last executing test programs: 1m23.603015348s ago: executing program 0 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000300)}, 0x20) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xc8) r4 = socket(0x2a, 0x2, 0x0) sendto(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr={0x2a, 0x0, 0x8000}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m17.32759396s ago: executing program 0 (id=39): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x3}}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/224, 0xe0}, {0x0}], 0x2, 0x0, 0x10000ac1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f0000000540), 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) close(r2) 1m13.418855282s ago: executing program 0 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610936dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84bb90577b8b405a48292eeca69f5275cb7b7027d4bf643bd69b034c0221a30"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) write$uinput_user_dev(r0, &(0x7f00000007c0)={'syz1\x00', {0x5, 0xcf, 0x0, 0x9}, 0x1a, [0xa77, 0x1, 0x3, 0x42, 0x7, 0xb854, 0x7, 0x4, 0x9, 0x7, 0xffff, 0x8, 0xf166, 0x1, 0x5, 0x5, 0x800, 0xf0f7, 0x7, 0xb1e, 0x1, 0x101, 0x8001, 0x0, 0xffffffe8, 0x2, 0xfffffff9, 0x3ff, 0x7, 0x0, 0x9, 0xea, 0xdd03, 0xc, 0x10, 0x1, 0x1, 0x8, 0x400, 0x800, 0xe, 0x7, 0x8, 0xb9, 0x4, 0x1, 0xd, 0x101, 0x9, 0x4, 0x2, 0x401, 0x46f, 0x7, 0x5, 0x14, 0x3ff, 0x400, 0x400, 0x1, 0x80, 0x5, 0x0, 0x5], [0xa26, 0x21b290ee, 0x8, 0x1, 0x0, 0x1, 0x9, 0xfff, 0xc4, 0x6, 0xc53, 0x0, 0x7, 0x5, 0x0, 0x800, 0x400, 0x2, 0x0, 0x7fffffff, 0x377dcbe7, 0xa62, 0x4, 0x9, 0x4, 0x5, 0x4, 0x8, 0x6, 0x6, 0x0, 0x5, 0x5, 0x40000, 0x3, 0x6, 0x9, 0xffffffff, 0x800, 0x2, 0x3ff, 0x80, 0x0, 0x4b, 0x5, 0x8, 0x4, 0xf85, 0xa34d, 0x9d, 0x800, 0x10650000, 0x1, 0x7f9, 0xb1, 0x9, 0x8, 0x400, 0x5, 0x7, 0x101, 0x5a9e, 0xba, 0x62b], [0x6, 0x1, 0x8298, 0x1, 0x4, 0x10000, 0x2, 0x6, 0x0, 0x100, 0x41, 0x8, 0x1ed, 0x9f, 0x7, 0x7, 0x7, 0x185, 0x7fffffff, 0xbf, 0x5, 0x72b8, 0x8, 0x3, 0x5, 0x40, 0x1000, 0x4, 0xa, 0x401, 0x9, 0x8, 0x0, 0x29f5, 0x400, 0x689, 0xda5, 0x5, 0xe, 0x1, 0xe, 0x0, 0x5, 0x8, 0x1, 0x80, 0x3, 0x5, 0xe1f1, 0x8, 0x0, 0x3, 0xffffff01, 0x6, 0x7, 0x0, 0x6, 0x200, 0x0, 0x1, 0x4, 0x7, 0x5, 0x100], [0x5, 0xfffffffb, 0x86, 0xfffffff7, 0x6, 0xffffffff, 0x3, 0x3, 0x5, 0x59, 0x200, 0x1, 0x6, 0x3, 0x200, 0x3, 0x8, 0x6, 0x6, 0x0, 0x9, 0xd, 0x8, 0x2, 0x2, 0x1ff, 0x5, 0xff, 0x9, 0x81, 0x0, 0x4, 0x6, 0x3, 0x0, 0x5, 0xa, 0xfff, 0x81, 0x1, 0x8, 0x70, 0x1, 0x3, 0xc, 0x7, 0x7, 0x6, 0x800, 0x9b, 0x6, 0x4e3c, 0xfffffff7, 0x8, 0x6, 0x3d, 0x9, 0x5, 0x5, 0x2, 0x80000001, 0x29b0, 0x9, 0xff]}, 0x45c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="03020c"], 0xa, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) 1m10.675403841s ago: executing program 0 (id=55): mount$cgroup(0x0, 0x0, 0x0, 0x2008000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r1, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) 1m3.365513896s ago: executing program 0 (id=69): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 1m1.198484048s ago: executing program 0 (id=73): syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff118f160000007b8af8ff00000000bfa200010000000000000000f8ffffffb703000008000010b704000001005265222b2ce95d0e000000c796abf3c1513e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000300), 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r5, &(0x7f00000002c0)="b1", 0x29fbc, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) 45.898799198s ago: executing program 32 (id=73): syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff118f160000007b8af8ff00000000bfa200010000000000000000f8ffffffb703000008000010b704000001005265222b2ce95d0e000000c796abf3c1513e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000300), 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r5, &(0x7f00000002c0)="b1", 0x29fbc, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) 34.799922035s ago: executing program 5 (id=123): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) mkdir(0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xa, 0xb130, 0x9f, 0xc, 0x0, 0x200, 0xc}, 0x9c) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000"], 0x6c}}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) write$cgroup_int(r6, &(0x7f0000000040)=0x40000000001c9, 0x12) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) 33.093226819s ago: executing program 5 (id=126): r0 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$vsock_stream(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x4, 0x0, 0x0, {0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 32.009909175s ago: executing program 5 (id=128): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) pipe(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080)=0x840, 0x4) connect$unix(r2, &(0x7f0000000140)=@abs={0x1}, 0x6e) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x78}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000070a010165de4f8428bb000000000000000300"], 0x14}, 0x1, 0x0, 0x0, 0x8044004}, 0xc0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 30.650605665s ago: executing program 5 (id=131): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x20000000) r6 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r7, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@l2={0x1f, 0x9, @none, 0x6}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000380)="1ddbb99b309143ec6480f3344b41243072ebc133fb2e8977ee150ea400d11852e41a454fb41407f374baa1cc3dcc70e1306b9bdeb83d01ad66cca2c677188298f4599a5abe97e0254e502eeeb81e4f2ef60849a9dca000399e99aec1336e2d13abedab8e39bd575f92a212c967ea798a914ee7bc741549a6a378252fb971100c593618cf68e9eeacf80ec0c0cd", 0x8d}, {&(0x7f0000001500)="8212a1699deb590d4fedb215ca0da8f1def8805128adee608622497d49780281492fda8646a838e17ea3fd5111c0502668787271f960ef6a12ccc93f8e17c3a28f998db20dbe1921667dc096034c488a73500ebe37f507f8ab1c787f4a936e3c83928192a68766466334739c88759db9e6020b26e86319f585ed8d250b807a11348767ab027510a47f7cbd4eac3d8ac4f7", 0x91}, {&(0x7f00000015c0)="3fc0c58479b438d0817b045e45bebeedccc29c77449a5fb8408ad74e9859a03bb03770a6b259014bd1e2e9e4d9eccfa9f833dfebbe11552e4c1abd3d973238c9ac38c344eb109f6dacf3396a13ea12cabc126c5c05dfc24d63a48ff620e6d962356cce3fe3990631d31fb5c307c8e365b07732a16ea879ee5c3072eeafbf5969d39dfed302cc8fca99dc8381483ccb5553", 0x91}], 0x4}, 0x50) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000100)) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x6, 0x3, 0x3, "000000000000000805f126f8454ad22d00e1ff2000", 0x20363059}) 25.165729744s ago: executing program 5 (id=137): madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) 23.585060979s ago: executing program 5 (id=139): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 20.977291916s ago: executing program 1 (id=147): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)={0x64, r4, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xe}, @device_b, @device_a, @random="f3527d40ace1", {0x8}}, 0x20, 0x4b, @random=0x3, @val, @val={0x2d, 0x1a, {0x10, 0x2, 0x0, 0x0, {0x1000, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xff, 0x2}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) 19.987080813s ago: executing program 2 (id=151): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x2, 0xe}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r4 = gettid() timer_create(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x3, &(0x7f0000000040)=[&(0x7f0000a0d000/0x3000)=nil, &(0x7f0000a77000/0x3000)=nil, &(0x7f0000a3a000/0x1000)=nil], &(0x7f0000000100)=[0x1], &(0x7f0000000380), 0x2) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x200000, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) open(0x0, 0x6440, 0x81) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x400001, 0x1) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00') 19.192070726s ago: executing program 1 (id=153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) socket$alg(0x26, 0x5, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r3, 0xffffffffffffffff, 0x0) 17.539986504s ago: executing program 3 (id=156): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r0 = syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x98f1, 0x2a, 0x0, 0x0) 17.233970121s ago: executing program 1 (id=157): syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff118f160000007b8af8ff00000000bfa200010000000000000000f8ffffffb703000008000010b704000001005265222b2ce95d0e000000c796abf3c1513e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)="8907040400", 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000300), 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r4, &(0x7f00000002c0)="b1", 0x29fbc, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bind$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) 15.495224089s ago: executing program 3 (id=158): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0xc08, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc0046209, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syslog(0x2, 0x0, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) gettid() 14.369257803s ago: executing program 3 (id=159): socket$packet(0x11, 0x3, 0x300) creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) socket(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 12.393841494s ago: executing program 4 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 11.24664095s ago: executing program 4 (id=163): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x2, 0xe}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r4 = gettid() timer_create(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x3, &(0x7f0000000040)=[&(0x7f0000a0d000/0x3000)=nil, &(0x7f0000a77000/0x3000)=nil, &(0x7f0000a3a000/0x1000)=nil], &(0x7f0000000100)=[0x1], &(0x7f0000000380), 0x2) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x200000, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x400001, 0x1) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00') 10.762065954s ago: executing program 2 (id=164): r0 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$vsock_stream(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x4, 0x0, 0x0, {0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.95051216s ago: executing program 2 (id=165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 8.573810127s ago: executing program 3 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) 8.482145366s ago: executing program 33 (id=139): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 7.38446915s ago: executing program 3 (id=168): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$netlink(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open$dir(&(0x7f0000000100)='./file0\x00', 0x20000, 0x8) unshare(0x22020600) close(0x4) io_setup(0x1, &(0x7f0000000240)) socket$alg(0x26, 0x5, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 7.366149693s ago: executing program 1 (id=169): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r0 = syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x98f1, 0x2a, 0x0, 0x0) 6.580001803s ago: executing program 2 (id=170): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0xc08, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc0046209, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syslog(0x2, 0x0, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) gettid() 5.38499855s ago: executing program 2 (id=171): madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x0, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) 5.245647941s ago: executing program 4 (id=172): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e7000705", @ANYRES8], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x7, 