last executing test programs: 2m29.421355829s ago: executing program 1 (id=550): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX, @ANYRES8], 0x3, 0x240, &(0x7f0000000400)="$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") openat(r0, 0x0, 0xcc040, 0x56) unlinkat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000680), 0x80080, 0x0) fcntl$notify(r1, 0x402, 0x80000037) syz_open_procfs(0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000800)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{&(0x7f0000000bc0)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000c40)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) syz_io_uring_setup(0x12ea, &(0x7f0000000c80)={0x0, 0xa982, 0x200, 0x4, 0x2a6}, &(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6, 0x4, "bde7"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004801}, 0x20000000) 2m28.439177059s ago: executing program 1 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f0000000740)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x18, 0x0}}, {{&(0x7f0000000fc0)={0xa, 0x4e22, 0x18000000, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001000)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x30}}], 0x2, 0x20002040) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x48000) read(r2, &(0x7f0000000780)=""/202, 0xca) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, 0x0) tkill(r1, 0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x20702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x13, 0x7, 0x8, 0xfbee}, 0x8000002, 0x1, 0x3, 0x5, 0xe, 0x6, 0xd, 0x18, 0x5, 0x2, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000e00)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) 2m28.114392252s ago: executing program 1 (id=557): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffc000) 2m27.902332074s ago: executing program 1 (id=558): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000003c0)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000540), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000580)={0x4, r1, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000005c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) close_range(r1, r2, 0x0) 2m27.001878256s ago: executing program 1 (id=559): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00'], 0x30}], 0x1, 0x0, 0x0, 0x4000}, 0x80) 2m26.239191734s ago: executing program 1 (id=560): r0 = syz_open_dev$evdev(&(0x7f0000004200), 0x0, 0x802) write$evdev(r0, &(0x7f0000004240), 0x3f5aa546) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) 2m11.047916574s ago: executing program 32 (id=560): r0 = syz_open_dev$evdev(&(0x7f0000004200), 0x0, 0x802) write$evdev(r0, &(0x7f0000004240), 0x3f5aa546) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) 2m6.430335595s ago: executing program 4 (id=620): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="010000000000000000000100000054000180060001000a000007000002001100000014000300000000000000000000000000135400000001060004001f900000070006007272000008000800000000000c0007000000000000000000080009008000"], 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="9a29ed7569b83f038a1f7bc55fd78b61732746fb05d6f069c5890f8cf79de395fd3b9a0748eae3870c5ce5f8066b5de13f729d4ba34375ee126e11b8ee6d606974c70e400469bd950b6b6d70d5b1d3c15f693b61f336845dfc47dfe5d2cc3d05720b4446c26118fe77af088793ca5a2d638f9d6dc0054baee37994", @ANYRES16, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002801400010000000000000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x22401, 0x0) write(r4, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) 2m3.93543993s ago: executing program 4 (id=625): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000280)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000040000000000001000000080000e000000105000100000000000800020005000000ad1c79393a496908bc7aff6ea8d89009ef1005d12f091077b6c7b0973346636c3e0a1da33a5b37cbfe7b22cfadaa3f9024a7b7699cfa7921bb23a59f568199efa8d42319c192d7"], 0x34}}, 0x2404c0c0) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r8, 0x100000000000a3) r9 = syz_io_uring_setup(0x2e4c, &(0x7f0000000440)={0x0, 0x3ae8, 0x2000, 0x1, 0x309, 0x0, r4}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) syz_ublk_setup_queues(r2, r0, &(0x7f0000000040)={0x0, 0x4d00, 0x10, 0xffeffffd, 0x230, 0x0, r9}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x402, 0x10, 0x8000003, 0x112, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x4000, 0x1, 0x3ac, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x20, 0x4003bfff, 0x299, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626f, 0x800, 0x11, 0x26d}}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_pidfd_open(0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, r8}}, 0x18) 2m3.084614597s ago: executing program 4 (id=628): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX, @ANYRES8], 0x3, 0x240, &(0x7f0000000400)="$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") openat(r0, 0x0, 0xcc040, 0x56) unlinkat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000680), 0x80080, 0x0) fcntl$notify(r1, 0x402, 0x80000037) syz_open_procfs(0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000700)=ANY=[@ANYBLOB="00020201"], 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{&(0x7f0000000bc0)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000c40)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 2m1.998921618s ago: executing program 4 (id=631): mknodat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x10, 0x9) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002680)="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", 0x2000, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004780)={0x50, 0x0, r1, {0x7, 0x2b, 0x1, 0x3800402c, 0x3, 0xfffe, 0x2, 0x6, 0x0, 0x0, 0x100, 0xe}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004800)="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", 0x2000, &(0x7f0000006800)={0x0, &(0x7f00000002c0)={0x18, 0x0, 0x4, {0x80000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000006900)='./file0\x00', 0x2c41, 0x22) lseek(r2, 0x8, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x401}}}]}, 0x3c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x40000000000009f, 0x0) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) fcntl$setflags(r4, 0x2, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r7, &(0x7f0000000000)='3', 0x4e) open(&(0x7f0000006940)='./file1\x00', 0x40, 0x1c) write(r6, &(0x7f0000000500)='p:s/_ ./file0:0', 0xf) 1m58.177821618s ago: executing program 4 (id=647): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4008080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) r3 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='source\x00', 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x4, 0x99, &(0x7f0000000400)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='retrans\x00', &(0x7f0000000500)='\x00\x00\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./tracing\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='e:my_read_msr1 msr/read_msr', 0x1b) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$nfs4(0x0, 0x0, 0x0, 0x40000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000007c0)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000800)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) write(r5, &(0x7f0000000680)='e:my_read_msr2 msr/read_msr', 0x1b) write(0xffffffffffffffff, &(0x7f0000000700)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000780)='1', 0x1) 1m57.447040992s ago: executing program 4 (id=652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x130, 0x11, 0x148, 0x130, 0x0, 0x24c, 0x2a8, 0x2a8, 0x24c, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xff000000, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0xd1}}, @common=@unspec=@owner={{0x34}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0xd, 0x0, 0x8, 'pptp\x00', 'syz0\x00', {0xe}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'macvtap0\x00', 'netdevsim0\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7, 0xe, [0x2, 0x3a, 0x1e, 0x6, 0x30, 0x4, 0x27, 0x37, 0x24, 0x33, 0x23, 0x23, 0x18, 0xa, 0x3b, 0x33], 0x0, 0x5, 0x80000000}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2ec) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000340)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='secret\x00', &(0x7f0000000400)='IaA+7A/AA//+/++\xa5\xd3\x17\xf1AAAAAAAABAAAAAy\xda\xee|\xd9\x0f\aU\"\xab\x94\'d\x1f\xbcG\xf4\x14\xf2v\xf83Z\xaa\xc3)\v{\x16\xb7\x0e\a%\xb1\xf7\xe9\xc5\xa6\xfa\xd4\xd7\xa0\xaa>\xa0\xec\x9a\xc6~^\xc0T\xbdnr\xfb\xa5/B O(_\xebN\x19i\x1d}\xa3\x1f\x99%H\xf6K\xee\x9f\x18\x8d\xe7\x9a\xbd7\xb6uc\x1e\xd4xH\xc4 u\x06\xfa9wK\xc2UI\x8b\x03\x85\xfe\xfc\xf3\x88\xb8\xad\xc5\xe7\xf52\xe9\xd4s[\xa2\xce\xfdn\xb2\x9f\xdfN\xb8\xf1\xe6\xb7\x86\x00\xd4)=\xe1X\xb8\xaf', 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x100000, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8081}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14}, [], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000bc0)={&(0x7f0000000c00), 0xc, &(0x7f0000000c40)={&(0x7f0000000c80)={0x58, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:var_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x58}}, 