last executing test programs: 15m5.30697513s ago: executing program 2 (id=3): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, r0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21e", 0x3}], 0x1}}], 0x1, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x24) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850000000500000095000000dd3700009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 14m59.942196903s ago: executing program 2 (id=15): ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030204000903000038000000fcffffff0e00000000002000010005000000000000000000030000007f00000004000000040020000c"], 0x958) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xff0a, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r6, &(0x7f0000000040), 0x10) io_submit(r7, 0x1, &(0x7f00000012c0)=[0x0]) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000440)=ANY=[@ANYBLOB="0200a0061000070060000000020000a0d33309"]) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040300f110100000000000109022400010000000109040000010300060009210000000122040009058300018a56e2c7"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="001605000000a32789fa1ea04fee40fd631e17c5dae477"], 0x0}, 0x0) 14m44.048881506s ago: executing program 32 (id=15): ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030204000903000038000000fcffffff0e00000000002000010005000000000000000000030000007f00000004000000040020000c"], 0x958) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xff0a, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r6, &(0x7f0000000040), 0x10) io_submit(r7, 0x1, &(0x7f00000012c0)=[0x0]) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000440)=ANY=[@ANYBLOB="0200a0061000070060000000020000a0d33309"]) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040300f110100000000000109022400010000000109040000010300060009210000000122040009058300018a56e2c7"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="001605000000a32789fa1ea04fee40fd631e17c5dae477"], 0x0}, 0x0) 7m28.818046513s ago: executing program 4 (id=738): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 7m28.688163453s ago: executing program 0 (id=739): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x408006, 0x1f, 0x6}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m25.616736242s ago: executing program 0 (id=743): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x408006, 0x1f, 0x6}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m20.503674695s ago: executing program 0 (id=752): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7f, 0xc1, 0x0, 0x0, 0x1, 0x7f, 0xfffffffe, 0x28, 0x1, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x80000) connect$unix(r5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="48ae04"], 0x4) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) 7m18.469301729s ago: executing program 0 (id=754): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbff7f7e, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x107, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, 0x0, 0x44044800) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffd}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, 0x0, 0xc8036ab6d6cbef07, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x7, 0x71da}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 7m17.45848762s ago: executing program 4 (id=755): socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 7m16.460020741s ago: executing program 0 (id=757): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x84) 7m16.458461811s ago: executing program 4 (id=758): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 7m16.120892378s ago: executing program 0 (id=761): ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xff0a, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r4, &(0x7f0000000040), 0x10) io_submit(r5, 0x1, &(0x7f00000012c0)=[0x0]) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000440)=ANY=[@ANYBLOB="0200a0061000070060000000020000a0d33309"]) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040300f110100000000000109022400010000000109040000010300060009210000000122040009058300018a56e2c7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="001605000000a32789fa1ea04fee40fd631e17c5dae477"], 0x0}, 0x0) 7m14.675081435s ago: executing program 4 (id=764): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x503, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 7m10.718739505s ago: executing program 4 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000044) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfffff788}}}}}}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) r7 = syz_io_uring_setup(0xa0, 0x0, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r8, 0x0) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7m9.719654926s ago: executing program 4 (id=771): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) keyctl$session_to_parent(0x12) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0xa0042, 0x0) 7m0.889265659s ago: executing program 33 (id=761): ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xff0a, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r4, &(0x7f0000000040), 0x10) io_submit(r5, 0x1, &(0x7f00000012c0)=[0x0]) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000440)=ANY=[@ANYBLOB="0200a0061000070060000000020000a0d33309"]) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040300f110100000000000109022400010000000109040000010300060009210000000122040009058300018a56e2c7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="001605000000a32789fa1ea04fee40fd631e17c5dae477"], 0x0}, 0x0) 6m52.140636895s ago: executing program 34 (id=771): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) keyctl$session_to_parent(0x12) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0xa0042, 0x0) 3m8.656182067s ago: executing program 5 (id=1155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x100, 0x2, 0x1, 0x100, 0x8, 0x3, 0x7ff, 0x8, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m4.54178437s ago: executing program 5 (id=1164): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x24}, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0x6, 0x0, 0x1, 0x81, @tick=0xffffff00, {0x8, 0x30}, {0x2}, @time=@tick=0x1}], 0x38) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3m3.057513929s ago: executing program 5 (id=1165): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)={0x57c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x33e, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x100, 0x5b, "2068f96769f722c2c8ce1a867261d9750759594e5f3bae31c300081a2a8d77aaf7ba1bb71a5db537b50b8dfb6163fd506a97b272c9fb05534dcf6a96ef612ecc2e00a87f54bf04a836b21a48e6d177ed1e42acf3e31fdd5d3a9d7ff8bee52e200d73c0200f7ec48069a987fc794ac507ddf869419bab7ad862f7096e37ddd89055854ff2175c8d3c8c385b3956166f1bb91420e0c3aa0cc67875942545f021f45038118433358115a296ec6ab02c410ddc182899b42e521356881f27fabbeb706f9b15281461c78c3f50dcad81c1a3ecb6e22334669369b402702c53209e8b2641f37cc989b12f503c6f62bcf6f05db23c801cf6a0c5ba311015c026"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xc}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0xf5, 0x5b, "2537861a416172e1b3a4641f689e7128268d1c658d415db2a4a062885a2bced47cb6720eacc6e377961573f48e503a971c116892a4defcf1fdcda062dfbf3e7aabe23f1cbfdad14c8e50ab42677d34e5d1de13e5670d7a948fa03547a566b48a5b0b529334f38f00989ac8f9c4af14aa1d6f7923f034eaa15615e641dce7adf46324a7669f59b73e6d793886fefbeff2388ed14f2b826848e1009e8837d31c141b8154e4b1175f5935908b76f4cf686bb96c5a08a9b4b23a894bf84c18bb013702306fa8c94dcb33de65cd85d659fdbc55821a906a47490167f0fc01aee45814527289af1f4e581d66dca0fd8dcd40bab1"}]}, 0x57c}}, 0xc881) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000540)}, {0x0}, {&(0x7f0000000400)}, {&(0x7f0000002a00)="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", 0xfbe}, {&(0x7f0000003a00)}, {&(0x7f0000000640)="30117876826b04a4cd71f83c68076bbac59d0dc50a1594cd0fe8b96facc716302cfb257ac9d28f9b96b828d6f86a1a23", 0x30}, {&(0x7f0000000680)="726ca31e45f3e88c9cb1e08dff15b0056bd7fecd71b43a60d17820cf5369b94614ee323f80a84d9ceb5cbf18929e4aa5ba5910", 0x33}, {&(0x7f00000006c0)="7c3a4ac8166c14ccd19235060177cd99a6a3", 0x12}], 0x8) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x418040, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r2, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 3m1.294138282s ago: executing program 5 (id=1170): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$dri(0x0, 0x8, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180) 2m57.954450171s ago: executing program 5 (id=1176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) 2m54.39173198s ago: executing program 5 (id=1180): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000002c0)) 2m39.189426588s ago: executing program 35 (id=1180): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000002c0)) 11.868731671s ago: executing program 7 (id=1416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) 11.747304421s ago: executing program 1 (id=1418): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}}) msgsnd(0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) read$ptp(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0xfd, 0x146, &(0x7f00000002c0)="$eJzsj79LOnEcxl/39de30jQwsKAIGhLDPE9sa9BIErKDwqUp0IsCTVEIx2pu6A9wKIImcYjGhrLJUgj7O9yCxuLjXYXQ0v55LXfv1/PwcLe20g3iAxsmq6ViuWJUq0Z+bkvPpLZvbu/GhXcB/weNYrkiynmzf5+AffG0Q//E1I+ef0DBWMqVCuLuJyAIJMdg78CBitkdFc4vXMGIWi44D61J02m/uJjlpu2Q9JpO7H1cwoLYm/jZewNqdYf1Z+HQ9YwtYR3U6ovNxtNmp50Oh2aNMy01deUO2MgaTkAR+WukHX6JNBu9biezoWf0bkzTlmNqVFXjPf25k44fn2Nfdx/BjjK85xQbWThVoK5AY5D3HxQP0Lp414tel38EOPSBMpwo1veZSW434PgyfL9IJBKJRCKRSCQSiUTyVz4DAAD//0wAXes=") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) execve(&(0x7f00000003c0)='./file2\x00', 0x0, 0x0) 10.742875982s ago: executing program 7 (id=1419): socket$inet6(0xa, 0xd, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x1f5100) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 10.102741654s ago: executing program 3 (id=1420): ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030204000903000038000000fcffffff0e00000000002000010005000000000000000000030000007f00000004000000040020000c"], 0x958) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xff0a, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r6, 0x0, 0x0) io_submit(r7, 0x1, &(0x7f00000012c0)=[0x0]) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = syz_open_dev$usbfs(0x0, 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x0) 9.624681553s ago: executing program 1 (id=1421): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, r0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x7c0, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x62c, 0x1, [@m_ipt={0x254, 0x17, 0x0, 0x0, {{0x8}, {0x198, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x8c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x64, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a97"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xe8, 0x17, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x114, 0x18, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x69, 0x6, {0x3, 'security\x00', 0x84, 0x8, "cf8102ab12c6b2198a413eaa65607ab7ca51ab206bef3fe70b20aa2e7aacfa341b2d9158773430366e3a48eb70679ab8b9759ebcd3b2636776df09c3eb7702"}}]}, {0x75, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d867918fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c31cbba441df32848abb9344a809a2a4c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xe8, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0xfffa, 'nat\x00', 0x4, 0x8, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x55, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a803889"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0x44, 0x1, [@m_ipt={0x40, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x13c, 0x1, [@m_ipt={0xc4, 0x6, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x94, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x74, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4b, 0x6, "4b6275823d714c9413915317da89818ccff96e8938cf0100000000000000c9bdc74a0a5b7f653980ed0af5c857ee3a0361bfe072c3d9c7043b1d027446cc8454c51cbd25fb61c2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x7c0}}, 0x4008800) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21e", 0x3}], 0x1}}], 0x1, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x24) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850000000500000095000000dd3700009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 7.583003128s ago: executing program 1 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}}) 7.024957522s ago: executing program 7 (id=1423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d00000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xfff5, 0x0, 0x0}], 0x2}) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@null, @bcast, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default]}) r8 = dup2(r7, r4) fallocate(r8, 0x10, 0x480000000, 0xe6e) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r8, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xfffffffd, 0x1, 0xf34d, [0x3267, 0x8, 0x9, 0x4, 0x1, 0xa2e9, 0x8]}]}) 6.950466019s ago: executing program 3 (id=1424): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, r0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x7cc, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x62c, 0x1, [@m_ipt={0x254, 0x17, 0x0, 0x0, {{0x8}, {0x198, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x8c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x64, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a97"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xe8, 0x17, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x114, 0x18, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x69, 0x6, {0x3, 'security\x00', 0x84, 0x8, "cf8102ab12c6b2198a413eaa65607ab7ca51ab206bef3fe70b20aa2e7aacfa341b2d9158773430366e3a48eb70679ab8b9759ebcd3b2636776df09c3eb7702"}}]}, {0x75, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d867918fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c31cbba441df32848abb9344a809a2a4c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xe8, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0xfffa, 'nat\x00', 0x4, 0x8, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x55, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a803889"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0x44, 0x1, [@m_ipt={0x40, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x148, 0x1, [@m_ipt={0xd0, 0x6, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x9e, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x74, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4b, 0x6, "4b6275823d714c9413915317da89818ccff96e8938cf0100000000000000c9bdc74a0a5b7f653980ed0af5c857ee3a0361bfe072c3d9c7043b1d027446cc8454c51cbd25fb61c2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x7cc}}, 0x4008800) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21e", 0x3}], 0x1}}], 0x1, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x24) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850000000500000095000000dd3700009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 6.56775346s ago: executing program 1 (id=1425): socket$inet6(0xa, 0xd, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x1f5100) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 5.981520817s ago: executing program 7 (id=1426): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, r0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x730, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x62c, 0x1, [@m_ipt={0x254, 0x17, 0x0, 0x0, {{0x8}, {0x198, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x8c, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x64, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a97"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xe8, 0x17, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x114, 0x18, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x69, 0x6, {0x3, 'security\x00', 0x84, 0x8, "cf8102ab12c6b2198a413eaa65607ab7ca51ab206bef3fe70b20aa2e7aacfa341b2d9158773430366e3a48eb70679ab8b9759ebcd3b2636776df09c3eb7702"}}]}, {0x75, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d867918fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c31cbba441df32848abb9344a809a2a4c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xe8, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0xfffa, 'nat\x00', 0x4, 0x8, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x55, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a803889"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0x44, 0x1, [@m_ipt={0x40, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0xac, 0x1, [@m_ipt={0x34, 0x6, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x74, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4b, 0x6, "4b6275823d714c9413915317da89818ccff96e8938cf0100000000000000c9bdc74a0a5b7f653980ed0af5c857ee3a0361bfe072c3d9c7043b1d027446cc8454c51cbd25fb61c2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x730}}, 0x4008800) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21e", 0x3}], 0x1}}], 0x1, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x24) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850000000500000095000000dd3700009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 5.855441257s ago: executing program 3 (id=1427): ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030204000903000038000000fcffffff0e00000000002000010005000000000000000000030000007f0000000400000004002000"], 0x958) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xff0a, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r6, 0x0, 0x0) io_submit(r7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000440)=ANY=[@ANYBLOB="0200a0061000070060000000020000a0d33309"]) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 3.980555238s ago: executing program 3 (id=1428): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}}) msgsnd(0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') read$ptp(r0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0xfd, 