0x58, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x7, 0x8f, &(0x7f00000002c0)="d91e3d2f3b417bd72239ea151242ab8e4791ff7da7283c6d52c84faef38e0e6d9c8b31c13251030cc98959e9d9d2256c3dc7d610ac72a4307f912503ba5e0741ba2059deca4768fcb548f51de0b38c7e3d899a3f809cfe5acaa658137be5fd0a8098e8cc43dd28024a333078e2d92fa9de1b05a422072c7652c1261079c572ef2f408e5b2761552b707049a664c4c1") syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f00000003c0)='0x2', 0x3) syz_usb_disconnect(r2) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000400)=ANY=[@ANYBLOB="12015001000000106b1d030000000000000009029a0003010000000904000000010100000a24837fb1c5427203b2f84dc9f4e33fe7d5010000000201020c06020000000000110000000524050000082407160000009e0c240701000000c80975f9070d24070101000005cf1f000005092403000000000100090401000001020000090401010101020000090501090000010000072501000100000904020000010200000904020101010200020905824351"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000002200)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 4.542340472s ago: executing program 1 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b714000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) syz_open_procfs(0x0, 0x0) 4.075561093s ago: executing program 2 (id=174): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3e, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/160, 0xa0, 0x7f1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbaf}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xd, 0xc, 0x2f}}]}}}]}}]}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) connect$pppl2tp(r3, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000080), 0x2000011a) 1.865047672s ago: executing program 3 (id=175): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x20000000) r6 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r7, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@l2={0x1f, 0x9, @none, 0x6}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000380)="1ddbb99b309143ec6480f3344b41243072ebc133fb2e8977ee150ea400d11852e41a454fb41407f374baa1cc3dcc70e1306b9bdeb83d01ad66cca2c677188298f4599a5abe97e0254e502eeeb81e4f2ef60849a9dca000399e99aec1336e2d13abedab8e39bd575f92a212c967ea798a914ee7bc741549a6a378252fb971100c593618cf68e9eeacf80ec0c0cd", 0x8d}, {&(0x7f0000001500)="8212a1699deb590d4fedb215ca0da8f1def8805128adee608622497d49780281492fda8646a838e17ea3fd5111c0502668787271f960ef6a12ccc93f8e17c3a28f998db20dbe1921667dc096034c488a73500ebe37f507f8ab1c787f4a936e3c83928192a68766466334739c88759db9e6020b26e86319f585ed8d250b807a11348767ab027510a47f7cbd4eac3d8ac4f7", 0x91}, {&(0x7f00000015c0)="3fc0c58479b438d0817b045e45bebeedccc29c77449a5fb8408ad74e9859a03bb03770a6b259014bd1e2e9e4d9eccfa9f833dfebbe11552e4c1abd3d973238c9ac38c344eb109f6dacf3396a13ea12cabc126c5c05dfc24d63a48ff620e6d962356cce3fe3990631d31fb5c307c8e365b07732a16ea879ee5c3072eeafbf5969d39dfed302cc8fca99dc8381483ccb5553", 0x91}], 0x4}, 0x50) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x6, 0x3, 0x3, "000000000000000805f126f8454ad22d00e1ff2000", 0x20363059}) 1.689158994s ago: executing program 4 (id=176): madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x0, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0x0, 0x0) 410.376864ms ago: executing program 1 (id=177): socket$packet(0x11, 0x3, 0x300) creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) socket(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 407.812725ms ago: executing program 4 (id=178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000"], 0xec}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 0s ago: executing program 4 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 97.397607][ T5815] cgroup: Unknown subsys name 'net' [ 97.569050][ T5815] cgroup: Unknown subsys name 'cpuset' [ 97.578844][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.242372][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.138169][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.176957][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.194163][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.202443][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.210299][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.279122][ T5135] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.288444][ T5135] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.296562][ T5135] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.334305][ T5135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.343034][ T5135] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.389973][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.397941][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.406933][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.415475][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.423376][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.477841][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.488836][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.497334][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.506173][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.552853][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.571081][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.585026][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.592142][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.607628][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.616264][ T5135] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.652603][ T5135] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 103.664881][ T5135] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 103.674662][ T5135] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 103.683122][ T5135] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 103.691038][ T5135] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.238571][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 104.419109][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 104.509940][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.518062][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.526394][ T5835] bridge_slave_0: entered allmulticast mode [ 104.534714][ T5835] bridge_slave_0: entered promiscuous mode [ 104.607758][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.617701][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.625225][ T5835] bridge_slave_1: entered allmulticast mode [ 104.632786][ T5835] bridge_slave_1: entered promiscuous mode [ 104.641720][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 104.726978][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.745964][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.870701][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 104.894504][ T5835] team0: Port device team_slave_0 added [ 104.954904][ T5835] team0: Port device team_slave_1 added [ 105.085949][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 105.098554][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.105886][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.113158][ T5827] bridge_slave_0: entered allmulticast mode [ 105.120841][ T5827] bridge_slave_0: entered promiscuous mode [ 105.174964][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.181954][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.208329][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.228780][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.236593][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.244109][ T5827] bridge_slave_1: entered allmulticast mode [ 105.251690][ T5827] bridge_slave_1: entered promiscuous mode [ 105.262636][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 105.282123][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.290157][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.290372][ T55] Bluetooth: hci0: command tx timeout [ 105.297891][ T5831] bridge_slave_0: entered allmulticast mode [ 105.310609][ T5831] bridge_slave_0: entered promiscuous mode [ 105.326718][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.333853][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.360306][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.430580][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.438097][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.446043][ T55] Bluetooth: hci1: command tx timeout [ 105.452186][ T5831] bridge_slave_1: entered allmulticast mode [ 105.460579][ T5831] bridge_slave_1: entered promiscuous mode [ 105.522494][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.524052][ T55] Bluetooth: hci2: command tx timeout [ 105.568379][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.575654][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.583013][ T5839] bridge_slave_0: entered allmulticast mode [ 105.591457][ T5839] bridge_slave_0: entered promiscuous mode [ 105.608224][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.672591][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.680566][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.688334][ T5839] bridge_slave_1: entered allmulticast mode [ 105.691935][ T5135] Bluetooth: hci3: command tx timeout [ 105.697608][ T5839] bridge_slave_1: entered promiscuous mode [ 105.699946][ T55] Bluetooth: hci4: command tx timeout [ 105.774009][ T55] Bluetooth: hci5: command tx timeout [ 105.779608][ T5835] hsr_slave_0: entered promiscuous mode [ 105.786953][ T5835] hsr_slave_1: entered promiscuous mode [ 105.804056][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.845390][ T10] cfg80211: failed to load regulatory.db [ 105.861231][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.868700][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.876246][ T5846] bridge_slave_0: entered allmulticast mode [ 105.885375][ T5846] bridge_slave_0: entered promiscuous mode [ 105.894385][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.901511][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.909617][ T5846] bridge_slave_1: entered allmulticast mode [ 105.917815][ T5846] bridge_slave_1: entered promiscuous mode [ 105.945062][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.958265][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.972896][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.986027][ T5827] team0: Port device team_slave_0 added [ 105.995258][ T5827] team0: Port device team_slave_1 added [ 106.142315][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.155114][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.164543][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.171729][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.179042][ T5837] bridge_slave_0: entered allmulticast mode [ 106.187607][ T5837] bridge_slave_0: entered promiscuous mode [ 106.198219][ T5831] team0: Port device team_slave_0 added [ 106.207750][ T5831] team0: Port device team_slave_1 added [ 106.252056][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.259166][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.285296][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.333363][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.340701][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.348516][ T5837] bridge_slave_1: entered allmulticast mode [ 106.356145][ T5837] bridge_slave_1: entered promiscuous mode [ 106.383157][ T5839] team0: Port device team_slave_0 added [ 106.409411][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.416687][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.442925][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.468172][ T5846] team0: Port device team_slave_0 added [ 106.509945][ T5839] team0: