last executing test programs: 2m48.246314623s ago: executing program 32 (id=178): setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x80000001, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x0, 0x800000, 0x3, 0x2000}, 0x10, r0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./sys/class/graphics/fbcon/rotate_all\x00', 0xc0) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20048050) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8}, 0x8) bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @loopback, 0x4}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) semget(0x0, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)="327e3f114e3e3a6ce6e06085625e435100"/28, 0xfc39) 2m14.927908223s ago: executing program 33 (id=291): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r2, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x22020600) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) read$hiddev(r3, &(0x7f0000000040)=""/117, 0x75) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x7, 0x6, 0xa, 0x0, 0x7, 0x8, 0x3, 0x7, 0x5, 0xfc, 0x8, 0x6, 0x0, 0x9, 0x20000000, 0xe, 0x40, 0x9, 0x6, '\x00', 0x2, 0x8}) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4806}, 0x0) 2m5.68219957s ago: executing program 34 (id=323): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r1, 0x0, 0x0, 0x6, 0x0) 1m55.619188965s ago: executing program 7 (id=370): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x7760, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m55.256425702s ago: executing program 7 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000500)=""/200, &(0x7f0000000600)=0xc8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d76697274696f2c756e616d653d11242c6163636573733d757365722c00"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) r4 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) ftruncate(r4, 0x2022ad) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x10, 0x30}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="000000000000000010000000810097ff00f032a6af7f4602fca66ffda05a32bc59aba7", 0x23}], 0x1}, 0x4040000) 1m46.530848496s ago: executing program 3 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) 1m46.23253193s ago: executing program 3 (id=442): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e040e4220"], 0x7) mount(0x0, 0x0, 0x0, 0x0, 0x0) 1m45.56440291s ago: executing program 3 (id=444): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setresuid(0xee01, 0xee01, 0xee00) 1m45.382578248s ago: executing program 3 (id=446): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) socket$igmp6(0xa, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0', 0x1) 1m45.14052255s ago: executing program 3 (id=448): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2], 0x60}}, 0x0) 1m45.013095186s ago: executing program 3 (id=449): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x8c) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 1m42.465401004s ago: executing program 35 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x101082, 0x100) pread64(r0, &(0x7f0000000180)=""/154, 0x9a, 0x1000) 1m39.846042814s ago: executing program 36 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000500)=""/200, &(0x7f0000000600)=0xc8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d76697274696f2c756e616d653d11242c6163636573733d757365722c00"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) r4 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) ftruncate(r4, 0x2022ad) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x10, 0x30}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="000000000000000010000000810097ff00f032a6af7f4602fca66ffda05a32bc59aba7", 0x23}], 0x1}, 0x4040000) 1m36.077291969s ago: executing program 8 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) 1m35.872564398s ago: executing program 8 (id=485): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffb, 0xdc64}}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) 1m35.698290966s ago: executing program 8 (id=487): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone3(&(0x7f0000019280)={0x40000000, &(0x7f0000019080), &(0x7f00000190c0)=0x0, &(0x7f0000019100), {0x3e}, &(0x7f0000019140)=""/95, 0x5f, &(0x7f00000191c0)=""/81, &(0x7f0000019240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) sched_setaffinity(r3, 0x8, &(0x7f0000019300)=0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2002, 0x0) sendfile(r4, r4, &(0x7f00000001c0)=0x9, 0x3) syz_open_procfs(0xffffffffffffffff, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 1m33.66839316s ago: executing program 6 (id=490): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000001080)) 1m33.46500562s ago: executing program 6 (id=491): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x20}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 1m33.328530286s ago: executing program 8 (id=492): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x40}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r5, @ANYRES16=r5, @ANYBLOB="010000723d00000000000000010000001c000180060001000200000008000300ac1414aa0800060003000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f00000000c0)={0x1f, 0x0, @any, 0xfff6}, 0xe) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 1m33.23305458s ago: executing program 6 (id=493): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) 1m33.084932477s ago: executing program 8 (id=494): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) socket$nl_crypto(0x10, 0x3, 0x15) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) 1m32.952418283s ago: executing program 6 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd25, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0xc082}, 0x40800) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m31.100956129s ago: executing program 6 (id=496): madvise(&(0x7f00001ab000/0x4000)=nil, 0x4000, 0xc) r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004804) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="0402"], 0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000008000000000afc8000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000002b703000000fb00008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x100000000000000, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0xfd}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) keyctl$clear(0x7, r0) r6 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r6, &(0x7f00000057c0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0xfff, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0xc, 0x29, 0x5}], 0xc}}], 0x1, 0x4000000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x80800) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000040)={{&(0x7f00000e5000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1m29.162126538s ago: executing program 37 (id=449): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x8c) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 1m28.721305129s ago: executing program 6 (id=500): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) 1m18.035884343s ago: executing program 38 (id=494): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) socket$nl_crypto(0x10, 0x3, 0x15) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) 1m17.992371015s ago: executing program 9 (id=524): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r1, 0x40986f00, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 1m16.376335239s ago: executing program 9 (id=526): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 1m16.194331467s ago: executing program 9 (id=527): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setresuid(0xee01, 0xee01, 0xee00) 1m16.084901803s ago: executing program 9 (id=528): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000240)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x100010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0xf000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x12df00, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$kcm(0x2, 0x7, 0x2) fsopen(0x0, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000003c0)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\x00\x00\x01\x00\xafq\x1d\xf6(\xe6\x9em_\n\xbfDi\x15\x83\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98~\xcdBv\xa2\x06\xd5:\x82\xd7\xe1QW^\xfd\xc9\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xc80\xad\xaa\xe9\'\x10!~?\a\xcbc\xf0\x89T\x04riy+E\xaa;1\xf6<%Ao9\x8d\x8d)\xc7\xd3G\xe6+ /\xd8\xb5\x17\xa2X=d\xb50<\xa0K\x02\xeb\x7fC\xfc\xaf\xd3\x8c\xea\n\x0e\x10+tX0\xe2', 0x0) 1m14.230150428s ago: executing program 9 (id=532): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000340)={0x4, {"1b1b0f8ff5d2ab6993de03e5086dc4ac", "8b538a29ac7c640a211e00ffffdcf2d1", "acf4ab06fce0d088f9d45d1ef300"}, 0x51a}) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r3, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) listen(r1, 0x0) 1m12.642885372s ago: executing program 39 (id=500): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) 1m12.262234789s ago: executing program 9 (id=534): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff00000007058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0xf000, 0x0) 56.910693209s ago: executing program 40 (id=534): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff00000007058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0xf000, 0x0) 45.024477428s ago: executing program 1 (id=603): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) write$binfmt_script(r0, &(0x7f0000000b40)={'#! ', './file0', [{0x20, '/dev/loop#\x00'}], 0xa, "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"}, 0x2a9) pwritev(r0, &(0x7f0000002740)=[{&(0x7f0000000180)="96ea02", 0x3}], 0x1, 0x8002, 0x1) 44.490003013s ago: executing program 1 (id=610): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) 44.272360453s ago: executing program 4 (id=613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 44.217364146s ago: executing program 1 (id=614): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x976ac43becae565f, 0x5, {}, {0x1, 0x8, 0x8, 0x4, 0x29, 0x6, "0adb3ff8"}, 0x1000003, 0x1, {}, 0xfffffffc}) 43.578313525s ago: executing program 4 (id=615): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x26e1, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 43.516302568s ago: executing program 1 (id=618): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 43.135189715s ago: executing program 1 (id=620): ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) 42.655315178s ago: executing program 4 (id=621): sched_setaffinity(0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="07000000010001", 0x7) 42.461415917s ago: executing program 4 (id=623): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x00\x00\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044080}, 0x8040000) 42.289276995s ago: executing program 4 (id=624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 42.087279844s ago: executing program 1 (id=626): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x4b67, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="802bb5e0b2af5ab4", 0x8}], 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f00000000c0)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000002c0)={'\x00', 0x0, 0x6, 0x1, 0x0, 0xa, 0xffc, 0x0, '\x00', 0x675}) write(r4, &(0x7f0000000200)="000000000902190001010080320904000001ff0000000705810240547e0902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f00000005c0)="010000000705810240000007058102000200", 0x12) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fremovexattr(0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60800, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x10681, 0x0) 41.946774701s ago: executing program 4 (id=628): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x109681, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) 26.748326553s ago: executing program 41 (id=628): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x109681, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) 26.729452514s ago: executing program 42 (id=626): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x4b67, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)="802bb5e0b2af5ab4", 0x8}], 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f00000000c0)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000002c0)={'\x00', 0x0, 0x6, 0x1, 0x0, 0xa, 0xffc, 0x0, '\x00', 0x675}) write(r4, &(0x7f0000000200)="000000000902190001010080320904000001ff0000000705810240547e0902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f00000005c0)="010000000705810240000007058102000200", 0x12) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fremovexattr(0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60800, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x10681, 0x0) 8.843494361s ago: executing program 2 (id=757): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) 6.277903559s ago: executing program 5 (id=765): madvise(&(0x7f00001ab000/0x4000)=nil, 0x4000, 0xc) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004804) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000001a40)=ANY=[], 0x6) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000008000000000afc8000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000002b703000000fb00008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000084000000b70000"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5, r4}, 0xc) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x100000000000000, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0xfd}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) keyctl$clear(0x7, 0x0) socket$inet6(0xa, 0x3, 0x5) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x80800) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f00000e5000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 4.456537454s ago: executing program 2 (id=766): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 3.516354297s ago: executing program 5 (id=768): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x2, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7, 0xfffffffc, 0x2, 0x8}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f0000000080)="0422b9dd9210b75f1359c13021", 0xd, 0x20000090, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x9, 0x6, @multicast}, 0x14) 3.352980005s ago: executing program 0 (id=769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700"], 0xbc}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000201040000000000000000020000001c00188008200140a08000000800024000000002080003400000000224"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.224568s ago: executing program 5 (id=770): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f0000000140)=[@request_death, @request_death], 0x0, 0x0, 0x0}) 3.155692543s ago: executing program 0 (id=771): socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 3.107629686s ago: executing program 2 (id=772): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) syz_emit_ethernet(0xfc0, &(0x7f0000003e40)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1d0101", 0xf8a, 0x0, 0x0, @local, @local, {[@routing={0x84}], "223427d5c9a46b9f6be4dc3b0a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df741cc19d3aa2572e415c6473342f06c88a6d78ea1fa21c08a049bbf95c725ce10da88066152526f85592fe9882b781a3eea61b3924e8471dcd23"}}}}}, 0x0) 3.032385049s ago: executing program 5 (id=773): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='rd_pages=1024\n', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x7000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r2, &(0x7f00000004c0)='\n', 0x1) 2.869222277s ago: executing program 0 (id=774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000000)="360f7883b81e2626660fc7350ff4650666b95c030010dada32f4656df30f09e3650f01ef66b9720500000f32f8000f0d35", 0x31}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x108, 0x0, 0x2080, {0x0, 0x8000000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.846665888s ago: executing program 2 (id=775): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xfffffffffffffe67, 0x0, 0x7000000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 2.615319739s ago: executing program 5 (id=776): madvise(&(0x7f00001ab000/0x4000)=nil, 0x4000, 0xc) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004804) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000001a40)=ANY=[], 0x6) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000008000000000afc8000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000002b703000000fb00008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000084000000b70000"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5, r4}, 0xc) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x100000000000000, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0xfd}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) keyctl$clear(0x7, 0x0) socket$inet6(0xa, 0x3, 0x5) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x80800) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000040)={{&(0x7f00000e5000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 2.532631102s ago: executing program 2 (id=777): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x3000, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0xfd33) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 