ 122.873974][ T6104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.395477][ T6106] Cannot find set identified by id 65534 to match [ 125.796067][ T6122] loop0: detected capacity change from 0 to 128 [ 125.926908][ T6125] 8021q: VLANs not supported on ip6gre0 [ 127.458557][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.64'. [ 127.729083][ T6136] loop3: detected capacity change from 0 to 128 [ 127.939566][ T6133] loop1: detected capacity change from 0 to 32768 [ 128.291470][ T6145] loop3: detected capacity change from 0 to 128 [ 128.311069][ T6133] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.550958][ T6133] XFS (loop1): Ending clean mount [ 129.630736][ T6133] XFS (loop1): Quotacheck needed: Please wait. [ 129.941883][ T6155] loop3: detected capacity change from 0 to 16 [ 129.997655][ T6155] erofs: (device loop3): mounted with root inode @ nid 36. [ 130.014982][ T6155] syz.3.68: attempt to access beyond end of device [ 130.014982][ T6155] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 130.735972][ T6133] XFS (loop1): Quotacheck: Done. [ 130.891204][ T5785] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 133.034843][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.401377][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.661434][ T6166] loop3: detected capacity change from 0 to 128 [ 133.776728][ T6168] input: syz1 as /devices/virtual/input/input8 [ 133.961979][ T6170] random: crng reseeded on system resumption [ 134.804433][ T6169] loop2: detected capacity change from 0 to 128 [ 135.106892][ T28] audit: type=1800 audit(1760455895.809:5): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.73" name="file1" dev="loop2" ino=1048606 res=0 errno=0 [ 135.215641][ T6168] syz.2.73: attempt to access beyond end of device [ 135.215641][ T6168] loop2: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 135.565991][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.75'. [ 138.466842][ T5173] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.481228][ T6199] loop1: detected capacity change from 0 to 16 [ 139.321981][ T6199] erofs: (device loop1): mounted with root inode @ nid 36. [ 139.337256][ T6195] syz.1.79: attempt to access beyond end of device [ 139.337256][ T6195] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 140.716887][ T5173] usb 4-1: device descriptor read/64, error -71 [ 141.389687][ T6207] loop1: detected capacity change from 0 to 4096 [ 141.456872][ T6207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.808054][ T6207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.557496][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.85'. [ 144.046626][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.222174][ T6220] loop1: detected capacity change from 0 to 512 [ 144.261028][ T6220] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.87: bad orphan inode 13 [ 144.281539][ T6223] loop0: detected capacity change from 0 to 64 [ 144.305868][ T6220] ext4_test_bit(bit=12, block=4) = 1 [ 144.337646][ T6220] is_bad_inode(inode)=0 [ 144.360242][ T6220] NEXT_ORPHAN(inode)=0 [ 144.377566][ T6220] max_ino=32 [ 144.380873][ T6220] i_nlink=1 [ 144.385409][ T6220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.415482][ T6225] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.705910][ T6227] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.87: Unrecognised inode hash code 20 [ 144.721600][ T6227] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.87: Corrupt directory, running e2fsck is recommended [ 144.798610][ T6227] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.87: corrupted in-inode xattr: e_value out of bounds [ 145.192718][ T6219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.262824][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.455957][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 147.819695][ T9] usb 1-1: device descriptor read/64, error -71 [ 148.458086][ T6247] netlink: zone id is out of range [ 148.463573][ T6247] netlink: get zone limit has 8 unknown bytes [ 148.477792][ T6247] nbd: must specify a size in bytes for the device [ 149.025934][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.419355][ T9] usb 1-1: device descriptor read/64, error -71 [ 149.708060][ T9] usb usb1-port1: attempt power cycle [ 150.601730][ T6267] loop1: detected capacity change from 0 to 512 [ 150.730158][ T6267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.742957][ T6267] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.055839][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 151.731440][ T9] usb 1-1: device descriptor read/8, error -71 [ 152.062031][ T6281] loop2: detected capacity change from 0 to 16 [ 152.406760][ T6281] erofs: (device loop2): mounted with root inode @ nid 36. [ 152.423581][ T6280] syz.2.91: attempt to access beyond end of device [ 152.423581][ T6280] loop2: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 152.514313][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.896720][ T6287] loop2: detected capacity change from 0 to 128 [ 152.993575][ T6287] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 153.142346][ T6287] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.019671][ C0] ------------[ cut here ]------------ [ 155.025497][ C0] WARNING: CPU: 0 PID: 6299 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 155.035574][ C0] Modules linked in: [ 155.039518][ C0] CPU: 0 PID: 6299 Comm: syz.1.99 Not tainted syzkaller #0 [ 155.046744][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.056836][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 155.063179][ C0] Code: 24 4c 89 e7 e8 9e 22 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 99 fd 96 f7 0f 0b e9 f6 f7 ff ff e8 8d fd 96 f7 <0f> 0b e9 48 fb ff ff e8 81 fd 96 f7 48 c7 c7 60 fd 23 8e 4c 89 e6 [ 155.082842][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 155.088945][ C0] RAX: ffffffff89ee8d43 RBX: ffffffff89ee7b46 RCX: ffff888022cc9e00 [ 155.096949][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.104954][ C0] RBP: 0000000000000000 R08: ffff888022cc9e00 R09: 0000000000000003 [ 155.113009][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888059d123c0 [ 155.121039][ C0] R13: dffffc0000000000 R14: ffff888059d128b0 R15: ffff88805a5b1024 [ 155.129056][ C0] FS: 00007f068aa1a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 155.138018][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.144614][ C0] CR2: 000000110c32401c CR3: 000000002fd98000 CR4: 00000000003506f0 [ 155.152637][ C0] Call Trace: [ 155.155958][ C0] [ 155.158826][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 155.164395][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 155.169889][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 155.176696][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 155.182262][ C0] __iterate_interfaces+0x243/0x500 [ 155.187533][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 155.193821][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 155.201067][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 155.207356][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 155.214406][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 155.219648][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 155.224870][ C0] ? hw_scan_work+0xf40/0xf40 [ 155.229664][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 155.234803][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 155.240933][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 155.246099][ C0] handle_softirqs+0x280/0x820 [ 155.250966][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 155.255806][ C0] ? do_softirq+0x180/0x180 [ 155.260347][ C0] __irq_exit_rcu+0xc7/0x190 [ 155.264951][ C0] ? irq_exit_rcu+0x20/0x20 [ 155.269497][ C0] irq_exit_rcu+0x9/0x20 [ 155.273771][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 155.279461][ C0] [ 155.282406][ C0] [ 155.285354][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.291409][ C0] RIP: 0010:lock_is_held_type+0x50/0x190 [ 155.297088][ C0] Code: 3d 10 4c dc 03 00 0f 84 03 01 00 00 65 8b 05 8f 1d 94 75 85 c0 0f 85 f4 00 00 00 65 48 8b 1d 57 4b 95 75 83 bb dc 0a 00 00 00 <0f> 85 df 00 00 00 41 89 f7 49 89 fe 48 c7 04 24 00 00 00 00 9c 8f [ 155.317078][ C0] RSP: 0018:ffffc9000b7e7078 EFLAGS: 00000246 [ 155.323156][ C0] RAX: 0000000000000000 RBX: ffff888022cc9e00 RCX: ffff888022cc9e00 [ 155.331171][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8cd2ff80 [ 155.339179][ C0] RBP: 00000000ffffffff R08: ffffea0001720277 R09: 1ffffd40002e404e [ 155.347183][ C0] R10: dffffc0000000000 R11: fffff940002e404f R12: 0000000000001000 [ 155.355186][ C0] R13: dffffc0000000000 R14: 0000000000001000 R15: 0000000000001000 [ 155.363253][ C0] __might_resched+0xa7/0x610 [ 155.367992][ C0] ? __might_sleep+0xe0/0xe0 [ 155.372635][ C0] ? folio_unlock+0x118/0x2e0 [ 155.377372][ C0] generic_perform_write+0x3c5/0x5b0 [ 155.382683][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 155.388552][ C0] ? down_write+0x162/0x1f0 [ 155.393109][ C0] ? file_update_time+0x98/0x1b0 [ 155.398126][ C0] shmem_file_write_iter+0xfb/0x120 [ 155.403339][ C0] __kernel_write_iter+0x274/0x670 [ 155.408487][ C0] ? vfs_read+0x920/0x920 [ 155.412866][ C0] ? get_dump_page+0x14d/0x200 [ 155.417682][ C0] ? __asan_memset+0x22/0x40 [ 155.422281][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 155.426994][ C0] dump_user_range+0x3f6/0x800 [ 155.431797][ C0] ? dump_skip+0x40/0x40 [ 155.436090][ C0] ? dump_emit+0x78/0xe0 [ 155.440359][ C0] ? dump_emit+0xa6/0xe0 [ 155.444620][ C0] ? elf_core_dump+0x2b23/0x36e0 [ 155.449594][ C0] elf_core_dump+0x3114/0x36e0 [ 155.454383][ C0] ? load_elf_binary+0x2700/0x2700 [ 155.459555][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 155.464591][ C0] ? verify_lock_unused+0x140/0x140 [ 155.469872][ C0] ? mas_next_slot+0x94f/0x980 [ 155.474726][ C0] ? up_write+0x1c3/0x410 [ 155.479128][ C0] ? rcu_read_lock_any_held+0xb4/0x120 [ 155.484604][ C0] ? 0xffffffffff600000 [ 155.488851][ C0] do_coredump+0x1755/0x2480 [ 155.493507][ C0] ? nfs_ssc_unregister+0x30/0x30 [ 155.498693][ C0] ? lock_chain_count+0x20/0x20 [ 155.503581][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.508906][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 155.514122][ C0] get_signal+0x1133/0x1400 [ 155.518685][ C0] arch_do_signal_or_restart+0x96/0x780 [ 155.524256][ C0] ? get_sigframe_size+0x20/0x20 [ 155.529227][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 155.535233][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 155.540739][ C0] exit_to_user_mode_loop+0x70/0x110 [ 155.546061][ C0] exit_to_user_mode_prepare+0xf6/0x180 [ 155.551621][ C0] irqentry_exit_to_user_mode+0x9/0x40 [ 155.557144][ C0] exc_page_fault+0x8f/0x110 [ 155.561756][ C0] asm_exc_page_fault+0x26/0x30 [ 155.566635][ C0] RIP: 0033:0x7f0689b8eed1 [ 155.571057][ C0] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 155.590716][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 155.596838][ C0] RAX: 0000000000000000 RBX: 00007f0689de6090 RCX: 00007f0689b8eec9 [ 155.604864][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 155.612903][ C0] RBP: 00007f0689c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 155.620910][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 155.628912][ C0] R13: 00007f0689de6128 R14: 00007f0689de6090 R15: 00007ffde8070818 [ 155.636936][ C0] [ 155.639988][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.647264][ C0] CPU: 0 PID: 6299 Comm: syz.1.99 Not tainted syzkaller #0 [ 155.654462][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.664523][ C0] Call Trace: [ 155.667899][ C0] [ 155.670745][ C0] dump_stack_lvl+0x16c/0x230 [ 155.675439][ C0] ? show_regs_print_info+0x20/0x20 [ 155.680653][ C0] ? load_image+0x3b0/0x3b0 [ 155.685182][ C0] panic+0x2c0/0x710 [ 155.689090][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 155.693621][ C0] __warn+0x2e0/0x470 [ 155.697616][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 155.703428][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 155.709155][ C0] report_bug+0x2be/0x4f0 [ 155.713499][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 155.719260][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 155.725159][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 155.730896][ C0] handle_bug+0xcf/0x120 [ 155.735152][ C0] exc_invalid_op+0x1a/0x50 [ 155.739765][ C0] asm_exc_invalid_op+0x1a/0x20 [ 155.744629][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 155.750962][ C0] Code: 24 4c 89 e7 e8 9e 22 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 99 fd 96 f7 0f 0b e9 f6 f7 ff ff e8 8d fd 96 f7 <0f> 0b e9 48 fb ff ff e8 81 fd 96 f7 48 c7 c7 60 fd 23 8e 4c 89 e6 [ 155.770675][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 155.776763][ C0] RAX: ffffffff89ee8d43 RBX: ffffffff89ee7b46 RCX: ffff888022cc9e00 [ 155.784738][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.792802][ C0] RBP: 0000000000000000 R08: ffff888022cc9e00 R09: 0000000000000003 [ 155.800781][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888059d123c0 [ 155.808781][ C0] R13: dffffc0000000000 R14: ffff888059d128b0 R15: ffff88805a5b1024 [ 155.816763][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 155.822319][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 155.828051][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 155.833774][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 155.839333][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 155.844803][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 155.851579][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 155.857145][ C0] __iterate_interfaces+0x243/0x500 [ 155.862452][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 