last executing test programs: 16m16.555049447s ago: executing program 32 (id=1377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m38.667354715s ago: executing program 33 (id=1478): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xfe, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x183201, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x1) 15m18.881078525s ago: executing program 34 (id=1642): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xd8ed, 0x0, 0x2, 0x156}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x8591, 0x80, 0x3, 0x3d9}, &(0x7f0000000c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb470, 0x200, 0x1ffe, 0x10000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b98, 0x10000, 0x0, 0x30b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfb10, 0x10, 0x1, 0x1b4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc56e, 0x4000, 0x0, 0x30f}}], 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfff8, 0x4, 0x0, 0x0}}, 0x0) 13m40.289269376s ago: executing program 35 (id=1832): chdir(0x0) r0 = fanotify_init(0x10, 0x101000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x8000010, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) fanotify_mark(r0, 0x7e, 0x40000018, r1, 0x0) 13m11.42903067s ago: executing program 36 (id=1944): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x220408a, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d6b6f69382d752c636f6465706167653d3933322c696f636861727365743d6575632d6a702c747a3d5554432c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c6e66732c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c00416786a537fd"], 0x1, 0x377, &(0x7f0000000b40)="$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") rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 11m53.644826766s ago: executing program 37 (id=2363): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r1, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) write$ppp(r1, &(0x7f0000001e00)="cb", 0x1) fallocate(r2, 0x20, 0x4000, 0x8000) 11m48.796580096s ago: executing program 38 (id=2455): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x5, 0x4800003e, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) 10m8.514080688s ago: executing program 39 (id=2602): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) 9m58.446686157s ago: executing program 40 (id=2640): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) 9m54.69667842s ago: executing program 41 (id=2646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) 9m41.409303169s ago: executing program 42 (id=2664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, @usage=0x80000000000, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {0x10000, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0x6}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 9m22.838215469s ago: executing program 43 (id=2681): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/image_size', 0x200080, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x110000000097a9, 0x2) socket(0x400000000010, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0xcb9, 0xfffffffe, 0x7, 0x10001, 0xff000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 8m45.387179045s ago: executing program 44 (id=2741): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000240)=@x86={0x9, 0xb, 0x7f, 0x0, 0x2, 0x0, 0x3e, 0x7c, 0x82, 0x8, 0x1, 0x9, 0x0, 0x914d, 0x800, 0x1, 0x8, 0x8, 0x4, '\x00', 0x7f, 0x4f80}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) 8m28.717653548s ago: executing program 45 (id=2743): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) getpeername$netlink(r1, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m27.776048511s ago: executing program 46 (id=2745): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m22.101688922s ago: executing program 47 (id=2749): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6m28.036457065s ago: executing program 8 (id=2816): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000200)) r6 = dup2(r5, r5) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r6, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r6, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/102, 0x66, 0x0, 0x1, 0x2}}, 0xfffffeca) 6m25.562382326s ago: executing program 8 (id=2818): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f00000000c0), 0x1003) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_getattr(r2, &(0x7f0000000140)={0x38}, 0x38, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = userfaultfd(0x1) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x10) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r3, r4], 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) 6m20.720164526s ago: executing program 8 (id=2820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x70bd2b, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x80) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 6m3.784466786s ago: executing program 48 (id=2820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x70bd2b, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x80) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 5m21.146253451s ago: executing program 49 (id=2858): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r5, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r5, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/102, 0x66, 0x0, 0x1, 0x2}}, 0xfffffeca) 5m1.3840649s ago: executing program 7 (id=2884): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000240)=@x86={0x9, 0xb, 0x7f, 0x0, 0x2, 0x0, 0x3e, 0x7c, 0x82, 0x8, 0x1, 0x9, 0x0, 0x914d, 0x800, 0x1, 0x8, 0x8, 0x4, '\x00', 0x7f, 0x4f80}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 4m51.183910343s ago: executing program 7 (id=2887): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f00000000c0), 0x1003) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_getattr(r2, &(0x7f0000000140)={0x38}, 0x38, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[r3, 0xffffffffffffffff], 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) 4m50.191356857s ago: executing program 50 (id=2880): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r5) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) write$vhost_msg_v2(r6, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/102, 0x66, 0x0, 0x1, 0x2}}, 0xfffffeca) 4m50.151057088s ago: executing program 7 (id=2890): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m46.622301976s ago: executing program 7 (id=2894): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f00000000c0), 0x1003) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_getattr(r2, &(0x7f0000000140)={0x38}, 0x38, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r4 = userfaultfd(0x1) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x10) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r3, r4], 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) 4m42.234164264s ago: executing program 7 (id=2897): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f00000000c0), 0x1003) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_getattr(r1, &(0x7f0000000140)={0x38}, 0x38, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r3 = userfaultfd(0x1) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000180)=[r2, r3], 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) 4m41.18916644s ago: executing program 9 (id=2872): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000240)=@x86={0x9, 0xb, 0x7f, 0x0, 0x2, 0x0, 0x3e, 0x7c, 0x82, 0x8, 0x1, 0x9, 0x0, 0x914d, 0x800, 0x1, 0x8, 0x8, 0x4, '\x00', 0x7f, 0x4f80}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') 4m36.784449959s ago: executing program 9 (id=2901): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r5, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r5, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/102, 0x66, 0x0, 0x1, 0x2}}, 0xfffffeca) 4m32.383139628s ago: executing program 9 (id=2905): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfff9}]}) getpriority(0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) 4m31.973329318s ago: executing program 5 (id=2906): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r5) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r6, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r6, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/102, 0x66, 0x0, 0x1, 0x2}}, 0xfffffeca) 4m30.080189285s ago: executing program 7 (id=2909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x70bd2b, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x80) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) getpid() setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 4m29.929613799s ago: executing program 5 (id=2910): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r5) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r6, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r6, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/102, 0x66, 0x0, 0x1, 0x2}}, 0xfffffeca) 4m29.127965379s ago: executing program 5 (id=2911): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x81, 0x28}, 0x50) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r5, &(0x7f0000001000)=""/4085, 0xff5) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0x1000f1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x0, 0x8, 0x400b, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, &(0x7f0000000000)) 4m24.955077362s ago: executing program 5 (id=2912): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000240)=@x86={0x9, 0xb, 0x7f, 0x0, 0x2, 0x0, 0x3e, 0x7c, 0x82, 0x8, 0x1, 0x9, 0x0, 0x914d, 0x800, 0x1, 0x8, 0x8, 0x4, '\x00', 0x7f, 0x4f80}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 4m24.771616756s ago: executing program 9 (id=2914): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x81, 0x28}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000001380)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000ffffff7f000a90000000060a010400000000000000000a0004050900010073797a310000000064000480600001800a000100696e6e65720000005000028008000440000000172c0005800c0001007061796c6f6164001c00028008000340000000920800024000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) getdents(r4, &(0x7f0000001000)=""/4085, 0xff5) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0x1000f1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x0, 0x8, 0x400b, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) ioctl$COMEDI_DEVINFO(r5, 0x80b06401, &(0x7f0000000000)) 4m15.956082705s ago: executing program 5 (id=2916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x70bd2b, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x80) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) getpid() setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 4m13.749790599s ago: executing program 51 (id=2909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x70bd2b, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x80) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) getpid() setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 4m11.977688223s ago: executing program 9 (id=2918): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_getattr(r2, &(0x7f0000000140)={0x38}, 0x38, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r4 = userfaultfd(0x1) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x10) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r3, r4], 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) 4m8.838793211s ago: executing program 5 (id=2920): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000001c0)=0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x118, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xd}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x1d, 0x8, 0x0, 0x1, 0x5}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 4m8.826468951s ago: executing program 9 (id=2921): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000240)=@x86={0x9, 0xb, 0x7f, 0x0, 0x2, 0x0, 0x3e, 0x7c, 0x82, 0x8, 0x1, 0x9, 0x0, 0x914d, 0x800, 0x1, 0x8, 0x8, 0x4, '\x00', 0x7f, 0x4f80}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 3m52.248533061s ago: executing program 52 (id=2920): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000001c0)=0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x118, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xd}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x1d, 0x8, 0x0, 0x1, 0x5}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 3m51.732728834s ago: executing program 53 (id=2921): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000240)=@x86={0x9, 0xb, 0x7f, 0x0, 0x2, 0x0, 0x3e, 0x7c, 0x82, 0x8, 0x1, 0x9, 0x0, 0x914d, 0x800, 0x1, 0x8, 0x8, 0x4, '\x00', 0x7f, 0x4f80}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 3m26.524654058s ago: executing program 0 (id=2955): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f00000000c0), 0x1003) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r4 = userfaultfd(0x1) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x10) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r3, r4], 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) 3m25.6100542s ago: executing program 0 (id=2956): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000240)=@x86={0x9, 0xb, 0x7f, 0x0, 0x2, 0x0, 0x3e, 0x7c, 0x82, 0x8, 0x1, 0x9, 0x0, 0x914d, 0x800, 0x1, 0x8, 0x8, 0x4, '\x00', 0x7f, 0x4f80}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 3m17.456573922s ago: executing program 0 (id=2962): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_getattr(r2, &(0x7f0000000140)={0x38}, 0x38, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r4 = userfaultfd(0x1) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x10) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r3, r4], 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) 3m15.957410419s ago: executing program 0 (id=2963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) getpid() setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 3m9.054167961s ago: executing program 0 (id=2967): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r5, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r5, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/102, 0x66, 0x0, 0x1, 0x2}}, 0xfffffeca) 3m6.402002566s ago: executing program 0 (id=2969): syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) 3m2.901494523s ago: executing program 8 (id=2928): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/image_size', 0x200080, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x110000000097a9, 0x2) socket(0x400000000010, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 3m2.270438568s ago: executing program 8 (id=2975): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_getattr(r2, &(0x7f0000000140)={0x38}, 0x38, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r4 = userfaultfd(0x1) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x10) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r3, r4], 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) 3m1.211810084s ago: executing program 8 (id=2976): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000240)=@x86={0x9, 0xb, 0x7f, 0x0, 0x2, 0x0, 0x3e, 0x7c, 0x82, 0x8, 0x1, 0x9, 0x0, 0x914d, 0x800, 0x1, 0x8, 0x8, 0x4, '\x00', 0x7f, 0x4f80}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 2m49.809740507s ago: executing program 54 (id=2969): syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) 2m44.862151499s ago: executing program 55 (id=2976): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000240)=@x86={0x9, 0xb, 0x7f, 0x0, 0x2, 0x0, 0x3e, 0x7c, 0x82, 0x8, 0x1, 0x9, 0x0, 0x914d, 0x800, 0x1, 0x8, 0x8, 0x4, '\x00', 0x7f, 0x4f80}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 6.659215196s ago: executing program 4 (id=3809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004e00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.204861467s ago: executing program 4 (id=3815): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0b"], 0xe) 5.908560454s ago: executing program 4 (id=3819): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004d00)={0x14, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1c, 0xd601, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) 5.876396585s ago: executing program 3 (id=3820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000100)={0x1000, 0x8000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @flow_dissector}, 0x94) 5.700514359s ago: executing program 4 (id=3822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="050314fdd3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.543348363s ago: executing program 6 (id=3824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 5.323490979s ago: executing program 1 (id=3826): socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x0) epoll_create(0x5) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) close(0x4) 5.220679361s ago: executing program 6 (id=3828): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="002104000224000014000300626174616476300000000000000000000800040b000000001c0016801800018014000b"], 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x0) 4.882432839s ago: executing program 1 (id=3829): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0b"], 0xe) 4.750658663s ago: executing program 1 (id=3830): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="8c000000150041cc25bd7000ffdbdf250a108000", @ANYRES32=0x0, @ANYBLOB], 0x8c}}, 0x8c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r0, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000016c0)={0x18, 0x3f, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@generic='*']}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 4.718502383s ago: executing program 3 (id=3831): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.526430938s ago: executing program 3 (id=3832): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/19, 0x13}], 0x1, 0x0, 0x11000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 4.177272107s ago: executing program 2 (id=3833): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) writev(r0, &(0x7f0000000440)=[{0x0}], 0x1) 4.095883219s ago: executing program 2 (id=3834): unshare(0x22020600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 3.964695442s ago: executing program 2 (id=3835): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a080001010000000001090212000101008032090400"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) 830.23625ms ago: executing program 6 (id=3836): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf25ac1e000100000000000000000000000000000000000000000000ffffe0000002000000000002000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000010000000000000000000000000000020000000000000003000000000000000000000000000000000000000000000003000000000000000000000000200000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008000e"], 