523.208595ms ago: executing program 0 (id=778): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000002040)={0xfffffffd, 0x5}) 373.980652ms ago: executing program 2 (id=779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002640)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xc}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x1}, {0x6000, 0x0, 0x4, 0x2, 0x1, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x6}, {{0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 242.269729ms ago: executing program 0 (id=780): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 51.742847ms ago: executing program 0 (id=781): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x1, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0xb311, 0x3ff, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x5cc}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0x34311fd0, 0x81, 0x0, 0xa, 0x4000}, {0x2a6, 0x101, 0x5, 0x3000, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x800, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9c, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0xf, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8001}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x80, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x7, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0x9, 0x6}, {0x80000001, 0xa, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x9, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x8, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x6, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7da, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0xa, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xd3}, {0x8, 0xdf3, 0x2, 0xfffffff8, 0x3}, {0xfffffffd, 0x400002, 0xff, 0xd7c, 0xffffff7c, 0xd}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0x0, 0x7a5e, 0x80000000, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0xfffffffe, 0x1, 0x1, 0x757, 0xb1b, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0x5, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xae}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e327, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x8, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc23, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0x1, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x4, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x1, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x9dd2, 0x86, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x101, 0x1e, 0xfff}, {0x393404ea, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x802}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0xb, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x7}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x7}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0x5bf}, {0x1, 0x8000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x5, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x4, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0xc9a9e0e6a37cb473}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0xab6c7abe1e01ff8c}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000020), 0x4) 0s ago: executing program 5 (id=782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0x1, 0xfffffeff, 0x3, 0xfffffff7, 0xafa}]}) kernel console output (not intermixed with test programs): already exists on: batadv_slave_0 [ 231.220068][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.220085][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.220095][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.220103][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.220113][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.220125][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.220135][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.220144][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.220154][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.220164][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.220173][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.220183][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.220192][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.232414][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.232557][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.233098][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.233543][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.233996][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.260104][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.260125][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.260132][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.260143][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.260151][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.260161][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.260170][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.260180][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.260192][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.260202][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.260211][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.260221][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.260230][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.260291][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.260300][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.260310][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.292306][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.292445][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.292994][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.303759][ T5822] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.303791][ T5822] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.303812][ T5822] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.303834][ T5822] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.697480][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.697528][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.736911][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.873140][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.873159][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.873352][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.338282][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 232.623604][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.623637][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.641989][ T5928] device bridge_slave_0 entered promiscuous mode [ 232.662176][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.662207][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.663064][ T5928] device bridge_slave_1 entered promiscuous mode [ 232.782731][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.799378][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.928253][ T5928] team0: Port device team_slave_0 added [ 232.940048][ T5928] team0: Port device team_slave_1 added [ 233.000937][ T5952] netlink: 140 bytes leftover after parsing attributes in process `syz.9.506'. [ 234.650238][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.650253][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.650273][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.664289][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.664304][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.664324][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.672013][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 234.842443][ T5928] device hsr_slave_0 entered promiscuous mode [ 234.882116][ T5928] device hsr_slave_1 entered promiscuous mode [ 234.911701][ T5928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.911724][ T5928] Cannot create hsr debugfs directory [ 236.691691][ T4469] Bluetooth: hci5: command 0x041b tx timeout [ 236.942660][ T5928] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.142441][ T5928] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.294265][ T5928] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.462059][ T5928] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.795829][ T5928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 237.816597][ T5928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.826004][ T5928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.841577][ T5928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.170510][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.228082][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.228670][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.238511][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.260285][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.260878][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.261204][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.261230][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.262365][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.283858][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.284353][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.284714][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.284741][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.332948][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.363627][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.364365][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.365566][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.373592][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.403220][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.404014][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.422195][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.422739][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.433924][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.434402][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.463473][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.505177][ T5976] 9pnet: Insufficient options for proto=fd [ 238.700912][ T5976] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 238.700941][ T5976] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 238.703682][ T5976] vhci_hcd vhci_hcd.0: Device attached [ 238.771773][ T4468] Bluetooth: hci5: command 0x040f tx timeout [ 238.901720][ T4228] vhci_hcd: vhci_device speed not set [ 238.909729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.909862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.927724][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.971752][ T4228] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 238.983701][ T4267] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 238.985189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.985721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.033544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.034087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.034699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.035112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.042791][ T5928] device veth0_vlan entered promiscuous mode [ 239.072604][ T5928] device veth1_vlan entered promiscuous mode [ 239.124772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.125343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.125890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.126365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.134052][ T5928] device veth0_macvtap entered promiscuous mode [ 239.150947][ T5928] device veth1_macvtap entered promiscuous mode [ 239.182410][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.182430][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.182438][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.182448][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.182456][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.182466][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.182492][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.182502][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.182514][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.182524][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.182533][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.182543][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.182552][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.182562][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.182571][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.182581][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.182590][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.182600][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.201363][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.201755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.202300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.202746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.203176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.209945][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.209962][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.209970][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.209980][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.209989][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.209999][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.210007][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.210017][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.210029][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.210039][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.210048][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.210058][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.210067][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.210076][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.210085][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.210095][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.210169][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.210180][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.213814][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.216155][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.216669][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.222732][ T5928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.222760][ T5928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.222782][ T5928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.222803][ T5928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.326306][ T5928] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 239.348251][ T4267] usb 1-1: config 0 has no interfaces? [ 239.348299][ T4267] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 239.348317][ T4267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.362645][ T4267] usb 1-1: config 0 descriptor?? [ 239.403119][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.403137][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.404526][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 239.436525][ T5928] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 239.491991][ T4468] Bluetooth: hci9: command 0x0406 tx timeout [ 239.527401][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.527419][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.527612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.692529][ T5984] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 239.702242][ T4267] usb 1-1: USB disconnect, device number 5 [ 239.726850][ T5994] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 239.732542][ T4468] Bluetooth: hci4: command 0x0406 tx timeout [ 239.734871][ T144] vhci_hcd: stop threads [ 239.734884][ T144] vhci_hcd: release socket [ 239.734906][ T144] vhci_hcd: disconnect device [ 240.869821][ T4469] Bluetooth: hci5: command 0x0419 tx timeout [ 241.549638][ T5999] se_dev->se_dev_ptr already set for storage object [ 243.575953][ T6002] vxcan1: tx drop: invalid da for name 0x0100000000000000 [ 243.732348][ T6014] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.526' sets config #0 [ 244.132127][ T4228] vhci_hcd: vhci_device speed not set [ 247.581948][ T4228] Bluetooth: hci10: command 0x0409 tx timeout [ 248.054161][ T6022] chnl_net:caif_netlink_parms(): no params data found [ 248.171799][ T4468] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 248.532941][ T4468] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.532980][ T4468] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.952496][ T4468] usb 10-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 248.952603][ T4468] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.952667][ T4468] usb 10-1: Product: syz [ 248.952693][ T4468] usb 10-1: Manufacturer: syz [ 248.952727][ T4468] usb 10-1: SerialNumber: syz [ 250.186965][ T4468] symbolserial 10-1:1.0: symbol converter detected [ 250.886671][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.886713][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.888037][ T6022] device bridge_slave_0 entered promiscuous mode [ 251.091032][ T4468] usb 10-1: symbol converter now attached to ttyUSB0 [ 251.124593][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.124838][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.126276][ T6022] device bridge_slave_1 entered promiscuous mode [ 251.153931][ T13] Bluetooth: hci10: command 0x041b tx timeout [ 251.185479][ T7] Bluetooth: hci11: command 0x0409 tx timeout [ 251.276359][ T6022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.321023][ T6022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.432930][ T6022] team0: Port device team_slave_0 added [ 251.443750][ T6022] team0: Port device team_slave_1 added [ 251.518912][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.518929][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.518951][ T6022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.520638][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.520650][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.520680][ T6022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.643149][ T6022] device hsr_slave_0 entered promiscuous mode [ 251.645587][ T6022] device hsr_slave_1 entered promiscuous mode [ 251.647511][ T6022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.647535][ T6022] Cannot create hsr debugfs directory [ 251.677078][ T6056] chnl_net:caif_netlink_parms(): no params data found [ 253.205636][ T7] Bluetooth: hci10: command 0x040f tx timeout [ 253.351576][ T4228] Bluetooth: hci11: command 0x041b tx timeout [ 253.501869][ T6071] vxcan1: tx drop: invalid da for name 0x0100000000000000 [ 253.545766][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.545837][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.546672][ T6056] device bridge_slave_0 entered promiscuous mode [ 253.565506][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.565543][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.566364][ T6056] device bridge_slave_1 entered promiscuous mode [ 253.675225][ T6056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.677410][ T6056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.208054][ T6056] team0: Port device team_slave_0 added [ 255.220546][ T6056] team0: Port device team_slave_1 added [ 255.251546][ T7] Bluetooth: hci10: command 0x0419 tx timeout [ 255.308753][ T6056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.308770][ T6056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.308790][ T6056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.316949][ T6056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.316964][ T6056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.316985][ T6056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.411798][ T4228] Bluetooth: hci11: command 0x040f tx timeout [ 255.427853][ T6084] se_dev->se_dev_ptr already set for storage object [ 255.485106][ T6056] device hsr_slave_0 entered promiscuous mode [ 255.486485][ T6056] device hsr_slave_1 entered promiscuous mode [ 255.508490][ T6056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.508512][ T6056] Cannot create hsr debugfs directory [ 256.591946][ T6022] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.146031][ T6022] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.177521][ T6022] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.186155][ T6022] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.493258][ T4228] Bluetooth: hci11: command 0x0419 tx timeout [ 257.610622][ T6056] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.639439][ T6022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.748010][ T6056] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.802488][ T6096] device syzkaller0 entered promiscuous mode [ 257.803771][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.804265][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.807343][ T6022] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.917151][ T6056] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.952309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.952840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.953131][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.953158][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.953541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.953918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.954189][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.954216][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.031874][ T6056] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.072473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.073100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.073778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.074402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.075295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.085256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.085917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.093200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.093831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.097245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.119763][ T6022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.120387][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.123762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.124238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.288833][ T6056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 258.298524][ T6056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 258.316675][ T6056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 258.322609][ T6056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 258.516799][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.516950][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.563498][ T6022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.590948][ T6056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.628561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.629171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.648596][ T6056] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.663399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.663858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.664145][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.664172][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.664541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.677946][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.678484][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.678752][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.678778][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.697161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.712824][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.739676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.741222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.745562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.761103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.762400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.784364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.784876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.805315][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.805860][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.827158][ T6056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.709707][ T6114] vxcan1: tx drop: invalid da for name 0x0100000000000000 [ 262.288699][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.289269][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.353410][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.353549][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.360682][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.361236][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.363873][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.364718][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.369694][ T6022] device veth0_vlan entered promiscuous mode [ 262.374928][ T6056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.390902][ T6022] device veth1_vlan entered promiscuous mode [ 262.436547][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 262.437075][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 262.437489][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.438002][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.507197][ T6022] device veth0_macvtap entered promiscuous mode [ 262.509940][ T6022] device veth1_macvtap entered promiscuous mode [ 262.511932][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.512480][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.512930][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.513397][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.533077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.533644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.534273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.534686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.554764][ T6056] device veth0_vlan entered promiscuous mode [ 262.592559][ T6056] device veth1_vlan entered promiscuous mode [ 262.608992][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.609012][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.609020][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.609030][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.609039][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.609049][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.609057][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.609067][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.609079][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.609089][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.609098][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.609108][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.609117][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.609127][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.609136][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.609146][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.609155][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.609171][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.609181][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.609191][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.610329][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.610504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 262.611030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 262.616328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.616966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.649657][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.649680][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.649689][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.649711][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.649720][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.649732][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.649741][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.649752][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.649765][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.649777][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.649787][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.649798][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.649808][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.649820][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.649829][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.649840][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.649850][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.649913][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.649923][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.649934][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.695003][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.696453][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.697125][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.867208][ T6022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.867242][ T6022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.867264][ T6022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.867285][ T6022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.880105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.880581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.889448][ T6056] device veth0_macvtap entered promiscuous mode [ 262.908981][ T6056] device veth1_macvtap entered promiscuous mode [ 263.006424][ T6022] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 263.013964][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.013984][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.013992][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.014002][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.014011][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.014020][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.014028][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.014038][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.014050][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.014060][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.014069][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.014079][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.014088][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.014097][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.014106][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.014116][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.014125][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.014135][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.014143][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.014153][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.014162][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.014171][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.024350][ T6056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.024498][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.025083][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.025536][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.025970][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.028914][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.028930][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.028937][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.028947][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.028999][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.029010][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.029018][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.029028][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.029041][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.029051][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.029060][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.029069][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.029078][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.029088][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.029097][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.029107][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.029116][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.029125][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.029135][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.029144][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.029154][ T6056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.029163][ T6056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.038941][ T6056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.039092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.039641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.057297][ T6056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.057328][ T6056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.057350][ T6056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.057371][ T6056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.122180][ T1273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.122201][ T1273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.137797][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.138523][ T6022] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 263.247449][ T6056] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 263.255507][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.291924][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.291944][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.349546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 263.401726][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.401745][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.401930][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.418324][ T6056] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 263.539892][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.539911][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.540071][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 