Port device team_slave_1 added [ 106.541522][ T5846] team0: Port device team_slave_1 added [ 106.568681][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.578800][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.588923][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.616871][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.689016][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.699055][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.706328][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.732324][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.744395][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.751357][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.777501][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.813385][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.820420][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.846805][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.881144][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.888602][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.914742][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.952921][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.960164][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.986919][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.032407][ T5837] team0: Port device team_slave_0 added [ 107.042511][ T5837] team0: Port device team_slave_1 added [ 107.074957][ T5827] hsr_slave_0: entered promiscuous mode [ 107.081500][ T5827] hsr_slave_1: entered promiscuous mode [ 107.088270][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.096245][ T5827] Cannot create hsr debugfs directory [ 107.197179][ T5846] hsr_slave_0: entered promiscuous mode [ 107.204603][ T5846] hsr_slave_1: entered promiscuous mode [ 107.210906][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.219108][ T5846] Cannot create hsr debugfs directory [ 107.275478][ T5831] hsr_slave_0: entered promiscuous mode [ 107.281954][ T5831] hsr_slave_1: entered promiscuous mode [ 107.288462][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.296074][ T5831] Cannot create hsr debugfs directory [ 107.364201][ T55] Bluetooth: hci0: command tx timeout [ 107.370657][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.377892][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.403813][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.416809][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.423832][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.449800][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.467945][ T5839] hsr_slave_0: entered promiscuous mode [ 107.474935][ T5839] hsr_slave_1: entered promiscuous mode [ 107.481300][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.488924][ T5839] Cannot create hsr debugfs directory [ 107.523673][ T55] Bluetooth: hci1: command tx timeout [ 107.604097][ T55] Bluetooth: hci2: command tx timeout [ 107.763751][ T5135] Bluetooth: hci3: command tx timeout [ 107.769285][ T55] Bluetooth: hci4: command tx timeout [ 107.843637][ T55] Bluetooth: hci5: command tx timeout [ 107.890180][ T5837] hsr_slave_0: entered promiscuous mode [ 107.896725][ T5837] hsr_slave_1: entered promiscuous mode [ 107.902911][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.911191][ T5837] Cannot create hsr debugfs directory [ 108.115117][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.140095][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.193904][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.232743][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.359195][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.371766][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.409827][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.433111][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.532412][ T5831] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.546196][ T5831] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.561012][ T5831] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.597747][ T5831] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.697863][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.716694][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.729427][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.742499][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.876188][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.929801][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.966583][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.979553][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.007634][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.028935][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.049883][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.076502][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.107226][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.114526][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.151937][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.159117][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.172370][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.179515][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.240568][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.254177][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.266766][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.282448][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.289592][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.324422][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.372617][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.428998][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.445158][ T55] Bluetooth: hci0: command tx timeout [ 109.557406][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.590421][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.610151][ T55] Bluetooth: hci1: command tx timeout [ 109.625927][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.633084][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.693659][ T55] Bluetooth: hci2: command tx timeout [ 109.715725][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.722918][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.771768][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.779010][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.828633][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.835881][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.846904][ T55] Bluetooth: hci4: command tx timeout [ 109.852529][ T55] Bluetooth: hci3: command tx timeout [ 109.933887][ T55] Bluetooth: hci5: command tx timeout [ 109.999357][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.036920][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.086139][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.141624][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.172081][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.179372][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.222765][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.229973][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.276574][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.287952][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.348977][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.356223][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.425406][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.432568][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.579435][ T5835] veth0_vlan: entered promiscuous mode [ 110.640949][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.671572][ T5835] veth1_vlan: entered promiscuous mode [ 110.730554][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.835037][ T5827] veth0_vlan: entered promiscuous mode [ 110.872669][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.907829][ T5827] veth1_vlan: entered promiscuous mode [ 110.951349][ T5835] veth0_macvtap: entered promiscuous mode [ 110.992140][ T5835] veth1_macvtap: entered promiscuous mode [ 111.099391][ T5827] veth0_macvtap: entered promiscuous mode [ 111.129278][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.169446][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.213458][ T5827] veth1_macvtap: entered promiscuous mode [ 111.255211][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.276239][ T5846] veth0_vlan: entered promiscuous mode [ 111.316368][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.327039][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.336613][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.345513][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.371359][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.382143][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.396619][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.432472][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.449134][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.462474][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.487586][ T5846] veth1_vlan: entered promiscuous mode [ 111.518037][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.538659][ T55] Bluetooth: hci0: command tx timeout [ 111.557974][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.567252][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.577718][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.589720][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.660074][ T5839] veth0_vlan: entered promiscuous mode [ 111.684553][ T55] Bluetooth: hci1: command tx timeout [ 111.765358][ T55] Bluetooth: hci2: command tx timeout [ 111.789271][ T5839] veth1_vlan: entered promiscuous mode [ 111.889051][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.919501][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.936816][ T55] Bluetooth: hci3: command tx timeout [ 111.941257][ T5135] Bluetooth: hci4: command tx timeout [ 112.001381][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.010414][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.018473][ T5135] Bluetooth: hci5: command tx timeout [ 112.032876][ T5846] veth0_macvtap: entered promiscuous mode [ 112.046744][ T5831] veth0_vlan: entered promiscuous mode [ 112.089164][ T5831] veth1_vlan: entered promiscuous mode [ 112.122881][ T5846] veth1_macvtap: entered promiscuous mode [ 112.145183][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 112.165982][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.189377][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.237393][ T5839] veth0_macvtap: entered promiscuous mode [ 112.268164][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.279839][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.310715][ T5839] veth1_macvtap: entered promiscuous mode [ 112.337219][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.366360][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.376772][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.387260][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.399337][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.419056][ T5831] veth0_macvtap: entered promiscuous mode [ 112.445728][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.460619][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.479568][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.491393][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.518468][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.538957][ T5831] veth1_macvtap: entered promiscuous mode [ 