0x20}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 796.09347ms ago: executing program 4 (id=3837): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r0, 0x0, 0x0, 0x371daf00999c2bb4, &(0x7f0000000840)={0x2, 0x4e22, @broadcast}, 0x10) 771.290211ms ago: executing program 1 (id=3838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 673.860604ms ago: executing program 3 (id=3839): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32], 0x50) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001800010300000000000000000a800000ff0300060200000014000200fc0000000000000100000000000000011400050000000000000000000000ffffffffffff140001"], 0x58}}, 0x0) 659.177424ms ago: executing program 2 (id=3840): socket$inet6(0xa, 0x802, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x49cf75490397e68f) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20002, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r0, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) 553.825006ms ago: executing program 6 (id=3841): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x6}, 0xc, {0x440, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}) 478.506539ms ago: executing program 4 (id=3842): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000100)={0x1000, 0x8000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @flow_dissector}, 0x94) 425.50109ms ago: executing program 3 (id=3843): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 417.84965ms ago: executing program 1 (id=3844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000002c0)={0x20003, 0x0, {[0x5, 0x5, 0x20040004, 0x3, 0x8, 0x6, 0xffffffff]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 336.593142ms ago: executing program 2 (id=3845): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) writev(r0, &(0x7f0000000440)=[{0x0}], 0x1) 275.415143ms ago: executing program 6 (id=3846): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000000c0)="09fb05cd", 0x4}], 0x6}}], 0x1, 0x4044805) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'bond0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000080)=@can={{0x3, 0x1, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "1d97ee3d10e02311"}, 0x10}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) 141.203757ms ago: executing program 3 (id=3847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="050314fdd3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 40.345259ms ago: executing program 2 (id=3848): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="8c000000150041cc25bd7000ffdbdf250a108000", @ANYRES32=0x0, @ANYBLOB], 0x8c}}, 0x8c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r0, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000016c0)={0x18, 0x3f, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@generic='*']}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 16.19478ms ago: executing program 1 (id=3849): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x5, 0x3, 0x366d, 0x3}, 0x8) 0s ago: executing program 6 (id=3850): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) kernel console output (not intermixed with test programs): d pid=17581 comm="syz.4.2936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1215.872831][ T26] audit: type=1326 audit(1785367821.795:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17581 comm="syz.4.2936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1215.947501][ T26] audit: type=1326 audit(1785367821.795:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17581 comm="syz.4.2936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1215.980244][ T4539] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.044915][ T26] audit: type=1326 audit(1785367821.795:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17581 comm="syz.4.2936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1216.087450][ T26] audit: type=1326 audit(1785367821.795:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17581 comm="syz.4.2936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1216.113058][T17521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.120177][T17521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.186698][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 1216.206234][ T26] audit: type=1326 audit(1785367821.795:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17581 comm="syz.4.2936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1216.207232][T17521] device bridge_slave_0 entered promiscuous mode [ 1216.231170][ T26] audit: type=1326 audit(1785367821.795:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17581 comm="syz.4.2936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1216.261682][ C0] vkms_vblank_simulate: vblank timer overrun [ 1216.275182][T17521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.289455][ T26] audit: type=1326 audit(1785367821.795:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17581 comm="syz.4.2936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1216.296674][T17521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.313714][ C0] vkms_vblank_simulate: vblank timer overrun [ 1216.315465][ T26] audit: type=1326 audit(1785367821.795:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17581 comm="syz.4.2936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1216.334783][T17521] device bridge_slave_1 entered promiscuous mode [ 1216.351241][ C0] vkms_vblank_simulate: vblank timer overrun [ 1216.354844][ T26] audit: type=1326 audit(1785367821.795:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17581 comm="syz.4.2936" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1216.388248][ C0] vkms_vblank_simulate: vblank timer overrun [ 1216.554616][ T4539] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.732191][T17521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.762207][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 1217.436505][T17602] ubi16: attaching mtd0 [ 1217.441278][T17602] ubi16: scanning is finished [ 1217.446043][T17602] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 1217.471000][ T4289] Bluetooth: hci6: command 0x040f tx timeout [ 1217.483739][T17524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.489243][T17602] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1217.575053][T17524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.611528][T17524] device bridge_slave_0 entered promiscuous mode [ 1217.628463][T17521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.660945][T17442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.849486][ T4539] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.142377][T17524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.149550][T17524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.176877][T17524] device bridge_slave_1 entered promiscuous mode [ 1218.201257][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1218.212816][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1218.233989][T17442] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.308721][T17521] team0: Port device team_slave_0 added [ 1218.389965][T17524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.406279][T17521] team0: Port device team_slave_1 added [ 1218.422035][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1218.482151][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1218.597049][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.604299][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.622031][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1218.646638][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1219.331156][T17610] ubi16: attaching mtd0 [ 1219.335943][T17610] ubi16: scanning is finished [ 1219.340731][T17610] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 1219.389794][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.397006][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.427348][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1219.436507][T17610] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1219.530822][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1219.605568][T17524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.648928][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1219.657367][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1219.669279][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 1219.675316][ T4289] Bluetooth: hci6: command 0x0419 tx timeout [ 1219.695012][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1219.704229][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1219.713594][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1219.726081][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1219.770958][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1219.797897][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1219.828273][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1219.841437][T17442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1219.889038][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1219.960886][T17521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.969364][T17521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.058425][T17521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.112324][T17618] __nla_validate_parse: 2 callbacks suppressed [ 1220.112342][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2944'. [ 1220.151345][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2944'. [ 1220.281687][ T4539] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.337138][T17524] team0: Port device team_slave_0 added [ 1220.361904][T17521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.382941][T17521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.419236][T17521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.452714][T17618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2944'. [ 1220.634411][T17524] team0: Port device team_slave_1 added [ 1221.480665][T17628] ubi16: attaching mtd0 [ 1221.485636][T17628] ubi16: scanning is finished [ 1221.490349][T17628] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 1221.514876][T17628] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1221.619245][ T4539] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.820097][ T4539] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.934932][T17524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.941936][T17524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.040043][T17524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.099045][T17521] device hsr_slave_0 entered promiscuous mode [ 1222.117245][T17521] device hsr_slave_1 entered promiscuous mode [ 1222.150141][T17521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1222.157796][T17521] Cannot create hsr debugfs directory [ 1222.191806][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1222.199396][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1222.232895][T17524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.241870][T17524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.319037][T17524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.368619][T17442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.501935][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1222.532387][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1222.645439][T17524] device hsr_slave_0 entered promiscuous mode [ 1222.672578][T17524] device hsr_slave_1 entered promiscuous mode [ 1222.699288][T17524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1222.735790][T17524] Cannot create hsr debugfs directory [ 1222.741626][T17442] device veth0_vlan entered promiscuous mode [ 1222.762384][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1222.772467][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1222.820127][T17442] device veth1_vlan entered promiscuous mode [ 1222.894815][ T4539] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.969172][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1222.987380][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1223.029637][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1223.966536][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1223.991163][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1224.010097][T17442] device veth0_macvtap entered promiscuous mode [ 1224.052503][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1224.130234][T17442] device veth1_macvtap entered promiscuous mode [ 1224.163601][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2947'. [ 1224.190224][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2947'. [ 1224.203934][T17657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2947'. [ 1224.322754][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 1224.335462][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 1224.387118][T17662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2945'. [ 1224.540239][T17668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2948'. [ 1224.877403][T17442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.896558][T17442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.912480][T17442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.924327][T17442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.944858][T17442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.966265][T17442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.988699][T17442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.999627][T17442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.019459][T17442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.031365][T17442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.051491][T17442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.075966][T17442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.098204][T17442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.105621][ T4539] tipc: Left network mode [ 1225.210665][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1225.219964][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1225.231739][T17442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.243337][T17442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.253847][T17442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.265302][T17442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.292939][T17442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.321951][T17442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.331827][T17442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.353641][T17442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.363702][T17442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.384044][T17442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.396500][T17442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.406982][T17442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.419919][T17442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.427854][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1225.470017][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1225.688501][T17442] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.697778][T17442] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.714218][T17442] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.724804][T17442] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.567624][ T4525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.589913][T17716] __nla_validate_parse: 5 callbacks suppressed [ 1229.589932][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2953'. [ 1229.624650][ T4525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.629922][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2953'. [ 1229.979616][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1230.146709][T17106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.196431][T17106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.642146][T17521] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1231.791432][T17521] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1231.891301][T17521] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1232.028078][T17521] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1232.391540][T17716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2953'. [ 1233.734777][T17726] ubi16: attaching mtd0 [ 1233.739623][T17726] ubi16: scanning is finished [ 1233.744403][T17726] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 1233.775784][T17726] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1233.925438][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1234.156125][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 1237.550289][T17744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2917'. [ 1237.773291][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 1237.773307][ T26] audit: type=1326 audit(1785367842.392:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17750 comm="syz.4.2958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1237.817581][T17521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.860874][T17524] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1237.898360][T17524] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1237.946297][ T26] audit: type=1326 audit(1785367842.392:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17750 comm="syz.4.2958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1238.008346][T17524] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1238.081891][ T26] audit: type=1326 audit(1785367842.392:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17750 comm="syz.4.2958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1238.136838][T17524] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1238.175780][T17521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.204365][ T26] audit: type=1326 audit(1785367842.392:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17750 comm="syz.4.2958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1238.242064][ T26] audit: type=1326 audit(1785367842.392:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17750 comm="syz.4.2958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1238.288529][ T26] audit: type=1326 audit(1785367842.392:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17750 comm="syz.4.2958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1238.327636][ T26] audit: type=1326 audit(1785367842.392:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17750 comm="syz.4.2958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1238.361445][ T26] audit: type=1326 