0x146, &(0x7f00000002c0)="$eJzsj79LOnEcxl/39de30jQwsKAIGhLDPE9sa9BIErKDwqUp0IsCTVEIx2pu6A9wKIImcYjGhrLJUgj7O9yCxuLjXYXQ0v55LXfv1/PwcLe20g3iAxsmq6ViuWJUq0Z+bkvPpLZvbu/GhXcB/weNYrkiynmzf5+AffG0Q//E1I+ef0DBWMqVCuLuJyAIJMdg78CBitkdFc4vXMGIWi44D61J02m/uJjlpu2Q9JpO7H1cwoLYm/jZewNqdYf1Z+HQ9YwtYR3U6ovNxtNmp50Oh2aNMy01deUO2MgaTkAR+WukHX6JNBu9biezoWf0bkzTlmNqVFXjPf25k44fn2Nfdx/BjjK85xQbWThVoK5AY5D3HxQP0Lp414tel38EOPSBMpwo1veZSW434PgyfL9IJBKJRCKRSCQSiUTyVz4DAAD//0wAXes=") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) execve(&(0x7f00000003c0)='./file2\x00', 0x0, 0x0) 3.793708474s ago: executing program 1 (id=1429): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) pipe2(0x0, 0x800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x12, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe(0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 2.643334397s ago: executing program 1 (id=1430): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) pipe2(0x0, 0x800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x12, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe(0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 2.60937565s ago: executing program 7 (id=1431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) r7 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xfff5, 0x0, 0x0}], 0x2}) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@null, @bcast, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default]}) r9 = dup2(r8, r4) fallocate(r9, 0x10, 0x480000000, 0xe6e) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xfffffffd, 0x1, 0xf34d, [0x3267, 0x8, 0x9, 0x4, 0x1, 0xa2e9, 0x8]}]}) 2.560716463s ago: executing program 3 (id=1432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400"/16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) r7 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}], 0x1}) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@null, @bcast, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default]}) r9 = dup2(r8, r4) fallocate(r9, 0x10, 0x480000000, 0xe6e) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xfffffffd, 0x1, 0xf34d, [0x3267, 0x8, 0x9, 0x4, 0x1, 0xa2e9, 0x8]}]}) 2.54889ms ago: executing program 7 (id=1433): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) pipe2(0x0, 0x800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x12, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe(0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 0s ago: executing program 3 (id=1434): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x3, 0x8, 0x3, 0x3, 0x10001}) write$nbd(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x40) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) getrlimit(0x7, &(0x7f0000000180)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = fcntl$getown(r4, 0x9) fstat(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000000480)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f0000000080)=0x3, 0x12) setsockopt$packet_rx_ring(r12, 0x107, 0x5, 0x0, 0x0) getgroups(0x6, &(0x7f0000001040)=[r11, r9, r9, r9, r9, r9]) getresuid(&(0x7f0000001300), &(0x7f0000001340), &(0x7f0000003600)=0x0) syz_fuse_handle_req(r1, &(0x7f0000001400)="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", 0x2000, &(0x7f0000003780)={&(0x7f00000003c0)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x3, 0x80024, 0xfffe, 0x7, 0xa2, 0xff, 0x0, 0x0, 0x2}}, &(0x7f0000000440)={0x18, 0xfffffffffffffffe}, &(0x7f0000000ac0)={0x18, 0x0, 0x3, {0x5e57}}, &(0x7f0000000b00)={0x18, 0xfffffffffffffff5, 0x10, {0xaf}}, &(0x7f0000000c80)={0x18, 0x0, 0x8}, &(0x7f0000000dc0)={0x28, 0x0, 0x10, {{0x7fffffffffffffff, 0x1, 0x2, r7}}}, &(0x7f0000000f00)={0x60, 0xffffffffffffffda, 0x8001, {{0x5, 0x995e, 0xe7, 0x5, 0xe56, 0x3, 0x9, 0x1000}}}, &(0x7f0000000f80)={0x18, 0x0, 0x33, {0x5}}, &(0x7f0000000fc0)={0x11, 0x0, 0x200000000, {'\x00'}}, &(0x7f0000001000)={0x20, 0x0, 0xffffffff}, &(0x7f0000001080)={0x78, 0x0, 0x9, {0x4, 0x6, 0x0, {0x6, 0x8, 0x517, 0x4, 0x7, 0x5, 0x8000, 0x9319, 0xd1, 0x2000, 0x80000000, r8, r13, 0x6, 0xef3e}}}, &(0x7f0000001100)={0x90, 0xfffffffffffffff5, 0xff, {0x0, 0x2, 0xffffffffffffffff, 0x5, 0xa, 0x8, {0x4, 0xaea5, 0x3, 0x6, 0x4, 0xfff, 0x5, 0x50f, 0x10001, 0xc000, 0x47800, r8, r11, 0x2, 0xd}}}, &(0x7f00000011c0)={0x30, 0x0, 0x641, [{0x2, 0x8, 0x3, 0x5, 'syz'}]}, &(0x7f0000003400)={0x1f0, 0x87a6344ec50e7cd3, 0x4, [{{0x6, 0x2, 0x8, 0x10000, 0x2, 0xe8f5, {0x0, 0x200, 0x52, 0xc, 0x3, 0x231, 0x1000, 0x4, 0x4, 0x4000, 0x3, r10, r11, 0x3, 0x8}}, {0x2, 0x1000, 0x7, 0x654, ')#-!#:,'}}, {{0x2, 0x0, 0x49, 0x3, 0x10000, 0x3, {0x2, 0xfffffffffffffff8, 0x0, 0x200, 0x10, 0x1, 0x2, 0xaa, 0x1, 0x8000, 0x3, r8, r11, 0x0, 0x8}}, {0x4, 0x80000000, 0x8, 0x4d8c, 'keyring\x00'}}, {{0x0, 0x3, 0xfffffffffffffff9, 0xdf7, 0x9, 0x401, {0x0, 0x8, 0x85, 0x1, 0x8, 0x1, 0xb, 0x4, 0x3, 0x1000, 0x7, r8, r11, 0x431}}, {0x2, 0x7fffffffffffffff, 0x3, 0x5, 'syz'}}]}, &(0x7f0000001200)={0xa0, 0x0, 0x1, {{0x3, 0x0, 0x2, 0x7fff, 0x5, 0x1, {0x3, 0x3, 0xffffffffbb775cbb, 0x8, 0x0, 0xfffffffffffff800, 0x3, 0x40, 0xfffffffa, 0x2000, 0x7, r10, r11, 0xffffff80, 0x4}}, {0x0, 0x8}}}, 0x0, &(0x7f0000003640)={0x130, 0xffffffffffffffda, 0x5, {0x9, 0x5, 0x0, '\x00', {0x7ff, 0x7, 0x10001, 0xbfd8, r14, r11, 0x1000, '\x00', 0x7ff, 0x0, 0x2, 0x2, {0x0, 0x8}, {0x4, 0x5}, {0x100000001, 0x9}, {0x7fffffffffffffff, 0xbf4}, 0x94, 0x10000, 0x7fff, 0x5e9}}}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="99e117f769066baed53897c397e8e9c151570f1187b2f49f5f53480acde061ac884ce211eb5362b94a236016cb26a33412", 0x31}, {&(0x7f0000000280)="2e2493ddfbf7d519f53eb4a0b9dc7b2afa28d5041035b4f8b45a539de352f2582bda87dbfa7673bdbe16cb618b439b9d8c1ca369ad646d6fef9181df", 0x3c}], 0x2, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r11}}}], 0x20, 0x24040000}}, {{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000740)="d6b4f2553b343079b5e055acdeff9749fbf009a682ab854a16caaecbc7524ade09b8acc86706f3f268ab82cf429d322805a240b37ec31004526142aa124b861a482e6ef9276c481801c421adc3cf37ddada9d47b0cbb3e783fdd3aef2b195694e1f77adef0d433cf", 0x68}, {&(0x7f00000007c0)="da7ebdce0e81580711a94686e127dfd51eec52d4321b1859a8f9f18beefb5bc3a298ca73d3c5306e9507b79a3b9b69f58f6663ba4898f67788a339d2d4147173d6268da9fe0c3e1fc1186b8d376286504d369d008e8b682e0a7035d3af97949d24277aef07329039afac744ae0849c2c", 0x70}, {&(0x7f0000000880)="4012f8219f3dc17d54ab7cf53bb8ae25d06e4ce6be0f38b7f906f704e9e9302044c135b3118842539d4c30edc92cae203046dd13df0e05f1fd93511b9b699a7882766862d18de81d5e9fe21c87c145244a1f18b2fcffd72091eff895b1a0be5a0c25bd38981eaf68392c611195c86303463a72a03d8f3241c01b6f472b2cca9125617464173d4e6b6d287991f44089023df380660e9abe15102e810ee9fd8f29b0127753602d72b77a09f6cc88f2be820854af", 0xb3}, {&(0x7f0000000940)="db4d40526bd4294abf133219787863e71946c3e74b077abac67392bc578e53c9dc06e62267b2054a2087fa031438b7571f2ef03f017a485f72059fc11c26beca887093ea87f64f0202cb01a903f76dc23fac6cc838c9ff25489d61a580681131bea07671ada03b6ca50190b4c022318caaa6621befd3be3fc61d174583f6b9e1e61d1ec4867374dec0b0f3993b3396a8fa6b3f94d091d9a090069993bfcbe7cc0c365994872bbb94d4b94b193cd1ae42901d5c9f29b26329b82b15d3a10ef302aa0427bc42525fd03139b7388faed56e08e72116c84d47c375c6812f07f70f9d88", 0xe1}, {&(0x7f0000000bc0)="19bdb309170e0d06b1764dd78988fadc1161002ea460286dbd07948534a1605824fed67720d04ea76b0c9a476286995d0c58fce56fd358a2df0214bd7e3e38470dc55eedcd1c918e1ef86a1618", 0x4d}, {&(0x7f0000000cc0)="ec4a87b2973556475157aa0c7e0ef06180954b6ebcda60067a723164b7e13bf73cea91d984f8bbe60417377b01296369b1d29bb8e744221d16ba29ae646a7632ba88295e14c5da6bf17ace49d17b11534023168b66bbc9baf880a82b5a6ff24dce326bacc3820ccd809d8fcbb8aad28b9beb73a9e2219caa8b8d67e6e3fefd08b4565575ebf1f5b2510492e6e08b9e9ae2cd15aaf8f397f8d6382bb66a80d708e174e8a2f3c94ec1c26169d159f42d009dea6780ee7eeaecf5799b4d1e4f6c65b553e82d30adedb44d2e2eb185e2c56d14a26d0ebeb4fd236839b239b0f02fe79c4425b6aae88df54740350600", 0xed}], 0x6, 0x0, 0x0, 0x40}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, r2, r1, r12]}}, @rights={{0x28, 0x1, 0x1, [r5, r5, 0xffffffffffffffff, r5, r3, 0xffffffffffffffff]}}], 0x50, 0x4004000}}, {{&(0x7f0000000e80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001340), 0x0, 0x0, 0x0, 0x40000}}], 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) kernel console output (not intermixed with test programs): 75760][ T6824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.413353][ T6824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.446781][ T6824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.486516][ T6824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.521102][ T6824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.573143][ T6824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.595357][ T6824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.612916][ T6824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.632364][ T6824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.646000][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 454.684500][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 454.697203][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 454.805632][ T4234] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 454.822158][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.857105][ T6824] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.865044][ T4234] usb 5-1: config 0 descriptor?? [ 454.867469][ T6824] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.013708][ T6824] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.095761][ T6824] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.668880][ T4234] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 455.817153][ T411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.168532][ T411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.967324][ T4184] usb 5-1: USB disconnect, device number 17 [ 457.065133][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 457.068443][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 457.092647][ T5619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.132054][ T5619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.152469][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 458.145000][ T7281] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 458.893704][ T7291] binder: 7287:7291 ioctl c0306201 0 returned -14 [ 459.156131][ T7289] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 463.989419][ T7330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.033985][ T7331] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 471.460559][ T7380] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 473.134315][ T7398] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 474.767536][ T7416] binder: 7407:7416 ioctl c0306201 0 returned -14 [ 476.535409][ T7427] tipc: Enabled bearer , priority 0 [ 476.552638][ T7427] tipc: Resetting bearer [ 476.566413][ T7426] tipc: Disabling bearer [ 476.582854][ T7425] tipc: Started in network mode [ 476.618966][ T7425] tipc: Node identity e6b98e8e19de, cluster identity 4711 [ 476.644168][ T7425] tipc: Enabled bearer , priority 0 [ 476.676796][ T7428] device syzkaller0 entered promiscuous mode [ 476.996092][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.632'. [ 477.602206][ T7424] tipc: Resetting bearer [ 477.953070][ T4260] tipc: Node number set to 4284976782 [ 480.645829][ T7424] tipc: Disabling bearer [ 481.110225][ T7456] xt_CT: You must specify a L4 protocol and not use inversions on it [ 483.183310][ T7476] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 485.106112][ T7487] binder: 7480:7487 ioctl c0306201 0 returned -14 [ 486.470687][ T7504] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 488.742828][ T7515] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 490.439552][ T7525] device syzkaller0 entered promiscuous mode [ 491.219133][ T7535] netlink: 256 bytes leftover after parsing attributes in process `syz.5.663'. [ 492.041784][ T7521] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 492.200594][ T7537] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 493.395499][ T7545] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.657635][ T7592] xt_CT: You must specify a L4 protocol and not use inversions on it [ 502.107012][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.114176][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.397770][ T7615] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 505.924066][ T7622] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 528.158367][ T7773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 529.521062][ T7779] [U] „ [ 530.185703][ T4242] Bluetooth: hci3: command 0x0406 tx timeout [ 534.101194][ T7809] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 536.904043][ T4242] Bluetooth: hci5: command 0x1003 tx timeout [ 536.920106][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 537.100214][ T7829] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 537.129187][ T7829] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 539.381084][ T4184] Bluetooth: hci5: command 0x1001 tx timeout [ 539.403215][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 539.898737][ T7854] binder: 7845:7854 ioctl c0306201 0 returned -14 [ 541.414785][ T7857] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 542.006136][ T4184] Bluetooth: hci5: command 0x1009 tx timeout [ 542.974051][ T7868] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 545.677020][ T7880] binder: 7876:7880 ioctl c0306201 0 returned -14 [ 546.191304][ T7882] [U] „ [ 549.042991][ T7910] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.043095][ T7910] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.043128][ T7910] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.043160][ T7910] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.744809][ T7921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 550.787919][ T7911] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.098150][ T7941] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 556.724374][ T7955] fuse: Bad value for 'group_id' [ 563.620482][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.627470][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.881332][ T8005] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 566.445451][ T8016] netlink: 'syz.5.788': attribute type 1 has an invalid length. [ 566.625716][ T8016] loop5: detected capacity change from 0 to 512 [ 569.841383][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 571.991941][ T8037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.184137][ T4184] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 572.508372][ T4260] Bluetooth: hci5: command 0x041b tx timeout [ 572.924706][ T4184] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 572.936371][ T4184] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 572.946195][ T4184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.606621][ T4184] usb 4-1: config 0 descriptor?? [ 573.745232][ T4184] usb 4-1: can't set config #0, error -71 [ 573.801768][ T4184] usb 4-1: USB disconnect, device number 14 [ 574.815097][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 574.824575][ T4370] Bluetooth: hci6: command 0x0409 tx timeout [ 574.894186][ T4183] syz-executor (4183) used greatest stack depth: 20168 bytes left [ 574.942828][ T8008] chnl_net:caif_netlink_parms(): no params data found [ 575.036854][ T4358] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.090956][ T4358] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.261651][ T4358] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.283388][ T4358] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.371482][ T4358] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.386382][ T4358] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.638250][ T4358] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.689822][ T4358] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.719566][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.762388][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.772082][ T8008] device bridge_slave_0 entered promiscuous mode [ 576.818570][ T8008] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.827641][ T4242] Bluetooth: hci5: command 0x0419 tx timeout [ 576.835872][ T8075] syz.5.803 sent an empty control message without MSG_MORE. [ 576.844160][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.845455][ T8008] device bridge_slave_1 entered promiscuous mode [ 576.904004][ T4184] Bluetooth: hci6: command 0x041b tx timeout [ 577.128561][ T8008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.219735][ T8008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.313740][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 577.417957][ T4358] tipc: Left network mode [ 577.464232][ T8078] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 577.495647][ T8008] team0: Port device team_slave_0 added [ 577.504720][ T8078] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 577.548884][ T8008] team0: Port device team_slave_1 added [ 577.800911][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.825313][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.932750][ T8008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.078198][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.094322][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.141932][ T8045] device bridge_slave_0 entered promiscuous mode [ 578.181355][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.189511][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.198706][ T8045] device bridge_slave_1 entered promiscuous mode [ 578.227216][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.243768][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.177419][ T8008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.198078][ T1108] Bluetooth: hci6: command 0x040f tx timeout [ 579.512036][ T8008] device hsr_slave_0 entered promiscuous mode [ 579.592596][ T8008] device hsr_slave_1 entered promiscuous mode [ 580.292490][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.381306][ T4184] Bluetooth: hci6: command 0x0419 