263.752183][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.533'. [ 267.027612][ T4468] Bluetooth: hci12: command 0x0409 tx timeout [ 267.684392][ T6143] chnl_net:caif_netlink_parms(): no params data found [ 267.964647][ T6143] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.966892][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.981893][ T6143] device bridge_slave_0 entered promiscuous mode [ 267.994556][ T6143] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.004283][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.019977][ T6143] device bridge_slave_1 entered promiscuous mode [ 268.154484][ T6143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.156576][ T6143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.341099][ T6143] team0: Port device team_slave_0 added [ 268.352882][ T6143] team0: Port device team_slave_1 added [ 268.504707][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.504723][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.504743][ T6143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.528498][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.528514][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.528534][ T6143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.880291][ T6143] device hsr_slave_0 entered promiscuous mode [ 268.890692][ T6143] device hsr_slave_1 entered promiscuous mode [ 268.891137][ T6143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.891154][ T6143] Cannot create hsr debugfs directory [ 268.991631][ T6202] se_dev->se_dev_ptr already set for storage object [ 269.106542][ T4228] Bluetooth: hci12: command 0x041b tx timeout [ 271.105786][ T6143] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.191694][ T4227] Bluetooth: hci12: command 0x040f tx timeout [ 271.633510][ T6143] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.701825][ T6230] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 271.701848][ T6230] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.701907][ T6230] vhci_hcd vhci_hcd.0: Device attached [ 271.810992][ T6143] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.934747][ T13] vhci_hcd: vhci_device speed not set [ 272.001683][ T13] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 272.015579][ T4468] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 272.043686][ T6143] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.471558][ T4468] usb 1-1: config 0 has no interfaces? [ 272.471587][ T4468] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 272.471605][ T4468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.473097][ T4468] usb 1-1: config 0 descriptor?? [ 273.400217][ T6237] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 273.402291][ T4317] vhci_hcd: stop threads [ 273.402301][ T4317] vhci_hcd: release socket [ 273.402353][ T4317] vhci_hcd: disconnect device [ 273.624007][ T7] Bluetooth: hci12: command 0x0419 tx timeout [ 273.651876][ T4227] usb 1-1: USB disconnect, device number 6 [ 273.799858][ T6254] autofs4:pid:6254:autofs_fill_super: called with bogus options [ 273.944722][ T6143] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 273.976286][ T6143] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 274.062407][ T6143] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 274.084188][ T6143] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 274.710644][ T6143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.717826][ T6277] loop0: detected capacity change from 0 to 65536 [ 274.770585][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.771014][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.809097][ T6143] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.810397][ T6277] block device autoloading is deprecated and will be removed. [ 274.850029][ T6276] FAULT_INJECTION: forcing a failure. [ 274.850029][ T6276] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 274.850062][ T6276] CPU: 0 PID: 6276 Comm: syz.1.601 Not tainted syzkaller #0 [ 274.850086][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.850097][ T6276] Call Trace: [ 274.850103][ T6276] [ 274.850111][ T6276] dump_stack_lvl+0x188/0x250 [ 274.850187][ T6276] ? show_regs_print_info+0x20/0x20 [ 274.850205][ T6276] ? load_image+0x410/0x410 [ 274.850231][ T6276] should_fail+0x383/0x4b0 [ 274.850331][ T6276] prepare_alloc_pages+0x1e3/0x5b0 [ 274.850367][ T6276] __alloc_pages+0x11b/0x480 [ 274.850389][ T6276] ? zone_statistics+0x170/0x170 [ 274.850411][ T6276] ? rcu_lock_acquire+0x30/0x30 [ 274.850436][ T6276] ? alloc_pages+0x452/0x560 [ 274.850459][ T6276] __get_free_pages+0x8/0x30 [ 274.850477][ T6276] __tlb_remove_page_size+0x1f2/0x3f0 [ 274.850503][ T6276] unmap_page_range+0xfcf/0x2410 [ 274.850544][ T6276] unmap_vmas+0x131/0x250 [ 274.850562][ T6276] ? unmap_page_range+0x2410/0x2410 [ 274.850584][ T6276] ? __mutex_lock_common+0x435/0x2400 [ 274.850610][ T6276] ? exit_mm_release+0x16/0x30 [ 274.850643][ T6276] exit_mmap+0x3b9/0x640 [ 274.850664][ T6276] ? vm_brk+0x20/0x20 [ 274.850692][ T6276] ? uprobe_clear_state+0x2f6/0x460 [ 274.850715][ T6276] __mmput+0x115/0x390 [ 274.850733][ T6276] exit_mm+0x632/0x7b0 [ 274.850749][ T6276] ? perf_pmu_migrate_context+0xb70/0xb70 [ 274.850787][ T6276] ? do_exit+0x2110/0x2110 [ 274.850803][ T6276] ? __ia32_sys_timer_delete+0x40/0x40 [ 274.850826][ T6276] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 274.850850][ T6276] ? tty_audit_exit+0x149/0x1f0 [ 274.850894][ T6276] do_exit+0x5b8/0x2110 [ 274.850934][ T6276] ? put_task_struct+0x80/0x80 [ 274.850957][ T6276] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 274.850984][ T6276] ? _raw_spin_lock_irq+0xb7/0xf0 [ 274.851005][ T6276] do_group_exit+0x12c/0x2f0 [ 274.851021][ T6276] ? lockdep_hardirqs_on+0x94/0x140 [ 274.851050][ T6276] get_signal+0x7eb/0x12e0 [ 274.851080][ T6276] arch_do_signal_or_restart+0xe6/0x12a0 [ 274.851119][ T6276] ? futex_exit_release+0x1c0/0x1c0 [ 274.851138][ T6276] ? get_sigframe_size+0x10/0x10 [ 274.851158][ T6276] ? __context_tracking_exit+0x4c/0x80 [ 274.851190][ T6276] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 274.851214][ T6276] ? exit_to_user_mode_loop+0x3b/0x130 [ 274.851233][ T6276] exit_to_user_mode_loop+0x9e/0x130 [ 274.851250][ T6276] exit_to_user_mode_prepare+0xee/0x180 [ 274.851268][ T6276] syscall_exit_to_user_mode+0x16/0x40 [ 274.851288][ T6276] do_syscall_64+0x58/0xa0 [ 274.851305][ T6276] ? clear_bhb_loop+0x30/0x80 [ 274.851326][ T6276] ? clear_bhb_loop+0x30/0x80 [ 274.851345][ T6276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.851365][ T6276] RIP: 0033:0x7fc1cf81e159 [ 274.851380][ T6276] Code: Unable to access opcode bytes at RIP 0x7fc1cf81e12f. [ 274.851388][ T6276] RSP: 002b:00007fc1cda760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 274.851407][ T6276] RAX: fffffffffffffe00 RBX: 00007fc1cfaa5fa8 RCX: 00007fc1cf81e159 [ 274.851421][ T6276] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc1cfaa5fa8 [ 274.851432][ T6276] RBP: 00007fc1cfaa5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 274.851444][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.851454][ T6276] R13: 00007fc1cfaa6038 R14: 00007ffd5e067c90 R15: 00007ffd5e067d78 [ 274.851478][ T6276] [ 274.865609][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.866151][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.866485][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.866516][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.866965][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.911817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.912288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.912568][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.912603][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.947248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.972069][ T6273] md: invalid raid superblock magic on loop0 [ 274.972156][ T6273] md: loop0 does not have a valid v0.0 superblock, not importing! [ 274.972200][ T6273] md: md_import_device returned -22 [ 274.983368][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.014551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.015515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.016102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.048459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.049091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.069982][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.070464][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.112952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.113494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.137538][ T6143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.235545][ T6286] 9pnet_virtio: no channels available for device syz [ 275.251403][ T6285] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 275.256538][ T6285] netlink: 'syz.2.604': attribute type 2 has an invalid length. [ 275.872211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.872379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.947485][ T6143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.281681][ T6306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.379733][ T6308] device bond_slave_0 entered promiscuous mode [ 276.379814][ T6308] device bond_slave_1 entered promiscuous mode [ 276.380517][ T6308] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 276.383638][ T6308] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 276.475580][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 276.877527][ T6326] device syzkaller0 entered promiscuous mode [ 277.092235][ T13] vhci_hcd: vhci_device speed not set [ 277.357679][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.358610][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.462404][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.462923][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.463518][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.463917][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.624732][ T6143] device veth0_vlan entered promiscuous mode [ 277.672287][ T6143] device veth1_vlan entered promiscuous mode [ 277.794734][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.795363][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.795821][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.796254][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.816637][ T6143] device veth0_macvtap entered promiscuous mode [ 277.839025][ T6143] device veth1_macvtap entered promiscuous mode [ 277.881322][ T6351] 9pnet_virtio: no channels available for device syz [ 277.921315][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.921337][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.921345][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.921355][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.921365][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.921375][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.921383][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.921393][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.921420][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.922080][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.922093][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.922104][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.922116][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.922126][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.922138][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.922148][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.922159][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.922169][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.922181][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.922191][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.922202][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.922212][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.922236][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.922246][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.925624][ T6143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.925756][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.926308][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.926780][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.927204][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.965032][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.965062][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.965073][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.965086][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.965102][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.965112][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.965125][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.965138][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.965175][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.965190][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.965212][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.965225][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.965249][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.965261][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.965287][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.965300][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.965322][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.965337][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.965360][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.965386][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.965410][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.965420][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.965440][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.965450][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.967117][ T6143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.984596][ T6143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.984628][ T6143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.984650][ T6143] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.984672][ T6143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.086770][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.088037][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.260301][ T6143] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 278.410027][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.410053][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.410290][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.428142][ T6143] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 278.568361][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.568380][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.568618][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.860241][ T6369] se_dev->se_dev_ptr already set for storage object [ 279.874949][ T6399] RDS: rds_bind could not find a transport for ::ffff:172.20.20.65, load rds_tcp or rds_rdma? [ 279.985259][ T6401] FAULT_INJECTION: forcing a failure. [ 279.985259][ T6401] name failslab, interval 1, probability 0, space 0, times 0 [ 279.985285][ T6401] CPU: 0 PID: 6401 Comm: syz.0.642 Not tainted syzkaller #0 [ 279.985301][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.985311][ T6401] Call Trace: [ 279.985322][ T6401] [ 279.985334][ T6401] dump_stack_lvl+0x188/0x250 [ 279.985389][ T6401] ? show_regs_print_info+0x20/0x20 [ 279.985405][ T6401] ? load_image+0x410/0x410 [ 279.985423][ T6401] ? __might_sleep+0xf0/0xf0 [ 279.985452][ T6401] ? __lock_acquire+0x7b50/0x7b50 [ 279.985476][ T6401] should_fail+0x383/0x4b0 [ 279.985514][ T6401] should_failslab+0x5/0x20 [ 279.985529][ T6401] slab_pre_alloc_hook+0x51/0xc0 [ 279.985546][ T6401] kmem_cache_alloc_trace+0x47/0x290 [ 279.985561][ T6401] ? blk_iolatency_init+0x54/0x470 [ 279.985637][ T6401] blk_iolatency_init+0x54/0x470 [ 279.985654][ T6401] ? blk_throtl_init+0x409/0x460 [ 279.985676][ T6401] blkcg_init_queue+0x39b/0x430 [ 279.985711][ T6401] blk_alloc_queue+0x427/0x580 [ 279.985742][ T6401] __blk_alloc_disk+0x15/0x60 [ 279.985758][ T6401] dm_create+0x57f/0xf90 [ 279.985804][ T6401] dev_create+0x12e/0x2c0 [ 279.985822][ T6401] ? list_devices+0x820/0x820 [ 279.985838][ T6401] ? __might_fault+0xb3/0x110 [ 279.985856][ T6401] ? _copy_from_user+0x111/0x170 [ 279.985902][ T6401] dm_ctl_ioctl+0x947/0xd00 [ 279.985923][ T6401] ? list_devices+0x820/0x820 [ 279.985939][ T6401] ? dm_poll+0x120/0x120 [ 279.985980][ T6401] ? bpf_lsm_file_ioctl+0x5/0x10 [ 279.985999][ T6401] ? security_file_ioctl+0x7c/0xa0 [ 279.986051][ T6401] ? dm_poll+0x120/0x120 [ 279.986067][ T6401] __se_sys_ioctl+0xfa/0x170 [ 279.986089][ T6401] do_syscall_64+0x4c/0xa0 [ 279.986104][ T6401] ? clear_bhb_loop+0x30/0x80 [ 279.986129][ T6401] ? clear_bhb_loop+0x30/0x80 [ 279.986146][ T6401] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.986164][ T6401] RIP: 0033:0x7f5e8ee73159 [ 279.986187][ T6401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.986205][ T6401] RSP: 