audit(1785367842.392:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17750 comm="syz.4.2958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1238.398851][ T26] audit: type=1326 audit(1785367842.392:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17750 comm="syz.4.2958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1238.509677][ T26] audit: type=1326 audit(1785367842.533:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17750 comm="syz.4.2958" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f2f9df99 code=0x7ffc0000 [ 1238.761788][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1238.770472][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1238.830146][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1238.850473][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1238.882636][ T4525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.889774][ T4525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.927321][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1238.955439][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1238.995793][ T4525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.003008][ T4525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.074745][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1239.108200][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1239.140175][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1239.238985][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1239.278617][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1239.300010][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1239.330786][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1239.364140][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1239.385154][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1239.418773][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1239.454037][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1239.494365][T17521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1239.524736][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1239.593622][T17524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.661555][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1239.674991][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1239.756642][T17524] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.813726][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1239.835028][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1239.872326][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.879547][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.233084][T17774] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1240.286488][T17774] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1240.309064][T17778] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1240.359374][T17778] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1240.397480][T17778] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1240.424689][T17778] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1240.446787][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1240.469122][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1240.499285][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1240.536251][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.543448][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.581892][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1240.673619][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1240.721623][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1240.768342][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1240.806866][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1240.849720][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1240.889539][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1240.924219][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1240.977462][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1241.008043][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1241.056493][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1241.111049][T17524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1241.287781][ T4539] device hsr_slave_0 left promiscuous mode [ 1241.351876][ T4539] device hsr_slave_1 left promiscuous mode [ 1241.359263][ T4539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1241.404339][ T4539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.447877][ T4539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1241.455363][ T4539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.521944][ T4539] device bridge_slave_1 left promiscuous mode [ 1241.528343][ T4539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.597074][ T4539] device bridge_slave_0 left promiscuous mode [ 1241.603558][ T4539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.739839][ T4539] device hsr_slave_0 left promiscuous mode [ 1241.787396][ T4539] device hsr_slave_1 left promiscuous mode [ 1241.809258][ T4539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1241.840819][ T4539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.900961][ T4539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1241.927788][ T4539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.949980][ T4539] device bridge_slave_1 left promiscuous mode [ 1241.956236][ T4539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.044933][ T4539] device bridge_slave_0 left promiscuous mode [ 1242.059797][ T4539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.301105][ T4539] device veth1_macvtap left promiscuous mode [ 1242.322510][ T4539] device veth0_macvtap left promiscuous mode [ 1242.334543][ T4539] device veth1_vlan left promiscuous mode [ 1242.340499][ T4539] device veth0_vlan left promiscuous mode [ 1242.402077][ T4539] device veth1_macvtap left promiscuous mode [ 1242.408188][ T4539] device veth0_macvtap left promiscuous mode [ 1242.443425][ T4539] device veth1_vlan left promiscuous mode [ 1242.449461][ T4539] device veth0_vlan left promiscuous mode [ 1243.357687][T17801] ubi16: attaching mtd0 [ 1243.362610][T17801] ubi16: scanning is finished [ 1243.367341][T17801] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 1243.391822][T17801] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1247.047172][ T4539] team0 (unregistering): Port device team_slave_1 removed [ 1247.190627][ T4539] team0 (unregistering): Port device team_slave_0 removed [ 1247.332467][ T4539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.412834][ T4539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.287508][ T4539] bond0 (unregistering): Released all slaves [ 1249.224041][ T4539] team0 (unregistering): Port device team_slave_1 removed [ 1249.305572][ T4539] team0 (unregistering): Port device team_slave_0 removed [ 1249.399275][ T4539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.486429][ T4539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.078058][ T4539] bond0 (unregistering): Released all slaves [ 1250.229149][T17785] tipc: Started in network mode [ 1250.234182][T17785] tipc: Node identity 4, cluster identity 4711 [ 1250.240348][T17785] tipc: Node number set to 4 [ 1250.301141][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1250.370921][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1250.386313][T17521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.489420][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1250.495015][T17852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 1250.530979][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1250.681089][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1250.717379][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1250.754151][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1250.772714][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1250.833648][T17852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2967'. [ 1251.003042][T17521] device veth0_vlan entered promiscuous mode [ 1251.049147][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1251.066533][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1251.080296][T17524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.200874][T17521] device veth1_vlan entered promiscuous mode [ 1251.304055][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1251.354001][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1251.390964][T17521] device veth0_macvtap entered promiscuous mode [ 1251.437239][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1251.455044][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1251.493868][T17521] device veth1_macvtap entered promiscuous mode [ 1251.533342][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1251.546287][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1251.605540][T17521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.661220][T17521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.716249][T17521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.759046][T17521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.768938][T17521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.840397][T17521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.875037][T17521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.908969][T17521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.918861][T17521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.978732][T17521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.017298][T17521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.029723][T17106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1252.076220][T17106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1252.104479][T17521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.141700][T17521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.187016][T17521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.240062][T17521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.249951][T17521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.367994][T17521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.377863][T17521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.474984][T17521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.484870][T17521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.521620][T17521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.547718][T17521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.599096][T17521] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.613573][T17521] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.633037][T17521] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.643579][T17521] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.965557][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1253.025778][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1253.375615][ T4525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.415620][ T4525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.426962][T16918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1253.443287][T16918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.480723][T16918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.538321][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1253.697984][T16918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1253.712474][T16918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1253.735329][T17524] device veth0_vlan entered promiscuous mode [ 1253.778019][T16918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1253.809138][T16918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1253.850257][T17524] device veth1_vlan entered promiscuous mode [ 1253.885296][T16918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1253.895460][T16918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1253.935245][T16918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1254.038269][T17524] device veth0_macvtap entered promiscuous mode [ 1254.111156][T16918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1254.129821][T16918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1254.153490][T16918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1254.182714][T17524] device veth1_macvtap entered promiscuous mode [ 1254.227745][T16918] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1254.319326][T17524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.361843][T17524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.437299][T17524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.480472][T17524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.507513][T17524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.557749][T17524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.597933][T17524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.628794][T17524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.671760][T17524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.715607][T17524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.740372][T17524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.806989][T17524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.859334][T17524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.888257][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1254.908454][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1254.973251][T17524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.014702][T17524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.035938][T17524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.079570][T17524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.106516][T17524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.142796][T17524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.175871][T17524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.215502][T17524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.237502][T17524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.282572][T17524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.325645][T17524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.345835][T17524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.389998][T17524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.430907][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1255.471098][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1255.513224][T17524] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.539880][T17524] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.573648][T17524] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.595435][T17524] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.823023][ T4654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.857850][ T4654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.914705][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1255.935347][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.976891][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.009700][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1256.609312][T17910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2972'. [ 1256.893382][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2972'. [ 1256.939317][T17910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2972'. [ 1257.223515][T17925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2973'. [ 1258.123180][T17935] ubi16: attaching mtd0 [ 1258.128088][T17935] ubi16: scanning is finished [ 1258.132812][T17935] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 1258.169314][T17935] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1263.455036][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2977'. [ 1265.564297][T17974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2977'. [ 1265.797145][T17982] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1267.246043][T17982] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1267.414514][T17976] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1267.422364][T17976] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1267.431021][T17976] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1267.438974][T17976] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1268.332043][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1268.338566][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1271.104970][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 1271.104987][ T26] audit: type=1326 audit(1785367873.582:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.2.2982" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19199df99 code=0x7ffc0000 [ 1271.225563][ T26] audit: type=1326 audit(1785367873.582:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.2.2982" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19199df99 code=0x7ffc0000 [ 1271.298462][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1271.312686][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1271.322519][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1271.333383][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1271.341252][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1271.348909][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1271.500379][T18018] batadv0 speed is unknown, defaulting to 1000 [ 1271.507046][ T26] audit: type=1326 audit(1785367873.582:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.2.2982" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7ff19199df99 code=0x7ffc0000 [ 1271.616796][ T26] audit: type=1326 audit(1785367873.582:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.2.2982" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19199df99 code=0x7ffc0000 [ 1271.741865][ T26] audit: type=1326 audit(1785367873.582:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.2.2982" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19199df99 code=0x7ffc0000 [ 1271.858468][ T26] audit: type=1326 audit(1785367873.582:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.2.2982" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff19199df99 code=0x7ffc0000 [ 1271.973406][ T26] audit: type=1326 audit(1785367873.582:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.2.2982" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19199df99 code=0x7ffc0000 [ 1272.020198][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 1272.085505][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 1272.089565][ T26] audit: type=1326 audit(1785367873.582:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.2.2982" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19199df99 code=0x7ffc0000 [ 1272.189298][T18036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2986'. [ 1272.219560][ T26] audit: type=1326 