0x4) r8 = openat$md_new_array(0xffffff9c, &(0x7f0000000d00), 0x1, 0x0) write$md_new_array(r8, &(0x7f0000000d40)={'md', @num=0x0}, 0x3) r9 = openat$md(0xffffff9c, &(0x7f0000000d80)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r9, 0x40480923, 0x0) ioctl$ADD_NEW_DISK(r9, 0x40140921, &(0x7f0000000e40)={0x0, {0x1, 0x0}, 0x0, 0x6}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000ec0)={'syzkaller1\x00', 0xc201}) write$tun(r10, &(0x7f0000000f00)=ANY=[@ANYBLOB="000086dd05855600080054"], 0xfdef) ioctl$RUN_ARRAY(r9, 0x400c0930, &(0x7f0000000f80)) ioctl$GET_ARRAY_INFO(r9, 0x80480911, &(0x7f0000000fc0)) pwrite64(r9, &(0x7f0000001040)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) ioctl$STOP_ARRAY(r9, 0x932, 0x0) 1m56.910187937s ago: executing program 33 (id=652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x130, 0x11, 0x148, 0x130, 0x0, 0x24c, 0x2a8, 0x2a8, 0x24c, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xff000000, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0xd1}}, @common=@unspec=@owner={{0x34}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0xd, 0x0, 0x8, 'pptp\x00', 'syz0\x00', {0xe}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'macvtap0\x00', 'netdevsim0\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7, 0xe, [0x2, 0x3a, 0x1e, 0x6, 0x30, 0x4, 0x27, 0x37, 0x24, 0x33, 0x23, 0x23, 0x18, 0xa, 0x3b, 0x33], 0x0, 0x5, 0x80000000}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2ec) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000340)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='secret\x00', &(0x7f0000000400)='IaA+7A/AA//+/++\xa5\xd3\x17\xf1AAAAAAAABAAAAAy\xda\xee|\xd9\x0f\aU\"\xab\x94\'d\x1f\xbcG\xf4\x14\xf2v\xf83Z\xaa\xc3)\v{\x16\xb7\x0e\a%\xb1\xf7\xe9\xc5\xa6\xfa\xd4\xd7\xa0\xaa>\xa0\xec\x9a\xc6~^\xc0T\xbdnr\xfb\xa5/B O(_\xebN\x19i\x1d}\xa3\x1f\x99%H\xf6K\xee\x9f\x18\x8d\xe7\x9a\xbd7\xb6uc\x1e\xd4xH\xc4 u\x06\xfa9wK\xc2UI\x8b\x03\x85\xfe\xfc\xf3\x88\xb8\xad\xc5\xe7\xf52\xe9\xd4s[\xa2\xce\xfdn\xb2\x9f\xdfN\xb8\xf1\xe6\xb7\x86\x00\xd4)=\xe1X\xb8\xaf', 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x100000, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8081}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14}, [], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000bc0)={&(0x7f0000000c00), 0xc, &(0x7f0000000c40)={&(0x7f0000000c80)={0x58, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:var_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x58}}, 0x4) r8 = openat$md_new_array(0xffffff9c, &(0x7f0000000d00), 0x1, 0x0) write$md_new_array(r8, &(0x7f0000000d40)={'md', @num=0x0}, 0x3) r9 = openat$md(0xffffff9c, &(0x7f0000000d80)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r9, 0x40480923, 0x0) ioctl$ADD_NEW_DISK(r9, 0x40140921, &(0x7f0000000e40)={0x0, {0x1, 0x0}, 0x0, 0x6}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000ec0)={'syzkaller1\x00', 0xc201}) write$tun(r10, &(0x7f0000000f00)=ANY=[@ANYBLOB="000086dd05855600080054"], 0xfdef) ioctl$RUN_ARRAY(r9, 0x400c0930, &(0x7f0000000f80)) ioctl$GET_ARRAY_INFO(r9, 0x80480911, &(0x7f0000000fc0)) pwrite64(r9, &(0x7f0000001040)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) ioctl$STOP_ARRAY(r9, 0x932, 0x0) 1m42.071064202s ago: executing program 3 (id=698): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x10, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x4855}, 0x8811) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) readv(r0, &(0x7f0000002180)=[{&(0x7f00000009c0)=""/92, 0x5c}, {0x0}, {0x0}, {0x0}], 0x4) 1m40.999512791s ago: executing program 3 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracefs\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='-:p1 ./file0:', 0xd) 1m40.626137969s ago: executing program 3 (id=703): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4008080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) r3 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='source\x00', 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x4, 0x99, &(0x7f0000000400)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='retrans\x00', &(0x7f0000000500)='\x00\x00\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./tracing\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='e:my_read_msr1 msr/read_msr', 0x1b) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$nfs4(0x0, 0x0, 0x0, 0x40000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) pselect6(0x40, &(0x7f00000007c0)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000800)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) write(r5, &(0x7f0000000680)='e:my_read_msr2 msr/read_msr', 0x1b) 1m39.15361756s ago: executing program 3 (id=709): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) 1m37.839102524s ago: executing program 3 (id=715): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000)=0xefbe, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x1000) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="9b773c3773c4"], 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001d80)={'wlan0\x00'}) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)="0005001ac402", 0x6, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x482, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000540)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) mkdir(&(0x7f0000000780)='./sys\x00', 0x0) mount(0x0, &(0x7f00000007c0)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000900)={0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000980)={0x0, 0x0, r6, 0x0, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2000, 0xfffffffe, 0x0, 0xfffffffe, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 1m37.151490504s ago: executing program 3 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000600)={[0x33, 0x790, 0x80000001, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xffff, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x800) 1m22.055241065s ago: executing program 34 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000600)={[0x33, 0x790, 0x80000001, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xffff, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x800) 59.238981044s ago: executing program 6 (id=824): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000280)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="0100000040000000000001000000080000e000000105000100000000000800020005000000ad1c79393a496908bc7aff6ea8d89009ef1005d12f091077b6c7b0973346636c3e0a1da33a5b37cbfe7b22cfadaa3f9024a7b7699cfa7921bb23"], 0x34}}, 0x2404c0c0) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r9, 0x100000000000a3) r10 = syz_io_uring_setup(0x2e4c, &(0x7f0000000440)={0x0, 0x3ae8, 0x2000, 0x1, 0x309, 0x0, r5}, &(0x7f0000000500), 0x0, &(0x7f0000000580)) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0x4d00, 0x10, 0xffeffffd, 0x230, 0x0, r10}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x402, 0x10, 0x8000003, 0x112, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x4000, 0x1, 0x3ac, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x20, 0x4003bfff, 0x299, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626f, 0x800, 0x11, 0x26d}}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffc000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_pidfd_open(0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, r9}}, 0x18) 55.813551973s ago: executing program 6 (id=834): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x301, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x2}]}) 54.879035809s ago: executing program 6 (id=838): mknod(&(0x7f0000000040)='./file0\x00', 0x20, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_rxfh_indir={0x39}}) write(r0, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) creat(&(0x7f00000001c0)='./tracing/uprobe_events\x00', 0x120) 53.549960134s ago: executing program 6 (id=844): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES8, @ANYRES64], 0x50) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x2, 0x0) ioctl$OTPERASE(r0, 0x400c4d19, &(0x7f00000000c0)={0xfff, 0x4, 0x6}) timerfd_create(0x8, 0x0) clock_adjtime(0x2, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200002000000000000000000000008500000041000000850000005000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.679041658s ago: executing program 6 (id=850): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r1 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$md_new_array(r1, &(0x7f0000000180)={'md', @num=0x0}, 0x3) r2 = gettid() timer_create(0x0, &(0x7f0000003b00)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000003b40)) timer_settime(0x0, 0x0, &(0x7f0000003b80)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) msgrcv(0x0, 0x0, 0xfffffffffffffddc, 0x0, 0x1000) syz_open_procfs$namespace(0x0, &(0x7f0000003bc0)='ns/uts\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r3, 0x0, 0x2, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x45facfd65bcc5987) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r3, 0x0, 0x8, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000003c00)='fd/3\x00') ioctl$VT_RESIZEX(r5, 0x560a, 0x0) r6 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000003c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f0000000440)=@str='raid1', 