002b:00007f5e8d0cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.986223][ T6401] RAX: ffffffffffffffda RBX: 00007f5e8f0fafa0 RCX: 00007f5e8ee73159 [ 279.986235][ T6401] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 279.986246][ T6401] RBP: 00007f5e8ef0a06b R08: 0000000000000000 R09: 0000000000000000 [ 279.986256][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.986265][ T6401] R13: 00007f5e8f0fb038 R14: 00007f5e8f0fafa0 R15: 00007fffd1f3d068 [ 279.986286][ T6401] [ 279.992093][ T1108] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 280.174697][ T6406] se_dev->se_dev_ptr already set for storage object [ 280.231635][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 280.352158][ T1108] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.352219][ T1108] usb 3-1: config 0 interface 0 has no altsetting 0 [ 280.352267][ T1108] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 280.352286][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.354769][ T1108] usb 3-1: config 0 descriptor?? [ 280.395351][ T1108] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 280.604078][ T1108] usb 3-1: USB disconnect, device number 4 [ 281.395410][ T6423] se_dev->se_dev_ptr already set for storage object [ 281.455569][ T6418] device syzkaller0 entered promiscuous mode [ 282.041669][ T4469] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 282.179695][ T26] audit: type=1800 audit(1789845960.359:6): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.659" name="max_speed" dev="configfs" ino=45460 res=0 errno=0 [ 282.401845][ T4469] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 282.401884][ T4469] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 282.401902][ T4469] usb 3-1: config 0 interface 0 has no altsetting 0 [ 282.506406][ T6446] FAULT_INJECTION: forcing a failure. [ 282.506406][ T6446] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 282.506444][ T6446] CPU: 0 PID: 6446 Comm: syz.5.662 Not tainted syzkaller #0 [ 282.506460][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.506470][ T6446] Call Trace: [ 282.506484][ T6446] [ 282.506493][ T6446] dump_stack_lvl+0x188/0x250 [ 282.506523][ T6446] ? show_regs_print_info+0x20/0x20 [ 282.506539][ T6446] ? load_image+0x410/0x410 [ 282.506558][ T6446] ? mark_lock+0x94/0x320 [ 282.506588][ T6446] should_fail+0x383/0x4b0 [ 282.506610][ T6446] prepare_alloc_pages+0x1e3/0x5b0 [ 282.506642][ T6446] __alloc_pages+0x11b/0x480 [ 282.506661][ T6446] ? zone_statistics+0x170/0x170 [ 282.506681][ T6446] ? rcu_lock_acquire+0x30/0x30 [ 282.506710][ T6446] ? alloc_pages+0x452/0x560 [ 282.506736][ T6446] __get_free_pages+0x8/0x30 [ 282.506752][ T6446] __tlb_remove_page_size+0x1f2/0x3f0 [ 282.506778][ T6446] unmap_page_range+0xfcf/0x2410 [ 282.506815][ T6446] unmap_vmas+0x131/0x250 [ 282.506831][ T6446] ? unmap_page_range+0x2410/0x2410 [ 282.506844][ T6446] ? __mutex_lock_common+0x435/0x2400 [ 282.506862][ T6446] ? exit_mm_release+0x16/0x30 [ 282.506884][ T6446] exit_mmap+0x3b9/0x640 [ 282.506910][ T6446] ? vm_brk+0x20/0x20 [ 282.506935][ T6446] ? uprobe_clear_state+0x2f6/0x460 [ 282.506958][ T6446] __mmput+0x115/0x390 [ 282.506975][ T6446] exit_mm+0x632/0x7b0 [ 282.506988][ T6446] ? perf_pmu_migrate_context+0xb70/0xb70 [ 282.507010][ T6446] ? do_exit+0x2110/0x2110 [ 282.507038][ T6446] ? __ia32_sys_timer_delete+0x40/0x40 [ 282.507063][ T6446] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 282.507085][ T6446] ? tty_audit_exit+0x149/0x1f0 [ 282.507112][ T6446] do_exit+0x5b8/0x2110 [ 282.507130][ T6446] ? put_task_struct+0x80/0x80 [ 282.507163][ T6446] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 282.507187][ T6446] ? _raw_spin_lock_irq+0xb7/0xf0 [ 282.507205][ T6446] do_group_exit+0x12c/0x2f0 [ 282.507219][ T6446] ? lockdep_hardirqs_on+0x94/0x140 [ 282.507244][ T6446] get_signal+0x7eb/0x12e0 [ 282.507272][ T6446] arch_do_signal_or_restart+0xe6/0x12a0 [ 282.507293][ T6446] ? rcu_lock_release+0x9/0x20 [ 282.507321][ T6446] ? futex_exit_release+0x1c0/0x1c0 [ 282.507338][ T6446] ? get_sigframe_size+0x10/0x10 [ 282.507356][ T6446] ? __context_tracking_exit+0x4c/0x80 [ 282.507380][ T6446] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 282.507402][ T6446] ? exit_to_user_mode_loop+0x3b/0x130 [ 282.507419][ T6446] exit_to_user_mode_loop+0x9e/0x130 [ 282.507434][ T6446] exit_to_user_mode_prepare+0xee/0x180 [ 282.507450][ T6446] syscall_exit_to_user_mode+0x16/0x40 [ 282.507468][ T6446] do_syscall_64+0x58/0xa0 [ 282.507482][ T6446] ? clear_bhb_loop+0x30/0x80 [ 282.507498][ T6446] ? clear_bhb_loop+0x30/0x80 [ 282.507515][ T6446] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.507532][ T6446] RIP: 0033:0x7f6df0586159 [ 282.507548][ T6446] Code: Unable to access opcode bytes at RIP 0x7f6df058612f. [ 282.507556][ T6446] RSP: 002b:00007f6dee7de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 282.507573][ T6446] RAX: 0000000000000001 RBX: 00007f6df080dfa8 RCX: 00007f6df0586159 [ 282.507584][ T6446] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6df080dfac [ 282.507594][ T6446] RBP: 00007f6df080dfa0 R08: 001bbe58cb6fe2be R09: 0000000000000000 [ 282.507605][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.507614][ T6446] R13: 00007f6df080e038 R14: 00007ffe2a4c9b10 R15: 00007ffe2a4c9bf8 [ 282.507635][ T6446] [ 282.561874][ T4469] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 282.561901][ T4469] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 282.561916][ T4469] usb 3-1: Product: syz [ 282.561934][ T4469] usb 3-1: Manufacturer: syz [ 282.561946][ T4469] usb 3-1: SerialNumber: syz [ 282.566443][ T4469] usb 3-1: config 0 descriptor?? [ 282.602391][ T4469] hub 3-1:0.0: bad descriptor, ignoring hub [ 282.602412][ T4469] hub: probe of 3-1:0.0 failed with error -5 [ 282.609501][ T4469] usb 3-1: selecting invalid altsetting 0 [ 282.841049][ T6450] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 282.841327][ T6450] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 283.324006][ T6456] device syzkaller0 entered promiscuous mode [ 284.192732][ T4194] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 284.192799][ T4194] CPU: 0 PID: 4194 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 284.192821][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.192831][ T4194] Workqueue: hci2 hci_rx_work [ 284.192878][ T4194] Call Trace: [ 284.192885][ T4194] [ 284.192894][ T4194] dump_stack_lvl+0x188/0x250 [ 284.192919][ T4194] ? show_regs_print_info+0x20/0x20 [ 284.192935][ T4194] ? load_image+0x410/0x410 [ 284.192980][ T4194] sysfs_create_dir_ns+0x26a/0x290 [ 284.193004][ T4194] ? sysfs_warn_dup+0xa0/0xa0 [ 284.193017][ T4194] ? kthread+0x42e/0x520 [ 284.193034][ T4194] ? do_raw_spin_unlock+0x11d/0x230 [ 284.193054][ T4194] kobject_add_internal+0x5ba/0xcd0 [ 284.193125][ T4194] kobject_add+0x160/0x230 [ 284.193147][ T4194] ? kobject_init+0x1c0/0x1c0 [ 284.193167][ T4194] ? __raw_spin_lock_init+0x41/0x100 [ 284.193182][ T4194] ? klist_children_get+0x50/0x50 [ 284.193221][ T4194] ? get_device_parent+0x121/0x3e0 [ 284.193238][ T4194] device_add+0x470/0x1050 [ 284.193253][ T4194] ? device_initialize+0x2a5/0x4d0 [ 284.193273][ T4194] hci_conn_add_sysfs+0xd1/0x1e0 [ 284.193297][ T4194] le_conn_complete_evt+0xc55/0x14d0 [ 284.193325][ T4194] ? cs_le_create_conn+0x5e0/0x5e0 [ 284.193346][ T4194] ? __mutex_trylock_common+0x15c/0x260 [ 284.193369][ T4194] hci_le_meta_evt+0x285/0x3ca0 [ 284.193387][ T4194] ? hci_event_packet+0x363/0x1310 [ 284.193404][ T4194] ? __lock_acquire+0x7b50/0x7b50 [ 284.193428][ T4194] ? hci_remote_host_features_evt+0x240/0x240 [ 284.193445][ T4194] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 284.193462][ T4194] ? mark_lock+0x94/0x320 [ 284.193475][ T4194] ? mutex_unlock+0x10/0x10 [ 284.193489][ T4194] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 284.193511][ T4194] ? lock_chain_count+0x20/0x20 [ 284.193528][ T4194] ? __rwlock_init+0x140/0x140 [ 284.193547][ T4194] hci_event_packet+0xe0b/0x1310 [ 284.193566][ T4194] ? _raw_spin_unlock+0x40/0x40 [ 284.193582][ T4194] ? rcu_lock_release+0x20/0x20 [ 284.193601][ T4194] ? hci_send_to_monitor+0x9c/0x4a0 [ 284.193619][ T4194] hci_rx_work+0x255/0xa10 [ 284.193645][ T4194] process_one_work+0x867/0xff0 [ 284.193671][ T4194] ? worker_detach_from_pool+0x240/0x240 [ 284.193687][ T4194] ? lockdep_hardirqs_off+0x70/0x100 [ 284.193708][ T4194] ? _raw_spin_lock_irq+0xb7/0xf0 [ 284.193723][ T4194] ? _raw_spin_lock_irqsave+0x100/0x100 [ 284.193746][ T4194] ? wq_worker_running+0x97/0x170 [ 284.193763][ T4194] worker_thread+0xad7/0x12a0 [ 284.193790][ T4194] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 284.193815][ T4194] kthread+0x42e/0x520 [ 284.193832][ T4194] ? rcu_lock_release+0x20/0x20 [ 284.193847][ T4194] ? kthread_blkcg+0xd0/0xd0 [ 284.193863][ T4194] ret_from_fork+0x1f/0x30 [ 284.193894][ T4194] [ 284.193932][ T4194] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 284.193950][ T4194] Bluetooth: hci2: failed to register connection device [ 284.498826][ T6478] device syzkaller0 entered promiscuous mode [ 286.473057][ T6485] vxcan1: tx drop: invalid da for name 0x0100000000000000 [ 286.667938][ T6488] device syzkaller0 entered promiscuous mode [ 287.073173][ T6497] sch_tbf: burst 6 is lower than device ip6tnl0 mtu (1452) ! [ 287.090000][ T6497] FAULT_INJECTION: forcing a failure. [ 287.090000][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 287.090027][ T6497] CPU: 0 PID: 6497 Comm: syz.0.681 Not tainted syzkaller #0 [ 287.090042][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.090053][ T6497] Call Trace: [ 287.090058][ T6497] [ 287.090064][ T6497] dump_stack_lvl+0x188/0x250 [ 287.090105][ T6497] ? show_regs_print_info+0x20/0x20 [ 287.090121][ T6497] ? load_image+0x410/0x410 [ 287.090144][ T6497] ? __might_sleep+0xf0/0xf0 [ 287.090161][ T6497] ? __lock_acquire+0x7b50/0x7b50 [ 287.090184][ T6497] should_fail+0x383/0x4b0 [ 287.090207][ T6497] should_failslab+0x5/0x20 [ 287.090227][ T6497] slab_pre_alloc_hook+0x51/0xc0 [ 287.090245][ T6497] __kmalloc_node_track_caller+0x68/0x3a0 [ 287.090261][ T6497] ? qdisc_notify+0x74/0x360 [ 287.090296][ T6497] ? __alloc_skb+0xf4/0x750 [ 287.090323][ T6497] ? qdisc_notify+0x74/0x360 [ 287.090341][ T6497] __alloc_skb+0x22c/0x750 [ 287.090361][ T6497] qdisc_notify+0x74/0x360 [ 287.090380][ T6497] qdisc_graft+0x11e8/0x1610 [ 287.090396][ T6497] ? trace_qdisc_create+0x83/0x1d0 [ 287.090420][ T6497] ? qdisc_create+0x11a0/0x11a0 [ 287.090437][ T6497] ? qdisc_notify+0x360/0x360 [ 287.090452][ T6497] ? apparmor_capable+0x12c/0x190 [ 287.090534][ T6497] tc_modify_qdisc+0xe6a/0x17d0 [ 287.090563][ T6497] ? rcu_lock_release+0x20/0x20 [ 287.090593][ T6497] ? rcu_lock_release+0x20/0x20 [ 287.090609][ T6497] rtnetlink_rcv_msg+0x7f1/0xf10 [ 287.090631][ T6497] ? lock_chain_count+0x20/0x20 [ 287.090649][ T6497] ? rtnetlink_bind+0x80/0x80 [ 287.090669][ T6497] ? __local_bh_enable_ip+0x136/0x1c0 [ 287.090685][ T6497] ? lockdep_hardirqs_on+0x94/0x140 [ 287.090704][ T6497] ? __local_bh_enable_ip+0x136/0x1c0 [ 287.090719][ T6497] ? _local_bh_enable+0xa0/0xa0 [ 287.090740][ T6497] ? __dev_queue_xmit+0x1b64/0x2e50 [ 287.090768][ T6497] ? dev_queue_xmit+0x20/0x20 [ 287.090787][ T6497] ? memcpy+0x3c/0x60 [ 287.090805][ T6497] ? __copy_skb_header+0x3ba/0x4f0 [ 287.090828][ T6497] netlink_rcv_skb+0x1e9/0x430 [ 287.090853][ T6497] ? rtnetlink_bind+0x80/0x80 [ 287.090872][ T6497] ? netlink_ack+0xb10/0xb10 [ 287.090902][ T6497] netlink_unicast+0x78f/0x940 [ 287.090927][ T6497] netlink_sendmsg+0x8ba/0xbe0 [ 287.090948][ T6497] ? netlink_getsockopt+0x570/0x570 [ 287.090961][ T6497] ? aa_sock_msg_perm+0x94/0x150 [ 287.090979][ T6497] ? apparmor_socket_sendmsg+0x173/0x230 [ 287.090995][ T6497] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 287.091012][ T6497] ? security_socket_sendmsg+0x7c/0xa0 [ 287.091029][ T6497] ? netlink_getsockopt+0x570/0x570 [ 287.091045][ T6497] ____sys_sendmsg+0x5be/0x8f0 [ 287.091069][ T6497] ? __sys_sendmsg_sock+0x30/0x30 [ 287.091092][ T6497] ? import_iovec+0x6f/0xa0 [ 287.091116][ T6497] ___sys_sendmsg+0x236/0x2e0 [ 287.091143][ T6497] ? __sys_sendmsg+0x290/0x290 [ 287.091170][ T6497] ? sock_do_ioctl+0x29d/0x320 [ 287.091203][ T6497] __se_sys_sendmsg+0x1b7/0x2a0 [ 287.091222][ T6497] ? __x64_sys_sendmsg+0x80/0x80 [ 287.091237][ T6497] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 287.091266][ T6497] ? lockdep_hardirqs_on+0x94/0x140 [ 287.091285][ T6497] do_syscall_64+0x4c/0xa0 [ 287.091300][ T6497] ? clear_bhb_loop+0x30/0x80 [ 287.091317][ T6497] ? clear_bhb_loop+0x30/0x80 [ 287.091334][ T6497] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.091352][ T6497] RIP: 0033:0x7f5e8ee73159 [ 287.091368][ T6497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.091381][ T6497] RSP: 002b:00007f5e8d0cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.091399][ T6497] RAX: ffffffffffffffda RBX: 00007f5e8f0fafa0 RCX: 00007f5e8ee73159 [ 287.091411][ T6497] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 000000000000000a [ 287.091430][ T6497] RBP: 00007f5e8ef0a06b R08: 0000000000000000 R09: 0000000000000000 [ 287.091440][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.091449][ T6497] R13: 00007f5e8f0fb038 R14: 00007f5e8f0fafa0 R15: 00007fffd1f3d068 [ 287.091470][ T6497] [ 287.419268][ T6509] FAULT_INJECTION: forcing a failure. [ 287.419268][ T6509] name failslab, interval 1, probability 0, space 0, times 0 [ 287.419296][ T6509] CPU: 0 PID: 6509 Comm: syz.0.685 Not tainted syzkaller #0 [ 287.419311][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.419321][ T6509] Call Trace: [ 287.419327][ T6509] [ 287.419334][ T6509] dump_stack_lvl+0x188/0x250 [ 287.419358][ T6509] ? show_regs_print_info+0x20/0x20 [ 287.419374][ T6509] ? load_image+0x410/0x410 [ 287.419392][ T6509] ? __might_sleep+0xf0/0xf0 [ 287.419408][ T6509] ? __lock_acquire+0x7b50/0x7b50 [ 287.419430][ T6509] should_fail+0x383/0x4b0 [ 287.419459][ T6509] should_failslab+0x5/0x20 [ 287.419478][ T6509] slab_pre_alloc_hook+0x51/0xc0 [ 287.419496][ T6509] kmem_cache_alloc_trace+0x47/0x290 [ 287.419511][ T6509] ? tcf_block_get_ext+0x13a/0x1290 [ 287.419533][ T6509] tcf_block_get_ext+0x13a/0x1290 [ 287.419565][ T6509] tcf_block_get+0x64/0x90 [ 287.419581][ T6509] ? tcf_block_get+0x90/0x90 [ 287.419600][ T6509] sfb_init+0x2d/0xa0 [ 287.419613][ T6509] ? sfb_peek+0x80/0x80 [ 287.419627][ T6509] qdisc_create+0x7e4/0x11a0 [ 287.419649][ T6509] ? qdisc_notify+0x360/0x360 [ 287.419664][ T6509] ? apparmor_capable+0x12c/0x190 [ 287.419691][ T6509] tc_modify_qdisc+0xae1/0x17d0 [ 287.419719][ T6509] ? rcu_lock_release+0x20/0x20 [ 287.419749][ T6509] ? rcu_lock_release+0x20/0x20 [ 287.419772][ T6509] rtnetlink_rcv_msg+0x7f1/0xf10 [ 287.419795][ T6509] ? lock_chain_count+0x20/0x20 [ 287.419813][ T6509] ? rtnetlink_bind+0x80/0x80 [ 287.419832][ T6509] ? __local_bh_enable_ip+0x136/0x1c0 [ 287.419848][ T6509] ? lockdep_hardirqs_on+0x94/0x140 [ 287.419868][ T6509] ? __local_bh_enable_ip+0x136/0x1c0 [ 287.419884][ T6509] ? _local_bh_enable+0xa0/0xa0 [ 287.419905][ T6509] ? __dev_queue_xmit+0x1b64/0x2e50 [ 287.419932][ T6509] ? dev_queue_xmit+0x20/0x20 [ 287.419947][ T6509] ? memcpy+0x3c/0x60 [ 287.419961][ T6509] ? __copy_skb_header+0x3ba/0x4f0 [ 287.419985][ T6509] netlink_rcv_skb+0x1e9/0x430 [ 287.420008][ T6509] ? rtnetlink_bind+0x80/0x80 [ 287.420027][ T6509] ? netlink_ack+0xb10/0xb10 [ 287.420056][ T6509] netlink_unicast+0x78f/0x940 [ 287.420081][ T6509] netlink_sendmsg+0x8ba/0xbe0 [ 287.420101][ T6509] ? netlink_getsockopt+0x570/0x570 [ 287.420114][ T6509] ? aa_sock_msg_perm+0x94/0x150 [ 287.420131][ T6509] ? apparmor_socket_sendmsg+0x173/0x230 [ 287.420149][ T6509] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 287.420166][ T6509] ? security_socket_sendmsg+0x7c/0xa0 [ 287.420182][ T6509] ? netlink_getsockopt+0x570/0x570 [ 287.420198][ T6509] ____sys_sendmsg+0x5be/0x8f0 [ 287.420221][ T6509] ? __sys_sendmsg_sock+0x30/0x30 [ 287.420244][ T6509] ? import_iovec+0x6f/0xa0 [ 287.420263][ T6509] ___sys_sendmsg+0x236/0x2e0 [ 287.420285][ T6509] ? __sys_sendmsg+0x290/0x290 [ 287.420311][ T6509] ? sock_do_ioctl+0x29d/0x320 [ 287.420344][ T6509] __se_sys_sendmsg+0x1b7/0x2a0 [ 287.420362][ T6509] ? __x64_sys_sendmsg+0x80/0x80 [ 287.420378][ T6509] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 287.420405][ T6509] ? lockdep_hardirqs_on+0x94/0x140 [ 287.420429][ T6509] do_syscall_64+0x4c/0xa0 [ 287.420444][ T6509] ? clear_bhb_loop+0x30/0x80 [ 287.420460][ T6509] ? clear_bhb_loop+0x30/0x80 [ 287.420478][ T6509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.420494][ T6509] RIP: 0033:0x7f5e8ee73159 [ 287.420509][ T6509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.420522][ T6509] RSP: 002b:00007f5e8d0cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.420540][ T6509] RAX: ffffffffffffffda RBX: 00007f5e8f0fafa0 RCX: 00007f5e8ee73159 [ 287.420557][ T6509] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000007 [ 287.420567][ T6509] RBP: 00007f5e8ef0a06b R08: 0000000000000000 R09: 0000000000000000 [ 287.420577][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.420586][ T6509] R13: 00007f5e8f0fb038 R14: 00007f5e8f0fafa0 R15: 00007fffd1f3d068 [ 287.420608][ T6509] [ 287.540623][ T4468] usb 3-1: USB disconnect, device