155.868707][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 155.875917][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 155.882169][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 155.889205][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 155.894415][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 155.899643][ C0] ? hw_scan_work+0xf40/0xf40 [ 155.904333][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 155.909451][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 155.915533][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 155.920660][ C0] handle_softirqs+0x280/0x820 [ 155.925430][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 155.930225][ C0] ? do_softirq+0x180/0x180 [ 155.934754][ C0] __irq_exit_rcu+0xc7/0x190 [ 155.939361][ C0] ? irq_exit_rcu+0x20/0x20 [ 155.943909][ C0] irq_exit_rcu+0x9/0x20 [ 155.948192][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 155.953844][ C0] [ 155.956780][ C0] [ 155.959712][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.965697][ C0] RIP: 0010:lock_is_held_type+0x50/0x190 [ 155.971352][ C0] Code: 3d 10 4c dc 03 00 0f 84 03 01 00 00 65 8b 05 8f 1d 94 75 85 c0 0f 85 f4 00 00 00 65 48 8b 1d 57 4b 95 75 83 bb dc 0a 00 00 00 <0f> 85 df 00 00 00 41 89 f7 49 89 fe 48 c7 04 24 00 00 00 00 9c 8f [ 155.990967][ C0] RSP: 0018:ffffc9000b7e7078 EFLAGS: 00000246 [ 155.997045][ C0] RAX: 0000000000000000 RBX: ffff888022cc9e00 RCX: ffff888022cc9e00 [ 156.005019][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8cd2ff80 [ 156.013004][ C0] RBP: 00000000ffffffff R08: ffffea0001720277 R09: 1ffffd40002e404e [ 156.020982][ C0] R10: dffffc0000000000 R11: fffff940002e404f R12: 0000000000001000 [ 156.028984][ C0] R13: dffffc0000000000 R14: 0000000000001000 R15: 0000000000001000 [ 156.036981][ C0] __might_resched+0xa7/0x610 [ 156.041674][ C0] ? __might_sleep+0xe0/0xe0 [ 156.046365][ C0] ? folio_unlock+0x118/0x2e0 [ 156.051083][ C0] generic_perform_write+0x3c5/0x5b0 [ 156.056415][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 156.062235][ C0] ? down_write+0x162/0x1f0 [ 156.066761][ C0] ? file_update_time+0x98/0x1b0 [ 156.071710][ C0] shmem_file_write_iter+0xfb/0x120 [ 156.076918][ C0] __kernel_write_iter+0x274/0x670 [ 156.082044][ C0] ? vfs_read+0x920/0x920 [ 156.086410][ C0] ? get_dump_page+0x14d/0x200 [ 156.091285][ C0] ? __asan_memset+0x22/0x40 [ 156.095899][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 156.100597][ C0] dump_user_range+0x3f6/0x800 [ 156.105398][ C0] ? dump_skip+0x40/0x40 [ 156.109654][ C0] ? dump_emit+0x78/0xe0 [ 156.113950][ C0] ? dump_emit+0xa6/0xe0 [ 156.118207][ C0] ? elf_core_dump+0x2b23/0x36e0 [ 156.123241][ C0] elf_core_dump+0x3114/0x36e0 [ 156.128026][ C0] ? load_elf_binary+0x2700/0x2700 [ 156.133150][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 156.138188][ C0] ? verify_lock_unused+0x140/0x140 [ 156.143404][ C0] ? mas_next_slot+0x94f/0x980 [ 156.148308][ C0] ? up_write+0x1c3/0x410 [ 156.152673][ C0] ? rcu_read_lock_any_held+0xb4/0x120 [ 156.158151][ C0] ? 0xffffffffff600000 [ 156.162320][ C0] do_coredump+0x1755/0x2480 [ 156.166943][ C0] ? nfs_ssc_unregister+0x30/0x30 [ 156.171993][ C0] ? lock_chain_count+0x20/0x20 [ 156.176963][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.182183][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 156.187396][ C0] get_signal+0x1133/0x1400 [ 156.191926][ C0] arch_do_signal_or_restart+0x96/0x780 [ 156.197497][ C0] ? get_sigframe_size+0x20/0x20 [ 156.202471][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 156.208507][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 156.214007][ C0] exit_to_user_mode_loop+0x70/0x110 [ 156.219323][ C0] exit_to_user_mode_prepare+0xf6/0x180 [ 156.224892][ C0] irqentry_exit_to_user_mode+0x9/0x40 [ 156.230377][ C0] exc_page_fault+0x8f/0x110 [ 156.235011][ C0] asm_exc_page_fault+0x26/0x30 [ 156.239871][ C0] RIP: 0033:0x7f0689b8eed1 [ 156.244292][ C0] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 156.263914][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 156.269992][ C0] RAX: 0000000000000000 RBX: 00007f0689de6090 RCX: 00007f0689b8eec9 [ 156.277973][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 156.285950][ C0] RBP: 00007f0689c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 156.293930][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 156.301908][ C0] R13: 00007f0689de6128 R14: 00007f0689de6090 R15: 00007ffde8070818 [ 156.309898][ C0] [ 156.313277][ C0] Kernel Offset: disabled [ 156.317655][ C0] Rebooting in 86400 seconds..