112.561712][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.599541][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.608508][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.630460][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.822434][ T5837] veth0_vlan: entered promiscuous mode [ 112.845288][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.083434][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.103605][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.114370][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.025181][ T5938] loop0: detected capacity change from 0 to 32768 [ 114.045898][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.073528][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.094146][ T5938] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.168968][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.189271][ T5938] XFS (loop0): Ending clean mount [ 114.195681][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.213039][ T5938] XFS (loop0): Quotacheck needed: Please wait. [ 114.244116][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.267341][ T5938] XFS (loop0): Quotacheck: Done. [ 114.329704][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.348065][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.362230][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.379302][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.396581][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.408592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.557661][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.591181][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.601287][ T5827] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.635754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.661889][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.673975][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.684394][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.697410][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.708365][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.720028][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.735576][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.750180][ T5837] veth1_vlan: entered promiscuous mode [ 114.802100][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.873723][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.882502][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.933580][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.001140][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.044779][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.065594][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.093595][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.113577][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.161893][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.183570][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.194514][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.226347][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.256673][ T5831] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.304266][ T5831] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.313011][ T5831] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.330775][ T5831] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.043816][ T5950] loop3: detected capacity change from 0 to 40427 [ 116.117423][ T5950] F2FS-fs (loop3): invalid crc value [ 116.205273][ T5950] F2FS-fs (loop3): Start checkpoint disabled! [ 116.230298][ T5950] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 116.241064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 116.250538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #50!!! [ 116.260311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 116.349464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 116.358280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.576933][ T5837] veth0_macvtap: entered promiscuous mode [ 116.610671][ T5837] veth1_macvtap: entered promiscuous mode [ 117.100107][ T13] kworker/u8:1: attempt to access beyond end of device [ 117.100107][ T13] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.110274][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.342206][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.824722][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(full) [ 117.824760][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.824778][ T13] Workqueue: writeback wb_workfn (flush-7:3) [ 117.824841][ T13] Call Trace: [ 117.824857][ T13] [ 117.824966][ T13] dump_stack_lvl+0x189/0x250 [ 117.825067][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.825109][ T13] ? __pfx_queue_work_on+0x10/0x10 [ 117.825133][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 117.825163][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 117.825193][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.825234][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 117.825277][ T13] f2fs_write_end_io+0x4e2/0x6d0 [ 117.825332][ T13] __submit_merged_bio+0x27a/0x6a0 [ 117.825368][ T13] __submit_merged_write_cond+0x255/0x530 [ 117.825422][ T13] f2fs_write_data_pages+0x2854/0x31f0 [ 117.825453][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.825481][ T13] ? __submit_merged_write_cond+0x26a/0x530 [ 117.825567][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 117.825704][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.825737][ T13] ? f2fs_write_meta_pages+0x357/0x450 [ 117.825786][ T13] ? f2fs_write_meta_pages+0x357/0x450 [ 117.825818][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 117.825850][ T13] do_writepages+0x3b1/0x7b0 [ 117.825895][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.825957][ T13] ? __lock_acquire+0xaac/0xd20 [ 117.826002][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.826032][ T13] ? __pfx_do_writepages+0x10/0x10 [ 117.826075][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.826103][ T13] ? reacquire_held_locks+0x127/0x1d0 [ 117.826126][ T13] ? writeback_sb_inodes+0x372/0x1000 [ 117.826167][ T13] __writeback_single_inode+0x145/0xff0 [ 117.826194][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.826222][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 117.826258][ T13] writeback_sb_inodes+0x6b5/0x1000 [ 117.826324][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 117.826412][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.826440][ T13] ? rcu_is_watching+0x15/0xb0 [ 117.826479][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.826520][ T13] wb_writeback+0x43b/0xaf0 [ 117.826558][ T13] ? queue_io+0x351/0x590 [ 117.826589][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 117.826632][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.826666][ T13] wb_workfn+0x409/0xef0 [ 117.826726][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 117.826759][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.826788][ T13] ? register_lock_class+0x51/0x320 [ 117.826830][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.826858][ T13] ? __lock_acquire+0xaac/0xd20 [ 117.826908][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.826941][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.826975][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.827000][ T13] ? process_scheduled_works+0x9ec/0x17a0 [ 117.827039][ T13] ? process_scheduled_works+0x9ec/0x17a0 [ 117.827089][ T13] process_scheduled_works+0xade/0x17a0 [ 117.827173][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 117.827225][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.827267][ T13] worker_thread+0x8a0/0xda0 [ 117.827332][ T13] kthread+0x711/0x8a0 [ 117.827368][ T13] ? __pfx_worker_thread+0x10/0x10 [ 117.827391][ T13] ? __pfx_kthread+0x10/0x10 [ 117.827421][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.827451][ T13] ? __pfx_kthread+0x10/0x10 [ 117.827480][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.827505][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 117.827533][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.827566][ T13] ? __pfx_kthread+0x10/0x10 [ 117.827595][ T13] ret_from_fork+0x4e/0x80 [ 117.827621][ T13] ? __pfx_kthread+0x10/0x10 [ 117.827651][ T13] ret_from_fork_asm+0x1a/0x30 [ 117.827699][ T13] [ 117.827709][ T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 118.007187][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.267767][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.280250][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.291160][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.302400][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.343734][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.354446][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.366116][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.377899][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.388749][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.575787][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.668869][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.768457][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.779239][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.795474][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.809949][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.832762][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.979837][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.997104][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.008425][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.025505][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.216175][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.256469][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.269556][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.279754][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.307027][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.418930][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.467835][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.645922][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.668765][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.895206][ T5970] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[5970] [ 120.073298][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.090129][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.122280][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.162271][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.298774][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.334671][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.555476][ T5976] random: crng reseeded on system resumption [ 120.933896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.942647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.951233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.077100][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.256691][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.571688][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.593260][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.548048][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'. [ 125.655581][ T6007] ip6_vti0: entered promiscuous mode [ 125.673667][ T6007] ip6_vti0: entered allmulticast mode [ 126.328025][ T6011] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17'. [ 127.074778][ T5887] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.083996][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.356368][ T5887] usb 4-1: config 0 has too many interfaces: 66, using maximum allowed: 32 [ 