number 5 [ 287.808654][ T6511] device syzkaller0 entered promiscuous mode [ 287.951952][ T6517] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 288.273229][ T6525] se_dev->se_dev_ptr already set for storage object [ 288.426806][ T6529] md: invalid raid superblock magic on ram0 [ 288.426821][ T6529] md: ram0 does not have a valid v0.0 superblock, not importing! [ 288.426881][ T6529] md: md_import_device returned -22 [ 288.902504][ T4194] Bluetooth: Wrong link type (-22) [ 289.725981][ T6547] device syzkaller0 entered promiscuous mode [ 290.915563][ T6576] XFS (loop0): Invalid device [./loop0], error=-16 [ 295.908662][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 295.908689][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 295.908704][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x5627 instead [ 295.908719][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xe422 instead [ 295.908732][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 295.908745][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 295.908758][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 295.908774][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 295.908799][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 295.908825][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 295.908838][ T6606] jffs2: Further such events for this erase block will not be printed [ 295.909190][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 295.909204][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 295.909219][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x5627 instead [ 295.909242][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xe422 instead [ 295.909255][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 295.909268][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 295.909281][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 295.909297][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 295.909323][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 295.909349][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 295.909361][ T6606] jffs2: Further such events for this erase block will not be printed [ 295.909639][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 295.909655][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 295.909669][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x5627 instead [ 295.909684][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x2f1d instead [ 295.909718][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 295.909731][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 295.909744][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x5627 instead [ 295.909759][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x2f1d instead [ 295.909792][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 295.909805][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 295.909819][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5627 instead [ 295.909834][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x2f1d instead [ 295.909866][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 295.909879][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 295.909893][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x5627 instead [ 295.909917][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x2f1d instead [ 295.909950][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 295.909963][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 295.909977][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x5627 instead [ 295.909993][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x2f1d instead [ 295.910026][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 295.910039][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 295.910053][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x5627 instead [ 295.910068][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x2f1d instead [ 295.910102][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 295.910115][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 295.910128][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x5627 instead [ 295.910147][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x2f1d instead [ 295.910180][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 295.910193][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 295.910207][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x5627 instead [ 295.910222][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x2f1d instead [ 295.910254][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 295.910267][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 295.910281][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x5627 instead [ 295.910295][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x2f1d instead [ 295.910328][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 295.910341][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 295.910354][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5627 instead [ 295.910369][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x2f1d instead [ 295.910402][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 295.910415][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 295.910429][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5627 instead [ 295.910444][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x2f1d instead [ 295.910484][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 295.910497][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 295.910511][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5627 instead [ 295.910525][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x2f1d instead [ 295.910566][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 295.910579][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 295.910593][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x5627 instead [ 295.910608][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x2f1d instead [ 295.910642][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 295.910655][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 295.910673][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5627 instead [ 295.910688][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x2f1d instead [ 295.910722][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 295.910735][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 295.910749][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x5627 instead [ 295.910764][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x2f1d instead [ 295.910798][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 295.910811][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 295.910825][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x5627 instead [ 295.910840][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x2f1d instead [ 295.910873][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 295.910886][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 295.910904][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x5627 instead [ 295.910919][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x2f1d instead [ 295.910952][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 295.910965][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 295.910979][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x5627 instead [ 295.910995][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x2f1d instead [ 295.911028][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 295.911041][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 295.911055][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x5627 instead [ 295.911070][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x2f1d instead [ 295.911103][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 295.911116][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 295.911130][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x5627 instead [ 295.911146][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x2f1d instead [ 295.911179][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 295.911192][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 295.911206][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x5627 instead [ 295.911221][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x2f1d instead [ 295.911255][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 295.911268][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 295.911282][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x5627 instead [ 295.911297][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x2f1d instead [ 295.911331][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 295.911343][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 295.911357][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x5627 instead [ 295.911372][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x2f1d instead [ 295.911405][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 295.967541][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 295.967570][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5627 instead [ 295.967587][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x2f1d instead [ 295.967676][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 295.967690][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 295.967704][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x5627 instead [ 295.967719][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x2f1d instead [ 295.967752][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 295.967765][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 295.967779][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x5627 instead [ 295.967794][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x2f1d instead [ 295.967826][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 295.967839][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 295.967887][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5627 instead [ 295.967909][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x2f1d instead [ 295.967942][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 295.967956][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 295.967970][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x5627 instead [ 295.967985][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x2f1d instead [ 295.968018][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 295.968031][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 295.968044][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x5627 instead [ 295.968059][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x2f1d instead [ 295.968093][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 295.968106][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 295.968120][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x5627 instead [ 295.968145][ T6606] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x2f1d instead [ 295.968174][ T6606] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 295.968181][ T6606] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 296.095283][ T6612] se_dev->se_dev_ptr already set for storage object [ 296.786282][ T6599] chnl_net:caif_netlink_parms(): no params data found [ 298.348612][ T1108] Bluetooth: hci14: command 0x0409 tx timeout [ 298.348704][ T1108] Bluetooth: hci13: command 0x0409 tx timeout [ 298.401005][ T6600] chnl_net:caif_netlink_parms(): no params data found [ 300.585425][ T4227] Bluetooth: hci11: Controller not accepting commands anymore: ncmd = 0 [ 300.585550][ T4227] Bluetooth: hci11: Injecting HCI hardware error event [ 300.587055][ T4194] Bluetooth: hci11: hardware error 0x00 [ 300.592348][ T4227] Bluetooth: hci13: command 0x041b tx timeout [ 300.592467][ T4227] Bluetooth: hci14: command 0x041b tx timeout [ 300.736657][ T6599] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.736687][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.748083][ T6599] device bridge_slave_0 entered promiscuous mode [ 300.797852][ T6599] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.797887][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.799028][ T6599] device bridge_slave_1 entered promiscuous mode [ 300.964291][ T6599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.966552][ T6599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.202247][ T6600] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.202292][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.203434][ T6600] device bridge_slave_0 entered promiscuous mode [ 301.210488][ T6599] team0: Port device team_slave_0 added [ 301.256554][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.256589][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.257788][ T6600] device bridge_slave_1 entered promiscuous mode [ 301.281368][ T6599] team0: Port device team_slave_1 added [ 301.328858][ T6600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.375543][ T6600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.883019][ T13] Bluetooth: hci14: command 0x040f tx timeout [ 302.883102][ T13] Bluetooth: hci13: command 0x040f tx timeout [ 303.251827][ T6668] vxcan1: tx drop: invalid da for name 0x0100000000000000 [ 303.534513][ T6599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.534529][ T6599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.534548][ T6599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.535934][ T6599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.535946][ T6599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.535965][ T6599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.680777][ T6710] se_dev->se_dev_ptr already set for storage object [ 303.742904][ C0] Unknown status report in ack skb [ 303.744395][ T6600] team0: Port device team_slave_0 added [ 305.265357][ T1108] Bluetooth: hci13: command 0x0419 tx timeout [ 305.265417][ T1108] Bluetooth: hci14: command 0x0419 tx timeout [ 305.277915][ T4316] device hsr_slave_0 left promiscuous mode [ 305.278419][ T4316] device hsr_slave_1 left promiscuous mode [ 305.292147][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.292307][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.329364][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.329410][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.359263][ T4316] device bridge_slave_1 left promiscuous mode [ 305.361007][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.417599][ T4316] device bridge_slave_0 left promiscuous mode [ 305.417741][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.602751][ T4316] device veth1_macvtap left promiscuous mode [ 305.602914][ T4316] device veth0_macvtap left promiscuous mode [ 305.602976][ T4316] device veth1_vlan left promiscuous mode [ 305.603101][ T4316] device veth0_vlan left promiscuous mode [ 305.801875][ T6727] loop0: detected capacity change from 0 to 2049 [ 305.895769][ T6727] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 305.895869][ T6727] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 305.895935][ T6727] loop0: [ 308.477881][ T4316] team0 (unregistering): Port device team_slave_1 removed [ 308.510645][ T4316] team0 (unregistering): Port device team_slave_0 removed [ 308.557250][ T4316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.598853][ T4316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.939344][ T4316] bond0 (unregistering): Released all slaves [ 309.031177][ T6756] se_dev->se_dev_ptr already set for storage object [ 309.102124][ T6599] device hsr_slave_0 entered promiscuous mode [ 309.117554][ T6599] device hsr_slave_1 entered promiscuous mode [ 309.142565][ T6599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.142587][ T6599] Cannot create hsr debugfs directory [ 309.196008][ T6600] team0: Port device team_slave_1 added [ 309.367883][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.367917][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.367936][ T6600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.369339][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.369350][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.369370][ T6600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.664857][ T6600] device hsr_slave_0 entered promiscuous mode [ 311.111026][ T6600] device hsr_slave_1 entered promiscuous mode [ 311.176406][ T6600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.176429][ T6600] Cannot create hsr debugfs directory [ 311.518654][ T6773] 9pnet_virtio: no channels available for device syz [ 311.542428][ T4194] Bluetooth: Wrong link type (-22) [ 311.568081][ T13] Bluetooth: hci6: command 0x0406 tx timeout [ 311.829800][ T6599] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.091563][ T6780] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 312.091587][ T6780] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 312.091657][ T6780] vhci_hcd vhci_hcd.0: Device attached [ 312.177021][ T6599] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.222274][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 312.222297][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 312.222311][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x5627 