audit(1785367873.582:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.2.2982" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff19199df99 code=0x7ffc0000 [ 1272.315137][ T26] audit: type=1326 audit(1785367873.582:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.2.2982" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19199df99 code=0x7ffc0000 [ 1272.654753][T18018] chnl_net:caif_netlink_parms(): no params data found [ 1272.861471][T18018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.903211][T18018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.933434][T18018] device bridge_slave_0 entered promiscuous mode [ 1272.955464][T18018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.984823][T18018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.025204][T18018] device bridge_slave_1 entered promiscuous mode [ 1273.082743][T18018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.143317][T18018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.266860][T18018] team0: Port device team_slave_0 added [ 1273.299825][T18018] team0: Port device team_slave_1 added [ 1273.376985][T18018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.383989][T18018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.488890][T18018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.612027][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 1274.674302][T18018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.689436][T18018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.779610][T18018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.974502][T18018] device hsr_slave_0 entered promiscuous mode [ 1275.027268][T18018] device hsr_slave_1 entered promiscuous mode [ 1275.625246][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1275.641009][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1275.652400][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1275.663043][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1275.674629][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1275.682024][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1275.834700][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 1276.141777][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2989'. [ 1276.649953][T18075] batadv0 speed is unknown, defaulting to 1000 [ 1277.888590][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 1278.057606][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 1278.163747][T16552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.305663][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2989'. [ 1279.852278][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2991'. [ 1279.875360][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2991'. [ 1280.109278][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 1280.280041][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 1281.166499][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2992'. [ 1281.259558][T16552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.341342][T18099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2991'. [ 1281.611770][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'. [ 1281.630235][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'. [ 1281.657536][T16552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.826810][T16552] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.878990][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'. [ 1281.978531][T18018] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1282.331888][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 1283.253077][T18018] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1283.261157][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'. [ 1283.298583][T18121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2996'. [ 1283.670205][T18018] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1283.685277][T18122] tipc: Started in network mode [ 1283.690276][T18122] tipc: Node identity 4, cluster identity 4711 [ 1283.696458][T18122] tipc: Node number set to 4 [ 1283.708856][T18018] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1283.959845][T18075] chnl_net:caif_netlink_parms(): no params data found [ 1284.217913][T18018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.291280][T18018] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.356588][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1284.368773][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1284.406099][T18075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.413484][T18075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.435969][T18075] device bridge_slave_0 entered promiscuous mode [ 1284.536323][T18018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1284.554629][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 1284.586819][T18018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1285.880459][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1285.889706][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1285.908135][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.915343][ T4725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.936277][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1285.951896][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1285.964022][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.971211][ T4725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1286.013396][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1286.043413][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1286.057088][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1286.067495][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1286.098385][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1286.155644][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1286.190786][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1286.240699][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1286.283271][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1286.320489][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1286.379024][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1286.409203][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1286.439131][T18075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.452742][T18075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.511782][T18075] device bridge_slave_1 entered promiscuous mode [ 1286.547334][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2998'. [ 1289.130874][T18178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2999'. [ 1289.153499][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 1289.306678][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3002'. [ 1289.342266][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3002'. [ 1289.502615][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1289.510781][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1289.544259][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1289.582887][T18018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1289.699952][T18018] device veth0_vlan entered promiscuous mode [ 1289.724578][T18018] device veth1_vlan entered promiscuous mode [ 1289.799666][T18018] device veth0_macvtap entered promiscuous mode [ 1289.820482][T18018] device veth1_macvtap entered promiscuous mode [ 1289.853286][T18018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.884279][T18018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.904568][T18018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.918298][T18018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.937947][T18018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.948996][T18018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.959387][T18018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.970197][T18018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.981501][T18018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.993371][T18018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.004566][T18018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1290.029949][T18018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.049476][T18018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1290.067474][T18018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1290.092442][T18018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1291.888568][T18190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3002'. [ 1292.071625][T18075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.099058][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1292.117745][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1292.128358][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1292.145203][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1292.161925][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1292.183220][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1292.193535][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1292.225705][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1292.244191][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1292.257230][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1292.277349][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1292.290144][T18206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3005'. [ 1292.417698][T18075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.441182][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'. [ 1292.462809][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'. [ 1292.490183][T18018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.515585][T18018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.525551][T18018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.547815][T18018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.557711][T18018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.575905][T18018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.586647][T18018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.599891][T18018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.610549][T18018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.621223][T18018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.631615][T18018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.642562][T18018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.652760][T18018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.664019][T18018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.675556][T18018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1292.683848][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1292.692858][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1292.701289][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1292.712278][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1292.715397][T18218] xt_HMARK: spi-set and port-set can't be combined [ 1292.721613][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1292.808287][T18212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3007'. [ 1292.916707][T18018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.938333][T18018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.952798][T18018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.974759][T18018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.058326][T18075] team0: Port device team_slave_0 added [ 1293.078256][T18075] team0: Port device team_slave_1 added [ 1293.132094][T18075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.144560][T18075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.186107][T18075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.458603][T18222] loop4: detected capacity change from 0 to 128 [ 1293.466082][T18222] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1293.594755][T18222] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1294.040405][T18075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.064142][T18075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.101274][T18075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.447462][T18075] device hsr_slave_0 entered promiscuous mode [ 1294.467599][T18075] device hsr_slave_1 entered promiscuous mode [ 1294.479552][T18075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1294.499135][T18075] Cannot create hsr debugfs directory [ 1294.601211][ T4725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.609079][ T4725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.687435][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.709642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1294.727139][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.778171][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1295.223186][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'. [ 1295.369049][ T4525] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1295.647121][T18226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3009'. [ 1295.961822][T18231] xt_HMARK: spi-set and port-set can't be combined [ 1296.568596][T18235] loop3: detected capacity change from 0 to 128 [ 1296.575930][T18235] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1296.843290][T18235] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1297.765795][T16552] device hsr_slave_0 left promiscuous mode [ 1297.781679][T16552] device hsr_slave_1 left promiscuous mode [ 1297.804359][T16552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1297.834934][T16552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1297.873818][T16552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1297.911064][T16552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1297.954028][T16552] device bridge_slave_1 left promiscuous mode [ 1297.980620][T16552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.005273][T16552] device bridge_slave_0 left promiscuous mode [ 1298.028307][T16552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.198766][T16552] device veth1_macvtap left promiscuous mode [ 1298.229251][T16552] device veth0_macvtap left promiscuous mode [ 1298.264976][T16552] device veth1_vlan left promiscuous mode [ 1298.270867][T16552] device veth0_vlan left promiscuous mode [ 1298.563080][ T4525] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1299.726095][T18254] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1301.732901][T18254] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1301.766570][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3014'. [ 1301.821625][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3014'. [ 1301.853551][T18252] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1301.861563][T18252] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1301.870042][T18252] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1301.877899][T18252] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1306.351950][T18287] ubi16: attaching mtd0 [ 1306.356778][T18287] ubi16: scanning is finished [ 1306.361470][T18287] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 1306.384227][T18287] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1306.479620][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3017'. [ 1306.498245][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3017'. [ 1307.355252][T18305] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1307.364159][T18305] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1307.384070][T18305] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1307.392045][T18305] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1307.400417][T18305] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1307.408341][T18305] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1307.539526][T16552] team0 (unregistering): Port device team_slave_1 removed [ 1307.545097][T18309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'. [ 1307.671445][T16552] team0 (unregistering): Port device team_slave_0 removed [ 1307.761426][T16552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.915438][T16552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.923468][T16552] bond0 (unregistering): Released all slaves [ 1309.143189][T18262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3014'. [ 1309.261476][T18290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3017'. [ 1310.037831][T18347] ubi16: attaching mtd0 [ 1310.042647][T18347] ubi16: scanning is finished [ 1310.047372][T18347] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 1310.080227][T18347] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1310.237223][T18309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3019'. [ 1310.512071][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3022'. [ 1310.541804][T18353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3022'. [ 1310.736269][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'. [ 1310.788329][T18359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3023'. [ 1314.534698][T18382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3025'. [ 1314.588218][T18382] netlink: 'syz.4.3025': attribute type 7 has an invalid length. [ 1314.636193][T18382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3025'. [ 1314.724849][T18075] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1314.786005][T18075] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1314.843834][T18075] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1314.869891][T18075] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1314.988316][ T4317] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1315.041102][T18393] synth uevent: /bus/platform/drivers/intel_xhci_usb_sw: unknown uevent action string [ 1315.227425][T16552] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.228674][ T4317] usb 2-1: Using ep0 maxpacket: 16 [ 1315.305874][ T4317] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1315.325813][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.345069][ T4317] usb 2-1: Product: syz [ 1315.354714][ T4317] usb 2-1: Manufacturer: syz [ 1315.380316][ T4317] usb 2-1: SerialNumber: syz [ 1315.410761][T18075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.549870][T16552] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.606907][T18075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.628116][ T4317] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1315.637921][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1315.646596][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1315.683454][ T4317] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1315.734611][ T4317] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1315.763579][ T4317] usb 2-1: media controller created [ 1315.792169][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 