tx timeout [ 581.786249][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.998058][ T8045] team0: Port device team_slave_0 added [ 582.180069][ T8045] team0: Port device team_slave_1 added [ 582.304427][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.312291][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.413156][ T8045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.490941][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.506237][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.533459][ C0] vkms_vblank_simulate: vblank timer overrun [ 582.581219][ T8045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.594660][ T8129] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 582.860141][ T8045] device hsr_slave_0 entered promiscuous mode [ 582.907282][ T8045] device hsr_slave_1 entered promiscuous mode [ 582.925389][ T8045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.963610][ T8045] Cannot create hsr debugfs directory [ 582.978700][ T8139] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 583.075010][ T8008] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 583.133236][ T8008] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 583.194145][ T8008] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 583.266115][ T8008] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 583.462611][ T4358] device hsr_slave_0 left promiscuous mode [ 583.498840][ T4358] device hsr_slave_1 left promiscuous mode [ 583.547254][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.578021][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.630768][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.674020][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.707703][ T4358] device bridge_slave_1 left promiscuous mode [ 583.724193][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.741481][ T4358] device bridge_slave_0 left promiscuous mode [ 583.779600][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.833161][ T4358] device veth1_macvtap left promiscuous mode [ 583.854059][ T4358] device veth0_macvtap left promiscuous mode [ 583.882828][ T4358] device veth1_vlan left promiscuous mode [ 583.899446][ T4358] device veth0_vlan left promiscuous mode [ 585.847959][ T8160] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 587.475136][ T8174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 588.082957][ T8175] usb usb1: usbfs: process 8175 (syz.1.817) did not claim interface 0 before use [ 588.093428][ T8175] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 588.858998][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 588.933663][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 588.964441][ T8182] usb usb1: usbfs: process 8182 (syz.5.820) did not claim interface 0 before use [ 589.154174][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.193515][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.462845][ T4358] bond0 (unregistering): Released all slaves [ 590.809446][ T8045] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 590.891104][ T8045] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 590.941615][ T8045] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 590.985572][ T8045] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 591.529887][ T8008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.942389][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 591.994857][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 592.183170][ T8008] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.247256][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 593.256942][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 593.266598][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.274857][ T5619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.500692][ T8229] comedi comedi0: dac02: I/O port conflict (0x5,8) [ 593.816968][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 594.222728][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 594.233414][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 594.281999][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.289750][ T5619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.995782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 596.052716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 596.207558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 596.232621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 596.244097][ T4375] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 596.993538][ T8008] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 597.101462][ T8008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 597.221139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 597.261085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 597.456677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 597.904261][ T4375] usb 4-1: device descriptor read/all, error -71 [ 598.038897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 599.423733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 600.128106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 600.137666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 600.147976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 601.017032][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.108207][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 601.146852][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 601.286090][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.019375][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 602.105222][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 603.416736][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.424671][ T4431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.510323][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 603.534634][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 603.570112][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 603.613396][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.620824][ T8120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.653583][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 604.695713][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 604.777835][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 605.026725][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 605.762756][ T8309] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.772715][ T8309] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.782877][ T8309] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.794858][ T8309] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.862038][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 605.937923][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 606.101007][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 607.072802][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 607.140042][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 607.257611][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 607.294440][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 607.469518][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 607.503595][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 607.817602][ T8328] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.827144][ T8328] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.836363][ T8328] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.845712][ T8328] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.868419][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 607.931535][ T8008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.381418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 610.444331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 610.759920][ T8045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.285370][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 611.312394][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 611.572287][ T8008] device veth0_vlan entered promiscuous mode [ 611.962479][ T8368] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 611.986617][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 611.996452][ T8368] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 612.019796][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 612.109172][ T8008] device veth1_vlan entered promiscuous mode [ 612.155182][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 612.164803][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 612.230786][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 612.358220][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 612.457041][ T8008] device veth0_macvtap entered promiscuous mode [ 613.233248][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 613.281798][ T8008] device veth1_macvtap entered promiscuous mode [ 613.345402][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.359113][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.375578][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.388488][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.448226][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.463551][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.490699][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.512592][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.527767][ T8008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.565760][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 613.586836][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 614.415412][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.427765][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.696305][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.710577][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.319304][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.343993][ T4370] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 615.348418][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.364698][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.377254][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.391973][ T8008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.416128][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 615.426287][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 615.531538][ T8008] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.580315][ T8008] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.668176][ T8008] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.691390][ T8008] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.755626][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 615.815096][ T4370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 615.829339][ T4370] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 615.835596][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 615.839589][ T4370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.862868][ T4370] usb 6-1: config 0 descriptor?? [ 616.870915][ T8045] device veth0_vlan entered promiscuous mode [ 616.962551][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 617.006150][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 617.023922][ T4370] usb 6-1: can't set config #0, error -71 [ 617.080725][ T4370] usb 6-1: USB disconnect, device number 2 [ 617.212181][ T4358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.442290][ T4358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.725481][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 617.855950][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 618.451778][ T4358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.508272][ T4358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.081964][ T8045] device veth1_vlan entered promiscuous mode [ 619.171793][ T8120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.181212][ T8120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.591855][ T4358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.604495][ T4358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.628761][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 619.695017][ T8045] device veth0_macvtap entered promiscuous mode [ 619.720016][ T8045] device veth1_macvtap entered promiscuous mode [ 619.757747][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.791290][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.803159][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.814973][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.827175][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.839284][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.851139][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.866388][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.877433][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.889938][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.912616][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.971768][ T8444] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 620.873101][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 620.945195][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 621.020509][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 621.072985][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 621.103299][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 621.123393][ T4358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.136852][ T4358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.156736][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.514327][ T1108] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 621.914932][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 622.033979][ T1108] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 622.036855][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.070579][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.082488][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.120645][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.123975][ T1108] usb 4-1: config 0 descriptor?? [ 622.164515][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.196464][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.237244][ T1108] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 622.455991][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.472786][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.037987][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.097707][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.114383][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.127867][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 623.140239][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 623.189498][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 623.399685][ T8045] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.409963][ T8045] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.421534][ T8045] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.431531][ T8045] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.412670][ T4375] usb 4-1: USB disconnect, device number 17 [ 625.753371][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.773847][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.806076][ T8505] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 626.878292][ T7604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.480107][ T7604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.600704][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 627.609414][ T4242] Bluetooth: hci1: command 0x0409 tx timeout [ 627.765471][ T4358] tipc: Left network mode [ 627.792210][ T4433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.823278][ T4433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.605673][ T8519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 629.902362][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 629.989228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 630.277341][ T8480] chnl_net:caif_netlink_parms(): no params data found [ 631.114005][ T4370] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 632.236178][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 632.324230][ T4370] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 632.345437][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.360917][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.422511][ T8480] device bridge_slave_0 entered promiscuous mode [ 632.433752][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.469120][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.509421][ T8480] device bridge_slave_1 entered promiscuous mode [ 632.583283][ T4370] usb 8-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 632.593533][ T4370] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.628069][ T4370] usb 8-1: config 0 descriptor?? [ 633.186736][ T4370] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 633.288825][ T8480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.581184][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.518949][ T8573] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 634.742823][ T8422] Bluetooth: hci1: command 0x0419 tx timeout [ 634.757487][ T1111] usb 8-1: USB disconnect, device number 2 [ 635.699755][ T8480] team0: Port device team_slave_0 added [ 636.092914][ T8480] team0: Port device team_slave_1 added [ 637.453845][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.516170][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.545313][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.929225][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.948713][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.956674][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.984671][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.312797][ T8614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 641.303350][ T8480] device hsr_slave_0 entered promiscuous mode [ 641.386037][ T8480] device hsr_slave_1 entered promiscuous mode [ 641.525294][ T8480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.533716][ T8480] Cannot create hsr debugfs directory [ 642.947570][ T8480] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.983312][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.906'. [ 642.997723][ T8648] netlink: 256 bytes leftover after parsing attributes in process `syz.5.906'. [ 643.095226][ T8652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 643.112538][ T4358] device hsr_slave_0 left promiscuous mode [ 643.150803][ T4358] device hsr_slave_1 left promiscuous mode [ 643.194295][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.202761][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.427742][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.448355][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.588774][ T4358] device bridge_slave_1 left promiscuous mode [ 643.602114][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.611352][ T4358] device bridge_slave_0 left promiscuous mode [ 643.626807][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.672408][ T4358] device veth1_macvtap left promiscuous mode [ 644.345084][ T4358] device veth0_macvtap left promiscuous mode [ 644.967786][ T4358] device veth1_vlan left promiscuous mode [ 644.974723][ T4358] device veth0_vlan left promiscuous mode [ 645.254173][ T4370] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 648.097382][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.914'. [ 649.513936][ T4370] usb 4-1: device descriptor read/all, error -71 [ 649.670373][ T8688] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 649.775810][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 649.900505][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 650.091045][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.161168][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.972643][ T4358] bond0 (unregistering): Released all slaves [ 651.859270][ T8480] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.926060][ T8694] device syzkaller0 entered promiscuous mode [ 652.039724][ T8480] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.723615][ T8726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 655.295355][ T8480] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.106637][ T8480] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 658.181773][ T8480] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 658.427567][ T8764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 660.460169][ T8480] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 660.559377][ T8480] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 663.640736][ T8800] binder: 8792:8800 ioctl c0306201 0 returned -14 [ 666.709362][ T8847] xt_CT: You must specify a L4 protocol and not use inversions on it [ 666.814062][ T8480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.373106][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 667.387888][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 667.416158][ T8480] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.482581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 667.567762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 667.659690][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.667959][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.309190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 669.321024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 669.332126][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.340550][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.355001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 669.367622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 669.404855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 669.609022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 669.797378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 670.006088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 670.426425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 670.469453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 671.864452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 672.100073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 672.111328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 672.122625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 672.811189][ T8480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 675.829971][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 676.723074][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 676.771237][ T8480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.844802][ T8930] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 677.769658][ T8941] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 681.611808][ T8949] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 684.286087][ T8981] xt_CT: You must specify a L4 protocol and not use inversions on it [ 686.438606][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.445908][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.656988][ T9034] binder: 9026:9034 ioctl c0306201 0 returned -14 [ 688.667410][ T9034] binder: 9026:9034 ioctl c0306201 0 returned -14 [ 689.314162][ T8422] Bluetooth: hci2: command 0x0409 tx timeout [ 689.676074][ T9041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 691.591482][ T8422] Bluetooth: hci2: command 0x041b tx timeout [ 692.387561][ T9015] chnl_net:caif_netlink_parms(): no params data found [ 694.114160][ T8422] Bluetooth: hci2: command 0x040f tx timeout [ 694.654944][ T4370] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 695.332572][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.340655][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.352232][ T9015] device bridge_slave_0 entered promiscuous mode [ 695.362027][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.370163][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.381308][ T9015] device bridge_slave_1 entered promiscuous mode [ 695.413354][ T9015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.081942][ T9015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.114334][ T4370] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 696.281667][ T4370] usb 8-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 696.312841][ T4370] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.516366][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 696.546452][ T4370] usb 8-1: config 0 descriptor?? [ 696.587899][ T4370] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 696.788288][ T9091] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 697.027586][ T9091] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 697.209572][ T9015] team0: Port device team_slave_0 added [ 697.269162][ T9015] team0: Port device team_slave_1 added [ 697.341727][ T8422] usb 8-1: USB disconnect, device number 3 [ 697.611887][ T9122] fuse: Unknown parameter 'user00000000000000000000' [ 698.721027][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.735802][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.120966][ T1108] Bluetooth: hci6: command 0x0406 tx timeout [ 699.256334][ T9015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.301383][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.999072][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.030280][ C0] vkms_vblank_simulate: vblank timer overrun [ 701.942420][ T9015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.795738][ T9015] device hsr_slave_0 entered promiscuous mode [ 703.841033][ T9015] device hsr_slave_1 entered promiscuous mode [ 704.073274][ T9015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.196432][ T9015] Cannot create hsr debugfs directory [ 707.588271][ T9184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1017'. [ 718.165761][ T9015] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 718.853898][ T9221] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 720.631428][ T9015] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 720.652347][ T9015] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 722.430101][ T9015] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 728.507798][ T9353] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 729.404266][ T9015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.486443][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 729.504881][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 729.610738][ T9015] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.688712][ T9369] binder: 9354:9369 ioctl c0306201 0 returned -14 [ 729.811704][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 729.889065][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 729.976715][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.984247][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.334277][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 730.540084][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 731.548261][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 731.985377][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.992966][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.517956][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 732.631571][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 732.646225][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 732.751084][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 732.797105][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 732.851615][ T9015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 733.048200][ T9015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 733.331260][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 733.495845][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 733.638205][ T9402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 734.045057][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 734.174348][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 736.124253][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 737.087368][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 738.327792][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 738.360955][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1064'. [ 739.853550][ T4358] device hsr_slave_0 left promiscuous mode [ 740.254392][ T4358] device hsr_slave_1 left promiscuous mode [ 740.403175][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.421632][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.439838][ T4358] device bridge_slave_1 left promiscuous mode [ 740.453022][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.474442][ T4358] device bridge_slave_0 left promiscuous mode [ 740.482726][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.697348][ T4358] device hsr_slave_0 left promiscuous mode [ 740.717676][ T4358] device hsr_slave_1 left promiscuous mode [ 740.725264][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.732999][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.741951][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.750452][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.760402][ T4358] device bridge_slave_1 left promiscuous mode [ 741.225651][ T9455] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 741.833974][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.880378][ T4358] device bridge_slave_0 left promiscuous mode [ 741.911061][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.014897][ T4358] device veth1_macvtap left promiscuous mode [ 742.021780][ T4358] device veth0_macvtap left promiscuous mode [ 742.044621][ T4358] device veth1_vlan left promiscuous mode [ 742.051454][ T4358] device veth0_vlan left promiscuous mode [ 744.225642][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 744.269366][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 744.310392][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.569736][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.869958][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.876678][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.033973][ T4312] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 748.734682][ T4312] usb 8-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 748.799408][ T4312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.875403][ T4312] usb 8-1: Product: syz [ 748.925346][ T4312] usb 8-1: Manufacturer: syz [ 748.973225][ T4312] usb 8-1: SerialNumber: syz [ 749.265951][ T4312] usb 8-1: config 0 descriptor?? [ 749.284102][ T4358] bond0 (unregistering): Released all slaves [ 749.328121][ T4312] usb 8-1: can't set config #0, error -71 [ 749.345086][ T4312] usb 8-1: USB disconnect, device number 4 [ 749.571795][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 749.600963][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 749.624914][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.649362][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.750737][ T4358] bond0 (unregistering): Released all slaves [ 751.759203][ T4312] Bluetooth: hci1: command 0x0409 tx timeout [ 752.960667][ T9505] loop7: detected capacity change from 0 to 8 [ 753.245026][ T9505] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 753.354065][ T9408] udevd[9408]: incorrect cramfs checksum on /dev/loop7 [ 753.547311][ T9505] cramfs: Error -5 while decompressing! [ 753.555367][ T9505] cramfs: ffffffff961e6028(26)->ffff8880585d7000(4096) [ 753.565391][ T9505] cramfs: Error -3 while decompressing! [ 753.572887][ T9505] cramfs: ffffffff961e6042(26)->ffff8880585d8000(4096) [ 753.581616][ T9505] cramfs: Error -3 while decompressing! [ 753.588882][ T9505] cramfs: ffffffff961e605c(16)->ffff8880585d9000(4096) [ 753.598127][ T9505] cramfs: Error -5 while decompressing! [ 753.604852][ T9505] cramfs: ffffffff961e6028(26)->ffff8880585d7000(4096) [ 754.936485][ T4184] Bluetooth: hci1: command 0x041b tx timeout [ 755.286201][ T9479] chnl_net:caif_netlink_parms(): no params data found [ 755.420280][ T9543] sctp: [Deprecated]: syz.3.1091 (pid 9543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 755.420280][ T9543] Use struct sctp_sack_info instead [ 757.035816][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 757.750778][ T9479] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.768397][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.798986][ T9479] device bridge_slave_0 entered promiscuous mode [ 759.023928][ T4375] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 759.030876][ T9479] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.143996][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 759.455831][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.553544][ T9479] device bridge_slave_1 entered promiscuous mode [ 759.744209][ T4375] usb 4-1: device descriptor read/64, error -71 [ 759.795205][ T9479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.067603][ T9587] fuse: Bad value for 'fd' [ 760.106969][ T4375] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 761.346021][ T9479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.626785][ T9479] team0: Port device team_slave_0 added [ 761.698434][ T9479] team0: Port device team_slave_1 added [ 762.071353][ T9611] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 762.647664][ T9613] fuse: Unknown parameter '0x0000000000000006' [ 764.545408][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.563937][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.593217][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.655974][ T9479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.840304][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.799594][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.829849][ T9479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.998582][ T9479] device hsr_slave_0 entered promiscuous mode [ 767.684993][ T9479] device hsr_slave_1 entered promiscuous mode [ 772.143982][ T23] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 772.403940][ T23] usb 8-1: device descriptor read/64, error -71 [ 773.173858][ T23] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 776.492886][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 776.672541][ T9718] loop7: detected capacity change from 0 to 128 [ 777.811337][ T9718] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 777.823561][ T9718] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 781.779230][ T9744] hub 6-0:1.0: USB hub found [ 781.807920][ T9744] hub 6-0:1.0: 1 port detected [ 782.230388][ T9479] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 782.751049][ T9479] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 782.840727][ T9479] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 782.939381][ T9479] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 783.543239][ T9479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.657221][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 783.691528][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 783.718660][ T9777] fuse: Unknown parameter 'fd0x0000000000000006' [ 783.758408][ T9783] hub 6-0:1.0: USB hub found [ 783.763681][ T9783] hub 6-0:1.0: 1 port detected [ 783.833124][ T9479] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.934942][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 783.996293][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 784.024068][ T4433] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.032433][ T4433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.186565][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 784.244805][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 784.283975][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 784.334125][ T4433] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.343515][ T4433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.376440][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 784.386789][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 784.431078][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 784.515364][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 784.556798][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 784.585860][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 