instead [ 312.222327][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xe422 instead [ 312.222346][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 312.222359][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 312.222371][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 312.222387][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 312.222412][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 312.222438][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 312.222450][ T6785] jffs2: Further such events for this erase block will not be printed [ 312.222729][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 312.222742][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 312.222760][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x5627 instead [ 312.222775][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xe422 instead [ 312.222788][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 312.222800][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 312.222812][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 312.222828][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 312.222853][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 312.222878][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 312.222890][ T6785] jffs2: Further such events for this erase block will not be printed [ 312.223198][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 312.223219][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 312.223238][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x5627 instead [ 312.223254][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x2f1d instead [ 312.223287][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 312.223300][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 312.223313][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x5627 instead [ 312.223332][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x2f1d instead [ 312.223366][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 312.223379][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 312.223392][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5627 instead [ 312.223407][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x2f1d instead [ 312.223440][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 312.223452][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 312.223470][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x5627 instead [ 312.223485][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x2f1d instead [ 312.223518][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 312.223530][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 312.223544][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x5627 instead [ 312.223559][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x2f1d instead [ 312.223592][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 312.223605][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 312.223618][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x5627 instead [ 312.223633][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x2f1d instead [ 312.223665][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 312.223678][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 312.223692][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x5627 instead [ 312.223707][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x2f1d instead [ 312.223744][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 312.223757][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 312.223772][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x5627 instead [ 312.223787][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x2f1d instead [ 312.223819][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 312.223833][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 312.223846][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x5627 instead [ 312.223862][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x2f1d instead [ 312.223894][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 312.223907][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 312.223925][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5627 instead [ 312.223941][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x2f1d instead [ 312.223975][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 312.223991][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 312.224005][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5627 instead [ 312.224020][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x2f1d instead [ 312.224056][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 312.224069][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 312.224083][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5627 instead [ 312.224101][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x2f1d instead [ 312.224134][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 312.224147][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 312.224160][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x5627 instead [ 312.224175][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x2f1d instead [ 312.224208][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 312.224220][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 312.224235][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5627 instead [ 312.224250][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x2f1d instead [ 312.224283][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 312.224297][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 312.224310][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x5627 instead [ 312.224326][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x2f1d instead [ 312.224363][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 312.224376][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 312.224390][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x5627 instead [ 312.224406][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x2f1d instead [ 312.224438][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 312.224451][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 312.224465][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x5627 instead [ 312.224480][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x2f1d instead [ 312.224512][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 312.224525][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 312.224539][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x5627 instead [ 312.224554][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x2f1d instead [ 312.224587][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 312.224600][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 312.224613][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x5627 instead [ 312.224629][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x2f1d instead [ 312.224661][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 312.224680][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 312.224697][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x5627 instead [ 312.224712][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x2f1d instead [ 312.224749][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 312.224763][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 312.224777][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x5627 instead [ 312.224793][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x2f1d instead [ 312.224826][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 312.224839][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 312.224852][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x5627 instead [ 312.224867][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x2f1d instead [ 312.224901][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 312.255446][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 312.255467][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x5627 instead [ 312.255483][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x2f1d instead [ 312.255527][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 312.255541][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 312.255564][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5627 instead [ 312.255580][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x2f1d instead [ 312.255615][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 312.255629][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 312.255643][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x5627 instead [ 312.255659][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x2f1d instead [ 312.255696][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 312.255709][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 312.255723][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x5627 instead [ 312.255738][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x2f1d instead [ 312.255770][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 312.255783][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 312.255796][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5627 instead [ 312.255811][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x2f1d instead [ 312.255843][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 312.255855][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 312.255869][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x5627 instead [ 312.255883][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x2f1d instead [ 312.255915][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 312.255928][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 312.255941][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x5627 instead [ 312.255956][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x2f1d instead [ 312.255988][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 312.256001][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 312.256014][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x5627 instead [ 312.256029][ T6785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x2f1d instead [ 312.256061][ T6785] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 312.256068][ T6785] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 312.361716][ T4227] vhci_hcd: vhci_device speed not set [ 312.393281][ T6599] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.431526][ T4227] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 312.432166][ T4468] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 312.602198][ T6599] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.791761][ T4468] usb 6-1: config 0 has no interfaces? [ 312.791807][ T4468] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 312.791830][ T4468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.794706][ T4468] usb 6-1: config 0 descriptor?? [ 312.871210][ T6600] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.990941][ T6600] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.037394][ T6782] usbip_core: unknown command [ 313.037414][ T6782] vhci_hcd: unknown pdu 0 [ 313.037425][ T6782] usbip_core: unknown command [ 313.037774][ T6697] vhci_hcd: stop threads [ 313.037784][ T6697] vhci_hcd: release socket [ 313.037799][ T6697] vhci_hcd: disconnect device [ 313.102398][ T1108] usb 6-1: USB disconnect, device number 2 [ 313.112450][ T4227] vhci_hcd: vhci_device speed not set [ 313.117922][ T6600] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.259144][ T6600] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.427638][ T6793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.442669][ T6599] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 315.445330][ T6600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.447674][ T6600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.455934][ T6797] vxcan1: tx drop: invalid da for name 0x0100000000000000 [ 315.459761][ T6599] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 315.462540][ T6599] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 315.465367][ T6788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.465628][ T6788] [ 315.465632][ T6788] ====================================================== [ 315.465636][ T6788] WARNING: possible circular locking dependency detected [ 315.465652][ T6788] syzkaller #0 Not tainted [ 315.465659][ T6788] ------------------------------------------------------ [ 315.465664][ T6788] syz.0.763/6788 is trying to acquire lock: [ 315.465671][ T6788] ffffffff8cb64068 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x13/0x40 [ 315.465802][ T6788] [ 315.465802][ T6788] but task is already holding lock: [ 315.465807][ T6788] ffff8880565b1350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x102/0x600 [ 315.465862][ T6788] [ 315.465862][ T6788] which lock already depends on the new lock. [ 315.465862][ T6788] [ 315.465866][ T6788] [ 315.465866][ T6788] the existing dependency chain (in reverse order) is: [ 315.465871][ T6788] [ 315.465871][ T6788] -> #3 (&ndev->req_lock){+.+.}-{3:3}: [ 315.465890][ T6788] __mutex_lock_common+0x1e5/0x2400 [ 315.465911][ T6788] mutex_lock_nested+0x17/0x20 [ 315.465922][ T6788] nci_start_poll+0x8c8/0xcc0 [ 315.465936][ T6788] nfc_start_poll+0x141/0x2c0 [ 315.465948][ T6788] nfc_genl_start_poll+0x1d7/0x340 [ 315.465961][ T6788] genl_rcv_msg+0xd0b/0xfa0 [ 315.465974][ T6788] netlink_rcv_skb+0x1e9/0x430 [ 315.465988][ T6788] genl_rcv+0x24/0x40 [ 315.465999][ T6788] netlink_unicast+0x78f/0x940 [ 315.466013][ T6788] netlink_sendmsg+0x8ba/0xbe0 [ 315.466024][ T6788] ____sys_sendmsg+0x5be/0x8f0 [ 315.466043][ T6788] ___sys_sendmsg+0x236/0x2e0 [ 315.466056][ T6788] __se_sys_sendmsg+0x1b7/0x2a0 [ 315.466077][ T6788] do_syscall_64+0x4c/0xa0 [ 315.466091][ T6788] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.466107][ T6788] [ 315.466107][ T6788] -> #2 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 315.466127][ T6788] __mutex_lock_common+0x1e5/0x2400 [ 315.466140][ T6788] mutex_lock_nested+0x17/0x20 [ 315.466151][ T6788] nfc_urelease_event_work+0x120/0x310 [ 315.466166][ T6788] process_one_work+0x867/0xff0 [ 315.466186][ T6788] worker_thread+0xad7/0x12a0 [ 315.466200][ T6788] kthread+0x42e/0x520 [ 315.466212][ T6788] ret_from_fork+0x1f/0x30 [ 315.466227][ T6788] [ 315.466227][ T6788] -> #1 (nfc_devlist_mutex){+.+.}-{3:3}: [ 315.466257][ T6788] __mutex_lock_common+0x1e5/0x2400 [ 315.466273][ T6788] mutex_lock_nested+0x17/0x20 [ 315.466285][ T6788] nfc_register_device+0x38/0x300 [ 315.466298][ T6788] nci_register_device+0x89f/0x9f0 [ 315.466313][ T6788] virtual_ncidev_open+0x55/0xc0 [ 315.466327][ T6788] misc_open+0x31f/0x390 [ 315.466362][ T6788] chrdev_open+0x585/0x5f0 [ 315.466386][ T6788] do_dentry_open+0x7f7/0xf90 [ 315.466398][ T6788] path_openat+0x2718/0x2fb0 [ 315.466417][ T6788] do_filp_open+0x1df/0x400 [ 315.466430][ T6788] do_sys_openat2+0x14b/0x500 [ 315.466442][ T6788] __x64_sys_openat+0x135/0x160 [ 315.466454][ T6788] do_syscall_64+0x4c/0xa0 [ 315.466467][ T6788] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.466482][ T6788] [ 315.466482][ T6788] -> #0 (nci_mutex){+.+.