0x5) r7 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000480)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r7, 0x0, 0x0) r8 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='serialize_policy\x00'}, 0x1, 0x0) write$md_sysfs(r8, &(0x7f0000000580)=@dev={'1:', 0x0}, 0x16) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000003a00)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) r9 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000040)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'size\x00'}}, 0x1, 0x0) write$md_sysfs(r9, &(0x7f0000003ac0)=@str='active', 0x6) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f00000001c0)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000080)={0x980900, 0x3, @value=0x2}) 45.734894512s ago: executing program 6 (id=868): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x4c840) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001480)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @link_local}) 30.528045814s ago: executing program 35 (id=868): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x4c840) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001480)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @link_local}) 15.624439335s ago: executing program 7 (id=920): syz_emit_ethernet(0x176, &(0x7f0000000800)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x140, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@dstopts={0x0, 0x9, '\x00', [@ra={0x5, 0x2, 0x7ff}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3e}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x2, 0x2, [0x1, 0x7, 0x6]}}]}, @hopopts={0x0, 0x15, '\x00', [@ra={0x5, 0x2, 0xffb0}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x9b, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6f"}]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 14.746764085s ago: executing program 7 (id=922): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES8, @ANYRES64], 0x50) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x10, 0x2, 0x0) ioctl$OTPERASE(r1, 0x400c4d19, &(0x7f00000000c0)={0xfff, 0x4, 0x6}) timerfd_create(0x8, 0x0) clock_adjtime(0x2, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200002000000000000000000000008500000041000000850000005000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x1, &(0x7f0000000640)=@raw=[@jmp={0x5, 0x1, 0x2, 0x3, 0x7, 0x80, 0xfffffffffffffff0}], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4}, 0x94) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r6, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) listen(r5, 0x3) 13.71112908s ago: executing program 7 (id=923): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 13.109297182s ago: executing program 5 (id=925): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[], 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000940), 0x0, 0x4000801) 12.64071738s ago: executing program 7 (id=928): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xffffffffffffff36, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0xa, 0x3, {0x0, 0x1000000}}]}}, &(0x7f0000000580)=""/196, 0x32, 0xc4, 0x1}, 0x28) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) 10.911230186s ago: executing program 7 (id=934): io_getevents(0x0, 0x2e5, 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000003c0)={0x2, &(0x7f0000000400)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000200025a729bd7000fcdbdf250a000000fe0000010200010008000600fe7f00"], 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe0000010000000008000100000101000800040001"], 0x2c}}, 0x0) timer_create(0x2, &(0x7f0000000800)={0x0, 0x17, 0x1, @thr={&(0x7f0000000740), 0x0}}, &(0x7f0000000880)) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000806b8bbbbbbbbbbaaaaaaaaaa2986dd6d002008001011ff20010000000000000000000000000000ff0200000000000000000000000000014f0000000000001000080001167bb59e9e92fc0720e3d80f8e29658b2456ebe8c3de4de52c62b013ec4378a90a92cf8e51ab7a70ec2e5832ef36183f6ccd14186242daaa6708f31c6a173f3304760d302495eda839e43ccf2e25dd54525d28d8a7ff5e7b6ab2572070e0977169db33be9b65488d08fadedb9ff5297fd7505d92e2c4444eaa3b1d063c03ed4d1f8c1f5560ceab500d4dcb16c4e0a959afb056770a21c4e44f870b794617759acf88717ab898837a"], 0x4a) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x83, "25bbc0834ec51a41c20a4fe34f94ee68e8a02d31450b050da0de2cf8fb33290a33254201c2edebe6725757979253295aae50d41ca164d67cd0b0e95767d50854775dffec166646fafb7241224d7cc33b6063b3d839605dcbd1b9b878f406504103fd7789bacce2575e1493e513fee1830e843e9927fe81d13f01e175a3c3b77ee3d6fc"}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_create_resource$futex(&(0x7f00000008c0)=0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffd, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"}) 10.838976914s ago: executing program 5 (id=935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f00000006c0), 0x56) sendmsg$kcm(r7, &(0x7f0000000700)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)="27030200dc0f14000e00fe000025c10200000006125c", 0x16}, {&(0x7f0000000040)="02db0b9ef1cafdabc0356e8eb692d5ce214549d51f0063d6", 0x18}], 0x2}, 0x4005) 6.259664041s ago: executing program 0 (id=953): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000006580)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000065c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(&(0x7f00000067c0)=@filename='mtd0\x00', &(0x7f0000006800)='./file0\x00', &(0x7f0000006840)='jffs2\x00', 0x0, 0x0) 5.052280934s ago: executing program 2 (id=956): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 3.985441224s ago: executing program 2 (id=957): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0x40001a2) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) truncate(&(0x7f0000000400)='./file0\x00', 0x10001) 3.862060926s ago: executing program 2 (id=958): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2.984132015s ago: executing program 0 (id=959): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 2.886970036s ago: executing program 2 (id=960): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="a5", 0xfdef}], 0x1) 2.851219519s ago: executing program 0 (id=961): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$ptys(0xc, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x300, 0x0, 0x1, 0x2000, 0x2, 0x0, 0x68e04b43, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x20000001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="503bfde51b257f40b3392d504fe4", 0xe}], 0x1) syz_ublk_setup_io_uring(0x735d, &(0x7f0000000740)={0x0, 0x8eb4, 0x8, 0x3, 0xa1, 0x0, r5}, &(0x7f0000000040), &(0x7f00000005c0), &(0x7f0000000600)) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000000bc0)) 1.888632927s ago: executing program 2 (id=962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$tipc(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0x2a, 0x0) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140), &(0x7f0000000180), 0xca, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x40, 0x2, 0x2, 0x3}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000440)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x117) mount(0x0, &(0x7f0000000500)='./my_configfs\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000540)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f00000006c0)='dummy_udc.0', 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x1000}) socket(0x10, 0x803, 0x0) 1.57071557s ago: executing program 5 (id=963): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$ptys(0xc, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x300, 0x0, 0x1, 0x2000, 0x2, 0x0, 0x68e04b43, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x20000001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.509483526s ago: executing program 0 (id=964): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000000500)='X', 0x34000, 0xe0, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.506207826s ago: executing program 7 (id=965): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?', 0x1}], 0x1) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000e80)='X', 0x1}], 0x1) recvfrom(r0, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.349062702s ago: executing program 5 (id=966): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x8100, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/netstat\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, &(0x7f0000000800)) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000840)={[{@nfs_export_on}, {@nfs_export_off}, {@verity_require}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x64, 0x34, 0x64, 0x30, 0x62, 0x36, 0x62], 0x2d, [0x31, 0x62, 0x36, 0x5b], 0x2d, [0x63, 0x35, 0x31, 0x53], 0x2d, [0x33, 0x34, 0x30, 0x64], 0x2d, [0x34, 0x32, 0x62, 0x62, 0x32, 0x37, 0x38, 0x38]}}}]}) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, 0x0) 1.236222574s ago: executing program 0 (id=967): inotify_init1(0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) truncate(&(0x7f0000000400)='./file0\x00', 0x10001) 1.117099026s ago: executing program 2 (id=968): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000006580)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000065c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(&(0x7f00000067c0)=@filename='mtd0\x00', &(0x7f0000006800)='./file0\x00', &(0x7f0000006840)='jffs2\x00', 