784.609672][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 784.703653][ T9794] hub 6-0:1.0: USB hub found [ 784.711775][ T9794] hub 6-0:1.0: 1 port detected [ 784.964160][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 785.191766][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 785.579498][ T9479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 785.668675][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 785.697605][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 788.464044][ T9817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 788.789024][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 788.818177][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 788.866003][ T9479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.407203][ T9838] loop5: detected capacity change from 0 to 128 [ 790.690634][ T9838] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 790.925285][ T9838] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 795.099307][ T9873] device syzkaller0 entered promiscuous mode [ 795.377799][ T9882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 795.713451][ T4358] device hsr_slave_0 left promiscuous mode [ 795.726830][ T4358] device hsr_slave_1 left promiscuous mode [ 795.735982][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.780297][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.820189][ T4358] device bridge_slave_1 left promiscuous mode [ 795.844127][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.698018][ T4358] device bridge_slave_0 left promiscuous mode [ 796.717965][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.997975][ T4312] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 797.047317][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 797.120802][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 797.192530][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.349192][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.399613][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 797.445225][ T4312] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 797.502443][ T4312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.700501][ T4312] usb 2-1: config 0 descriptor?? [ 797.765964][ T4312] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 797.809271][ T9906] loop3: detected capacity change from 0 to 128 [ 797.871907][ T9906] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 797.884594][ T9906] ext4 filesystem being mounted at /275/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 797.889109][ T4358] bond0 (unregistering): Released all slaves [ 798.032645][ T9900] tipc: Started in network mode [ 798.057259][ T9900] tipc: Node identity a2f69bf879b8, cluster identity 4711 [ 798.187536][ T9900] tipc: Enabled bearer , priority 0 [ 799.557136][ T8463] tipc: Node number set to 3679362040 [ 800.203125][ T4370] usb 2-1: USB disconnect, device number 20 [ 800.211424][ T9900] tipc: Disabling bearer [ 800.241768][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 800.261692][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 801.223241][ T9479] device veth0_vlan entered promiscuous mode [ 801.274703][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 801.370149][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 801.416007][ T9927] loop5: detected capacity change from 0 to 128 [ 801.457726][ T9479] device veth1_vlan entered promiscuous mode [ 801.555770][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 802.467933][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 802.767773][ T9939] loop3: detected capacity change from 0 to 256 [ 802.805034][ T9939] ======================================================= [ 802.805034][ T9939] WARNING: The mand mount option has been deprecated and [ 802.805034][ T9939] and is ignored by this kernel. Remove the mand [ 802.805034][ T9939] option from the mount to silence this warning. [ 802.805034][ T9939] ======================================================= [ 803.257797][ T9927] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 803.285684][ T9939] FAT-fs (loop3): Directory bread(block 64) failed [ 803.289553][ T9927] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 803.295468][ T9939] FAT-fs (loop3): Directory bread(block 65) failed [ 803.313875][ T9939] FAT-fs (loop3): Directory bread(block 66) failed [ 803.321093][ T9939] FAT-fs (loop3): Directory bread(block 67) failed [ 803.329049][ T9939] FAT-fs (loop3): Directory bread(block 68) failed [ 803.335787][ T9939] FAT-fs (loop3): Directory bread(block 69) failed [ 803.342852][ T9939] FAT-fs (loop3): Directory bread(block 70) failed [ 803.350021][ T9939] FAT-fs (loop3): Directory bread(block 71) failed [ 803.356769][ T9939] FAT-fs (loop3): Directory bread(block 72) failed [ 803.364063][ T9939] FAT-fs (loop3): Directory bread(block 73) failed [ 803.364604][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 803.418848][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 803.483367][ T9479] device veth0_macvtap entered promiscuous mode [ 804.319692][ T9479] device veth1_macvtap entered promiscuous mode [ 804.370240][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.443948][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.474007][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.121133][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.148613][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.161664][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.173923][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.185358][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.197434][ T9479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.214093][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 805.307890][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 805.382485][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 806.964405][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 807.295945][ T9980] hub 6-0:1.0: USB hub found [ 807.301455][ T9980] hub 6-0:1.0: 1 port detected [ 808.415740][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.534841][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.545366][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.556123][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.581044][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.592564][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.602986][ T9479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.613593][ T9479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.626104][ T9479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.727523][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 808.758239][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 809.306344][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.313890][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.372187][T10030] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 815.424817][ T4184] Bluetooth: hci1: command 0x0409 tx timeout [ 815.681559][T10052] hub 6-0:1.0: USB hub found [ 815.690768][T10052] hub 6-0:1.0: 1 port detected [ 817.317198][T10065] loop7: detected capacity change from 0 to 8 [ 817.463932][ T4184] Bluetooth: hci1: command 0x041b tx timeout [ 817.705887][T10065] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 817.796086][ T9600] udevd[9600]: incorrect cramfs checksum on /dev/loop7 [ 818.078430][T10065] cramfs: Error -5 while decompressing! [ 818.092623][T10065] cramfs: ffffffff961ea028(26)->ffff88805cb95000(4096) [ 818.125473][T10065] cramfs: Error -3 while decompressing! [ 818.148799][ T9600] udevd[9600]: incorrect cramfs checksum on /dev/loop7 [ 818.219715][T10065] cramfs: ffffffff961ea042(26)->ffff8880593c1000(4096) [ 818.239003][T10065] cramfs: Error -3 while decompressing! [ 818.254110][T10065] cramfs: ffffffff961ea05c(16)->ffff88805decb000(4096) [ 818.272614][T10065] cramfs: Error -5 while decompressing! [ 818.308457][T10065] cramfs: ffffffff961ea028(26)->ffff88805cb95000(4096) [ 818.984458][T10034] chnl_net:caif_netlink_parms(): no params data found [ 819.022780][ T9600] udevd[9600]: incorrect cramfs checksum on /dev/loop7 [ 819.074675][T10085] tipc: Enabled bearer , priority 0 [ 819.117052][T10085] tipc: Resetting bearer [ 819.282978][T10092] sctp: [Deprecated]: syz.1.1198 (pid 10092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 819.282978][T10092] Use struct sctp_sack_info instead [ 819.738426][T10094] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 819.778770][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 819.895220][T10083] tipc: Disabling bearer [ 820.841380][T10115] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 822.145128][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 822.341293][T10034] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.463692][T10034] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.604266][T10034] device bridge_slave_0 entered promiscuous mode [ 822.774227][T10034] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.883313][T10034] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.031285][T10034] device bridge_slave_1 entered promiscuous mode [ 823.437841][T10034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.623008][T10034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.632416][T10034] team0: Port device team_slave_0 added [ 824.650986][T10034] team0: Port device team_slave_1 added [ 824.759304][T10034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.822247][T10034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.949553][T10034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.007135][T10034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.019980][T10034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.068317][T10034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.318887][T10034] device hsr_slave_0 entered promiscuous mode [ 825.331429][T10034] device hsr_slave_1 entered promiscuous mode [ 825.339470][T10034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 825.348809][T10034] Cannot create hsr debugfs directory [ 826.117658][ T4358] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.285728][ T4358] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.020168][ T4184] Bluetooth: hci2: command 0x0409 tx timeout [ 827.140131][ T4358] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.642347][ T4358] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.690505][T10143] chnl_net:caif_netlink_parms(): no params data found [ 827.768904][ T4358] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.999165][ T4358] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.948320][ T4184] Bluetooth: hci2: command 0x041b tx timeout [ 830.103974][ T8463] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 830.221697][ T4358] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.474663][ T8463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 35329, setting to 64 [ 831.514284][ T4358] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.544749][ T8463] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 831.732573][ T8463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.942008][ T8463] usb 4-1: config 0 descriptor?? [ 832.227505][T10192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1218'. [ 833.177730][ T8463] usb 4-1: can't set config #0, error -71 [ 833.235584][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 833.252985][ T8463] usb 4-1: USB disconnect, device number 23 [ 833.730757][T10202] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 835.785463][ T8463] Bluetooth: hci2: command 0x0419 tx timeout [ 835.962274][T10143] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.004686][T10143] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.087036][T10143] device bridge_slave_0 entered promiscuous mode [ 836.253547][T10143] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.296980][T10143] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.395978][T10143] device bridge_slave_1 entered promiscuous mode [ 838.819752][T10143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.914787][T10143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.055203][T10241] tipc: Enabled bearer , priority 0 [ 839.201555][T10257] xt_CT: You must specify a L4 protocol and not use inversions on it [ 839.655454][T10260] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 840.507119][ T7] tipc: Node number set to 2650708045 [ 840.538656][T10143] team0: Port device team_slave_0 added [ 840.565247][T10143] team0: Port device team_slave_1 added [ 841.131953][T10235] tipc: Disabling bearer [ 841.708942][T10143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.727031][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 841.830716][T10143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.956002][T10143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.982746][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.094857][T10143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.758026][T10286] loop7: detected capacity change from 0 to 128 [ 844.336324][T10143] device hsr_slave_0 entered promiscuous mode [ 844.336799][T10286] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 844.354286][T10143] device hsr_slave_1 entered promiscuous mode [ 844.371497][T10286] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 844.398870][T10143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 844.453977][T10143] Cannot create hsr debugfs directory [ 852.039836][T10354] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 852.931152][T10356] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 853.780429][T10034] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 854.087714][T10034] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 854.129662][T10034] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 854.196865][T10034] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 857.352013][T10143] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 857.448409][T10403] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 858.359795][T10143] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 858.848052][T10143] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 859.432425][T10143] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 862.533420][T10034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.782439][T10034] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.844304][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 862.884629][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 862.907475][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 862.924815][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 862.947248][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.956286][ T4431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.982733][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 863.004325][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 863.024596][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.032285][ T4431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.095974][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 863.722683][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 863.774800][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 863.822540][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 863.912147][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 864.844409][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 864.858048][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 864.881058][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 864.897067][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 864.917012][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 864.950982][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 864.981509][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 865.087531][T10034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 865.421885][T10464] tipc: Enabled bearer , priority 0 [ 865.540226][T10465] device syzkaller0 entered promiscuous mode [ 865.855770][ T4358] device hsr_slave_0 left promiscuous mode [ 865.934003][ T4358] device hsr_slave_1 left promiscuous mode [ 866.702848][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.746408][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.992819][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.001793][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.011548][ T4358] device bridge_slave_1 left promiscuous mode [ 867.027215][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.041837][ T4358] device bridge_slave_0 left promiscuous mode [ 867.053076][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.084671][ T4358] device hsr_slave_0 left promiscuous mode [ 867.092076][ T4358] device hsr_slave_1 left promiscuous mode [ 867.129263][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.143392][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.154740][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.165508][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.176376][ T4358] device bridge_slave_1 left promiscuous mode [ 867.185946][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.202030][ T4358] device bridge_slave_0 left promiscuous mode [ 867.211749][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.229504][ T4358] device veth1_macvtap left promiscuous mode [ 867.237026][ T4358] device veth0_macvtap left promiscuous mode [ 867.246308][ T4358] device veth1_vlan left promiscuous mode [ 867.254538][ T4358] device veth0_vlan left promiscuous mode [ 867.263217][ T4358] device veth1_macvtap left promiscuous mode [ 867.326868][ T4358] device veth0_macvtap left promiscuous mode [ 867.335379][ T4358] device veth1_vlan left promiscuous mode [ 867.342450][ T4358] device veth0_vlan left promiscuous mode [ 869.743390][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 869.761880][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 869.777596][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.795637][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.870848][ T4358] bond0 (unregistering): Released all slaves [ 869.979238][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 869.999404][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 870.015957][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.038900][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.111286][ T4358] bond0 (unregistering): Released all slaves [ 870.752832][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.768187][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.249848][T10465] tipc: Resetting bearer [ 871.295192][T10465] tipc: Disabling bearer [ 871.518133][T10143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.109635][T10143] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.391419][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 873.845333][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 873.860508][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 873.897550][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 873.906928][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 873.916965][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.924949][ T4459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.302330][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 875.353475][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 875.404424][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 875.413657][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.421425][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.430760][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 875.440273][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 875.449717][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 875.462271][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 875.471774][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 875.556286][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 875.757922][ T4349] Bluetooth: hci3: command 0x041b tx timeout [ 875.769835][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 875.783044][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 875.793067][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 876.586287][T10143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 876.609424][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 876.621153][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 876.642476][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 877.735902][T10574] tipc: Enabled bearer , priority 0 [ 877.785128][ T4370] Bluetooth: hci3: command 0x040f tx timeout [ 877.926185][T10575] device syzkaller0 entered promiscuous mode [ 877.995263][T10575] tipc: Resetting bearer [ 878.045951][T10575] tipc: Disabling bearer [ 878.130261][T10514] chnl_net:caif_netlink_parms(): no params data found [ 878.759823][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 878.794088][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 878.823533][T10514] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.855270][T10514] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.881320][T10514] device bridge_slave_0 entered promiscuous mode [ 879.883534][ T4370] Bluetooth: hci3: command 0x0419 tx timeout [ 879.957265][T10143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.134487][T10514] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.142800][T10514] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.355330][T10514] device bridge_slave_1 entered promiscuous mode [ 881.406640][T10514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.449607][T10625] loop3: detected capacity change from 0 to 8 [ 881.475878][T10514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.605107][T10625] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 882.549199][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop3 [ 882.604702][T10514] team0: Port device team_slave_0 added [ 882.612938][T10514] team0: Port device team_slave_1 added [ 882.637898][T10514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.653465][T10514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.681321][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.688132][T10635] cramfs: Error -5 while decompressing! [ 882.711834][T10514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.724172][T10635] cramfs: ffffffff961e6028(26)->ffff8880589a2000(4096) [ 882.726489][T10514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.732730][T10635] cramfs: Error -3 while decompressing! [ 882.746830][T10635] cramfs: ffffffff961e6042(26)->ffff8880589a3000(4096) [ 883.721077][T10514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.745811][T10635] cramfs: Error -3 while decompressing! [ 883.750995][ C0] vkms_vblank_simulate: vblank timer overrun [ 883.790808][T10514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.873980][T10635] cramfs: ffffffff961e605c(16)->ffff8880589a4000(4096) [ 883.892325][T10635] cramfs: Error -5 while decompressing! [ 883.899051][T10635] cramfs: ffffffff961e6028(26)->ffff8880589a2000(4096) [ 883.916617][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop3 [ 884.615645][T10514] device hsr_slave_0 entered promiscuous mode [ 884.649990][T10658] loop7: detected capacity change from 0 to 8 [ 885.570428][T10514] device hsr_slave_1 entered promiscuous mode [ 885.634940][T10658] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 886.611165][T10517] udevd[10517]: incorrect cramfs checksum on /dev/loop7 [ 886.738783][T10668] cramfs: Error -5 while decompressing! [ 886.812597][T10668] cramfs: ffffffff961ea028(26)->ffff888057df1000(4096) [ 886.821494][T10668] cramfs: Error -3 while decompressing! [ 886.831053][T10668] cramfs: ffffffff961ea042(26)->ffff88805dca5000(4096) [ 886.841306][T10668] cramfs: Error -3 while decompressing! [ 886.848064][T10668] cramfs: ffffffff961ea05c(16)->ffff88805dca4000(4096) [ 886.858608][T10668] cramfs: Error -5 while decompressing! [ 886.865369][T10668] cramfs: ffffffff961ea028(26)->ffff888057df1000(4096) [ 886.973385][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop7 [ 886.984273][T10671] loop3: detected capacity change from 0 to 8 [ 886.987510][T10673] loop1: detected capacity change from 0 to 128 [ 887.071352][T10671] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 887.253271][T10680] cramfs: Error -5 while decompressing! [ 887.259492][T10680] cramfs: ffffffff961e6028(26)->ffff888071014000(4096) [ 887.267313][T10680] cramfs: Error -3 while decompressing! [ 887.273921][T10680] cramfs: ffffffff961e6042(26)->ffff888057c45000(4096) [ 887.281554][T10680] cramfs: Error -3 while decompressing! [ 887.287869][T10680] cramfs: ffffffff961e605c(16)->ffff88805b548000(4096) [ 887.296458][T10680] cramfs: Error -5 while decompressing! [ 887.303182][T10680] cramfs: ffffffff961e6028(26)->ffff888071014000(4096) [ 887.991237][T10517] udevd[10517]: incorrect cramfs checksum on /dev/loop3 [ 888.043537][T10673] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 888.077075][T10673] ext4 filesystem being mounted at /345/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 888.595701][ T4312] Bluetooth: hci1: command 0x0409 tx timeout [ 889.473430][T10664] chnl_net:caif_netlink_parms(): no params data found [ 890.775168][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 890.800675][T10724] loop1: detected capacity change from 0 to 128 [ 890.815360][T10722] loop7: detected capacity change from 0 to 8 [ 890.894928][T10722] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 890.990996][T10724] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 891.205461][T10724] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 891.234544][T10664] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.244602][T10664] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.293987][T10731] cramfs: Error -5 while decompressing! [ 891.300984][T10731] cramfs: ffffffff961ea028(26)->ffff88805e97f000(4096) [ 891.311742][T10731] cramfs: Error -3 while decompressing! [ 891.318551][T10731] cramfs: ffffffff961ea042(26)->ffff88805bb98000(4096) [ 891.327744][T10731] cramfs: Error -3 while decompressing! [ 891.335150][T10731] cramfs: ffffffff961ea05c(16)->ffff88805bb99000(4096) [ 891.345006][T10731] cramfs: Error -5 while decompressing! [ 891.352554][T10731] cramfs: ffffffff961ea028(26)->ffff88805e97f000(4096) [ 891.391877][T10664] device bridge_slave_0 entered promiscuous mode [ 891.842653][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop7 [ 891.993104][T10664] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.038559][T10664] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.085219][T10664] device bridge_slave_1 entered promiscuous mode [ 892.852293][ T4242] Bluetooth: hci1: command 0x040f tx timeout [ 893.000763][T10514] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 893.379029][T10664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.448152][T10514] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 893.729229][T10664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.854286][T10514] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 894.280000][T10761] loop3: detected capacity change from 0 to 8 [ 894.295072][T10514] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 894.338829][T10664] team0: Port device team_slave_0 added [ 894.394662][T10761] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 894.426412][T10664] team0: Port device team_slave_1 added [ 894.507994][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop3 [ 894.625174][T10785] cramfs: Error -5 while decompressing! [ 894.632075][T10785] cramfs: ffffffff961e6028(26)->ffff88805eaa1000(4096) [ 894.640815][T10785] cramfs: Error -3 while decompressing! [ 894.646979][T10785] cramfs: ffffffff961e6042(26)->ffff88805eaa0000(4096) [ 894.654481][T10785] cramfs: Error -3 while decompressing! [ 894.660454][T10785] cramfs: ffffffff961e605c(16)->ffff88805ae11000(4096) [ 894.668484][T10785] cramfs: Error -5 while decompressing! [ 894.676353][T10785] cramfs: ffffffff961e6028(26)->ffff88805eaa1000(4096) [ 895.337756][ T4312] Bluetooth: hci1: command 0x0419 tx timeout [ 895.581005][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop3 [ 896.415792][T10664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.485502][T10803] loop1: detected capacity change from 0 to 8 [ 896.499583][T10803] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 896.508041][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop1 [ 896.594416][T10804] cramfs: Error -5 while decompressing! [ 896.600908][T10804] cramfs: ffffffff961ea028(26)->ffff88805e7cd000(4096) [ 896.609675][T10804] cramfs: Error -3 while decompressing! [ 896.617170][T10804] cramfs: ffffffff961ea042(26)->ffff88805720f000(4096) [ 896.625172][T10804] cramfs: Error -3 while decompressing! [ 896.631970][T10804] cramfs: ffffffff961ea05c(16)->ffff88805e504000(4096) [ 896.640153][T10804] cramfs: Error -5 while decompressing! [ 896.646458][T10804] cramfs: ffffffff961ea028(26)->ffff88805e7cd000(4096) [ 897.381707][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.621485][T10664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.637012][T10664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.645076][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.673867][T10664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.038175][T10664] device hsr_slave_0 entered promiscuous mode [ 898.188632][T10664] device hsr_slave_1 entered promiscuous mode [ 899.399316][T10664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 899.454503][T10664] Cannot create hsr debugfs directory [ 902.057938][T10514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.122264][T10839] tipc: Enabled bearer , priority 0 [ 902.528803][T10853] hub 6-0:1.0: USB hub found [ 902.535610][T10853] hub 6-0:1.0: 1 port detected [ 903.253862][ T9221] tipc: Node number set to 3488505930 [ 903.315125][T10842] device syzkaller0 entered promiscuous mode [ 903.366290][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 903.388108][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 903.409286][T10857] loop3: detected capacity change from 0 to 8 [ 903.456435][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop3 [ 903.464960][T10857] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 903.483576][T10514] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.566798][T10842] tipc: Resetting bearer [ 903.580756][T10861] cramfs: Error -5 while decompressing! [ 903.589175][T10861] cramfs: ffffffff961e6028(26)->ffff88805b6fd000(4096) [ 903.598004][T10861] cramfs: Error -3 while decompressing! [ 903.604265][T10861] cramfs: ffffffff961e6042(26)->ffff888071703000(4096) [ 903.612011][T10861] cramfs: Error -3 while decompressing! [ 903.618438][T10861] cramfs: ffffffff961e605c(16)->ffff88805a489000(4096) [ 903.626612][T10861] cramfs: Error -5 while decompressing! [ 903.632930][T10861] cramfs: ffffffff961e6028(26)->ffff88805b6fd000(4096) [ 903.932703][T10842] tipc: Disabling bearer [ 904.506125][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 904.555047][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 904.738882][ T7993] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.747137][ T7993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.876449][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 905.436026][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 905.554890][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.562945][ T7993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.863902][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 906.903211][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 907.029737][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 907.128556][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 907.248637][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 907.312666][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 907.941363][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 907.952353][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 907.993990][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 908.026389][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 908.162535][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 908.184853][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 908.207259][T10514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 908.852721][T10886] hub 6-0:1.0: USB hub found [ 908.858197][T10886] hub 6-0:1.0: 1 port detected [ 913.224755][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 913.254220][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 913.298814][T10514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.066876][T10917] tipc: Enabled bearer , priority 0 [ 914.201906][T10921] device syzkaller0 entered promiscuous mode [ 914.631669][T10664] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 914.688883][T10664] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 914.796448][T10921] tipc: Resetting bearer [ 914.923441][T10921] tipc: Disabling bearer [ 915.068123][T10664] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 915.614119][T10664] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 915.917303][T10938] loop3: detected capacity change from 0 to 8 [ 915.934551][T10938] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 915.938118][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop3 [ 916.029745][T10947] cramfs: Error -5 while decompressing! [ 916.035910][T10947] cramfs: ffffffff961ea028(26)->ffff88805948a000(4096) [ 916.044441][T10947] cramfs: Error -3 while decompressing! [ 916.051092][T10947] cramfs: ffffffff961ea042(26)->ffff888059487000(4096) [ 916.058972][T10947] cramfs: Error -3 while decompressing! [ 916.065122][T10947] cramfs: ffffffff961ea05c(16)->ffff888071255000(4096) [ 916.073386][T10947] cramfs: Error -5 while decompressing! [ 916.080048][T10947] cramfs: ffffffff961ea028(26)->ffff88805948a000(4096) [ 916.785572][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop3 [ 917.024903][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 917.072098][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 917.271427][ T4358] device hsr_slave_0 left promiscuous mode [ 917.353151][ T4358] device hsr_slave_1 left promiscuous mode [ 917.459277][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.560146][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.665983][ T4358] device bridge_slave_1 left promiscuous mode [ 917.736916][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.872280][ T4358] device bridge_slave_0 left promiscuous mode [ 917.931619][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.110704][ T4358] device hsr_slave_0 left promiscuous mode [ 918.516041][ T4358] device hsr_slave_1 left promiscuous mode [ 918.570127][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.770831][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.945580][ T4358] device bridge_slave_1 left promiscuous mode [ 918.989913][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.097315][ T4358] device bridge_slave_0 left promiscuous mode [ 919.152782][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.227368][T10955] loop3: detected capacity change from 0 to 8 [ 919.341051][T10955] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 919.554827][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop3 [ 920.412919][T10956] cramfs: Error -5 while decompressing! [ 920.419857][T10956] cramfs: ffffffff961e6028(26)->ffff88805ddc6000(4096) [ 920.431502][T10956] cramfs: Error -3 while decompressing! [ 920.439526][T10956] cramfs: ffffffff961e6042(26)->ffff88805b742000(4096) [ 920.447889][T10956] cramfs: Error -3 while decompressing! [ 920.454807][T10956] cramfs: ffffffff961e605c(16)->ffff88805b40d000(4096) [ 920.464027][T10956] cramfs: Error -5 while decompressing! [ 920.470524][T10956] cramfs: ffffffff961e6028(26)->ffff88805ddc6000(4096) [ 922.055249][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 922.143280][T10970] hub 6-0:1.0: USB hub found [ 922.152086][T10970] hub 6-0:1.0: 1 port detected [ 922.347907][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 