}-{3:3}: [ 315.466501][ T6788] __lock_acquire+0x2c66/0x7b50 [ 315.466517][ T6788] lock_acquire+0x19e/0x400 [ 315.466531][ T6788] __mutex_lock_common+0x1e5/0x2400 [ 315.466543][ T6788] mutex_lock_nested+0x17/0x20 [ 315.466554][ T6788] virtual_nci_close+0x13/0x40 [ 315.466567][ T6788] nci_close_device+0x383/0x600 [ 315.466582][ T6788] nci_unregister_device+0x5e/0x250 [ 315.466596][ T6788] virtual_ncidev_close+0x55/0x90 [ 315.466610][ T6788] __fput+0x212/0x8c0 [ 315.466622][ T6788] task_work_run+0x125/0x1a0 [ 315.466635][ T6788] exit_to_user_mode_loop+0x10f/0x130 [ 315.466648][ T6788] exit_to_user_mode_prepare+0xee/0x180 [ 315.466660][ T6788] syscall_exit_to_user_mode+0x16/0x40 [ 315.466675][ T6788] do_syscall_64+0x58/0xa0 [ 315.466687][ T6788] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.466701][ T6788] [ 315.466701][ T6788] other info that might help us debug this: [ 315.466701][ T6788] [ 315.466705][ T6788] Chain exists of: [ 315.466705][ T6788] nci_mutex --> &genl_data->genl_data_mutex --> &ndev->req_lock [ 315.466705][ T6788] [ 315.466728][ T6788] Possible unsafe locking scenario: [ 315.466728][ T6788] [ 315.466731][ T6788] CPU0 CPU1 [ 315.466735][ T6788] ---- ---- [ 315.466738][ T6788] lock(&ndev->req_lock); [ 315.466747][ T6788] lock(&genl_data->genl_data_mutex); [ 315.466757][ T6788] lock(&ndev->req_lock); [ 315.466767][ T6788] lock(nci_mutex); [ 315.466775][ T6788] [ 315.466775][ T6788] *** DEADLOCK *** [ 315.466775][ T6788] [ 315.466778][ T6788] 1 lock held by syz.0.763/6788: [ 315.466786][ T6788] #0: ffff8880565b1350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x102/0x600 [ 315.466822][ T6788] [ 315.466822][ T6788] stack backtrace: [ 315.466826][ T6788] CPU: 0 PID: 6788 Comm: syz.0.763 Not tainted syzkaller #0 [ 315.466840][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.466849][ T6788] Call Trace: [ 315.466854][ T6788] [ 315.466863][ T6788] dump_stack_lvl+0x188/0x250 [ 315.466882][ T6788] ? load_image+0x410/0x410 [ 315.466896][ T6788] ? show_regs_print_info+0x20/0x20 [ 315.466913][ T6788] ? print_circular_bug+0x12b/0x1a0 [ 315.466928][ T6788] check_noncircular+0x296/0x330 [ 315.466944][ T6788] ? add_chain_block+0x9b0/0x9b0 [ 315.466957][ T6788] ? lockdep_lock+0xf1/0x1f0 [ 315.466973][ T6788] ? __lock_acquire+0x2844/0x7b50 [ 315.466991][ T6788] ? mark_lock+0x94/0x320 [ 315.467003][ T6788] ? _find_first_zero_bit+0xd1/0xf0 [ 315.467024][ T6788] __lock_acquire+0x2c66/0x7b50 [ 315.467044][ T6788] ? verify_lock_unused+0x140/0x140 [ 315.467070][ T6788] ? verify_lock_unused+0x140/0x140 [ 315.467088][ T6788] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 315.467106][ T6788] ? _raw_spin_unlock+0x40/0x40 [ 315.467125][ T6788] lock_acquire+0x19e/0x400 [ 315.467141][ T6788] ? virtual_nci_close+0x13/0x40 [ 315.467159][ T6788] ? __might_sleep+0xf0/0xf0 [ 315.467173][ T6788] ? read_lock_is_recursive+0x10/0x10 [ 315.467190][ T6788] ? console_trylock_spinning+0x219/0x370 [ 315.467204][ T6788] ? lockdep_hardirqs_on+0x94/0x140 [ 315.467221][ T6788] ? console_trylock_spinning+0x2e0/0x370 [ 315.467237][ T6788] __mutex_lock_common+0x1e5/0x2400 [ 315.467250][ T6788] ? virtual_nci_close+0x13/0x40 [ 315.467267][ T6788] ? irq_work_queue+0xbf/0x140 [ 315.467285][ T6788] ? __wake_up_klogd+0xd9/0x100 [ 315.467299][ T6788] ? virtual_nci_close+0x13/0x40 [ 315.467317][ T6788] ? mutex_lock_io_nested+0x60/0x60 [ 315.467331][ T6788] ? load_image+0x410/0x410 [ 315.467348][ T6788] mutex_lock_nested+0x17/0x20 [ 315.467360][ T6788] virtual_nci_close+0x13/0x40 [ 315.467375][ T6788] nci_close_device+0x383/0x600 [ 315.467392][ T6788] ? kfree+0xef/0x2a0 [ 315.467405][ T6788] ? nci_unregister_device+0x250/0x250 [ 315.467423][ T6788] ? kobject_put+0x41d/0x450 [ 315.467455][ T6788] nci_unregister_device+0x5e/0x250 [ 315.467473][ T6788] ? virtual_ncidev_open+0xc0/0xc0 [ 315.467495][ T6788] virtual_ncidev_close+0x55/0x90 [ 315.467509][ T6788] __fput+0x212/0x8c0 [ 315.467526][ T6788] task_work_run+0x125/0x1a0 [ 315.467543][ T6788] exit_to_user_mode_loop+0x10f/0x130 [ 315.467556][ T6788] exit_to_user_mode_prepare+0xee/0x180 [ 315.467570][ T6788] syscall_exit_to_user_mode+0x16/0x40 [ 315.467586][ T6788] do_syscall_64+0x58/0xa0 [ 315.467599][ T6788] ? clear_bhb_loop+0x30/0x80 [ 315.467614][ T6788] ? clear_bhb_loop+0x30/0x80 [ 315.467632][ T6788] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.467648][ T6788] RIP: 0033:0x7f5e8ee73159 [ 315.467661][ T6788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.467673][ T6788] RSP: 002b:00007fffd1f3d1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 315.467688][ T6788] RAX: 0000000000000000 RBX: 00007f5e8f0fcda0 RCX: 00007f5e8ee73159 [ 315.467698][ T6788] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 315.467707][ T6788] RBP: 00007f5e8f0fcda0 R08: 0000000000000006 R09: 0000000000000000 [ 315.467716][ T6788] R10: 00007f5e8f0fccb0 R11: 0000000000000246 R12: 000000000004c7bb [ 315.467725][ T6788] R13: 00007f5e8f0fb09c R14: 000000000004c541 R15: 00007fffd1f3d2d0 [ 315.467740][ T6788] [ 315.478253][ T6600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.509413][ T6599] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 315.648609][ T6600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.600530][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.768'. [ 316.792618][ T6806] netlink: 'syz.0.769': attribute type 7 has an invalid length. [ 316.792634][ T6806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.769'. [ 316.792688][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 316.870173][ T6600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.922732][ T6599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.982489][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.983258][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.983749][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.984203][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.988101][ T6600] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.998307][ T6599] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.012397][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.013041][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.013394][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.013423][ T6693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.056603][ T6814] se_dev->se_dev_ptr already set for storage object [ 317.072187][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.072562][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.072882][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.073124][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.073147][ T6693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.073453][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.073800][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.074038][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.074068][ T6693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.074372][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 317.125955][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.126386][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.126752][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.126986][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.127008][ T6693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.127324][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 317.127924][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.128539][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.129450][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.176642][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.177338][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.177919][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.178465][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.178944][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.227803][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.250484][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.252454][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.253020][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.253477][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.254604][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.255453][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.256991][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.260089][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.272411][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.272865][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.273241][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.275518][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 317.294875][ T6599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.297109][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.361751][ T6833] vxcan1: tx drop: invalid da for name 0x0100000000000000 [ 319.382823][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.382961][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.413967][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.414078][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.433157][ T6600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.437867][ T6599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.481064][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 319.481618][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 319.592155][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 319.592559][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.593082][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.593422][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.595893][ T6600] device veth0_vlan entered promiscuous mode [ 319.609578][ T6600] device veth1_vlan entered promiscuous mode [ 319.776476][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 319.777510][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 319.777984][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 319.778420][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.789007][ T6600] device veth0_macvtap entered promiscuous mode [ 319.839338][ T6600] device veth1_macvtap entered promiscuous mode [ 319.922861][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.922884][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.922893][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.922910][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.922917][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.922927][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.922936][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.922944][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.922955][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.922972][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.922981][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.922990][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.923002][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.923011][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.923023][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.923036][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.923047][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.923058][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.923067][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.923077][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.923086][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.923100][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.923110][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.923119][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.924178][ T6600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.926450][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.926464][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.926477][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.926486][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.926496][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.926515][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.926526][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.926535][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.926546][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.926559][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.926567][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.926576][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.926586][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.926595][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.926602][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.926614][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.926624][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.926633][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.926641][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.926650][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.926664][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.926673][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.926687][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.926697][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.927575][ T6600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.941960][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 319.942778][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 319.943402][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 319.943959][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.951077][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 319.963201][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 320.212100][ T27] INFO: task syz.4.291:5228 blocked for more than 143 seconds. [ 320.212124][ T27] Not tainted syzkaller #0 [ 320.212132][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 320.212139][ T27] task:syz.4.291 state:D stack:27696 pid: 5228 ppid: 4185 flags:0x00004004 [ 320.212184][ T27] Call Trace: [ 320.212190][ T27] [ 320.212203][ T27] __schedule+0x11c3/0x4350 [ 320.212235][ T27] ? verify_lock_unused+0x140/0x140 [ 320.212263][ T27] ? release_firmware_map_entry+0x190/0x190 [ 320.212281][ T27] ? mark_lock+0x94/0x320 [ 320.212295][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 320.212316][ T27] schedule+0x11b/0x1e0 [ 320.212334][ T27] schedule_timeout+0xbd/0x2d0 [ 320.212348][ T27] ? console_conditional_schedule+0x40/0x40 [ 320.212364][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 320.212382][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 320.212410][ T27] ? lock_chain_count+0x20/0x20 [ 320.212427][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 320.212443][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 320.212458][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 320.212476][ T27] __down_common+0x289/0x3b0 [ 320.212492][ T27] ? __up+0x150/0x150 [ 320.212504][ T27] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 320.212520][ T27] ? class_for_each_device+0x290/0x290 [ 320.212596][ T27] down+0x7e/0xd0 [ 320.212612][ T27] console_lock+0x29/0x70 [ 320.212626][ T27] con_install+0x94/0x720 [ 320.212658][ T27] ? show_tty_active+0x30/0x30 [ 320.212686][ T27] tty_init_dev+0xbb/0x470 [ 320.212729][ T27] tty_open+0x7e8/0xcd0 [ 320.212748][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 320.212767][ T27] ? tty_compat_ioctl+0x570/0x570 [ 320.212783][ T27] ? memset+0x1e/0x40 [ 320.212798][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 320.212814][ T27] chrdev_open+0x585/0x5f0 [ 320.212833][ T27] ? cd_forget+0x160/0x160 [ 320.212850][ T27] ? fsnotify_perm+0x3a7/0x560 [ 320.212868][ T27] ? cd_forget+0x160/0x160 [ 320.212884][ T27] do_dentry_open+0x7f7/0xf90 [ 320.212899][ T27] ? vfs_open+0x2b/0x80 [ 320.212918][ T27] path_openat+0x2718/0x2fb0 [ 320.212943][ T27] ? __kasan_slab_alloc+0xa9/0xc0 [ 320.212963][ T27] ? do_filp_open+0x400/0x400 [ 320.212984][ T27] do_filp_open+0x1df/0x400 [ 320.213002][ T27] ? vfs_tmpfile+0x300/0x300 [ 320.213025][ T27] ? _raw_spin_unlock+0x24/0x40 [ 320.213039][ T27] ? alloc_fd+0x59e/0x650 [ 320.213055][ T27] do_sys_openat2+0x14b/0x500 [ 320.213070][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 320.213087][ T27] ? do_sys_open+0xe0/0xe0 [ 320.213101][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 320.213120][ T27] ? lock_chain_count+0x20/0x20 [ 320.213139][ T27] __x64_sys_openat+0x135/0x160 [ 320.213155][ T27] do_syscall_64+0x4c/0xa0 [ 320.213169][ T27] ? clear_bhb_loop+0x30/0x80 [ 320.213186][ T27] ? clear_bhb_loop+0x30/0x80 [ 320.213202][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 320.213219][ T27] RIP: 0033:0x7f4ff882998e [ 320.213231][ T27] RSP: 002b:00007f4ff6ac0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 320.213248][ T27] RAX: ffffffffffffffda RBX: 00007f4ff6ac16c0 RCX: 00007f4ff882998e [ 320.213260][ T27] RDX: 0000000000000002 RSI: 00007f4ff6ac0c00 RDI: ffffffffffffff9c [ 320.213271][ T27] RBP: 00007f4ff890006b R08: 0000000000000000 R09: 0000000000000000 [ 320.213281][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.213290][ T27] R13: 00007f4ff8af1038 R14: 00007f4ff8af0fa0 R15: 00007fff01b6c858 [ 320.213307][ T27] [ 320.213340][ T27] INFO: lockdep is turned off. [ 320.213346][ T27] NMI backtrace for cpu 0 [ 320.213353][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 320.213367][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.213380][ T27] Call Trace: [ 320.213385][ T27] [ 320.213390][ T27] dump_stack_lvl+0x188/0x250 [ 320.213410][ T27] ? show_regs_print_info+0x20/0x20 [ 320.213424][ T27] ? load_image+0x410/0x410 [ 320.213440][ T27] ? irq_work_queue+0xbf/0x140 [ 320.213459][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 320.213475][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 320.213490][ T27] ? _printk+0xda/0x130 [ 320.213502][ T27] ? rcu_lock_release+0x5/0x20 [ 320.213518][ T27] ? load_image+0x410/0x410 [ 320.213532][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 320.213556][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 320.213573][ T27] watchdog+0xe1b/0xe60 [ 320.213591][ T27] kthread+0x42e/0x520 [ 320.213610][ T27] ? hungtask_pm_notify+0x40/0x40 [ 320.213624][ T27] ? kthread_blkcg+0xd0/0xd0 [ 320.213638][ T27] ret_from_fork+0x1f/0x30 [ 320.213662][ T27] [ 320.213687][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 320.213693][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 320.213707][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.213715][ T27] Call Trace: [ 320.213719][ T27] [ 320.213723][ T27] dump_stack_lvl+0x188/0x250 [ 320.213738][ T27] ? show_regs_print_info+0x20/0x20 [ 320.213752][ T27] ? load_image+0x410/0x410 [ 320.213770][ T27] panic+0x2f8/0x850 [ 320.213791][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 320.213807][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 320.213825][ T27] ? irq_work_queue+0xbf/0x140 [ 320.213848][ T27] watchdog+0xe5a/0xe60 [ 320.213866][ T27] kthread+0x42e/0x520 [ 320.213878][ T27] ? hungtask_pm_notify+0x40/0x40 [ 320.213892][ T27] ? kthread_blkcg+0xd0/0xd0 [ 320.213906][ T27] ret_from_fork+0x1f/0x30 [ 320.213925][ T27] [ 320.214036][ T27] Kernel Offset: disabled