0x0, 0x0) 319.900278ms ago: executing program 5 (id=969): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 167.001013ms ago: executing program 5 (id=970): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 0s ago: executing program 0 (id=971): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000003f40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): m: syz.0.645 Not tainted syzkaller #0 [ 279.671548][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 279.681718][ T6688] Call Trace: [ 279.685019][ T6688] [ 279.687973][ T6688] dump_stack_lvl+0x188/0x24e [ 279.692959][ T6688] ? show_regs_print_info+0x12/0x12 [ 279.698197][ T6688] ? load_image+0x410/0x410 [ 279.702734][ T6688] ? __might_sleep+0xd0/0xd0 [ 279.707347][ T6688] ? __lock_acquire+0x7ea0/0x7ea0 [ 279.712414][ T6688] should_fail_ex+0x390/0x4c0 [ 279.717127][ T6688] should_failslab+0x5/0x20 [ 279.721653][ T6688] slab_pre_alloc_hook+0x59/0x300 [ 279.726702][ T6688] ? mutex_lock_nested+0x10/0x10 [ 279.731663][ T6688] ? in6_dev_get+0x363/0x410 [ 279.736281][ T6688] ? __ipv6_dev_mc_inc+0x47b/0xb20 [ 279.741420][ T6688] __kmem_cache_alloc_node+0x4f/0x270 [ 279.746830][ T6688] ? __ipv6_dev_mc_inc+0x47b/0xb20 [ 279.751976][ T6688] kmalloc_trace+0x26/0xe0 [ 279.756420][ T6688] __ipv6_dev_mc_inc+0x47b/0xb20 [ 279.761395][ T6688] addrconf_join_solict+0x101/0x180 [ 279.766622][ T6688] ? addrconf_mod_dad_work+0x120/0x120 [ 279.772109][ T6688] ? do_raw_spin_unlock+0x11d/0x230 [ 279.777335][ T6688] __ipv6_dev_ac_inc+0x644/0x820 [ 279.782307][ T6688] ipv6_sock_ac_join+0x4a3/0x6b0 [ 279.787281][ T6688] do_ipv6_setsockopt+0x1c70/0x3c30 [ 279.792522][ T6688] ? sk_dst_reset+0xa0/0xa0 [ 279.797067][ T6688] ? mark_lock+0x94/0x320 [ 279.801431][ T6688] ? __lock_acquire+0x1359/0x7ea0 [ 279.806488][ T6688] ? preempt_schedule+0xbc/0xd0 [ 279.811436][ T6688] ? verify_lock_unused+0x140/0x140 [ 279.816669][ T6688] ? aa_label_sk_perm+0x501/0x6b0 [ 279.821737][ T6688] ? aa_sk_perm+0x8c0/0x8c0 [ 279.826271][ T6688] ? futex_wake+0x426/0x4f0 [ 279.830818][ T6688] ? __fget_files+0x28/0x460 [ 279.835445][ T6688] ? __lock_acquire+0x7ea0/0x7ea0 [ 279.840510][ T6688] ? do_futex+0x2e2/0x320 [ 279.844865][ T6688] ? aa_sk_perm+0x795/0x8c0 [ 279.849396][ T6688] ? __ia32_sys_get_robust_list+0x100/0x100 [ 279.855318][ T6688] ? __fget_files+0x3fc/0x460 [ 279.860033][ T6688] ? aa_sock_opt_perm+0x74/0x100 [ 279.865003][ T6688] ipv6_setsockopt+0x55/0x190 [ 279.869706][ T6688] ? sock_common_recvmsg+0x190/0x190 [ 279.875066][ T6688] __sys_setsockopt+0x2bf/0x3d0 [ 279.879957][ T6688] __x64_sys_setsockopt+0xb1/0xc0 [ 279.885012][ T6688] do_syscall_64+0x4c/0xa0 [ 279.889459][ T6688] ? clear_bhb_loop+0x60/0xb0 [ 279.894176][ T6688] ? clear_bhb_loop+0x60/0xb0 [ 279.898884][ T6688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.904806][ T6688] RIP: 0033:0x7f391839fb19 [ 279.909246][ T6688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.928890][ T6688] RSP: 002b:00007f3919251028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 279.937342][ T6688] RAX: ffffffffffffffda RBX: 00007f3918625fa0 RCX: 00007f391839fb19 [ 279.945344][ T6688] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000005 [ 279.953345][ T6688] RBP: 00007f3918437b70 R08: 0000000000000020 R09: 0000000000000000 [ 279.961344][ T6688] R10: 0000200000001b80 R11: 0000000000000246 R12: 0000000000000000 [ 279.969379][ T6688] R13: 00007f3918626038 R14: 00007f3918625fa0 R15: 00007fff36c01b48 [ 279.977396][ T6688] [ 279.990406][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.092950][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.123885][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.179118][ T6542] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.252130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.291484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.346342][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.353496][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.386483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.446113][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 280.465860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.474666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.496040][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.503226][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.725345][ T5375] device hsr_slave_0 left promiscuous mode [ 280.744694][ T5375] device hsr_slave_1 left promiscuous mode [ 280.773858][ T5375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.789535][ T5375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.806506][ T5375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.823987][ T5375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.841212][ T5375] device bridge_slave_1 left promiscuous mode [ 280.951062][ T5375] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.985927][ T5375] device bridge_slave_0 left promiscuous mode [ 281.055735][ T5375] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.123755][ T6702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.649'. [ 281.191819][ T5375] device veth1_macvtap left promiscuous mode [ 281.209474][ T5375] device veth0_macvtap left promiscuous mode [ 281.228286][ T5375] device veth1_vlan left promiscuous mode [ 281.248566][ T5375] device veth0_vlan left promiscuous mode [ 281.973929][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.983633][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.992426][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.002738][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.010888][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.019978][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.602899][ T5375] team0 (unregistering): Port device team_slave_1 removed [ 282.692158][ T5375] team0 (unregistering): Port device team_slave_0 removed [ 282.765783][ T5375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.837710][ T5375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.397503][ T5375] bond0 (unregistering): Released all slaves [ 283.533525][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.561879][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.582014][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.618409][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.660393][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.661210][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.661845][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.728893][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.729450][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.744319][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.744979][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.768734][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.804225][ T6720] rxe_eth0 speed is unknown, defaulting to 1000 [ 284.110117][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 284.235820][ T6735] Invalid ELF header magic: != ELF [ 285.451103][ T6750] loop2: detected capacity change from 0 to 512 [ 285.464574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.478886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.517825][ T6720] chnl_net:caif_netlink_parms(): no params data found [ 285.559667][ T6542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.650448][ T6750] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.659: Attempting to read directory block (0) that is past i_size (16) [ 285.946957][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.662'. [ 285.972891][ T6750] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 285.987127][ T6750] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 286.046767][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.067736][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.125306][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 286.126720][ T6720] device bridge_slave_0 entered promiscuous mode [ 286.167636][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.200802][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.226024][ T6720] device bridge_slave_1 entered promiscuous mode [ 286.347973][ T6720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.372047][ T6720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.614735][ T6778] trusted_key: encrypted_key: insufficient parameters specified [ 286.768383][ T6720] team0: Port device team_slave_0 added [ 286.900959][ T6720] team0: Port device team_slave_1 added [ 286.993038][ T6778] using random self ethernet address [ 287.222371][ T6778] using random host ethernet address [ 287.352340][ T6785] Config c/1 of g1 needs at least one function. [ 287.372727][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.433188][ T6785] udc dummy_udc.0: failed to start g1: -22 [ 287.449718][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.527492][ T6785] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 287.618172][ T6785] UDC core: g1: couldn't find an available UDC or it's busy [ 287.720538][ T6720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.882127][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.964853][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.142456][ T6720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.215370][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 288.519129][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 288.589541][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.629710][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.946386][ T6720] device hsr_slave_0 entered promiscuous mode [ 289.024656][ T6720] device hsr_slave_1 entered promiscuous mode [ 289.085082][ T6720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.143071][ T6720] Cannot create hsr debugfs directory [ 289.218945][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.260231][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.476651][ T6542] device veth0_vlan entered promiscuous mode [ 289.487896][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.516028][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.562698][ T6542] device veth1_vlan entered promiscuous mode [ 289.698373][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.716461][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.745987][ T6542] device veth0_macvtap entered promiscuous mode [ 289.845080][ T6542] device veth1_macvtap entered promiscuous mode [ 289.951240][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.995086][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.031644][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.045496][ T4347] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 290.055408][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.072677][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.096392][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.133859][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.156567][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.164838][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.206983][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.235709][ T4347] usb 4-1: Using ep0 maxpacket: 16 [ 290.244768][ T4347] usb 4-1: unable to get BOS descriptor or descriptor too short [ 290.253704][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.277695][ T4347] usb 4-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config [ 290.288027][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 290.295468][ T4347] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 290.309266][ T4347] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 290.352622][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.472226][ T4347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.482602][ T6815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.672'. [ 290.501178][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.512295][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.514380][ T4347] usb 4-1: Product: syz [ 290.534295][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.580798][ T4347] usb 4-1: Manufacturer: syz [ 290.585763][ T6542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.622388][ T4347] usb 4-1: SerialNumber: syz [ 290.638686][ T6542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.656921][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.709999][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.755885][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.797192][ T6542] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.815904][ T6542] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.830388][ T6542] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.869740][ T6542] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.028389][ T6720] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 291.083970][ T6720] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 291.142288][ T6720] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 291.213052][ T6720] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 291.327061][ T4605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.368408][ T4605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.434090][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.500237][ T4607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.519153][ T4607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.551129][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 291.646202][ T6720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.728251][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.749101][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.774710][ T6845] md: serialize_policy is only effective for raid1 [ 291.796539][ T6720] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.846683][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.877410][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.912494][ T5375] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.919713][ T5375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.955564][ T6856] md: serialize_policy is only effective for raid1 [ 291.962683][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.001019][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.028551][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.068274][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.075544][ T5399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.121007][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.155823][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.204220][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.242272][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.286604][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.329396][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.364135][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.457897][ T6720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.477927][ T4347] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 292.517111][ T4347] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 292.524919][ T6720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.635060][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.635243][ T4347] usb 4-1: USB disconnect, device number 5 [ 292.676789][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.716035][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.755911][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.816560][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.396081][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.5.682'. [ 293.809839][ T6904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.685'. [ 293.902245][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.921667][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.959258][ T6720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.279707][ T6916] md: serialize_policy is only effective for raid1 [ 295.236033][ T6930] md: serialize_policy is only effective for raid1 [ 295.820409][ T6947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.695'. [ 295.921089][ T6720] device veth0_vlan entered promiscuous mode [ 295.928121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.990614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.034161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.058447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.091861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.119081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.162413][ T6720] device veth1_vlan entered promiscuous mode [ 296.268113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.298591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.349785][ T6720] device veth0_macvtap entered promiscuous mode [ 296.387561][ T6720] device veth1_macvtap entered promiscuous mode [ 296.449710][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.471377][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.510764][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.599405][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.610113][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.620698][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.630687][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.641212][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.653169][ T6720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.686593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 296.847374][ T6965] process 'syz.5.699' launched './file2' with NULL argv: empty string added [ 296.896572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.146412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.235867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.276863][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.328105][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.419485][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.485240][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.510522][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.544405][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.572079][ T6720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.607341][ T6720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.653506][ T6720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.678352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.700100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.745021][ T6720] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.769029][ T6720] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.802146][ T6720] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.812033][ T6720] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.062399][ T4607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.140513][ T4607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.170368][ T4607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.189606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.215301][ T4607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.281075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 299.422638][ T7003] loop6: detected capacity change from 0 to 128 [ 299.596240][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.5.708'. [ 299.634705][ T7006] sctp: [Deprecated]: syz.0.710 (pid 7006) Use of int in maxseg socket option. [ 299.634705][ T7006] Use struct sctp_assoc_value instead [ 299.728784][ T7010] netlink: 236 bytes leftover after parsing attributes in process `syz.6.653'. [ 300.052192][ T7007] netlink: 'syz.3.709': attribute type 3 has an invalid length. [ 300.066237][ T7007] netlink: 3 bytes leftover after parsing attributes in process `syz.3.709'. [ 300.665637][ T7020] md: md0 stopped. [ 300.778645][ T7027] Bluetooth: MGMT ver 1.22 ûå. %2¶`BM“Ìjˆzƒ@üZ®ÜŸ·G,.jÏV„ݦZå—aí–SÀîDõžôS€Ëˆ¿˜A Ð6]Z¸p4‰ã(GÀæå¶úÔ¯Sv¨KñXiö9#;ÿRûI Ÿ„dàŽõô„‰‰âTôcŠø¦ zÆWõÊ¿QTQ @Z°‚Ñë¾*}«ûPp´Êašë ÞN‡ #ñQÜ*f])kÇÅÆXêŒ|U¯t–û–^åbÜ;*ZÜVŽbDTdƒ±Ù4͉†#vß36¸ø°7mjâç•oýâ*Fcæ#ØQeiM£izço„CíçÇ£Nt;G?@®šú„ ÔOù4>›W¸2½Y͈!]«¨Jɉô R©<;Ú^m°o]Ù÷9#4\pJ’œê|Š(i!Ó±°¢5ÇÈØ)Yù“oÄ¥QXlZ<ñ/”JËÞ%ÓŠÎù‡ýA”sÑ@€uL<Æ‹Þ\?µ'¨[’·ûuLëfÅ‚NØTesqɸá](íÂþû­-ä¶ÐB£)ÔÓʾ‰ße+p1N’e¨êÒºò‘q»Aý8¬„MÙÜRdÝ0ý~íÑUÆ«U¶îùw3ç!S“«8Ør9gX¬/ÆÏcóå %O‚*ÄÍ,5î¡¿UŸ¼~”­Æ»üŽ'ÛúðUUF›ã¡ß=»AO¨Ø5ãôëàd P,x“P,!LÈlj2‘g½Ýààæ5€<¿OÌ’£wóNY- þˆ- Rõ%¦WØ®û‰¶RšW!m$ùM>2xx½HæôŒï¹ ôWt ==ï6€•@F)ºH,–9B†´µ¬œ®Ùö¨B<J.ZÇñ”@ õiÐ%uípxöˆß;°u¤µøþžƒÒIr {8l•f@T‰’k`Æ3rZvõRITò-5‰_b¿§‚Ò“ˆvôxa‡^ ËBKsAÒU|ÿöð¼‰ØwJ((zÙAAm¬IAÓ? ø“’†eh )Ñ À½Ö—ËŠ4âVLÕ³»”I£“ü=¸”Î~2£¡CÇ ¬Ê%у62k'ˆeŸ&DvÅf`˜ 1ûð|n6Ȳcìoõ»# |aî—]³õW'êP´¡¬ÀX±5 ˜ÿˆÞtôŽ×âx®¾ý©HxN£1óîúz2N^¹v(Ö-?Þ½%‚Š§JN õtˆTZaYDEG‘<€²Þ†¨ŠÒªÖI¤s–<õß“UÊçV·ÿ†«ò±ÈG“ Ôqjž5»ó–ƒb³ò%ó›KiÔfaw¥ñXÓÖ=^.¡Y¶ æ¾£ Å;éT——V¯T˜‚ Ó†ñ,¦ú“‰MY ¾«™¶ùn6éñ<Äbí\îCc$+Åêµ }‹µOÑc¨øðC¾Û« ¸Ü‘–´ æ* ?w dÕSydg%¶7]°à8jHWÙ?çvåÈyöNDwVõE¶0\ÍEŸ‚ÚtÒ…6“QµÀ½V˜ t’{Ú‰þ/®˜Šc€Y…’r&œ·DÙu±D’ÓãÌhZ9ÁFØÀWËuȆ[>H”õøoõÏŽ^à é™Ê H3‚HÖ0_üYøÍÕ­gÝ_Ö‰E±®…xM²­ ÙÀþ!€áå/Œ Ɇô2œßÈLÍšÞs[©›·A¢I3Æ¡ŽêÿÂ`fòr·_T ~W—®üì¿G"\Ÿ»„‰²¸ÛNä|¢ð?Í,Œð̇¤çà¨ýüáÔe„-/'¹¾/z(k…¸ˆ¸ßÏÎæ |t¬Ñq°Çü vZ—x4ñ´®qïS‹3ëc˜Ø³nb¿C~LB½^YÚÑDó‰#›{â°B¥tþëû!‹‚ ”Ó€÷=a ù22ÚšDºt—t<æ~z¼tF´ð}Ÿ™Ã¶€NjÄ6¦‚=§—t)¬5Ðë¾SëTr?3Ä S‡W’É#ÇkªˆÏ™Zø[âÅus©Ô°ÎŸK¦;¾¹ĆÖW±…·? Êzä…ɘWëYÖ~k|¯ ϪÍk@`ú[ÓÚÚúßø•uèöà$?y ¸ñ†<ñÂlúšïðŽr+¡c& ¸¼ Û$¡2~; mAÿ×Ñ|H–ÞÉ«))²‰JwË°iœHÛGb[š… (ÂÖªW5N*s(@S#rý'¿ZÍ[N‡Ù}Çe¸ë úÉ9[H [öäOvñ*Ò>4£>±JÍ䙦JI$<³ƒØÀŠ¾CJ²šJ à=4üuR]ªQÛpk HïA.[ 4ÏaCÚ®ì/ŒÇpk‘‡]ýP[6âøØPhµaouü-cµ0Î>T®jdÎÌGI¨£ZÿT ù‹k7*YTHÒÑ~“1ñŸiz»›[mby˜ÿFã Û–‹ãŸgö0@òIt°Œsç|±•¦6Ú‹ŸdhCɆ^žßX–¬êtw¦HQ{:@NØ.Nb¥¼Q 0s=ÆN¯M ²i™A­îWŽlï-´¢£–JU÷³Sƒ¹¾4»„À8½ïz7“³­U±¤sO×høùÐ}.oIr¼ I>cTXõùþ6µyÂÏb_±˜¸or É3”e¯Œ¤ÞÕ!\Í<ï~û#kµÕŒÖÆÇVÙ¾±'nªñé|'Þl ÂKø¦CÒ´rð3~·ú1|ijúû·wǾÈüÿ4ÁÁcãÌÙHe6JUÕ» œpçAa6)Šm6@D‹mb á§>:NzÏ#Û>F“ä|µn€yÊ‹R¥õ=çïv+Fä’ˆ†Ùm‘Tdäbåê#S¿M×e>ûêžæô‚ßÅÓh‹˜ "|˜ (#ÃN¹uÅëÃ5ú­Õ^Ä.ÜȺ¡“YV “C×±î²_P‹rXiÀŽ6Æ‹±^äWÜo2Ò—ô*ÃÀµàG”+u)rIV„órÂQçöòýµÝî}0ÅýûÄh©‡_Öì…áW=ÄN\~îƲ’]´C“›ïôùÂ\L3-,—oÊu:G3•FËÞŽ•ÓúR .ýU»hq5ã—ÈÓÿšj4õDÜù·Û½š…¤TºÕ¶¨€¬ÌåÁ@9Ïönš6\6ïÈ ùbTÍÝ°#_–q Õ7í˹Ž=þNÒRÁÑv(}} ®G®Xr^);€Ðþm¬›’šO)½>c³Á!Ì „ÏkÕ 4°ß+ Û#Àiê.ÝÄÒ^“çâó%cXL¡U8a¯øy°¼ÓØj!@©9OµŒU(æGßuQÐÐÂË¿8ݶÈÈ(gíIÐiJáès!mÿ‹™ûÆo(.QT½gß<Ù™»”C¶î\ÌñùæúœBéX`qqPÆÿKËW™½#FéwµÎ3êe7wÅ‘ðŸ¨Í"# 1 [ 317.138739][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 317.147155][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 317.158203][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.167583][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 317.174897][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.185537][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xfb04 instead [ 317.212464][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 317.224468][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 317.235758][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x1cf0 instead [ 317.246433][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xfb04 instead [ 317.257087][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 317.267888][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 317.278568][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x1cf0 instead [ 317.289857][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xfb04 instead [ 317.315449][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 317.352760][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 317.400847][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x1cf0 instead [ 317.423440][ T7233] rxe_eth0 speed is unknown, defaulting to 1000 [ 317.474865][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xfb04 instead [ 317.525283][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 317.580529][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 317.642372][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x1cf0 instead [ 317.685366][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xfb04 instead [ 317.735227][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 317.822922][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 317.878552][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x1cf0 instead [ 317.939942][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xfb04 instead [ 317.985511][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 318.044463][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 318.105261][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x1cf0 instead [ 318.136083][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xfb04 instead [ 318.193267][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 318.215393][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 318.279648][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x1cf0 instead [ 318.333768][ T7233] chnl_net:caif_netlink_parms(): no params data found [ 318.375392][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xfb04 instead [ 318.456263][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 318.521161][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 318.593018][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x1cf0 instead [ 318.722755][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xfb04 instead [ 318.782351][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 318.815282][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 318.865260][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x1cf0 instead [ 318.900505][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xfb04 instead [ 318.935340][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 318.985297][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 319.023670][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x1cf0 instead [ 319.093219][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.152551][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xfb04 instead [ 319.236277][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.245383][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 319.253889][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 319.265280][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 319.296967][ T7233] device bridge_slave_0 entered promiscuous mode [ 319.317335][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x1cf0 instead [ 319.347679][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.354900][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.424192][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xfb04 instead [ 319.436194][ T7233] device bridge_slave_1 entered promiscuous mode [ 319.532421][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 319.620795][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 319.658716][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.678039][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x1cf0 instead [ 319.775282][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xfb04 instead [ 319.817758][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 319.907006][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.925347][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 320.595195][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x1cf0 instead [ 320.614726][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xfb04 instead [ 320.645247][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 320.715349][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 320.759639][ T7288] md: serialize_policy is only effective for raid1 [ 320.785404][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x1cf0 instead [ 320.802765][ T7233] team0: Port device team_slave_0 added [ 320.835883][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xfb04 instead [ 320.858939][ T7233] team0: Port device team_slave_1 added [ 320.918113][ T7298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.766'. [ 320.955330][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 