127.372878][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.393649][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.494062][ T9] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 127.507240][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 127.553326][ T5887] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 66 [ 127.563866][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.653444][ T9] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 127.666102][ T5887] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.713938][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.772537][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 127.799559][ T5887] usb 4-1: Product: syz [ 127.822962][ T5887] usb 4-1: Manufacturer: syz [ 127.839630][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 127.896099][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.937949][ T5887] usb 4-1: config 0 descriptor?? [ 127.945112][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.002908][ T9] usb 5-1: Product: syz [ 128.039753][ T9] usb 5-1: Manufacturer: syz [ 128.060910][ T6025] netlink: 56 bytes leftover after parsing attributes in process `syz.5.23'. [ 128.130026][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 128.170530][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 128.188549][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 128.215143][ T5832] usb 4-1: USB disconnect, device number 2 [ 128.507039][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 129.519670][ T5891] usb 5-1: USB disconnect, device number 2 [ 130.588188][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 130.899480][ T6050] block device autoloading is deprecated and will be removed. [ 131.769147][ T6060] loop0: detected capacity change from 0 to 40427 [ 132.003143][ T6060] F2FS-fs (loop0): invalid crc value [ 132.115639][ T6060] F2FS-fs (loop0): Start checkpoint disabled! [ 132.148775][ T5891] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 132.212038][ T6060] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 132.401644][ T5891] usb 6-1: config 0 has no interfaces? [ 132.434422][ T5891] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 132.451947][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.507887][ T5891] usb 6-1: Product: syz [ 132.568220][ T5891] usb 6-1: Manufacturer: syz [ 132.594494][ T5891] usb 6-1: SerialNumber: syz [ 132.616852][ T5891] usb 6-1: config 0 descriptor?? [ 133.271464][ T36] kworker/u8:2: attempt to access beyond end of device [ 133.271464][ T36] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.466529][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(full) [ 133.466568][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.466584][ T36] Workqueue: writeback wb_workfn (flush-7:0) [ 133.466632][ T36] Call Trace: [ 133.466642][ T36] [ 133.466664][ T36] dump_stack_lvl+0x189/0x250 [ 133.466713][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.466750][ T36] ? __pfx_queue_work_on+0x10/0x10 [ 133.466775][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 133.466805][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 133.466834][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.466872][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 133.466910][ T36] f2fs_write_end_io+0x4e2/0x6d0 [ 133.466959][ T36] __submit_merged_bio+0x27a/0x6a0 [ 133.466993][ T36] __submit_merged_write_cond+0x255/0x530 [ 133.467043][ T36] f2fs_write_data_pages+0x2854/0x31f0 [ 133.467079][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.467107][ T36] ? __submit_merged_write_cond+0x26a/0x530 [ 133.467187][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 133.467303][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.467335][ T36] ? f2fs_write_meta_pages+0x357/0x450 [ 133.467379][ T36] ? f2fs_write_meta_pages+0x357/0x450 [ 133.467410][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 133.467441][ T36] do_writepages+0x3b1/0x7b0 [ 133.467484][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.467512][ T36] ? __lock_acquire+0xaac/0xd20 [ 133.467555][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.467586][ T36] ? __pfx_do_writepages+0x10/0x10 [ 133.467621][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.467649][ T36] ? reacquire_held_locks+0x127/0x1d0 [ 133.467671][ T36] ? writeback_sb_inodes+0x372/0x1000 [ 133.467709][ T36] __writeback_single_inode+0x145/0xff0 [ 133.467736][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.467763][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 133.467798][ T36] writeback_sb_inodes+0x6b5/0x1000 [ 133.467862][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 133.467936][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.467964][ T36] ? rcu_is_watching+0x15/0xb0 [ 133.468004][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.468042][ T36] wb_writeback+0x43b/0xaf0 [ 133.468089][ T36] ? queue_io+0x351/0x590 [ 133.468118][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 133.468154][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 133.468188][ T36] wb_workfn+0x409/0xef0 [ 133.468243][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 133.468277][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.468303][ T36] ? register_lock_class+0x51/0x320 [ 133.468341][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.468363][ T36] ? __lock_acquire+0xaac/0xd20 [ 133.468396][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.468419][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.468453][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 133.468471][ T36] ? process_scheduled_works+0x9ec/0x17a0 [ 133.468500][ T36] ? process_scheduled_works+0x9ec/0x17a0 [ 133.468530][ T36] process_scheduled_works+0xade/0x17a0 [ 133.468584][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 133.468620][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.468647][ T36] worker_thread+0x8a0/0xda0 [ 133.468688][ T36] kthread+0x711/0x8a0 [ 133.468713][ T36] ? __pfx_worker_thread+0x10/0x10 [ 133.468730][ T36] ? __pfx_kthread+0x10/0x10 [ 133.468751][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.468772][ T36] ? __pfx_kthread+0x10/0x10 [ 133.468793][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 133.468810][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.468832][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.468855][ T36] ? __pfx_kthread+0x10/0x10 [ 133.468875][ T36] ret_from_fork+0x4e/0x80 [ 133.468894][ T36] ? __pfx_kthread+0x10/0x10 [ 133.468915][ T36] ret_from_fork_asm+0x1a/0x30 [ 133.468947][ T36] [ 133.471102][ T36] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 135.258550][ T6074] loop1: detected capacity change from 0 to 32768 [ 135.328134][ T6074] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.535130][ T6074] XFS (loop1): Ending clean mount [ 135.561877][ T6074] XFS (loop1): Quotacheck needed: Please wait. [ 135.646469][ T6074] XFS (loop1): Quotacheck: Done. [ 136.117453][ T5846] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 137.319412][ T5832] usb 6-1: USB disconnect, device number 2 [ 137.790952][ T6097] qrtr: Invalid version 0 [ 139.394251][ T5889] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.437136][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.598708][ T5889] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.630952][ T5889] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.664016][ T5889] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.715825][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.830901][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.862082][ T9] usb 2-1: config 0 has no interfaces? [ 139.865943][ T6101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 139.875427][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.884751][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.892859][ T9] usb 2-1: Product: syz [ 139.897375][ T9] usb 2-1: Manufacturer: syz [ 140.056013][ T9] usb 2-1: config 0 descriptor?? [ 140.594004][ T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.757152][ T5889] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.860320][ T93] usb 2-1: USB disconnect, device number 2 [ 140.936459][ T47] usb 5-1: config 252 has an invalid interface number: 186 but max is 0 [ 140.955824][ T47] usb 5-1: config 252 has no interface number 0 [ 141.103273][ T47] usb 5-1: New USB device found, idVendor=0403, idProduct=bcd8, bcdDevice=27.67 [ 141.118272][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.323766][ T47] usb 5-1: Product: syz [ 141.328086][ T47] usb 5-1: Manufacturer: syz [ 141.333304][ T47] usb 5-1: SerialNumber: syz [ 141.672230][ T47] ftdi_sio 5-1:252.186: FTDI USB Serial Device converter detected [ 141.685811][ T5889] usb 1-1: USB disconnect, device number 2 [ 141.692392][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.708067][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.720631][ T47] ftdi_sio ttyUSB0: unknown device type: 0x2767 [ 142.561600][ T6132] loop5: detected capacity change from 0 to 512 [ 142.561681][ T5891] usb 5-1: USB disconnect, device number 3 [ 142.684955][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.722394][ T5891] ftdi_sio 5-1:252.186: device disconnected [ 142.865674][ T6132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 142.903747][ T6132] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.134160][ T6140] loop0: detected capacity change from 0 to 32768 [ 143.141664][ T6140] ======================================================= [ 143.141664][ T6140] WARNING: The mand mount option has been deprecated and [ 143.141664][ T6140] and is ignored by this kernel. Remove the mand [ 143.141664][ T6140] option from the mount to silence this warning. [ 143.141664][ T6140] ======================================================= [ 144.379289][ T6140] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 144.406313][ T6149] openvswitch: netlink: Multiple metadata blocks provided [ 144.817936][ T6140] syz.0.50 (6140) used greatest stack depth: 20280 bytes left [ 145.425003][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 145.693778][ T5827] ocfs2: Unmounting device (7,0) on (node local) [ 147.697111][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.52'. [ 147.984631][ T47] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.005998][ T6166] bond_slave_1: entered promiscuous mode [ 148.011667][ T6166] bond_slave_1: entered allmulticast mode [ 148.185671][ T47] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.220631][ T47] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 148.285192][ T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 148.295108][ T47] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 148.358733][ T47] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 148.428820][ T47] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 148.513646][ T47] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.727517][ T47] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.739574][ T47] usb 5-1: Product: syz [ 148.748195][ T47] usb 5-1: Manufacturer: syz [ 149.588321][ T47] cdc_wdm 5-1:1.0: skipping garbage [ 149.603989][ T47] cdc_wdm 5-1:1.0: skipping garbage [ 149.654016][ T47] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 149.800234][ T47] usb 5-1: USB disconnect, device number 4 [ 149.867597][ T30] audit: type=1326 audit(1747034893.227:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40918e969 code=0x7ffc0000 [ 149.990969][ T30] audit: type=1326 audit(1747034893.247:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40918e969 code=0x7ffc0000 [ 150.052055][ T6184] : renamed from bond0 (while UP) [ 