1315.792186][ T26] audit: type=1800 audit(1785367915.403:460): pid=18414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3035" name="UDC" dev="configfs" ino=94515 res=0 errno=0 [ 1315.807744][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1315.988504][ T4317] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1316.040863][ T4317] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 1316.071493][ T4317] usb 2-1: USB disconnect, device number 19 [ 1316.104903][T16552] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.170339][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1316.179471][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1316.207456][ T4539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.214611][ T4539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1316.235892][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1316.264331][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1316.300258][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.307461][ T4539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1316.335116][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1316.353451][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1316.374467][T18423] bridge0: port 3(syz_tun) entered blocking state [ 1316.383566][T18423] bridge0: port 3(syz_tun) entered disabled state [ 1316.402469][T18423] device syz_tun entered promiscuous mode [ 1316.409458][T18423] bridge0: port 3(syz_tun) entered blocking state [ 1316.416070][T18423] bridge0: port 3(syz_tun) entered forwarding state [ 1316.425136][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1316.435920][T14368] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1316.466988][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1316.495949][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1316.548120][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1316.646528][T14368] usb 1-1: Dual-Role OTG device on HNP port [ 1316.652997][T14368] usb 1-1: New USB device found, idVendor=17b3, idProduct=0000, bcdDevice= 6.01 [ 1316.662506][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 1316.670616][ T7] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1316.678446][T16552] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.698094][ T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1316.708687][ T7] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.719108][T14368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.742576][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1316.750723][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1316.769671][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1316.806936][T14368] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1316.829760][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1316.847659][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.868500][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1316.913495][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.914805][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1316.936833][ T14] usb 5-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 1316.952793][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3041'. [ 1316.962498][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1316.974456][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1316.983718][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3041'. [ 1316.993558][ T14] usb 5-1: Product: syz [ 1316.998209][ T14] usb 5-1: Manufacturer: syz [ 1317.013310][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1317.031335][T18444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3041'. [ 1317.045614][ T14] navman 5-1:1.0: navman converter detected [ 1317.056255][T18444] syz_tun: Device is already in use. [ 1317.062659][ T14] usb 5-1: navman converter now attached to ttyUSB0 [ 1317.078890][T18075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1317.211993][T18441] device syzkaller0 entered promiscuous mode [ 1317.328073][T14368] usb 5-1: USB disconnect, device number 6 [ 1317.361796][ T14] usb 3-1: USB disconnect, device number 12 [ 1317.396352][T14368] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 1317.421744][T14368] navman 5-1:1.0: device disconnected [ 1318.321475][ T4289] Bluetooth: hci2: Dropping invalid advertising data [ 1318.330021][ T4289] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1319.354197][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 1319.998368][ T4289] Bluetooth: hci2: unexpected cc 0x0403 length: 9 > 1 [ 1322.153591][T18497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3052'. [ 1322.186176][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3053'. [ 1322.197528][T18497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3052'. [ 1322.239331][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3053'. [ 1322.374008][T18497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3052'. [ 1322.466237][T18501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3053'. [ 1322.643917][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1322.652180][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1322.678217][T18075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1324.311034][ T4289] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1324.320079][ T4289] Bluetooth: hci2: Injecting HCI hardware error event [ 1324.344175][ T4290] Bluetooth: hci2: hardware error 0x00 [ 1324.958440][T18530] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3057'. [ 1325.177978][T18531] tipc: Started in network mode [ 1325.182935][T18531] tipc: Node identity 4, cluster identity 4711 [ 1325.189114][T18531] tipc: Node number set to 4 [ 1325.626329][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1325.661640][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1325.915787][T18075] device veth0_vlan entered promiscuous mode [ 1327.213542][ T4290] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1329.081011][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1329.104023][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1329.177391][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3063'. [ 1329.201440][T18075] device veth1_vlan entered promiscuous mode [ 1329.242147][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1329.249973][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3063'. [ 1329.266745][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1330.522863][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3063'. [ 1331.929845][T18609] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1332.574434][T11371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1332.599761][T11371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1332.611916][T18075] device veth0_macvtap entered promiscuous mode [ 1332.897656][T18075] device veth1_macvtap entered promiscuous mode [ 1332.958905][T18075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.996478][T18075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.033739][T18075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.077372][T18075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.124677][T18075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.165602][T18075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.175480][T18075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.221714][T18075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.259206][T18075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.289282][T18075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.336054][T18075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.366129][T18075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.408500][T18075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.450643][T18075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.495414][T18075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1333.504291][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1333.535375][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1333.547992][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1333.554509][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1333.588951][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1333.625415][T18075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.665223][T18075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.700660][T18075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.743312][T18075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.770954][T18075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.795844][T18075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.805729][T18075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.878663][T18075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.900071][T18075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.932459][T18075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.976110][T18075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.005597][T18075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.046693][T18075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1334.079234][T18075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.126006][T18075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1334.147507][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1334.191872][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1334.214935][T18075] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.265936][T18075] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.274702][T18075] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.351372][T18075] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.537706][T16552] device hsr_slave_0 left promiscuous mode [ 1334.587004][T16552] device hsr_slave_1 left promiscuous mode [ 1334.599891][T18609] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1334.631009][T16552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1334.667759][T16552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.681829][T18609] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1334.710697][T16552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1334.744643][T16552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.822705][T18609] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1334.836716][T16552] device bridge_slave_1 left promiscuous mode [ 1334.875279][T16552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.915780][T16552] device bridge_slave_0 left promiscuous mode [ 1334.922563][T16552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.103951][T16552] device veth1_macvtap left promiscuous mode [ 1335.118299][T16552] device veth0_macvtap left promiscuous mode [ 1335.154003][T16552] device veth1_vlan left promiscuous mode [ 1335.159929][T16552] device veth0_vlan left promiscuous mode [ 1337.362172][T16552] team0 (unregistering): Port device team_slave_1 removed [ 1337.408333][ T4317] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1337.449369][T16552] team0 (unregistering): Port device team_slave_0 removed [ 1337.565444][T16552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.612575][ T4317] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1337.642606][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.683810][T16552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.685268][ T4317] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 1337.776912][ T4317] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1337.803201][ T4317] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1337.951131][ T4317] usb 4-1: emi26_load_firmware - request_firmware() failed [ 1337.983924][ T4317] usb 4-1: emi26_load_firmware - error loading firmware: error = -12 [ 1338.003090][ T4317] emi26 - firmware loader: probe of 4-1:1.0 failed with error -5 [ 1338.029525][ T4317] usb 4-1: USB disconnect, device number 8 [ 1338.136916][T18675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3076'. [ 1338.802942][T16552] bond0 (unregistering): Released all slaves [ 1340.665041][T18686] xt_HMARK: spi-set and port-set can't be combined [ 1340.700533][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1340.714310][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1340.723569][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1340.731754][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1340.739253][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1340.747670][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1340.824843][T18690] batadv0 speed is unknown, defaulting to 1000 [ 1340.980897][T18675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3076'. [ 1341.233262][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 1341.947193][T18690] chnl_net:caif_netlink_parms(): no params data found [ 1342.372156][T16552] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.472894][T18690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.480116][T18690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.515072][T18690] device bridge_slave_0 entered promiscuous mode [ 1342.608876][T16552] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.667804][T18690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.674960][T18690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.716009][T18690] device bridge_slave_1 entered promiscuous mode [ 1342.829675][T16552] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.942159][T18690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1342.951727][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 1343.047425][T16552] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.112884][T18690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1343.249698][T18690] team0: Port device team_slave_0 added [ 1343.286624][T18690] team0: Port device team_slave_1 added [ 1343.360806][T18690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1343.367803][T18690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1343.469012][T18690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1343.511483][T18690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.518474][T18690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1343.610270][T18690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1343.959956][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3081'. [ 1344.026648][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3081'. [ 1344.037007][T18690] device hsr_slave_0 entered promiscuous mode [ 1344.064373][T18690] device hsr_slave_1 entered promiscuous mode [ 1344.077868][T18696] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1344.089719][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'. [ 1344.099878][T18690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1344.110876][T18696] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1344.159007][T18690] Cannot create hsr debugfs directory [ 1344.161986][T18698] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1344.172327][T18698] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1344.180733][T18698] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1344.188596][T18698] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1344.220619][T18727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3081'. [ 1344.247016][T18727] syz_tun: Device is already in use. [ 1344.268262][T18730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3082'. [ 1345.170704][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 1346.448007][ T4288] Bluetooth: hci5: command 0x2021 tx timeout [ 1347.385127][T18779] ubi16: attaching mtd0 [ 1347.389938][T18779] ubi16: scanning is finished [ 1347.394651][T18779] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 1347.418685][T18779] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1347.457063][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 1347.526230][T18782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3090'. [ 1347.569120][T18782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3090'. [ 1347.674549][T18782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3090'. [ 1347.698438][T18782] syz_tun: Device is already in use. [ 1347.801417][T18794] sg_write: data in/out 200668/136 bytes for SCSI command 0x0-- guessing data in; [ 1347.801417][T18794] program syz.4.3094 not setting count and/or reply_len properly [ 1348.190343][T18790] device syzkaller1 entered promiscuous mode [ 1348.523355][T18806] loop3: detected capacity change from 0 to 128 [ 1348.530942][T18806] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1348.809311][T18806] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1349.621430][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 1349.899471][T18690] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1349.923996][T18690] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1349.988939][T18690] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1350.065004][T18690] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1350.423117][ T4654] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1351.133477][T18815] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1351.281975][T18690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.610114][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1351.643082][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1351.760745][T18690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.888880][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1351.944908][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1352.001950][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.009160][ T4421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.278912][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1353.317671][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1353.348633][T18815] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1353.404503][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1353.434474][T18815] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1353.463951][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.471170][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.496783][T18815] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1353.835242][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1353.869556][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1354.172469][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1354.221400][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1354.265647][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1354.282224][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1354.307981][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1354.383955][T18835] device syzkaller0 entered promiscuous mode [ 