922.479310][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.614304][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.280213][ T4358] bond0 (unregistering): Released all slaves [ 923.691874][T10977] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 924.687290][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 924.707116][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 924.722658][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.740062][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.848787][ T4358] bond0 (unregistering): Released all slaves [ 924.932437][T10983] tipc: Enabled bearer , priority 0 [ 924.951460][T10984] device syzkaller0 entered promiscuous mode [ 925.009678][T10514] device veth0_vlan entered promiscuous mode [ 925.045439][T10984] tipc: Resetting bearer [ 925.122108][T10992] loop7: detected capacity change from 0 to 128 [ 925.239890][T10992] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 925.258026][T10992] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 925.269381][T10984] tipc: Disabling bearer [ 925.310992][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 925.329637][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 925.352357][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 925.367950][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 925.506334][T10514] device veth1_vlan entered promiscuous mode [ 926.024719][T10514] device veth0_macvtap entered promiscuous mode [ 926.048439][T10514] device veth1_macvtap entered promiscuous mode [ 926.143548][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.155948][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.166857][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.178069][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.188951][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.203592][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.311045][T10514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.395322][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 926.599996][T11004] hub 6-0:1.0: USB hub found [ 926.605614][T11004] hub 6-0:1.0: 1 port detected [ 926.996738][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 927.059318][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 927.113658][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 927.559316][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 927.580958][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 927.592668][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 928.839657][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 928.897735][T11012] loop7: detected capacity change from 0 to 8 [ 928.906989][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.922451][T11012] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 928.943525][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop7 [ 928.957790][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.991640][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.064429][T11014] cramfs: Error -5 while decompressing! [ 929.071227][T11014] cramfs: ffffffff961ea028(26)->ffff888059350000(4096) [ 929.079326][T11014] cramfs: Error -3 while decompressing! [ 929.085509][T11014] cramfs: ffffffff961ea042(26)->ffff88805a652000(4096) [ 929.092919][T11014] cramfs: Error -3 while decompressing! [ 929.099108][T11014] cramfs: ffffffff961ea05c(16)->ffff88805f0a7000(4096) [ 929.106933][T11014] cramfs: Error -5 while decompressing! [ 929.113435][T11014] cramfs: ffffffff961ea028(26)->ffff888059350000(4096) [ 929.143110][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.159016][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop7 [ 929.197149][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.270042][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.313567][T10514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.345045][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 929.419744][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 929.585097][T10514] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.687400][T10514] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.809732][T10514] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.881448][T10514] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.121595][T10664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.431669][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 931.530987][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 931.716717][T10664] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.859140][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 931.914810][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 932.001652][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.010951][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.050478][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 932.092852][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 932.121636][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 932.155250][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.163491][ T4470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.201753][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.216282][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.220968][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 932.259782][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 932.477851][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 932.517264][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 932.565162][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 932.637172][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 932.706142][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 932.734599][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 932.748809][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 932.845574][T10664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 932.878709][T10664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 932.953337][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 932.975191][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 934.024140][ T9221] Bluetooth: hci2: command 0x0409 tx timeout [ 934.995417][T11024] chnl_net:caif_netlink_parms(): no params data found [ 935.962304][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 935.986115][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 936.039805][T11068] loop1: detected capacity change from 0 to 8 [ 936.100597][T10664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.110145][ T4260] Bluetooth: hci2: command 0x041b tx timeout [ 936.128560][T11068] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 936.151714][T11070] loop7: detected capacity change from 0 to 128 [ 936.256312][T11075] cramfs: Error -5 while decompressing! [ 936.263102][T11075] cramfs: ffffffff961e6028(26)->ffff88805a542000(4096) [ 936.270965][T11075] cramfs: Error -3 while decompressing! [ 936.277628][T11075] cramfs: ffffffff961e6042(26)->ffff888071797000(4096) [ 936.285351][T11075] cramfs: Error -3 while decompressing! [ 936.291612][T11075] cramfs: ffffffff961e605c(16)->ffff88805e8d0000(4096) [ 936.299653][T11075] cramfs: Error -5 while decompressing! [ 936.306107][T11075] cramfs: ffffffff961e6028(26)->ffff88805a542000(4096) [ 936.636321][T11070] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 936.849883][T11070] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 937.080884][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop1 [ 937.268657][T11024] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.355221][T11024] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.525658][T11024] device bridge_slave_0 entered promiscuous mode [ 937.600591][T11024] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.711586][T11024] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.766840][T11024] device bridge_slave_1 entered promiscuous mode [ 937.916525][T11024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.956435][T11024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.214234][ T4260] Bluetooth: hci2: command 0x040f tx timeout [ 940.542483][ T4370] Bluetooth: hci2: command 0x0419 tx timeout [ 941.484553][T11024] team0: Port device team_slave_0 added [ 941.504209][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 941.600094][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 941.640745][T11024] team0: Port device team_slave_1 added [ 942.609568][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 942.624759][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 942.872638][T11130] hub 6-0:1.0: USB hub found [ 942.879884][T11130] hub 6-0:1.0: 1 port detected [ 943.856052][T10664] device veth0_vlan entered promiscuous mode [ 943.928707][T11024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.944178][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.991917][T11024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.006339][T11024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.013794][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.053164][T11024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.197195][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 944.261682][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 947.131866][T11024] device hsr_slave_0 entered promiscuous mode [ 948.935078][T11024] device hsr_slave_1 entered promiscuous mode [ 949.004394][T11024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 949.211979][T11024] Cannot create hsr debugfs directory [ 949.273182][T11167] loop7: detected capacity change from 0 to 128 [ 949.450580][T11167] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 949.541158][T11167] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 953.066547][T10311] Bluetooth: hci1: command 0x0409 tx timeout [ 953.067441][T11024] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.194788][T11197] hub 6-0:1.0: USB hub found [ 953.202214][T11197] hub 6-0:1.0: 1 port detected [ 954.257617][T11204] hub 6-0:1.0: USB hub found [ 954.264489][T11204] hub 6-0:1.0: 1 port detected [ 954.481947][T11024] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.880914][T11206] sctp: [Deprecated]: syz.7.1392 (pid 11206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 954.880914][T11206] Use struct sctp_sack_info instead [ 955.150612][T10311] Bluetooth: hci1: command 0x041b tx timeout [ 956.045154][T11024] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.263801][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 957.577073][T11024] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.908289][T11175] chnl_net:caif_netlink_parms(): no params data found [ 958.213347][T11175] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.373889][T11175] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.455260][T11175] device bridge_slave_0 entered promiscuous mode [ 959.156830][T11175] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.167941][T11175] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.186559][T11175] device bridge_slave_1 entered promiscuous mode [ 959.205362][T11256] loop3: detected capacity change from 0 to 8 [ 959.254560][T11256] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 959.281069][T10676] udevd[10676]: incorrect cramfs checksum on /dev/loop3 [ 959.317346][T10311] Bluetooth: hci1: command 0x0419 tx timeout [ 959.369097][ T4470] Bluetooth: hci3: Frame reassembly failed (-84) [ 959.442897][T10752] udevd[10752]: incorrect cramfs checksum on /dev/loop3 [ 959.496200][T11264] cramfs: Error -5 while decompressing! [ 959.502601][T11264] cramfs: ffffffff961ea028(26)->ffff88805e690000(4096) [ 960.590740][T11024] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 960.615061][T11264] cramfs: Error -3 while decompressing! [ 960.621104][T11264] cramfs: ffffffff961ea042(26)->ffff88805dcd8000(4096) [ 960.635364][T11175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.654486][T11024] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 960.713884][T11264] cramfs: Error -3 while decompressing! [ 960.721322][T11264] cramfs: ffffffff961ea05c(16)->ffff888059b19000(4096) [ 960.745678][T11175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.745986][T11264] cramfs: Error -5 while decompressing! [ 960.771081][T11264] cramfs: ffffffff961ea028(26)->ffff88805e690000(4096) [ 960.975362][T11024] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 961.060655][T11282] hub 6-0:1.0: USB hub found [ 961.068095][T11282] hub 6-0:1.0: 1 port detected [ 961.393973][ T4242] Bluetooth: hci3: command 0x1003 tx timeout [ 961.424130][ T146] Bluetooth: hci3: sending frame failed (-49) [ 961.970227][T11024] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 962.080787][T11175] team0: Port device team_slave_0 added [ 962.194721][T11175] team0: Port device team_slave_1 added [ 962.968397][T11175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.983762][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.539174][T11175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.555844][T11175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.688478][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.869507][T10311] Bluetooth: hci3: command 0x1001 tx timeout [ 963.878737][ T146] Bluetooth: hci3: sending frame failed (-49) [ 963.891225][T11175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.924725][T11314] loop3: detected capacity change from 0 to 8 [ 964.931988][T11314] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 964.948268][T11175] device hsr_slave_0 entered promiscuous mode [ 964.984703][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop3 [ 965.030451][T11175] device hsr_slave_1 entered promiscuous mode [ 965.087549][T11175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 965.104134][T11315] cramfs: Error -5 while decompressing! [ 965.110181][T11315] cramfs: ffffffff961e6028(26)->ffff88805dd47000(4096) [ 965.117895][T11315] cramfs: Error -3 while decompressing! [ 965.124289][T11315] cramfs: ffffffff961e6042(26)->ffff88805a2fe000(4096) [ 965.131687][T11315] cramfs: Error -3 while decompressing! [ 965.137863][T11315] cramfs: ffffffff961e605c(16)->ffff88805990e000(4096) [ 965.146865][T11315] cramfs: Error -5 while decompressing! [ 965.153544][T11315] cramfs: ffffffff961e6028(26)->ffff88805dd47000(4096) [ 965.235594][T11175] Cannot create hsr debugfs directory [ 965.988637][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop3 [ 966.010582][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop3 [ 966.097859][ T4234] Bluetooth: hci3: command 0x1009 tx timeout [ 966.281098][T11024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.963535][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 966.978715][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 967.042476][T11024] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.762171][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 967.821487][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 967.912639][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.920228][ T4459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.071148][T11324] loop7: detected capacity change from 0 to 8 [ 968.079288][ T4358] device hsr_slave_0 left promiscuous mode [ 968.088408][ T4358] device hsr_slave_1 left promiscuous mode [ 968.112747][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop7 [ 968.125313][T11324] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 968.134337][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.163079][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.205235][ T4358] device bridge_slave_1 left promiscuous mode [ 968.211589][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.220777][ T4358] device bridge_slave_0 left promiscuous mode [ 968.227850][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.241922][ T4358] device hsr_slave_0 left promiscuous mode [ 968.250864][ T4358] device hsr_slave_1 left promiscuous mode [ 968.259309][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.271061][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.282916][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.294839][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.205220][T11329] cramfs: Error -5 while decompressing! [ 969.211558][T11329] cramfs: ffffffff961ea028(26)->ffff88805f34a000(4096) [ 969.219535][T11329] cramfs: Error -3 while decompressing! [ 969.225740][T11329] cramfs: ffffffff961ea042(26)->ffff88805f34b000(4096) [ 969.233128][T11329] cramfs: Error -3 while decompressing! [ 969.239446][T11329] cramfs: ffffffff961ea05c(16)->ffff888071638000(4096) [ 969.247163][T11329] cramfs: Error -5 while decompressing! [ 969.253473][T11329] cramfs: ffffffff961ea028(26)->ffff88805f34a000(4096) [ 969.568011][ T4358] device bridge_slave_1 left promiscuous mode [ 969.606960][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.638087][ T4358] device bridge_slave_0 left promiscuous mode [ 969.646992][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.692274][ T4358] device veth0_vlan left promiscuous mode [ 969.735516][ T4358] device veth1_macvtap left promiscuous mode [ 969.777886][ T4358] device veth0_macvtap left promiscuous mode [ 969.788934][ T4358] device veth1_vlan left promiscuous mode [ 969.800654][ T4358] device veth0_vlan left promiscuous mode [ 969.882981][T11336] hub 6-0:1.0: USB hub found [ 969.888463][T11336] hub 6-0:1.0: 1 port detected [ 970.897484][T11340] loop3: detected capacity change from 0 to 8 [ 970.959808][T11344] hub 6-0:1.0: USB hub found [ 970.965462][T11344] hub 6-0:1.0: 1 port detected [ 971.383650][T11346] loop1: detected capacity change from 0 to 8 [ 971.844611][T11340] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 971.861825][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop3 [ 971.873996][T11346] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 971.978563][T11345] cramfs: Error -5 while decompressing! [ 971.984368][T11345] cramfs: ffffffff961ea028(26)->ffff888057a05000(4096) [ 971.991525][T11345] cramfs: Error -3 while decompressing! [ 971.997277][T11345] cramfs: ffffffff961ea042(26)->ffff88805dd87000(4096) [ 