150.109574][ T5910] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 150.130970][ T30] audit: type=1326 audit(1747034893.277:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc40918e969 code=0x7ffc0000 [ 150.156775][ T30] audit: type=1326 audit(1747034893.277:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40918e969 code=0x7ffc0000 [ 150.179835][ T30] audit: type=1326 audit(1747034893.287:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40918e969 code=0x7ffc0000 [ 150.328708][ T30] audit: type=1326 audit(1747034893.287:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc40918e969 code=0x7ffc0000 [ 150.392016][ T5910] usb 3-1: config 0 has no interfaces? [ 150.417958][ T5910] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 150.468983][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 150.472789][ T30] audit: type=1326 audit(1747034893.287:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40918e969 code=0x7ffc0000 [ 150.833862][ T6190] random: crng reseeded on system resumption [ 150.864930][ T5910] usb 3-1: Product: syz [ 150.993623][ T5910] usb 3-1: Manufacturer: syz [ 151.279445][ T30] audit: type=1326 audit(1747034893.287:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40918e969 code=0x7ffc0000 [ 151.312192][ T5910] usb 3-1: config 0 descriptor?? [ 151.577817][ T6196] binder: 6192:6196 ioctl c0046209 0 returned -22 [ 152.176297][ T6197] tty tty4: ldisc open failed (-12), clearing slot 3 [ 152.288619][ T30] audit: type=1326 audit(1747034893.297:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc40918e969 code=0x7ffc0000 [ 152.320397][ T30] audit: type=1326 audit(1747034893.297:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40918e969 code=0x7ffc0000 [ 152.335534][ T47] usb 3-1: USB disconnect, device number 2 [ 152.375958][ T6195] loop4: detected capacity change from 0 to 512 [ 152.584507][ T6195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 152.710523][ T6195] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.319291][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 155.494526][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 155.494620][ T30] audit: type=1326 audit(1747034898.847:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.2.72" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff62598e969 code=0x0 [ 156.355156][ T6237] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.853371][ T30] audit: type=1326 audit(1747034903.217:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.78" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc40918e969 code=0x0 [ 159.874905][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.837136][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.82'. [ 164.023914][ T93] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.324153][ T93] usb 5-1: Using ep0 maxpacket: 8 [ 164.340240][ T93] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 164.357820][ T93] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.393565][ T93] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.403366][ T93] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.457158][ T93] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.513397][ T93] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.631628][ T93] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.288580][ T93] usb 5-1: usb_control_msg returned -32 [ 165.598384][ T93] usbtmc 5-1:16.0: can't read capabilities [ 165.616286][ T93] usb 5-1: USB disconnect, device number 5 [ 166.300693][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 167.244808][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.92'. [ 167.284413][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.92'. [ 167.344150][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 168.786079][ T5889] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 169.025392][ T5889] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.062251][ T5889] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 169.084119][ T5889] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.102957][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.139719][ T6321] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 169.251081][ T5889] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.523821][ T5889] usb 5-1: USB disconnect, device number 6 [ 172.808050][ T6357] loop2: detected capacity change from 0 to 256 [ 173.001953][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.013232][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.020925][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.029193][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.036853][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.135581][ T6357] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 174.551816][ T6368] loop3: detected capacity change from 0 to 32768 [ 174.649701][ T6368] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.730752][ T6368] XFS (loop3): Ending clean mount [ 174.738272][ T6368] XFS (loop3): Quotacheck needed: Please wait. [ 174.911073][ T6368] XFS (loop3): Quotacheck: Done. [ 175.123674][ T55] Bluetooth: hci6: command tx timeout [ 175.232841][ T5835] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.272185][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.681993][ T6391] random: crng reseeded on system resumption [ 177.096125][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.204294][ T55] Bluetooth: hci6: command tx timeout [ 177.576349][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 178.007147][ T6399] loop4: detected capacity change from 0 to 32768 [ 178.054672][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.225311][ T6399] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 179.099452][ T5837] ocfs2: Unmounting device (7,4) on (node local) [ 179.188108][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.284038][ T55] Bluetooth: hci6: command tx timeout [ 180.174278][ T30] audit: type=1326 audit(1747034922.877:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.1.119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc40918e969 code=0x0 [ 181.364626][ T55] Bluetooth: hci6: command tx timeout [ 181.863128][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.123'. [ 183.695737][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.964982][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 184.028574][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 184.246885][ T9] usb 5-1: config 0 has no interfaces? [ 184.814216][ T6435] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 185.160330][ T6435] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 185.195235][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 185.267336][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.386862][ T9] usb 5-1: Product: syz [ 185.440608][ T9] usb 5-1: Manufacturer: syz [ 185.493674][ T9] usb 5-1: SerialNumber: syz [ 185.545035][ T9] usb 5-1: config 0 descriptor?? [ 185.613999][ T62] bridge_slave_1: left allmulticast mode [ 185.619778][ T62] bridge_slave_1: left promiscuous mode [ 185.699349][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.819390][ T62] bridge_slave_0: left allmulticast mode [ 186.019251][ T62] bridge_slave_0: left promiscuous mode [ 186.026221][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.055717][ T6433] input: syz0 as /devices/virtual/input/input5 [ 186.338795][ T6455] loop2: detected capacity change from 0 to 32768 [ 186.622700][ T6455] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.051630][ T6455] XFS (loop2): Ending clean mount [ 187.062003][ T6455] XFS (loop2): Quotacheck needed: Please wait. [ 187.194323][ T6455] XFS (loop2): Quotacheck: Done. [ 187.542049][ T6465] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 187.593689][ T5839] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 189.852112][ T9] usb 5-1: USB disconnect, device number 7 [ 190.894612][ T5889] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 191.243610][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 191.264497][ T5889] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 191.283716][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.297304][ T5889] usb 2-1: config 0 has no interface number 0 [ 191.337404][ T5889] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.360597][ T6486] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[6486] [ 191.453757][ T5889] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.464198][ T5889] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.477455][ T5889] usb 2-1: config 0 interface 52 has no altsetting 0 [ 191.489468][ T5889] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 191.522778][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 191.539683][ T5889] usb 2-1: Product: syz [ 191.549705][ T5889] usb 2-1: SerialNumber: syz [ 191.565240][ T6488] loop3: detected capacity change from 0 to 2048 [ 191.580626][ T5889] usb 2-1: config 0 descriptor?? [ 191.580808][ T6488] EXT4-fs: Ignoring removed bh option [ 191.633684][ T6488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.653893][ T6488] EXT4-fs: Ignoring removed orlov option [ 191.674341][ T6488] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 191.709038][ T6488] EXT4-fs (loop3): can't mount with both data=journal and dax [ 192.018582][ T6481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.051311][ T6481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.476208][ T6493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.551503][ T6493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.622763][ T6481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.672468][ T6481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.724802][ T47] usb 2-1: USB disconnect, device number 3 [ 193.099063][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.127445][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.142669][ T62] bond0 (unregistering): Released all slaves [ 193.202757][ T6360] chnl_net:caif_netlink_parms(): no params data found [ 193.810582][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 193.953305][ T30] audit: type=1326 audit(1747034937.317:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff62598e969 code=0x0 [ 193.975080][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.666647][ T6512] erspan0: entered promiscuous mode [ 194.700095][ T6512] macvtap1: entered promiscuous mode [ 194.743884][ T6512] macvtap1: entered allmulticast mode [ 194.767648][ T6512] erspan0: entered allmulticast mode [ 194.856712][ T6519] erspan0: left allmulticast mode [ 194.862076][ T6519] erspan0: left promiscuous mode [ 195.417630][ T6533] loop2: detected capacity change from 0 to 32768 [ 195.498827][ T6533] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 195.779669][ T6533] XFS (loop2): Ending clean mount [ 195.788535][ T6533] XFS (loop2): Quotacheck needed: Please wait. [ 195.845311][ T6533] XFS (loop2): Quotacheck: Done. [ 195.959711][ T6554] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.581431][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.612088][ T5839] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 196.813851][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.834996][ T6360] bridge_slave_0: entered allmulticast mode [ 196.897717][ T6360] bridge_slave_0: entered promiscuous mode [ 196.906417][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.958753][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.182594][ T6360] bridge_slave_1: entered allmulticast mode [ 197.191152][ T6360] bridge_slave_1: entered promiscuous mode [ 197.198944][ T30] audit: type=1326 