1354.409212][T15193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1354.417984][T15193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1354.455436][T15193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1354.465002][T15193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1358.879712][T18690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1358.891937][T18846] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1359.264578][T18889] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3109'. [ 1359.303755][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3109'. [ 1359.456979][T16552] device hsr_slave_0 left promiscuous mode [ 1359.474451][T16552] device hsr_slave_1 left promiscuous mode [ 1359.492138][T16552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.518809][T16552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.557878][T16552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.584046][T16552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.609945][T16552] device bridge_slave_1 left promiscuous mode [ 1359.626517][T16552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.664441][T16552] device bridge_slave_0 left promiscuous mode [ 1359.677301][T16552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.781631][T16552] device veth1_macvtap left promiscuous mode [ 1359.805454][T16552] device veth0_macvtap left promiscuous mode [ 1359.811804][T16552] device veth1_vlan left promiscuous mode [ 1359.854835][T16552] device veth0_vlan left promiscuous mode [ 1361.008986][T16552] team0 (unregistering): Port device team_slave_1 removed [ 1361.080266][T16552] team0 (unregistering): Port device team_slave_0 removed [ 1361.144299][T16552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1361.214081][T16552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1361.757162][T16552] bond0 (unregistering): Released all slaves [ 1362.524746][T18936] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3123'. [ 1363.556964][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1363.564578][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1363.613988][T18690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.189845][T18982] device syzkaller0 entered promiscuous mode [ 1364.219249][T18985] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3133'. [ 1364.601768][T18995] device syzkaller0 entered promiscuous mode [ 1364.785408][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1364.847806][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1364.983529][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1365.003340][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1365.049225][T18690] device veth0_vlan entered promiscuous mode [ 1365.063174][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1365.087883][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1365.120827][T18690] device veth1_vlan entered promiscuous mode [ 1365.228000][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1365.237594][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1365.257724][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1365.295226][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1365.343373][T18690] device veth0_macvtap entered promiscuous mode [ 1365.396014][T18690] device veth1_macvtap entered promiscuous mode [ 1365.429973][T19021] device syzkaller0 entered promiscuous mode [ 1365.552329][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.574697][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.594034][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.623518][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.641470][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.657326][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.668467][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.685951][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.702808][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.721144][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.731213][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.753606][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.794299][T18690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.821914][T19028] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3145'. [ 1365.848508][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1365.857808][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1365.867732][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1365.905041][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1366.106501][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1366.136970][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.168582][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1366.197969][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.246453][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1366.296712][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.338699][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1366.392714][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.425111][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1366.467755][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.501760][T18690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1366.531572][T18690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.565435][T18690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1366.639957][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1366.662521][ T4654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1366.685148][T18690] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.746414][T18690] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.769101][T18690] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.815131][T18690] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.870930][T19070] pimreg: tun_chr_ioctl cmd 21731 [ 1367.041392][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.049368][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.116461][T15193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1367.149820][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.166289][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.175283][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1370.101676][T19131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1370.139534][T19131] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1370.449127][T19150] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3173'. [ 1371.158366][T19160] netlink: 388 bytes leftover after parsing attributes in process `syz.6.3175'. [ 1371.405976][T19180] overlayfs: failed to resolve './file2': -2 [ 1371.412566][T14368] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1371.614770][T14368] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1371.632278][T14368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.673601][T14368] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 1371.697649][T14368] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1371.727544][T14368] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1371.783153][T19197] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3187'. [ 1371.884197][T19166] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 1371.912203][ T9748] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1371.923325][T14368] usb 4-1: emi26_load_firmware - request_firmware() failed [ 1371.940006][T14368] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 1371.972378][T14368] emi26 - firmware loader: probe of 4-1:1.0 failed with error -5 [ 1372.013833][T14368] usb 4-1: USB disconnect, device number 9 [ 1372.144364][ T9748] usb 7-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1372.168626][ T9748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.224090][ T9748] emi26 - firmware loader 7-1:1.0: emi26_probe start [ 1372.274606][ T9748] usb 7-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1372.308248][ T9748] usb 7-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1372.441149][T19189] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 1372.512519][ T9748] usb 7-1: emi26_load_firmware - request_firmware() failed [ 1372.520469][ T9748] usb 7-1: emi26_load_firmware - error loading firmware: error = -2 [ 1372.573461][ T9748] emi26 - firmware loader: probe of 7-1:1.0 failed with error -5 [ 1372.620591][ T9748] usb 7-1: USB disconnect, device number 2 [ 1372.918639][T19226] overlayfs: failed to resolve './file2': -2 [ 1373.217076][T19232] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3198'. [ 1373.265150][T19236] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3200'. [ 1374.027948][ T4317] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1374.243799][ T4317] usb 7-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1374.263487][ T4317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.301588][ T4317] emi26 - firmware loader 7-1:1.0: emi26_probe start [ 1374.324162][ T4317] usb 7-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1374.362639][ T4317] usb 7-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1374.444827][ T14] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1374.507737][T19259] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 1374.530999][ T4317] usb 7-1: emi26_load_firmware - request_firmware() failed [ 1374.545008][ T4317] usb 7-1: emi26_load_firmware - error loading firmware: error = -2 [ 1374.572073][ T4317] emi26 - firmware loader: probe of 7-1:1.0 failed with error -5 [ 1374.630352][ T4317] usb 7-1: USB disconnect, device number 3 [ 1374.651277][ T14] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1374.669517][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.710963][ T14] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 1374.736984][ T14] usb 5-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1374.776924][ T14] usb 5-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1374.812636][T19302] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3214'. [ 1374.919490][T19278] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 1374.949479][ T14] usb 5-1: emi26_load_firmware - request_firmware() failed [ 1374.965263][ T14] usb 5-1: emi26_load_firmware - error loading firmware: error = -2 [ 1374.991082][ T14] emi26 - firmware loader: probe of 5-1:1.0 failed with error -5 [ 1375.045412][ T14] usb 5-1: USB disconnect, device number 7 [ 1376.169786][T19345] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3225'. [ 1376.742417][ T9748] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1376.924010][ T14] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1376.978917][ T9748] usb 7-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1377.019758][ T9748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.064110][ T9748] emi26 - firmware loader 7-1:1.0: emi26_probe start [ 1377.095852][ T9748] usb 7-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1377.133954][ T9748] usb 7-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1377.143955][ T14] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1377.158857][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.219064][ T14] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 1377.278962][T19354] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 1377.322352][ T14] usb 3-1: emi26_load_firmware - request_firmware() failed [ 1377.332773][ T9748] usb 7-1: emi26_load_firmware - request_firmware() failed [ 1377.340592][ T14] usb 3-1: emi26_load_firmware - error loading firmware: error = -2 [ 1377.358240][ T9748] usb 7-1: emi26_load_firmware - error loading firmware: error = -2 [ 1377.376171][T19393] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3240'. [ 1377.388877][ T14] emi26 - firmware loader: probe of 3-1:1.0 failed with error -5 [ 1377.399259][ T9748] emi26 - firmware loader: probe of 7-1:1.0 failed with error -5 [ 1377.451383][ T14] usb 3-1: USB disconnect, device number 13 [ 1377.458893][ T9748] usb 7-1: USB disconnect, device number 4 [ 1378.493789][T19436] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3252'. [ 1379.103780][ T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1379.319780][ T14] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1379.370895][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.423903][ T14] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 1379.459972][ T14] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1379.509935][ T14] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1379.521614][T19474] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3264'. [ 1379.628031][T19453] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 1379.658361][ T14] usb 4-1: emi26_load_firmware - request_firmware() failed [ 1379.685028][ T14] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 1379.723676][ T14] emi26 - firmware loader: probe of 4-1:1.0 failed with error -5 [ 1379.775807][ T14] usb 4-1: USB disconnect, device number 10 [ 1379.786088][T19480] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3267'. [ 1380.155603][T19495] device syzkaller0 entered promiscuous mode [ 1380.850962][T19526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3280'. [ 1381.404925][T19554] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3288'. [ 1381.442996][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3288'. [ 1381.540204][ T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1381.692471][T19566] overlayfs: missing 'lowerdir' [ 1381.747646][ T14] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1381.768425][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.827135][ T14] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 1381.871760][ T14] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1381.923579][ T14] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1382.035685][T19548] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 1382.066014][ T14] usb 4-1: emi26_load_firmware - request_firmware() failed [ 1382.073330][ T14] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 1382.128024][ T14] emi26 - firmware loader: probe of 4-1:1.0 failed with error -5 [ 1382.211361][ T14] usb 4-1: USB disconnect, device number 11 [ 1382.495101][T19598] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3303'. [ 1382.532392][T19598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3303'. [ 1382.683558][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1382.771280][T19609] overlayfs: missing 'lowerdir' [ 1382.877701][ T7] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1382.897804][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.955281][ T7] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 1382.993754][ T7] usb 5-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1383.034745][ T7] usb 5-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1383.660498][T19642] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3317'. [ 1383.697232][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3317'. [ 1383.864228][T19647] overlayfs: missing 'lowerdir' [ 1383.953212][T19652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3321'. [ 1384.126070][ T14] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1384.330900][ T14] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1384.370678][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.424913][ T14] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 1384.630462][T19679] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3330'. [ 1384.643159][T19645] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 1384.668508][ T14] usb 2-1: emi26_load_firmware - request_firmware() failed [ 1384.676326][ T7] usb 5-1: emi26_load_firmware - request_firmware() failed [ 1384.687278][ T14] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 1384.697539][ T7] usb 5-1: emi26_load_firmware - error loading firmware: error = -2 [ 1384.721571][ T14] emi26 - firmware loader: probe of 2-1:1.0 failed with error -5 [ 1384.732321][ T7] emi26 - firmware loader: probe of 5-1:1.0 failed with error -5 [ 1384.765542][ T14] usb 2-1: USB disconnect, device number 20 [ 1384.775291][ T7] usb 5-1: USB disconnect, device number 8 [ 1384.870147][T19687] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3332'. [ 1384.883415][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3332'. [ 1385.050866][T19692] overlayfs: missing 'lowerdir' [ 1385.184206][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1385.399505][ T7] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1385.419619][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.472225][ T7] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 1385.501140][ T7] usb 5-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1385.531485][ T7] usb 5-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1385.798560][T19724] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3343'. [ 1385.841059][T19726] device hsr0 entered promiscuous mode [ 1385.847333][T19724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3343'. [ 1385.959332][T19731] overlayfs: missing 'lowerdir' [ 1386.125225][T19725] device hsr0 left promiscuous mode [ 1386.183390][T19737] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1386.254318][T19737] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1386.317825][T19737] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1386.384263][T19737] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1386.455893][T19737] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1386.497619][T19737] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1386.543897][T19737] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1386.907859][T19769] netlink: 'syz.2.3356': attribute type 5 has an invalid length. [ 1386.950406][T19768] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3357'. [ 1386.979324][T19768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3357'. [ 1387.274846][T19782] overlayfs: missing 'lowerdir' [ 1387.531751][T19790] device bond0 entered promiscuous mode [ 1387.556246][T19790] device bond_slave_0 entered promiscuous mode [ 1387.567813][T19790] device bond_slave_1 entered promiscuous mode [ 1388.142660][T19819] netlink: 'syz.2.3373': attribute type 3 has an invalid length. [ 1388.472679][T19829] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1388.514498][T19829] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1388.850696][T19846] device syzkaller0 entered promiscuous mode [ 1389.531943][T19877] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1389.541755][T19877] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1389.818245][T19884] __nla_validate_parse: 6 callbacks suppressed [ 1389.818267][T19884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3392'. [ 1390.285286][T19903] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3397'. [ 