972.004642][T11345] cramfs: Error -3 while decompressing! [ 972.010249][T11345] cramfs: ffffffff961ea05c(16)->ffff88805dd86000(4096) [ 972.018065][T11345] cramfs: Error -5 while decompressing! [ 972.024378][T11345] cramfs: ffffffff961ea028(26)->ffff888057a05000(4096) [ 973.153102][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 973.277584][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 975.006678][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.037028][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.137944][ T4358] bond0 (unregistering): Released all slaves [ 975.326505][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 975.349227][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 975.365555][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.380947][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.465199][ T4358] bond0 (unregistering): Released all slaves [ 975.548507][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 975.663246][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 975.706859][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 975.950606][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.959410][ T4459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.969567][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 975.999532][T11024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 976.275928][T11024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 977.193802][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 977.355246][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 978.232833][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 978.246911][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 978.260303][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 978.271214][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 978.281882][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 978.293115][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 978.309735][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 978.830255][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 978.862141][T11389] loop3: detected capacity change from 0 to 8 [ 978.899582][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 978.987709][T11389] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 979.048504][T10515] udevd[10515]: incorrect cramfs checksum on /dev/loop3 [ 979.904414][T11389] cramfs: Error -5 while decompressing! [ 979.910102][T11389] cramfs: ffffffff961e6028(26)->ffff88805e8d8000(4096) [ 979.917118][T11389] cramfs: Error -3 while decompressing! [ 979.922921][T11389] cramfs: ffffffff961e6042(26)->ffff888058cd3000(4096) [ 979.929810][T11389] cramfs: Error -3 while decompressing! [ 979.935553][T11389] cramfs: ffffffff961e605c(16)->ffff888058cd2000(4096) [ 979.942786][T11389] cramfs: Error -5 while decompressing! [ 979.948481][T11389] cramfs: ffffffff961e6028(26)->ffff88805e8d8000(4096) [ 982.614681][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 982.623412][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 982.639504][T11024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.916320][T11175] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 983.384370][ C1] ================================================================== [ 983.393631][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 983.402515][ C1] Read of size 2 at addr ffff888062f9782a by task swapper/1/0 [ 983.410663][ C1] [ 983.413015][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.189-syzkaller #0 [ 983.421383][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 983.432047][ C1] Call Trace: [ 983.435580][ C1] [ 983.438512][ C1] dump_stack_lvl+0x168/0x230 [ 983.443415][ C1] ? show_regs_print_info+0x20/0x20 [ 983.449635][ C1] ? _printk+0xcc/0x110 [ 983.454187][ C1] ? rose_timer_expiry+0x470/0x490 [ 983.459691][ C1] ? load_image+0x3b0/0x3b0 [ 983.464447][ C1] ? lock_acquire+0x1f2/0x3f0 [ 983.470167][ C1] print_address_description+0x60/0x2d0 [ 983.475865][ C1] ? rose_timer_expiry+0x470/0x490 [ 983.481139][ C1] kasan_report+0xdf/0x130 [ 983.487204][ C1] ? rose_timer_expiry+0x470/0x490 [ 983.493429][ C1] rose_timer_expiry+0x470/0x490 [ 983.499027][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 983.504454][ C1] call_timer_fn+0x16c/0x530 [ 983.509712][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 983.515182][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 983.521946][ C1] ? __run_timers+0x7c0/0x7c0 [ 983.527657][ C1] ? rcu_is_watching+0x11/0xa0 [ 983.533075][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 983.538775][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 983.544561][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 983.549716][ C1] __run_timers+0x525/0x7c0 [ 983.554703][ C1] ? detach_timer+0x2b0/0x2b0 [ 983.559763][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 983.566092][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 983.571417][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 983.577101][ C1] run_timer_softirq+0x63/0xf0 [ 983.582250][ C1] handle_softirqs+0x328/0x820 [ 983.587569][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 983.592983][ C1] ? do_softirq+0x200/0x200 [ 983.597643][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 983.603150][ C1] __irq_exit_rcu+0x12f/0x220 [ 983.608211][ C1] ? irq_exit_rcu+0x20/0x20 [ 983.613019][ C1] irq_exit_rcu+0x5/0x20 [ 983.617848][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 983.624156][ C1] [ 983.627283][ C1] [ 983.630243][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 983.636543][ C1] RIP: 0010:default_idle+0xb/0x10 [ 983.641623][ C1] Code: bf 48 89 df e8 a6 aa 0a f8 eb b5 e8 4f b0 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d e7 44 54 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 983.662952][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 983.670385][ C1] RAX: 8357094c41f8d400 RBX: ffff88813fe28000 RCX: 8357094c41f8d400 [ 983.680098][ C1] RDX: 0000000000000001 RSI: ffffffff8a0b15c0 RDI: ffffffff8a599340 [ 983.689071][ C1] RBP: ffffc90000d67e80 R08: dffffc0000000000 R09: ffffed101722765a [ 983.697812][ C1] R10: ffffed101722765a R11: 1ffff11017227659 R12: ffffffff8d696ea8 [ 983.706189][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11027fc5000 [ 983.714487][ C1] default_idle_call+0x81/0xc0 [ 983.719407][ C1] do_idle+0x21b/0x5b0 [ 983.723794][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 983.729168][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 983.735768][ C1] cpu_startup_entry+0x14/0x20 [ 983.741977][ C1] start_secondary+0x31f/0x430 [ 983.746971][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 983.752485][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 983.758604][ C1] [ 983.761746][ C1] [ 983.764177][ C1] Allocated by task 11024: [ 983.768603][ C1] __kasan_kmalloc+0xb5/0xf0 [ 983.773892][ C1] __alloc_skb+0x22c/0x750 [ 983.778606][ C1] __ipv6_ifa_notify+0x1e5/0xda0 [ 983.783776][ C1] add_addr+0x1aa/0x2c0 [ 983.788312][ C1] add_v4_addrs+0x6f9/0xbf0 [ 983.793582][ C1] addrconf_init_auto_addrs+0x37d/0xa80 [ 983.799613][ C1] addrconf_notify+0xa6b/0xf00 [ 983.804401][ C1] raw_notifier_call_chain+0xcb/0x160 [ 983.810692][ C1] __dev_notify_flags+0x178/0x2d0 [ 983.816064][ C1] dev_change_flags+0xe3/0x1a0 [ 983.821320][ C1] do_setlink+0xc01/0x3980 [ 983.825870][ C1] rtnl_newlink+0x1419/0x17d0 [ 983.831228][ C1] rtnetlink_rcv_msg+0x9b9/0xe60 [ 983.836296][ C1] netlink_rcv_skb+0x1e0/0x430 [ 983.841354][ C1] netlink_unicast+0x774/0x920 [ 983.846335][ C1] netlink_sendmsg+0x8ab/0xbc0 [ 983.851189][ C1] __sys_sendto+0x423/0x580 [ 983.856087][ C1] __x64_sys_sendto+0xda/0xf0 [ 983.861586][ C1] do_syscall_64+0x4c/0xa0 [ 983.866464][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 983.872729][ C1] [ 983.875248][ C1] Freed by task 11024: [ 983.879427][ C1] kasan_set_track+0x4b/0x70 [ 983.884157][ C1] kasan_set_free_info+0x1f/0x40 [ 983.889372][ C1] ____kasan_slab_free+0xd5/0x110 [ 983.894584][ C1] slab_free_freelist_hook+0xea/0x170 [ 983.899982][ C1] kfree+0xef/0x2a0 [ 983.903811][ C1] skb_release_data+0x6fe/0x850 [ 983.908691][ C1] consume_skb+0xa2/0x100 [ 983.913231][ C1] netlink_broadcast_filtered+0x107a/0x1170 [ 983.919434][ C1] nlmsg_notify+0xec/0x1a0 [ 983.924177][ C1] __ipv6_ifa_notify+0x230/0xda0 [ 983.929574][ C1] add_addr+0x1aa/0x2c0 [ 983.933887][ C1] add_v4_addrs+0x6f9/0xbf0 [ 983.938967][ C1] addrconf_init_auto_addrs+0x37d/0xa80 [ 983.944882][ C1] addrconf_notify+0xa6b/0xf00 [ 983.950360][ C1] raw_notifier_call_chain+0xcb/0x160 [ 983.956223][ C1] __dev_notify_flags+0x178/0x2d0 [ 983.961543][ C1] dev_change_flags+0xe3/0x1a0 [ 983.966588][ C1] do_setlink+0xc01/0x3980 [ 983.971139][ C1] rtnl_newlink+0x1419/0x17d0 [ 983.976223][ C1] rtnetlink_rcv_msg+0x9b9/0xe60 [ 983.981505][ C1] netlink_rcv_skb+0x1e0/0x430 [ 983.986530][ C1] netlink_unicast+0x774/0x920 [ 983.991651][ C1] netlink_sendmsg+0x8ab/0xbc0 [ 983.997204][ C1] __sys_sendto+0x423/0x580 [ 984.002102][ C1] __x64_sys_sendto+0xda/0xf0 [ 984.007386][ C1] do_syscall_64+0x4c/0xa0 [ 984.012213][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 984.018773][ C1] [ 984.021395][ C1] Last potentially related work creation: [ 984.028096][ C1] kasan_save_stack+0x35/0x60 [ 984.033725][ C1] kasan_record_aux_stack+0xb8/0x100 [ 984.039397][ C1] call_rcu+0x182/0x930 [ 984.044582][ C1] fib6_del+0x10d9/0x1500 [ 984.049750][ C1] fib6_clean_node+0x296/0x580 [ 984.055184][ C1] fib6_walk_continue+0x640/0x8c0 [ 984.060986][ C1] fib6_walk+0x149/0x290 [ 984.065711][ C1] __fib6_clean_all+0x20e/0x350 [ 984.071061][ C1] rt6_disable_ip+0x11f/0x690 [ 984.075878][ C1] addrconf_ifdown+0x149/0x1970 [ 984.081423][ C1] addrconf_notify+0x445/0xf00 [ 984.086751][ C1] raw_notifier_call_chain+0xcb/0x160 [ 984.092707][ C1] dev_close_many+0x28d/0x400 [ 984.097789][ C1] unregister_netdevice_many+0x472/0x18f0 [ 984.103756][ C1] default_device_exit_batch+0x336/0x390 [ 984.109930][ C1] cleanup_net+0x77b/0xb80 [ 984.114551][ C1] process_one_work+0x863/0x1000 [ 984.119907][ C1] worker_thread+0xaa8/0x12a0 [ 984.125325][ C1] kthread+0x436/0x520 [ 984.130272][ C1] ret_from_fork+0x1f/0x30 [ 984.135617][ C1] [ 984.138085][ C1] Second to last potentially related work creation: [ 984.146856][ C1] kasan_save_stack+0x35/0x60 [ 984.152400][ C1] kasan_record_aux_stack+0xb8/0x100 [ 984.158040][ C1] kvfree_call_rcu+0x10a/0x7c0 [ 984.163873][ C1] drop_sysctl_table+0x2fa/0x430 [ 984.169482][ C1] drop_sysctl_table+0x2e9/0x430 [ 984.174530][ C1] unregister_sysctl_table+0x87/0x130 [ 984.180578][ C1] mpls_dev_sysctl_unregister+0x8b/0xc0 [ 984.186399][ C1] mpls_dev_notify+0x545/0x780 [ 984.192165][ C1] raw_notifier_call_chain+0xcb/0x160 [ 984.198464][ C1] unregister_netdevice_many+0xf57/0x18f0 [ 984.204513][ C1] default_device_exit_batch+0x336/0x390 [ 984.210548][ C1] cleanup_net+0x77b/0xb80 [ 984.215314][ C1] process_one_work+0x863/0x1000 [ 984.220384][ C1] worker_thread+0xaa8/0x12a0 [ 984.225488][ C1] kthread+0x436/0x520 [ 984.230013][ C1] ret_from_fork+0x1f/0x30 [ 984.235184][ C1] [ 984.237805][ C1] The buggy address belongs to the object at ffff888062f97800 [ 984.237805][ C1] which belongs to the cache kmalloc-512 of size 512 [ 984.252985][ C1] The buggy address is located 42 bytes inside of [ 984.252985][ C1] 512-byte region [ffff888062f97800, ffff888062f97a00) [ 984.269735][ C1] The buggy address belongs to the page: [ 984.276163][ C1] page:ffffea00018be500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62f94 [ 984.286692][ C1] head:ffffea00018be500 order:2 compound_mapcount:0 compound_pincount:0 [ 984.295850][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 984.308534][ C1] raw: 00fff00000010200 ffffea0001828500 0000000200000002 ffff888016841c80 [ 984.318062][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 984.327591][ C1] page dumped because: kasan: bad access detected [ 984.335259][ C1] page_owner tracks the page as allocated [ 984.341804][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4182, ts 65956464188, free_ts 65941468295 [ 984.364911][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 984.371528][ C1] __alloc_pages+0x1e1/0x470 [ 984.377055][ C1] new_slab+0xc0/0x4b0 [ 984.381923][ C1] ___slab_alloc+0x81e/0xdf0 [ 984.386826][ C1] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 984.393221][ C1] __alloc_skb+0x22c/0x750 [ 984.398076][ C1] alloc_uevent_skb+0x7d/0x230 [ 984.403341][ C1] kobject_uevent_net_broadcast+0x17e/0x530 [ 984.409505][ C1] kobject_uevent_env+0x556/0x890 [ 984.415003][ C1] device_add+0x91c/0xfb0 [ 984.419527][ C1] netdev_register_kobject+0x176/0x310 [ 984.425244][ C1] register_netdevice+0x1019/0x16b0 [ 984.430650][ C1] __ip_tunnel_create+0x2bf/0x380 [ 984.436356][ C1] ip_tunnel_init_net+0x232/0x6b0 [ 984.441460][ C1] ops_init+0x357/0x600 [ 984.445605][ C1] setup_net+0x38d/0x9f0 [ 984.449926][ C1] page last free stack trace: [ 984.454790][ C1] free_unref_page_prepare+0x637/0x6c0 [ 984.460647][ C1] free_unref_page+0x94/0x280 [ 984.465682][ C1] stack_depot_save+0x418/0x440 [ 984.470749][ C1] __kasan_slab_alloc+0xb3/0xd0 [ 984.476820][ C1] slab_post_alloc_hook+0x4c/0x380 [ 984.482274][ C1] kmem_cache_alloc+0x100/0x290 [ 984.487785][ C1] radix_tree_node_alloc+0x197/0x3a0 [ 984.493402][ C1] idr_get_free+0x2af/0xa60 [ 984.498707][ C1] idr_alloc_cyclic+0x19e/0x530 [ 984.510057][ C1] __kernfs_new_node+0x120/0x680 [ 984.515266][ C1] kernfs_new_node+0x148/0x250 [ 984.521159][ C1] kernfs_create_dir_ns+0x40/0x120 [ 984.526813][ C1] sysfs_create_dir_ns+0x120/0x280 [ 984.532227][ C1] kobject_add_internal+0x662/0xd00 [ 984.537453][ C1] kobject_add+0x152/0x210 [ 984.541868][ C1] device_add+0x483/0xfb0 [ 984.546864][ C1] [ 984.549225][ C1] Memory state around the buggy address: [ 984.554856][ C1] ffff888062f97700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 984.563391][ C1] ffff888062f97780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 984.572979][ C1] >ffff888062f97800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 984.581343][ C1] ^ [ 984.587569][ C1] ffff888062f97880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 984.596517][ C1] ffff888062f97900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 984.605756][ C1] ================================================================== [ 984.614753][ C1] Disabling lock debugging due to kernel taint [ 984.622209][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 984.630778][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.15.189-syzkaller #0 [ 984.640954][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 984.653350][ C1] Call Trace: [ 984.656883][ C1] [ 984.660607][ C1] dump_stack_lvl+0x168/0x230 [ 984.665972][ C1] ? show_regs_print_info+0x20/0x20 [ 984.672161][ C1] ? load_image+0x3b0/0x3b0 [ 984.677392][ C1] panic+0x2c9/0x7f0 [ 984.682038][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 984.687097][ C1] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 984.694117][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 984.701211][ C1] ? _raw_spin_unlock+0x40/0x40 [ 984.706178][ C1] ? print_memory_metadata+0x314/0x400 [ 984.712003][ C1] ? rose_timer_expiry+0x470/0x490 [ 984.718486][ C1] check_panic_on_warn+0x80/0xa0 [ 984.723649][ C1] ? rose_timer_expiry+0x470/0x490 [ 984.729360][ C1] end_report+0x6d/0xf0 [ 984.734008][ C1] kasan_report+0x102/0x130 [ 984.739447][ C1] ? rose_timer_expiry+0x470/0x490 [ 984.744657][ C1] rose_timer_expiry+0x470/0x490 [ 984.750661][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 984.756891][ C1] call_timer_fn+0x16c/0x530 [ 984.762325][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 984.769667][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 984.777811][ C1] ? __run_timers+0x7c0/0x7c0 [ 984.782777][ C1] ? rcu_is_watching+0x11/0xa0 [ 984.788806][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 984.795081][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 984.800307][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 984.805622][ C1] __run_timers+0x525/0x7c0 [ 984.810501][ C1] ? detach_timer+0x2b0/0x2b0 [ 984.815698][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 984.822080][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 984.827342][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 984.832994][ C1] run_timer_softirq+0x63/0xf0 [ 984.838558][ C1] handle_softirqs+0x328/0x820 [ 984.844309][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 984.850285][ C1] ? do_softirq+0x200/0x200 [ 984.857164][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 984.863138][ C1] __irq_exit_rcu+0x12f/0x220 [ 984.868667][ C1] ? irq_exit_rcu+0x20/0x20 [ 984.874177][ C1] irq_exit_rcu+0x5/0x20 [ 984.878919][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 984.885293][ C1] [ 984.888901][ C1] [ 984.892247][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 984.899925][ C1] RIP: 0010:default_idle+0xb/0x10 [ 984.906022][ C1] Code: bf 48 89 df e8 a6 aa 0a f8 eb b5 e8 4f b0 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d e7 44 54 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 984.929851][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 984.937344][ C1] RAX: 8357094c41f8d400 RBX: ffff88813fe28000 RCX: 8357094c41f8d400 [ 984.946881][ C1] RDX: 0000000000000001 RSI: ffffffff8a0b15c0 RDI: ffffffff8a599340 [ 984.955212][ C1] RBP: ffffc90000d67e80 R08: dffffc0000000000 R09: ffffed101722765a [ 984.963945][ C1] R10: ffffed101722765a R11: 1ffff11017227659 R12: ffffffff8d696ea8 [ 984.973357][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11027fc5000 [ 984.982572][ C1] default_idle_call+0x81/0xc0 [ 984.988147][ C1] do_idle+0x21b/0x5b0 [ 984.992333][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 984.999130][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 985.006254][ C1] cpu_startup_entry+0x14/0x20 [ 985.011341][ C1] start_secondary+0x31f/0x430 [ 985.017094][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 985.023629][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 985.030948][ C1] [ 985.037294][ C1] Kernel Offset: disabled [ 985.047766][ C1] Rebooting in 86400 seconds..