audit(1747034940.457:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.3.152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6eb98e969 code=0x0 [ 198.063313][ T30] audit: type=1326 audit(1747034941.377:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.1.153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc40918e969 code=0x0 [ 198.173605][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 198.573628][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 198.603609][ T9] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 198.613593][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.633605][ T9] usb 5-1: config 0 has no interface number 0 [ 198.639847][ T9] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.683958][ T9] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 198.703630][ T9] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.721520][ T9] usb 5-1: config 0 interface 52 has no altsetting 0 [ 198.754123][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 198.768707][ T9] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 198.793591][ T47] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 198.801439][ T9] usb 5-1: Product: syz [ 198.821883][ T9] usb 5-1: SerialNumber: syz [ 198.882652][ T9] usb 5-1: config 0 descriptor?? [ 198.979686][ T47] usb 4-1: config 0 has no interfaces? [ 199.001066][ T47] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.019710][ T47] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.047630][ T47] usb 4-1: Product: syz [ 199.058562][ T62] hsr_slave_0: left promiscuous mode [ 199.092939][ T47] usb 4-1: Manufacturer: syz [ 199.108162][ T62] hsr_slave_1: left promiscuous mode [ 199.119179][ T47] usb 4-1: config 0 descriptor?? [ 199.187395][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.212367][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.360211][ T6589] netlink: 'syz.2.151': attribute type 10 has an invalid length. [ 199.368251][ T6589] netlink: 55 bytes leftover after parsing attributes in process `syz.2.151'. [ 199.770492][ T6569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.814487][ T6569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.863424][ T9] usb 4-1: USB disconnect, device number 3 [ 200.029297][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.038214][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.128047][ T62] veth1_macvtap: left promiscuous mode [ 200.212008][ T62] veth0_macvtap: left promiscuous mode [ 200.227822][ T6569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.236881][ T62] veth1_vlan: left promiscuous mode [ 200.250653][ T62] veth0_vlan: left promiscuous mode [ 200.261322][ T6569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.283402][ T6569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.395466][ T6569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.532937][ T9] usb 5-1: USB disconnect, device number 8 [ 200.976585][ T6596] binder: 6594:6596 ioctl c0046209 0 returned -22 [ 201.934469][ T6601] Zero length message leads to an empty skb [ 201.964044][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 203.078535][ T62] team0 (unregistering): Port device team_slave_1 removed [ 203.123116][ T62] team0 (unregistering): Port device team_slave_0 removed [ 203.132352][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.138781][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.563011][ T6360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.469691][ T6616] netlink: 'syz.4.163': attribute type 10 has an invalid length. [ 205.477665][ T6616] netlink: 55 bytes leftover after parsing attributes in process `syz.4.163'. [ 207.502917][ T6360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.353811][ T1203] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 209.542537][ T1203] usb 2-1: config 0 has no interfaces? [ 209.573309][ T1203] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.602930][ T6360] team0: Port device team_slave_0 added [ 209.651741][ T1203] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.686081][ T6360] team0: Port device team_slave_1 added [ 209.896403][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.904925][ T6644] binder: 6642:6644 ioctl c0046209 0 returned -22 [ 210.011707][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.026457][ T5135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.587609][ T1203] usb 2-1: Product: syz [ 210.592024][ T1203] usb 2-1: Manufacturer: syz [ 210.634803][ T1203] usb 2-1: config 0 descriptor?? [ 210.720960][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.729287][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.916152][ T5889] usb 2-1: USB disconnect, device number 4 [ 211.004579][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.208712][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.278419][ T93] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 211.348319][ T6655] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[6655] [ 211.534998][ T6360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.664356][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.686357][ T93] usb 5-1: Using ep0 maxpacket: 8 [ 211.719798][ T93] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 211.735756][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.950595][ T93] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.967990][ T93] usb 5-1: config 0 has no interface number 0 [ 211.974478][ T93] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.986247][ T6360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.053607][ T93] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 212.110068][ T93] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.189021][ T93] usb 5-1: config 0 interface 52 has no altsetting 0 [ 212.213587][ T93] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 212.224287][ T93] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 212.232600][ T93] usb 5-1: Product: syz [ 212.478261][ T93] usb 5-1: SerialNumber: syz [ 212.636940][ T93] usb 5-1: config 0 descriptor?? [ 212.693633][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 212.739226][ T6360] hsr_slave_0: entered promiscuous mode [ 212.775243][ T6360] hsr_slave_1: entered promiscuous mode [ 212.804304][ T5135] Bluetooth: hci0: command tx timeout [ 212.805226][ T6360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.936016][ T6360] Cannot create hsr debugfs directory [ 212.953713][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 213.087655][ T6651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.112208][ T6651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.410433][ T6651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.429257][ T6651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.602388][ T6651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.688587][ T6651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.748398][ T93] usb 5-1: USB disconnect, device number 9 [ 214.030391][ T62] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.407803][ T62] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.078400][ T5135] Bluetooth: hci0: command tx timeout [ 215.189510][ T6688] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[6688] [ 215.485414][ T62] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.950219][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 216.908690][ C1] ------------[ cut here ]------------ [ 216.914418][ C1] WARNING: CPU: 1 PID: 6696 at net/mac80211/tx.c:5041 __ieee80211_beacon_get+0x125d/0x1630 [ 216.924606][ C1] Modules linked in: [ 216.928605][ C1] CPU: 1 UID: 0 PID: 6696 Comm: syz.4.179 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(full) [ 216.940546][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.950733][ C1] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 216.957113][ C1] Code: e7 e8 07 a9 40 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 22 77 e9 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 14 77 e9 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 06 77 e9 f6 48 c7 c7 40 12 57 8f 4c 89 [ 216.976883][ C1] RSP: 0018:ffffc90000a089f8 EFLAGS: 00010246 [ 216.983137][ C1] RAX: ffffffff8ad6585c RBX: ffffffff8ad64636 RCX: ffff88805bd61e00 [ 216.991165][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.999217][ C1] RBP: 0000000000000000 R08: ffff88805bd61e00 R09: 0000000000000003 [ 217.007244][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807ce66500 [ 217.015261][ C1] R13: dffffc0000000000 R14: ffff88807ce669d0 R15: ffff8880567a1824 [ 217.023251][ C1] FS: 00007feaa2e816c0(0000) GS:ffff8881261c9000(0000) knlGS:0000000000000000 [ 217.032225][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.038841][ C1] CR2: 0000001b3001dff8 CR3: 000000001e38d000 CR4: 0000000000350ef0 [ 217.046863][ C1] Call Trace: [ 217.050153][ C1] [ 217.053019][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 217.058696][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.064639][ C1] ? __lock_acquire+0xaac/0xd20 [ 217.069612][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 217.075137][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 217.081235][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.086929][ C1] mac80211_hwsim_beacon_tx+0x3d2/0x860 [ 217.092513][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.098218][ C1] __iterate_interfaces+0x2ab/0x590 [ 217.103608][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 217.109706][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 217.116970][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 217.123059][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 217.130141][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 217.135388][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 217.141298][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 217.146558][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.152230][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 217.158101][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.163795][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 217.164290][ T5135] Bluetooth: hci0: command tx timeout [ 217.169805][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 217.180330][ C1] handle_softirqs+0x286/0x870 [ 217.185129][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 217.189905][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 217.195250][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.200882][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 217.206218][ C1] __irq_exit_rcu+0xca/0x1f0 [ 217.210819][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 217.216162][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.221864][ C1] irq_exit_rcu+0x9/0x30 [ 217.226154][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 217.231870][ C1] [ 217.234848][ C1] [ 217.237794][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 217.243820][ C1] RIP: 0010:raw_spin_rq_unlock_irq+0x13/0x90 [ 217.249918][ C1] Code: cc e8 e1 1a c3 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 eb 16 e8 24 9e c5 09 e8 ef 50 34 00 fb 5b <41> 5e 41 5f e9 5f 45 7d ff cc f3 0f 1e fa 49 be 00 00 00 00 00 fc [ 217.269641][ C1] RSP: 0018:ffffc900037ff2a8 EFLAGS: 00000286 [ 217.275759][ C1] RAX: cdb66382402daa00 RBX: ffff8880b893a958 RCX: cdb66382402daa00 [ 217.283755][ C1] RDX: 0000000000000000 RSI: ffffffff8d74b4fc RDI: ffffffff8bc1d3a0 [ 217.291723][ C1] RBP: ffffc900037ff4d8 R08: ffffffff8f7ef677 R09: 1ffffffff1efdece [ 217.299730][ C1] R10: dffffc0000000000 R11: fffffbfff1efdecf R12: ffff88805bd61e00 [ 217.307736][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff8880b893a958 [ 217.315773][ C1] __schedule+0x1932/0x4cd0 [ 217.320422][ C1] ? schedule+0x165/0x360 [ 217.324800][ C1] ? __pfx___schedule+0x10/0x10 [ 217.329690][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.335359][ C1] ? schedule+0x91/0x360 [ 217.339628][ C1] schedule+0x165/0x360 [ 217.343919][ C1] schedule_timeout+0x9a/0x270 [ 217.348699][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 217.354108][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 217.360004][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.365661][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.371307][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.376991][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.382655][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 217.387895][ C1] unix_wait_for_peer+0x1e9/0x2e0 [ 217.393232][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 217.398824][ C1] ? do_raw_spin_lock+0x121/0x290 [ 217.403895][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 217.410056][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 217.415484][ C1] ? signal_pending+0x1/0xa0 [ 217.420094][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.425765][ C1] unix_dgram_sendmsg+0xbd7/0x17c0 [ 217.430918][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 217.436500][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.442149][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.447878][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 217.453081][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.458792][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.464485][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 217.470082][ C1] __sock_sendmsg+0x21c/0x270 [ 217.474934][ C1] ____sys_sendmsg+0x52d/0x830 [ 217.479731][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.485080][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.490733][ C1] ? import_iovec+0x74/0xa0 [ 217.495366][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 217.500071][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.505330][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.511016][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.516695][ C1] ? __might_fault+0xb0/0x130 [ 217.521604][ C1] __sys_sendmmsg+0x227/0x430 [ 217.526353][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 217.531596][ C1] ? __pfx_do_futex+0x10/0x10 [ 217.536434][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 217.541660][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 217.546565][ C1] do_syscall_64+0xf6/0x210 [ 217.551137][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.556813][ C1] ? exc_page_fault+0x91/0x110 [ 217.561619][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.567551][ C1] RIP: 0033:0x7feaa1f8e969 [ 217.571999][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.591658][ C1] RSP: 002b:00007feaa2e81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 217.600125][ C1] RAX: ffffffffffffffda RBX: 00007feaa21b5fa0 RCX: 00007feaa1f8e969 [ 217.608137][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 217.616264][ C1] RBP: 00007feaa2010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 217.624274][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.632252][ C1] R13: 0000000000000000 R14: 00007feaa21b5fa0 R15: 00007ffdbb5ae838 [ 217.640275][ C1] [ 217.643293][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 217.650579][ C1] CPU: 1 UID: 0 PID: 6696 Comm: syz.4.179 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(full) [ 217.662485][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.672619][ C1] Call Trace: [ 217.675896][ C1] [ 217.678729][ C1] dump_stack_lvl+0x99/0x250 [ 217.683429][ C1] ? __asan_memcpy+0x40/0x70 [ 217.688023][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.693243][ C1] ? __pfx__printk+0x10/0x10 [ 217.697895][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.703545][ C1] panic+0x2db/0x790 [ 217.707450][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.713088][ C1] ? __pfx_panic+0x10/0x10 [ 217.717554][ C1] __warn+0x31b/0x4b0 [ 217.721555][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 217.727295][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 217.733024][ C1] report_bug+0x2be/0x4f0 [ 217.737440][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 217.743167][ C1] ? __ieee80211_beacon_get+0x125d/0x1630 [ 217.748893][ C1] ? __ieee80211_beacon_get+0x125f/0x1630 [ 217.754615][ C1] handle_bug+0x84/0x160 [ 217.758872][ C1] exc_invalid_op+0x1a/0x50 [ 217.763388][ C1] asm_exc_invalid_op+0x1a/0x20 [ 217.768243][ C1] RIP: 0010:__ieee80211_beacon_get+0x125d/0x1630 [ 217.774571][ C1] Code: e7 e8 07 a9 40 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 78 fe ff ff e8 22 77 e9 f6 90 0f 0b 90 e9 e0 f7 ff ff e8 14 77 e9 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 06 77 e9 f6 48 c7 c7 40 12 57 8f 4c 89 [ 217.794185][ C1] RSP: 0018:ffffc90000a089f8 EFLAGS: 00010246 [ 217.800263][ C1] RAX: ffffffff8ad6585c RBX: ffffffff8ad64636 RCX: ffff88805bd61e00 [ 217.808252][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.816228][ C1] RBP: 0000000000000000 R08: ffff88805bd61e00 R09: 0000000000000003 [ 217.824199][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807ce66500 [ 217.832180][ C1] R13: dffffc0000000000 R14: ffff88807ce669d0 R15: ffff8880567a1824 [ 217.840173][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 217.845751][ C1] ? __ieee80211_beacon_get+0x125c/0x1630 [ 217.851491][ C1] ? __ieee80211_beacon_get+0x125c/0x1630 [ 217.857217][ C1] ? __ieee80211_beacon_get+0x36/0x1630 [ 217.862769][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.868404][ C1] ? __lock_acquire+0xaac/0xd20 [ 217.873284][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 217.878827][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 217.884902][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.890549][ C1] mac80211_hwsim_beacon_tx+0x3d2/0x860 [ 217.896115][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.901848][ C1] __iterate_interfaces+0x2ab/0x590 [ 217.907134][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 217.913211][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 217.920428][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 217.926507][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 217.933563][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 217.938775][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 217.944590][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 217.949828][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.955515][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 217.961249][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.966902][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 217.972769][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 217.977914][ C1] handle_softirqs+0x286/0x870 [ 217.982685][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 217.987447][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 217.992757][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.998397][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 218.003615][ C1] __irq_exit_rcu+0xca/0x1f0 [ 218.008210][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 218.013413][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.019050][ C1] irq_exit_rcu+0x9/0x30 [ 218.023295][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 218.028951][ C1] [ 218.031885][ C1] [ 218.034821][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 218.040802][ C1] RIP: 0010:raw_spin_rq_unlock_irq+0x13/0x90 [ 218.046807][ C1] Code: cc e8 e1 1a c3 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 53 eb 16 e8 24 9e c5 09 e8 ef 50 34 00 fb 5b <41> 5e 41 5f e9 5f 45 7d ff cc f3 0f 1e fa 49 be 00 00 00 00 00 fc [ 218.066421][ C1] RSP: 0018:ffffc900037ff2a8 EFLAGS: 00000286 [ 218.072496][ C1] RAX: cdb66382402daa00 RBX: ffff8880b893a958 RCX: cdb66382402daa00 [ 218.080466][ C1] RDX: 0000000000000000 RSI: ffffffff8d74b4fc RDI: ffffffff8bc1d3a0 [ 218.088448][ C1] RBP: ffffc900037ff4d8 R08: ffffffff8f7ef677 R09: 1ffffffff1efdece [ 218.096447][ C1] R10: dffffc0000000000 R11: fffffbfff1efdecf R12: ffff88805bd61e00 [ 218.104521][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff8880b893a958 [ 218.112525][ C1] __schedule+0x1932/0x4cd0 [ 218.117072][ C1] ? schedule+0x165/0x360 [ 218.121408][ C1] ? __pfx___schedule+0x10/0x10 [ 218.126279][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.131912][ C1] ? schedule+0x91/0x360 [ 218.136167][ C1] schedule+0x165/0x360 [ 218.140349][ C1] schedule_timeout+0x9a/0x270 [ 218.145119][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 218.150505][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 218.156416][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.162071][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.167720][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.173360][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.179088][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 218.184303][ C1] unix_wait_for_peer+0x1e9/0x2e0 [ 218.189342][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 218.194888][ C1] ? do_raw_spin_lock+0x121/0x290 [ 218.199918][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 218.205989][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 218.211358][ C1] ? signal_pending+0x1/0xa0 [ 218.215969][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.221629][ C1] unix_dgram_sendmsg+0xbd7/0x17c0 [ 218.226779][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 218.232336][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.237997][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.243651][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 218.248601][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.254237][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.259898][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 218.265460][ C1] __sock_sendmsg+0x21c/0x270 [ 218.270143][ C1] ____sys_sendmsg+0x52d/0x830 [ 218.274938][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.280242][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.285874][ C1] ? import_iovec+0x74/0xa0 [ 218.290398][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 218.295092][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.300319][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.305968][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.311619][ C1] ? __might_fault+0xb0/0x130 [ 218.316308][ C1] __sys_sendmmsg+0x227/0x430 [ 218.321008][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 218.326235][ C1] ? __pfx_do_futex+0x10/0x10 [ 218.330936][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 218.336156][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 218.341030][ C1] do_syscall_64+0xf6/0x210 [ 218.345567][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.351220][ C1] ? exc_page_fault+0x91/0x110 [ 218.356000][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.361899][ C1] RIP: 0033:0x7feaa1f8e969 [ 218.366317][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.385916][ C1] RSP: 002b:00007feaa2e81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 218.394348][ C1] RAX: ffffffffffffffda RBX: 00007feaa21b5fa0 RCX: 00007feaa1f8e969 [ 218.402319][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 218.410372][ C1] RBP: 00007feaa2010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 218.418375][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.426349][ C1] R13: 0000000000000000 R14: 00007feaa21b5fa0 R15: 00007ffdbb5ae838 [ 218.434350][ C1] [ 218.437879][ C1] Kernel Offset: disabled [ 218.442210][ C1] Rebooting in 86400 seconds..