1390.350820][T19903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3397'. [ 1390.484613][T19911] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3400'. [ 1390.493632][T19911] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1390.566042][T19914] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1390.601747][T19914] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1390.854258][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3407'. [ 1390.894849][T19933] netlink: 'syz.4.3407': attribute type 10 has an invalid length. [ 1390.914085][T19933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3407'. [ 1390.953420][T19933] device geneve2 entered promiscuous mode [ 1390.997242][ T14] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1391.201828][ T14] usb 7-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1391.219380][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.246723][ T14] emi26 - firmware loader 7-1:1.0: emi26_probe start [ 1391.497022][ T4288] Bluetooth: hci4: link tx timeout [ 1391.504462][ T4288] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1391.951315][T19965] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3417'. [ 1392.102585][T19969] overlayfs: missing 'lowerdir' [ 1392.917015][T19986] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3427'. [ 1392.937189][T19986] netlink: 'syz.6.3427': attribute type 17 has an invalid length. [ 1393.722611][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 1394.017010][T19936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1394.054670][T19957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3413'. [ 1394.365655][T20001] overlayfs: missing 'lowerdir' [ 1395.156954][T20032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3441'. [ 1395.445732][T20044] overlayfs: missing 'lowerdir' [ 1396.184917][T20076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3453'. [ 1396.616907][T20090] overlayfs: missing 'workdir' [ 1397.178860][T20114] netlink: 'syz.4.3464': attribute type 1 has an invalid length. [ 1397.238657][T20114] device bond1 entered promiscuous mode [ 1397.245069][T20114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1397.293344][T20120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1397.300707][T20120] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1397.320752][T20120] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1397.356951][T20120] bond1: (slave xfrm1): making interface the new active one [ 1397.371423][T20120] device xfrm1 entered promiscuous mode [ 1397.382471][T20120] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 1397.395033][T11371] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1397.499060][ T4317] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1397.552990][T20126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3466'. [ 1397.719789][ T4317] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1397.761218][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.846226][ T4317] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 1398.180589][T20144] overlayfs: missing 'workdir' [ 1398.242260][T14368] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1398.446919][T14368] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.470946][T14368] usb 3-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 1398.497144][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3477'. [ 1398.509297][T14368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1398.549946][T14368] usb 3-1: Product: syz [ 1398.561067][T14368] usb 3-1: Manufacturer: syz [ 1398.583631][T14368] navman 3-1:1.0: navman converter detected [ 1398.625961][T14368] usb 3-1: navman converter now attached to ttyUSB0 [ 1398.850703][T14368] usb 3-1: USB disconnect, device number 14 [ 1398.870078][T14368] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 1398.894551][T14368] navman 3-1:1.0: device disconnected [ 1399.207622][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1399.214119][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1399.582709][T20183] overlayfs: missing 'workdir' [ 1402.289171][ T4288] Bluetooth: hci0: command 0x0401 tx timeout [ 1403.426412][T20194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3489'. [ 1403.703557][T20201] tipc: Enabled bearer , priority 0 [ 1403.730739][T20201] device syzkaller0 entered promiscuous mode [ 1403.786989][T20201] tipc: Resetting bearer [ 1403.812618][T20200] tipc: Resetting bearer [ 1403.942131][T20200] tipc: Disabling bearer [ 1403.969943][ T9748] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1404.174693][ T9748] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1404.201405][ T9748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.259511][ T9748] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 1404.584349][T20239] netlink: 'syz.6.3502': attribute type 3 has an invalid length. [ 1404.863727][T20250] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3506'. [ 1404.903963][T20250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3506'. [ 1406.141845][T20309] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3523'. [ 1406.210180][T20309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3523'. [ 1406.477154][T20321] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3528'. [ 1406.775285][T20334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3533'. [ 1406.797471][T20331] sch_tbf: burst 959 is lower than device syzkaller0 mtu (1500) ! [ 1406.887221][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 1407.282423][T20355] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3538'. [ 1407.317913][T20355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3538'. [ 1407.946019][T20375] device syzkaller0 entered promiscuous mode [ 1408.670079][T20404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3551'. [ 1408.844205][T20413] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3553'. [ 1408.907474][T20413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3553'. [ 1409.552630][T20437] device syzkaller0 entered promiscuous mode [ 1410.380859][T20465] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3567'. [ 1410.443113][T20465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3567'. [ 1410.625689][T20474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3569'. [ 1411.970824][T20524] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3582'. [ 1412.033349][T20524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3582'. [ 1413.374189][T20580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3596'. [ 1413.638544][T20594] device syzkaller0 entered promiscuous mode [ 1413.673717][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.699299][T20633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3610'. [ 1415.409525][T20659] netlink: 'syz.3.3619': attribute type 20 has an invalid length. [ 1415.426656][T20659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3619'. [ 1415.487731][T20659] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1415.496909][T20659] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1415.505647][T20659] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1415.514411][T20659] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1415.647755][T20659] netlink: 'syz.3.3619': attribute type 20 has an invalid length. [ 1415.702805][T20659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3619'. [ 1415.832623][T20673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3623'. [ 1416.044962][ T4289] Bluetooth: hci1: command 0x2021 tx timeout [ 1416.761340][T20702] device syzkaller0 entered promiscuous mode [ 1417.225191][T20720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3636'. [ 1417.793905][T20743] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 1417.971010][ T4289] Bluetooth: hci4: link tx timeout [ 1418.003467][ T4289] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1418.241919][T20754] Bluetooth: MGMT ver 1.22 [ 1418.455725][T20757] netlink: 'syz.2.3647': attribute type 1 has an invalid length. [ 1418.508984][T20757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1418.542427][T20764] device syzkaller0 entered promiscuous mode [ 1418.653384][T20771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3650'. [ 1418.739770][T20757] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 1418.808326][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1419.025886][T20783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3655'. [ 1419.548797][T20798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3658'. [ 1419.852184][T20812] device syzkaller0 entered promiscuous mode [ 1420.288994][T20830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3669'. [ 1420.595649][T20845] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3674'. [ 1420.696258][T20849] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3675'. [ 1420.986870][T20857] batadv0 speed is unknown, defaulting to 1000 [ 1421.127359][T20864] device syzkaller0 entered promiscuous mode [ 1421.602132][T20881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3683'. [ 1421.873740][T20893] device hsr0 entered promiscuous mode [ 1422.475287][T20916] device syzkaller0 entered promiscuous mode [ 1422.661015][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3698'. [ 1422.978438][T20929] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1423.090554][T20932] device syzkaller0 entered promiscuous mode [ 1423.135370][T20934] netlink: 'syz.1.3703': attribute type 1 has an invalid length. [ 1423.190698][T20934] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3703'. [ 1423.678877][T20942] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1423.974384][T20965] device syzkaller0 entered promiscuous mode [ 1424.053753][T20969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3713'. [ 1424.763065][T20999] tipc: Enabled bearer , priority 0 [ 1424.792306][T20999] device syzkaller0 entered promiscuous mode [ 1424.949535][T20999] tipc: Resetting bearer [ 1424.981681][T20998] tipc: Resetting bearer [ 1425.084605][T20998] tipc: Disabling bearer [ 1425.232462][T21016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3728'. [ 1425.872128][T21042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3737'. [ 1426.127863][T21053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3741'. [ 1427.126992][T21087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3749'. [ 1427.136059][T21087] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3749'. [ 1427.565530][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3754'. [ 1428.781026][T21158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3766'. [ 1428.790336][T21157] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3765'. [ 1429.039906][T21165] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3768'. [ 1429.077045][T21165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3768'. [ 1429.497886][T21182] device syzkaller0 entered promiscuous mode [ 1429.653556][T21186] device syzkaller1 entered promiscuous mode [ 1430.112764][T21203] device syzkaller1 entered promiscuous mode [ 1430.536847][T21216] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3782'. [ 1431.077434][T21237] device syzkaller0 entered promiscuous mode [ 1431.272923][T21244] device syzkaller1 entered promiscuous mode [ 1431.774615][T21257] __nla_validate_parse: 1 callbacks suppressed [ 1431.774632][T21257] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3796'. [ 1431.867418][T21257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3796'. [ 1432.496591][T21278] device syzkaller0 entered promiscuous mode [ 1432.810807][ T4322] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1433.023122][ T4322] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1433.063440][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.114006][ T4322] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 1433.210371][T21296] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3813'. [ 1433.242983][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3813'. [ 1433.989434][T21319] device syzkaller0 entered promiscuous mode [ 1434.825888][T21346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3830'. [ 1438.512809][T21343] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3830'. [ 1438.883327][T21371] IPv6: Can't replace route, no match found [ 1439.583632][T21407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3848'. [ 1439.611412][ T14] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1439.623421][ T14] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1439.631853][ T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted syzkaller #0 [ 1439.639280][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1439.649359][ T14] Workqueue: usb_hub_wq hub_event [ 1439.654521][ T14] RIP: 0010:emi26_probe+0x282/0x1610 [ 1439.659953][ T14] Code: ff 89 de e8 30 fd 56 f7 85 db 0f 84 cc 01 00 00 e8 43 fa 56 f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7d 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7d 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 1439.679648][ T14] RSP: 0018:ffffc90000136ee0 EFLAGS: 00010247 [ 1439.685813][ T14] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 1439.693811][ T14] RDX: ffffc9001a280000 RSI: 00000000000147e2 RDI: 0000000000000004 [ 1439.701806][ T14] RBP: ffffc90000137020 R08: ffffffff90b0f2af R09: 1ffffffff2161e55 [ 1439.709813][ T14] R10: dffffc0000000000 R11: fffffbfff2161e56 R12: fffffffffffffffa [ 1439.717814][ T14] R13: 0000000000000000 R14: 1fffffffffffffff R15: 1fffffffffffffff [ 1439.725808][ T14] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1439.734763][ T14] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1439.741391][ T14] CR2: 00007f60f27f5f60 CR3: 000000005c2f0000 CR4: 00000000003526f0 [ 1439.749384][ T14] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1439.757351][ T14] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1439.765381][ T14] Call Trace: [ 1439.768746][ T14] [ 1439.771756][ T14] ? cytherm_disconnect+0x80/0x80 [ 1439.776865][ T14] ? __pm_runtime_set_status+0x8a6/0xba0 [ 1439.782571][ T14] usb_probe_interface+0x5be/0xae0 [ 1439.787689][ T14] ? usb_register_driver+0x3c0/0x3c0 [ 1439.792990][ T14] really_probe+0x24a/0xb40 [ 1439.797567][ T14] ? pm_runtime_barrier+0x147/0x1c0 [ 1439.802762][ T14] __driver_probe_device+0x1f5/0x390 [ 1439.808044][ T14] driver_probe_device+0x4f/0x420 [ 1439.813072][ T14] __device_attach_driver+0x2c6/0x510 [ 1439.818446][ T14] ? coredump_store+0x90/0x90 [ 1439.823125][ T14] bus_for_each_drv+0x184/0x210 [ 1439.827980][ T14] ? coredump_store+0x90/0x90 [ 1439.832657][ T14] ? subsys_find_device_by_id+0x360/0x360 [ 1439.838375][ T14] ? __mutex_lock+0x1ab/0xae0 [ 1439.843219][ T14] __device_attach+0x2a7/0x480 [ 1439.847981][ T14] ? device_attach+0x20/0x20 [ 1439.852565][ T14] ? kobject_uevent_env+0x364/0x890 [ 1439.858479][ T14] bus_probe_device+0xba/0x1d0 [ 1439.863237][ T14] device_add+0xbcf/0x1050 [ 1439.867808][ T14] usb_set_configuration+0x19d5/0x2030 [ 1439.873278][ T14] usb_generic_driver_probe+0x89/0x150 [ 1439.878799][ T14] usb_probe_device+0x126/0x250 [ 1439.883655][ T14] ? usb_register_device_driver+0x230/0x230 [ 1439.889550][ T14] really_probe+0x24a/0xb40 [ 1439.894049][ T14] ? pm_runtime_barrier+0x147/0x1c0 [ 1439.899247][ T14] __driver_probe_device+0x1f5/0x390 [ 1439.904525][ T14] driver_probe_device+0x4f/0x420 [ 1439.909568][ T14] __device_attach_driver+0x2c6/0x510 [ 1439.914934][ T14] ? coredump_store+0x90/0x90 [ 1439.919624][ T14] bus_for_each_drv+0x184/0x210 [ 1439.924555][ T14] ? coredump_store+0x90/0x90 [ 1439.929226][ T14] ? subsys_find_device_by_id+0x360/0x360 [ 1439.934940][ T14] __device_attach+0x2a7/0x480 [ 1439.939732][ T14] ? device_attach+0x20/0x20 [ 1439.944316][ T14] ? kobject_uevent_env+0x364/0x890 [ 1439.949617][ T14] bus_probe_device+0xba/0x1d0 [ 1439.954382][ T14] device_add+0xbcf/0x1050 [ 1439.958795][ T14] usb_new_device+0xa01/0x15e0 [ 1439.963578][ T14] ? usb_disconnect+0x8a0/0x8a0 [ 1439.968428][ T14] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1439.973625][ T14] ? lockdep_hardirqs_on+0x94/0x140 [ 1439.978843][ T14] hub_event+0x2b2f/0x5200 [ 1439.983275][ T14] ? hub_post_resume+0x120/0x120 [ 1439.988208][ T14] ? read_lock_is_recursive+0x10/0x10 [ 1439.993596][ T14] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1439.999502][ T14] ? _raw_spin_unlock+0x40/0x40 [ 1440.004353][ T14] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1440.009545][ T14] ? process_one_work+0x7b4/0x1160 [ 1440.014742][ T14] process_one_work+0x8ab/0x1160 [ 1440.019705][ T14] ? worker_detach_from_pool+0x240/0x240 [ 1440.025338][ T14] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1440.030452][ T14] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1440.035994][ T14] ? wq_worker_running+0x97/0x190 [ 1440.041217][ T14] worker_thread+0xaf5/0x12a0 [ 1440.045931][ T14] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1440.051841][ T14] kthread+0x29d/0x330 [ 1440.056201][ T14] ? worker_clr_flags+0x1a0/0x1a0 [ 1440.061223][ T14] ? kthread_blkcg+0xd0/0xd0 [ 1440.065812][ T14] ret_from_fork+0x1f/0x30 [ 1440.070274][ T14] [ 1440.073296][ T14] Modules linked in: [ 1440.077911][ T4317] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] PREEMPT SMP KASAN [ 1440.089707][ T4317] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1440.098141][ T4317] CPU: 0 PID: 4317 Comm: kworker/0:3 Tainted: G D syzkaller #0 [ 1440.107083][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1440.117149][ T4317] Workqueue: usb_hub_wq hub_event [ 1440.122184][ T4317] RIP: 0010:emi26_probe+0x282/0x1610 [ 1440.127471][ T4317] Code: ff 89 de e8 30 fd 56 f7 85 db 0f 84 cc 01 00 00 e8 43 fa 56 f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7d 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7d 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 1440.147079][ T4317] RSP: 0018:ffffc90004296ee0 EFLAGS: 00010247 [ 1440.153150][ T4317] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 1440.161137][ T4317] RDX: ffffc9001aa81000 RSI: 00000000000156a9 RDI: 0000000000000004 [ 1440.169121][ T4317] RBP: ffffc90004297020 R08: ffff88807da83c2b R09: 1ffff1100fb50785 [ 1440.177269][ T4317] R10: dffffc0000000000 R11: ffffed100fb50786 R12: fffffffffffffffa [ 1440.185241][ T4317] R13: 0000000000000000 R14: 1fffffffffffffff R15: 1fffffffffffffff [ 1440.193211][ T4317] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1440.202141][ T4317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1440.208746][ T4317] CR2: 00007f60f27f5f60 CR3: 000000005c2f0000 CR4: 00000000003526f0 [ 1440.216727][ T4317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1440.224788][ T4317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1440.232759][ T4317] Call Trace: [ 1440.236035][ T4317] [ 1440.238962][ T4317] ? cytherm_disconnect+0x80/0x80 [ 1440.243996][ T4317] ? __pm_runtime_set_status+0x8a6/0xba0 [ 1440.249645][ T4317] usb_probe_interface+0x5be/0xae0 [ 1440.254759][ T4317] ? usb_register_driver+0x3c0/0x3c0 [ 1440.260056][ T4317] really_probe+0x24a/0xb40 [ 1440.264561][ T4317] ? pm_runtime_barrier+0x147/0x1c0 [ 1440.269758][ T4317] __driver_probe_device+0x1f5/0x390 [ 1440.275043][ T4317] driver_probe_device+0x4f/0x420 [ 1440.280419][ T4317] __device_attach_driver+0x2c6/0x510 [ 1440.285791][ T4317] ? coredump_store+0x90/0x90 [ 1440.290466][ T4317] bus_for_each_drv+0x184/0x210 [ 1440.295315][ T4317] ? coredump_store+0x90/0x90 [ 1440.300020][ T4317] ? subsys_find_device_by_id+0x360/0x360 [ 1440.306044][ T4317] ? __mutex_lock+0x1ab/0xae0 [ 1440.310728][ T4317] __device_attach+0x2a7/0x480 [ 1440.315679][ T4317] ? device_attach+0x20/0x20 [ 1440.320284][ T4317] ? kobject_uevent_env+0x364/0x890 [ 1440.325496][ T4317] bus_probe_device+0xba/0x1d0 [ 1440.330267][ T4317] device_add+0xbcf/0x1050 [ 1440.334688][ T4317] usb_set_configuration+0x19d5/0x2030 [ 1440.340152][ T4317] usb_generic_driver_probe+0x89/0x150 [ 1440.345612][ T4317] usb_probe_device+0x126/0x250 [ 1440.350459][ T4317] ? usb_register_device_driver+0x230/0x230 [ 1440.356347][ T4317] really_probe+0x24a/0xb40 [ 1440.360955][ T4317] ? pm_runtime_barrier+0x147/0x1c0 [ 1440.366158][ T4317] __driver_probe_device+0x1f5/0x390 [ 1440.371441][ T4317] driver_probe_device+0x4f/0x420 [ 1440.376469][ T4317] __device_attach_driver+0x2c6/0x510 [ 1440.381858][ T4317] ? coredump_store+0x90/0x90 [ 1440.386545][ T4317] bus_for_each_drv+0x184/0x210 [ 1440.391397][ T4317] ? coredump_store+0x90/0x90 [ 1440.396073][ T4317] ? subsys_find_device_by_id+0x360/0x360 [ 1440.401789][ T4317] __device_attach+0x2a7/0x480 [ 1440.406558][ T4317] ? device_attach+0x20/0x20 [ 1440.411152][ T4317] ? kobject_uevent_env+0x364/0x890 [ 1440.416441][ T4317] bus_probe_device+0xba/0x1d0 [ 1440.421206][ T4317] device_add+0xbcf/0x1050 [ 1440.425623][ T4317] usb_new_device+0xa01/0x15e0 [ 1440.430390][ T4317] ? usb_disconnect+0x8a0/0x8a0 [ 1440.435239][ T4317] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1440.440437][ T4317] ? lockdep_hardirqs_on+0x94/0x140 [ 1440.445822][ T4317] hub_event+0x2b2f/0x5200 [ 1440.450251][ T4317] ? hub_post_resume+0x120/0x120 [ 1440.455192][ T4317] ? read_lock_is_recursive+0x10/0x10 [ 1440.460568][ T4317] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1440.466459][ T4317] ? _raw_spin_unlock+0x40/0x40 [ 1440.471311][ T4317] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1440.476514][ T4317] ? process_one_work+0x7b4/0x1160 [ 1440.481625][ T4317] process_one_work+0x8ab/0x1160 [ 1440.486567][ T4317] ? worker_detach_from_pool+0x240/0x240 [ 1440.492220][ T4317] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1440.497278][ T4317] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1440.502828][ T4317] ? wq_worker_running+0x97/0x190 [ 1440.507861][ T4317] worker_thread+0xaf5/0x12a0 [ 1440.512543][ T4317] kthread+0x29d/0x330 [ 1440.516609][ T4317] ? worker_clr_flags+0x1a0/0x1a0 [ 1440.521636][ T4317] ? kthread_blkcg+0xd0/0xd0 [ 1440.526236][ T4317] ret_from_fork+0x1f/0x30 [ 1440.530656][ T4317] [ 1440.533671][ T4317] Modules linked in: [ 1440.538435][ T9748] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#3] PREEMPT SMP KASAN [ 1440.550181][ T9748] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1440.558616][ T9748] CPU: 0 PID: 9748 Comm: kworker/0:16 Tainted: G D syzkaller #0 [ 1440.567639][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1440.577697][ T9748] Workqueue: usb_hub_wq hub_event [ 1440.583079][ T9748] RIP: 0010:emi26_probe+0x282/0x1610 [ 1440.588365][ T9748] Code: ff 89 de e8 30 fd 56 f7 85 db 0f 84 cc 01 00 00 e8 43 fa 56 f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7d 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7d 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 1440.607978][ T9748] RSP: 0018:ffffc90004f06ee0 EFLAGS: 00010247 [ 1440.614080][ T9748] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 1440.622059][ T9748] RDX: ffffc9001b282000 RSI: 000000000001585d RDI: 0000000000000004 [ 1440.630030][ T9748] RBP: ffffc90004f07020 R08: ffff88807da83c2b R09: 1ffff1100fb50785 [ 1440.637999][ T9748] R10: dffffc0000000000 R11: ffffed100fb50786 R12: fffffffffffffffa [ 1440.645969][ T9748] R13: 0000000000000000 R14: 1fffffffffffffff R15: 1fffffffffffffff [ 1440.653943][ T9748] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1440.662886][ T9748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1440.669467][ T9748] CR2: 00007f60f27f5f60 CR3: 000000005c2f0000 CR4: 00000000003526f0 [ 1440.677475][ T9748] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1440.685459][ T9748] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1440.693430][ T9748] Call Trace: [ 1440.696708][ T9748] [ 1440.699639][ T9748] ? cytherm_disconnect+0x80/0x80 [ 1440.704674][ T9748] ? __pm_runtime_set_status+0x8a6/0xba0 [ 1440.710334][ T9748] usb_probe_interface+0x5be/0xae0 [ 1440.715450][ T9748] ? usb_register_driver+0x3c0/0x3c0 [ 1440.720756][ T9748] really_probe+0x24a/0xb40 [ 1440.725257][ T9748] ? pm_runtime_barrier+0x147/0x1c0 [ 1440.730492][ T9748] __driver_probe_device+0x1f5/0x390 [ 1440.735785][ T9748] driver_probe_device+0x4f/0x420 [ 1440.740816][ T9748] __device_attach_driver+0x2c6/0x510 [ 1440.746194][ T9748] ? coredump_store+0x90/0x90 [ 1440.750877][ T9748] bus_for_each_drv+0x184/0x210 [ 1440.755728][ T9748] ? coredump_store+0x90/0x90 [ 1440.760400][ T9748] ? subsys_find_device_by_id+0x360/0x360 [ 1440.766118][ T9748] ? __mutex_lock+0x1ab/0xae0 [ 1440.770811][ T9748] __device_attach+0x2a7/0x480 [ 1440.775665][ T9748] ? device_attach+0x20/0x20 [ 1440.780262][ T9748] ? kobject_uevent_env+0x364/0x890 [ 1440.785460][ T9748] bus_probe_device+0xba/0x1d0 [ 1440.790230][ T9748] device_add+0xbcf/0x1050 [ 1440.794845][ T9748] usb_set_configuration+0x19d5/0x2030 [ 1440.800339][ T9748] usb_generic_driver_probe+0x89/0x150 [ 1440.805796][ T9748] usb_probe_device+0x126/0x250 [ 1440.810651][ T9748] ? usb_register_device_driver+0x230/0x230 [ 1440.816740][ T9748] really_probe+0x24a/0xb40 [ 1440.821240][ T9748] ? pm_runtime_barrier+0x147/0x1c0 [ 1440.826436][ T9748] __driver_probe_device+0x1f5/0x390 [ 1440.831721][ T9748] driver_probe_device+0x4f/0x420 [ 1440.836748][ T9748] __device_attach_driver+0x2c6/0x510 [ 1440.842122][ T9748] ? coredump_store+0x90/0x90 [ 1440.846799][ T9748] bus_for_each_drv+0x184/0x210 [ 1440.851645][ T9748] ? coredump_store+0x90/0x90 [ 1440.856316][ T9748] ? subsys_find_device_by_id+0x360/0x360 [ 1440.862033][ T9748] __device_attach+0x2a7/0x480 [ 1440.866793][ T9748] ? device_attach+0x20/0x20 [ 1440.871384][ T9748] ? kobject_uevent_env+0x364/0x890 [ 1440.876580][ T9748] bus_probe_device+0xba/0x1d0 [ 1440.881339][ T9748] device_add+0xbcf/0x1050 [ 1440.885764][ T9748] usb_new_device+0xa01/0x15e0 [ 1440.890533][ T9748] ? usb_disconnect+0x8a0/0x8a0 [ 1440.895388][ T9748] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1440.900585][ T9748] ? lockdep_hardirqs_on+0x94/0x140 [ 1440.905782][ T9748] hub_event+0x2b2f/0x5200 [ 1440.910219][ T9748] ? hub_post_resume+0x120/0x120 [ 1440.915156][ T9748] ? read_lock_is_recursive+0x10/0x10 [ 1440.920537][ T9748] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1440.926456][ T9748] ? _raw_spin_unlock+0x40/0x40 [ 1440.931305][ T9748] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1440.936498][ T9748] ? process_one_work+0x7b4/0x1160 [ 1440.941608][ T9748] process_one_work+0x8ab/0x1160 [ 1440.946549][ T9748] ? worker_detach_from_pool+0x240/0x240 [ 1440.952187][ T9748] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1440.957325][ T9748] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1440.962868][ T9748] ? wq_worker_running+0x97/0x190 [ 1440.967901][ T9748] worker_thread+0xaf5/0x12a0 [ 1440.972600][ T9748] kthread+0x29d/0x330 [ 1440.976665][ T9748] ? worker_clr_flags+0x1a0/0x1a0 [ 1440.981686][ T9748] ? kthread_blkcg+0xd0/0xd0 [ 1440.986296][ T9748] ret_from_fork+0x1f/0x30 [ 1440.990719][ T9748] [ 1440.993730][ T9748] Modules linked in: [ 1440.997728][ T4322] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#4] PREEMPT SMP KASAN [ 1441.009556][ T4322] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1441.018004][ T4322] CPU: 0 PID: 4322 Comm: kworker/0:6 Tainted: G D syzkaller #0 [ 1441.026941][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1441.037110][ T4322] Workqueue: usb_hub_wq hub_event [ 1441.042151][ T4322] RIP: 0010:emi26_probe+0x282/0x1610 [ 1441.047539][ T4322] Code: ff 89 de e8 30 fd 56 f7 85 db 0f 84 cc 01 00 00 e8 43 fa 56 f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7d 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7d 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 1441.067253][ T4322] RSP: 0018:ffffc90004816ee0 EFLAGS: 00010247 [ 1441.073424][ T4322] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 1441.081424][ T4322] RDX: ffffc90012667000 RSI: 00000000000158d4 RDI: 0000000000000004 [ 1441.089659][ T4322] RBP: ffffc90004817020 R08: ffff88807da83c2b R09: 1ffff1100fb50785 [ 1441.097647][ T4322] R10: dffffc0000000000 R11: ffffed100fb50786 R12: fffffffffffffffa [ 1441.105636][ T4322] R13: 0000000000000000 R14: 1fffffffffffffff R15: 1fffffffffffffff [ 1441.113880][ T4322] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1441.122812][ T4322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1441.129396][ T4322] CR2: 00007f60f27f5f60 CR3: 000000005c2f0000 CR4: 00000000003526f0 [ 1441.137371][ T4322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1441.145339][ T4322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1441.153483][ T4322] Call Trace: [ 1441.156760][ T4322] [ 1441.159693][ T4322] ? cytherm_disconnect+0x80/0x80 [ 1441.164726][ T4322] ? __pm_runtime_set_status+0x8a6/0xba0 [ 1441.170369][ T4322] usb_probe_interface+0x5be/0xae0 [ 1441.175575][ T4322] ? usb_register_driver+0x3c0/0x3c0 [ 1441.180859][ T4322] really_probe+0x24a/0xb40 [ 1441.185492][ T4322] ? pm_runtime_barrier+0x147/0x1c0 [ 1441.190705][ T4322] __driver_probe_device+0x1f5/0x390 [ 1441.196011][ T4322] driver_probe_device+0x4f/0x420 [ 1441.201042][ T4322] __device_attach_driver+0x2c6/0x510 [ 1441.206467][ T4322] ? coredump_store+0x90/0x90 [ 1441.211168][ T4322] bus_for_each_drv+0x184/0x210 [ 1441.216018][ T4322] ? coredump_store+0x90/0x90 [ 1441.220785][ T4322] ? subsys_find_device_by_id+0x360/0x360 [ 1441.226508][ T4322] ? __mutex_lock+0x1ab/0xae0 [ 1441.231192][ T4322] __device_attach+0x2a7/0x480 [ 1441.235960][ T4322] ? device_attach+0x20/0x20 [ 1441.240548][ T4322] ? kobject_uevent_env+0x364/0x890 [ 1441.245755][ T4322] bus_probe_device+0xba/0x1d0 [ 1441.250516][ T4322] device_add+0xbcf/0x1050 [ 1441.254961][ T4322] usb_set_configuration+0x19d5/0x2030 [ 1441.260526][ T4322] usb_generic_driver_probe+0x89/0x150 [ 1441.265996][ T4322] usb_probe_device+0x126/0x250 [ 1441.270860][ T4322] ? usb_register_device_driver+0x230/0x230 [ 1441.276780][ T4322] really_probe+0x24a/0xb40 [ 1441.281755][ T4322] ? pm_runtime_barrier+0x147/0x1c0 [ 1441.287109][ T4322] __driver_probe_device+0x1f5/0x390 [ 1441.292579][ T4322] driver_probe_device+0x4f/0x420 [ 1441.297692][ T4322] __device_attach_driver+0x2c6/0x510 [ 1441.303068][ T4322] ? coredump_store+0x90/0x90 [ 1441.307748][ T4322] bus_for_each_drv+0x184/0x210 [ 1441.312612][ T4322] ? coredump_store+0x90/0x90 [ 1441.317316][ T4322] ? subsys_find_device_by_id+0x360/0x360 [ 1441.323039][ T4322] __device_attach+0x2a7/0x480 [ 1441.328081][ T4322] ? device_attach+0x20/0x20 [ 1441.332675][ T4322] ? kobject_uevent_env+0x364/0x890 [ 1441.337875][ T4322] bus_probe_device+0xba/0x1d0 [ 1441.342830][ T4322] device_add+0xbcf/0x1050 [ 1441.347253][ T4322] usb_new_device+0xa01/0x15e0 [ 1441.352024][ T4322] ? usb_disconnect+0x8a0/0x8a0 [ 1441.356873][ T4322] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1441.362069][ T4322] ? lockdep_hardirqs_on+0x94/0x140 [ 1441.367445][ T4322] hub_event+0x2b2f/0x5200 [ 1441.371984][ T4322] ? hub_post_resume+0x120/0x120 [ 1441.376932][ T4322] ? read_lock_is_recursive+0x10/0x10 [ 1441.382311][ T4322] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1441.388203][ T4322] ? _raw_spin_unlock+0x40/0x40 [ 1441.393066][ T4322] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1441.398265][ T4322] ? process_one_work+0x7b4/0x1160 [ 1441.403380][ T4322] process_one_work+0x8ab/0x1160 [ 1441.408325][ T4322] ? worker_detach_from_pool+0x240/0x240 [ 1441.413961][ T4322] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1441.418993][ T4322] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1441.424579][ T4322] ? wq_worker_running+0x97/0x190 [ 1441.429612][ T4322] worker_thread+0xaf5/0x12a0 [ 1441.434304][ T4322] kthread+0x29d/0x330 [ 1441.438416][ T4322] ? worker_clr_flags+0x1a0/0x1a0 [ 1441.443455][ T4322] ? kthread_blkcg+0xd0/0xd0 [ 1441.448043][ T4322] ret_from_fork+0x1f/0x30 [ 1441.452469][ T4322] [ 1441.455485][ T4322] Modules linked in: [ 1441.465358][T21398] device syzkaller0 entered promiscuous mode [ 1441.471888][ T7] usb 5-1: emi26_load_firmware - request_firmware() failed [ 1441.482466][ T7] usb 5-1: emi26_load_firmware - error loading firmware: error = -12 [ 1441.496416][T21401] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3848'. [ 1441.505732][ T7] emi26 - firmware loader: probe of 5-1:1.0 failed with error -5 [ 1441.522366][ T7] usb 5-1: USB disconnect, device number 9 [ 1441.542842][ T9748] ---[ end trace 0000000000000000 ]--- [ 1441.548414][ T4317] ---[ end trace 0000000000000000 ]--- [ 1441.554099][ T4322] ---[ end trace 0000000000000000 ]--- [ 1441.559675][ T9748] RIP: 0010:emi26_probe+0x282/0x1610 [ 1441.565701][ T4317] RIP: 0010:emi26_probe+0x282/0x1610 [ 1441.571088][ T14] ---[ end trace 0000000000000000 ]--- [ 1441.576776][ T4322] RIP: 0010:emi26_probe+0x282/0x1610 [ 1441.582177][ T4317] Code: ff 89 de e8 30 fd 56 f7 85 db 0f 84 cc 01 00 00 e8 43 fa 56 f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7d 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7d 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 1441.612788][ T9748] Code: ff 89 de e8 30 fd 56 f7 85 db 0f 84 cc 01 00 00 e8 43 fa 56 f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7d 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7d 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 1441.633039][ T14] RIP: 0010:emi26_probe+0x282/0x1610 [ 1441.638652][ T4322] Code: ff 89 de e8 30 fd 56 f7 85 db 0f 84 cc 01 00 00 e8 43 fa 56 f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7d 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7d 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 1441.669252][ T14] Code: ff 89 de e8 30 fd 56 f7 85 db 0f 84 cc 01 00 00 e8 43 fa 56 f7 48 bb 00 00 00 00 00 fc ff df 49 8d 7d 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7d 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 1441.700132][ T4317] RSP: 0018:ffffc90000136ee0 EFLAGS: 00010247 [ 1441.706349][ T9748] RSP: 0018:ffffc90000136ee0 EFLAGS: 00010247 [ 1441.712711][ T4322] RSP: 0018:ffffc90000136ee0 EFLAGS: 00010247 [ 1441.718831][ T4322] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 1441.727377][ T4317] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 1441.736156][ T9748] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 1441.745019][ T14] RSP: 0018:ffffc90000136ee0 EFLAGS: 00010247 [ 1441.751137][ T14] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 1441.759606][ T9748] RDX: ffffc9001a280000 RSI: 00000000000147e2 RDI: 0000000000000004 [ 1441.768307][ T4317] RDX: ffffc9001a280000 RSI: 00000000000147e2 RDI: 0000000000000004 [ 1441.776478][ T4322] RDX: ffffc9001a280000 RSI: 00000000000147e2 RDI: 0000000000000004 [ 1441.784487][ T4322] RBP: ffffc90000137020 R08: ffffffff90b0f2af R09: 1ffffffff2161e55 [ 1441.792669][ T14] RDX: ffffc9001a280000 RSI: 00000000000147e2 RDI: 0000000000000004 [ 1441.800874][ T4317] RBP: ffffc90000137020 R08: ffffffff90b0f2af R09: 1ffffffff2161e55 [ 1441.809030][ T9748] RBP: ffffc90000137020 R08: ffffffff90b0f2af R09: 1ffffffff2161e55 [ 1441.817047][ T9748] R10: dffffc0000000000 R11: fffffbfff2161e56 R12: fffffffffffffffa [ 1441.825216][ T14] RBP: ffffc90000137020 R08: ffffffff90b0f2af R09: 1ffffffff2161e55 [ 1441.833287][ T4317] R10: dffffc0000000000 R11: fffffbfff2161e56 R12: fffffffffffffffa [ 1441.841436][ T4322] R10: dffffc0000000000 R11: fffffbfff2161e56 R12: fffffffffffffffa [ 1441.849440][ T4322] R13: 0000000000000000 R14: 1fffffffffffffff R15: 1fffffffffffffff [ 1441.858096][ T14] R10: dffffc0000000000 R11: fffffbfff2161e56 R12: fffffffffffffffa [ 1441.866169][ T4317] R13: 0000000000000000 R14: 1fffffffffffffff R15: 1fffffffffffffff [ 1441.874328][ T9748] R13: 0000000000000000 R14: 1fffffffffffffff R15: 1fffffffffffffff [ 1441.882379][ T9748] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1441.891494][ T14] R13: 0000000000000000 R14: 1fffffffffffffff R15: 1fffffffffffffff [ 1441.899554][ T4317] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1441.908685][ T4322] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1441.917738][ T14] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1441.927274][ T4317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1441.933946][ T9748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1441.940724][ T4322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1441.947492][ T4317] CR2: 00007f75a57ee2f8 CR3: 000000005b7da000 CR4: 00000000003526f0 [ 1441.955612][ T9748] CR2: 00007f75a57ee2f8 CR3: 000000005b7da000 CR4: 00000000003526f0 [ 1441.964114][ T14] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1441.970902][ T4322] CR2: 00007f75a57ee2f8 CR3: 000000005b7da000 CR4: 00000000003526f0 [ 1441.978976][ T4322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1441.987181][ T14] CR2: 00007f75a57ee2f8 CR3: 000000005b7da000 CR4: 00000000003526f0 [ 1441.995261][ T4317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1442.003520][ T9748] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1442.011595][ T14] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1442.019808][ T4317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1442.027872][ T9748] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1442.036054][ T4322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1442.054026][ T14] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1442.062236][ T4317] Kernel panic - not syncing: Fatal exception [ 1442.068572][ T4317] Kernel Offset: disabled [ 1442.072986][ T4317] Rebooting in 86400 seconds..