320.991778][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.067963][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 321.095446][ T7293] md: serialize_policy is only effective for raid1 [ 321.126877][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.145229][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x1cf0 instead [ 321.205206][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.249767][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xfb04 instead [ 321.267294][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.274289][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.292246][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 321.336089][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 321.385057][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 321.425224][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1cf0 instead [ 321.465978][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xfb04 instead [ 321.466449][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.522386][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 321.565415][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 321.615236][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x1cf0 instead [ 321.665259][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xfb04 instead [ 322.415263][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 322.448231][ T7233] device hsr_slave_0 entered promiscuous mode [ 322.474775][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 322.486223][ T7233] device hsr_slave_1 entered promiscuous mode [ 322.505218][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x1cf0 instead [ 322.516860][ T7233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.524452][ T7233] Cannot create hsr debugfs directory [ 322.545246][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xfb04 instead [ 322.580819][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 322.609897][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 322.655194][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x1cf0 instead [ 322.673126][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xfb04 instead [ 322.742943][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 322.753866][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 322.775889][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x1cf0 instead [ 322.806684][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xfb04 instead [ 322.818557][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 322.855205][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 322.905648][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x1cf0 instead [ 322.950150][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xfb04 instead [ 322.986691][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 323.045325][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 323.095817][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x1cf0 instead [ 323.125308][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xfb04 instead [ 323.153675][ T7233] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 323.176340][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 323.215357][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 323.228613][ T7233] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 323.255505][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x1cf0 instead [ 323.272687][ T7233] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 323.285433][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xfb04 instead [ 323.325421][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 323.340805][ T7233] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 323.363850][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 323.376424][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x1cf0 instead [ 323.405585][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 323.415507][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xfb04 instead [ 323.456344][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 323.517132][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 323.569678][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x1cf0 instead [ 323.636473][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xfb04 instead [ 323.679626][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 323.703347][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.711723][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 323.736223][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.743813][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x1cf0 instead [ 323.744224][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.784551][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xfb04 instead [ 323.805321][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 323.842653][ T7233] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.855238][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 323.879524][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x1cf0 instead [ 323.890861][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.909053][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.917263][ T7190] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xfb04 instead [ 323.917321][ T7190] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 323.917331][ T7190] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 324.023151][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.030363][ T4727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.098018][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.122346][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.150595][ T7338] ubi: mtd0 is already attached to ubi0 [ 324.159821][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.203403][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.210644][ T4727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.224752][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.295228][ T7049] Set syz0 is full, maxelem 65536 reached [ 324.754232][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.006046][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.222511][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.287871][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.366919][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.416124][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.455886][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.485369][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 325.638690][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.781393][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.959958][ T7233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.116113][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.599394][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 327.855992][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 327.856180][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 327.872893][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.352355][ T7387] ubi: mtd0 is already attached to ubi0 [ 329.036543][ T7413] FAULT_INJECTION: forcing a failure. [ 329.036543][ T7413] name failslab, interval 1, probability 0, space 0, times 0 [ 329.145539][ T7413] CPU: 1 PID: 7413 Comm: syz.6.790 Not tainted syzkaller #0 [ 329.152902][ T7413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 329.162987][ T7413] Call Trace: [ 329.166291][ T7413] [ 329.169246][ T7413] dump_stack_lvl+0x188/0x24e [ 329.170152][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 329.174040][ T7413] ? show_regs_print_info+0x12/0x12 [ 329.187523][ T7413] ? load_image+0x410/0x410 [ 329.192098][ T7413] ? __might_sleep+0xd0/0xd0 [ 329.193468][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.196700][ T7413] ? __lock_acquire+0x7ea0/0x7ea0 [ 329.196736][ T7413] should_fail_ex+0x390/0x4c0 [ 329.196761][ T7413] should_failslab+0x5/0x20 [ 329.219075][ T7413] slab_pre_alloc_hook+0x59/0x300 [ 329.224142][ T7413] ? __request_module+0x338/0xa00 [ 329.229210][ T7413] __kmem_cache_alloc_node+0x4f/0x270 [ 329.234626][ T7413] ? __request_module+0x338/0xa00 [ 329.239694][ T7413] __kmalloc_node_track_caller+0xa0/0x240 [ 329.245459][ T7413] kstrdup+0x37/0x70 [ 329.249398][ T7413] __request_module+0x338/0xa00 [ 329.254287][ T7413] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 329.260314][ T7413] ? copy_regset_to_user+0x1f0/0x1f0 [ 329.265658][ T7413] ? slab_free_freelist_hook+0x133/0x1b0 [ 329.271354][ T7413] ? rcu_is_watching+0x11/0xa0 [ 329.271866][ T7233] device veth0_vlan entered promiscuous mode [ 329.276137][ T7413] ? nvmf_dev_write+0x1acc/0x2810 [ 329.276165][ T7413] ? __kmem_cache_free+0xb6/0x200 [ 329.276189][ T7413] nvmf_dev_write+0x1b28/0x2810 [ 329.276240][ T7413] ? nvmf_host_put+0x190/0x190 [ 329.302028][ T7413] ? end_current_label_crit_section+0x14b/0x170 [ 329.308314][ T7413] ? fsnotify_perm+0x5a/0x550 [ 329.313027][ T7413] ? security_file_permission+0x75/0xa0 [ 329.318611][ T7413] ? nvmf_host_put+0x190/0x190 [ 329.323495][ T7413] vfs_write+0x2dc/0x9a0 [ 329.327763][ T7413] ? file_end_write+0x250/0x250 [ 329.332640][ T7413] ? __fget_files+0x28/0x460 [ 329.337263][ T7413] ? __fget_files+0x3fc/0x460 [ 329.341979][ T7413] ? __fdget_pos+0x1d4/0x360 [ 329.346592][ T7413] ? ksys_write+0x70/0x260 [ 329.351053][ T7413] ksys_write+0x14d/0x260 [ 329.355396][ T7413] ? __ia32_sys_read+0x80/0x80 [ 329.360453][ T7413] ? lockdep_hardirqs_on+0x94/0x140 [ 329.365713][ T7413] do_syscall_64+0x4c/0xa0 [ 329.370157][ T7413] ? clear_bhb_loop+0x60/0xb0 [ 329.374858][ T7413] ? clear_bhb_loop+0x60/0xb0 [ 329.379565][ T7413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.385484][ T7413] RIP: 0033:0x7f783cb9fb19 [ 329.390264][ T7413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.409894][ T7413] RSP: 002b:00007f783da47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 329.418337][ T7413] RAX: ffffffffffffffda RBX: 00007f783ce25fa0 RCX: 00007f783cb9fb19 [ 329.426339][ T7413] RDX: 000000000000002b RSI: 0000200000000180 RDI: 0000000000000004 [ 329.434336][ T7413] RBP: 00007f783cc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 329.442328][ T7413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.450322][ T7413] R13: 00007f783ce26038 R14: 00007f783ce25fa0 R15: 00007ffe3d7a9aa8 [ 329.458337][ T7413] [ 329.605233][ T7425] loop2: detected capacity change from 0 to 512 [ 329.622469][ T7413] nvme_fabrics: missing parameter 'nqn=%s' [ 329.773078][ T7425] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.793: Attempting to read directory block (0) that is past i_size (16) [ 329.802076][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 329.851189][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 329.910209][ T7425] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 330.024984][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.093679][ T7425] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 330.161458][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.294935][ T7233] device veth1_vlan entered promiscuous mode [ 331.191542][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.260756][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.459629][ T7233] device veth0_macvtap entered promiscuous mode [ 331.735162][ T7233] device veth1_macvtap entered promiscuous mode [ 332.137696][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 332.228672][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.341550][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.463826][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.582675][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.780204][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.808805][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.875867][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.900175][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.931161][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.963295][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.989938][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.141748][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.271181][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.346759][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.473677][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.579195][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.729594][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.779850][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.796098][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.806958][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.817087][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.828735][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.840537][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.840558][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.841970][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.868987][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.912073][ T5375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.990067][ T7233] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.990102][ T7233] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.990128][ T7233] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.990153][ T7233] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.212342][ T5375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.212363][ T5375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.212609][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 334.441727][ T26] audit: type=1326 audit(1793739310.381:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.0.795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391839fb19 code=0x7ffc0000 [ 334.457591][ T4607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.504591][ T4607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.536194][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 334.718626][ T26] audit: type=1326 audit(1793739310.381:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.0.795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391839fb19 code=0x7ffc0000 [ 334.751765][ T26] audit: type=1326 audit(1793739310.381:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.0.795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f391839fb19 code=0x7ffc0000 [ 334.848487][ T26] audit: type=1326 audit(1793739310.381:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.0.795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391839fb19 code=0x7ffc0000 [ 334.955315][ T26] audit: type=1326 audit(1793739310.381:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.0.795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391839fb19 code=0x7ffc0000 [ 335.056392][ T26] audit: type=1326 audit(1793739310.411:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.0.795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f391839fb19 code=0x7ffc0000 [ 335.150497][ T26] audit: type=1326 audit(1793739310.411:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.0.795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391839fb19 code=0x7ffc0000 [ 335.225236][ T26] audit: type=1326 audit(1793739310.411:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.0.795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391839fb19 code=0x7ffc0000 [ 335.315236][ T26] audit: type=1326 audit(1793739310.411:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.0.795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f391839fb19 code=0x7ffc0000 [ 335.425192][ T26] audit: type=1326 audit(1793739310.651:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.0.795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391839fb19 code=0x7ffc0000 [ 335.528242][ T7490] loop2: detected capacity change from 0 to 512 [ 335.655067][ T7490] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.805: Attempting to read directory block (0) that is past i_size (16) [ 335.740295][ T7490] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 335.786158][ T7490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 336.682296][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 336.782110][ T7514] Bluetooth: MGMT ver 1.22 [ 339.029629][ T7550] Illegal XDP return value 4294967274 on prog (id 58) dev N/A, expect packet loss! [ 339.937117][ T7572] nvme_fabrics: missing parameter 'nqn=%s' [ 343.584227][ T7609] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 344.894848][ T7626] FAULT_INJECTION: forcing a failure. [ 344.894848][ T7626] name failslab, interval 1, probability 0, space 0, times 0 [ 344.963304][ T7626] CPU: 0 PID: 7626 Comm: syz.0.842 Not tainted syzkaller #0 [ 344.970660][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 344.980744][ T7626] Call Trace: [ 344.984046][ T7626] [ 344.986997][ T7626] dump_stack_lvl+0x188/0x24e [ 344.991713][ T7626] ? show_regs_print_info+0x12/0x12 [ 344.996957][ T7626] ? load_image+0x410/0x410 [ 345.001508][ T7626] ? __might_sleep+0xd0/0xd0 [ 345.006122][ T7626] ? __lock_acquire+0x7ea0/0x7ea0 [ 345.011193][ T7626] should_fail_ex+0x390/0x4c0 [ 345.015913][ T7626] should_failslab+0x5/0x20 [ 345.020442][ T7626] slab_pre_alloc_hook+0x59/0x300 [ 345.025498][ T7626] ? jffs2_sum_init+0xb3/0x210 [ 345.030284][ T7626] __kmem_cache_alloc_node+0x4f/0x270 [ 345.035679][ T7626] ? jffs2_sum_init+0xb3/0x210 [ 345.040462][ T7626] __kmalloc+0xa3/0x240 [ 345.044725][ T7626] jffs2_sum_init+0xb3/0x210 [ 345.049338][ T7626] jffs2_do_mount_fs+0x722/0x22b0 [ 345.054401][ T7626] ? __raw_spin_lock_init+0x41/0x100 [ 345.059737][ T7626] jffs2_do_fill_super+0x551/0xc50 [ 345.064877][ T7626] ? jffs2_reconfigure+0x310/0x310 [ 345.070009][ T7626] mtd_get_sb+0xcb/0x2b0 [ 345.074269][ T7626] ? mtd_get_sb_by_nr+0x7c/0xa0 [ 345.079138][ T7626] get_tree_mtd+0x5e2/0x760 [ 345.083657][ T7626] ? jffs2_reconfigure+0x310/0x310 [ 345.088797][ T7626] ? mtd_proc_show+0x270/0x270 [ 345.093590][ T7626] ? apparmor_capable+0x12c/0x190 [ 345.098640][ T7626] ? bpf_lsm_capable+0x5/0x10 [ 345.103344][ T7626] ? security_capable+0x85/0xb0 [ 345.108261][ T7626] vfs_get_tree+0x88/0x270 [ 345.112724][ T7626] do_new_mount+0x247/0xa50 [ 345.117259][ T7626] __se_sys_mount+0x2e3/0x3d0 [ 345.121968][ T7626] ? __x64_sys_mount+0xc0/0xc0 [ 345.126767][ T7626] ? lockdep_hardirqs_on+0x94/0x140 [ 345.131993][ T7626] ? __x64_sys_mount+0x1c/0xc0 [ 345.136777][ T7626] do_syscall_64+0x4c/0xa0 [ 345.141218][ T7626] ? clear_bhb_loop+0x60/0xb0 [ 345.145920][ T7626] ? clear_bhb_loop+0x60/0xb0 [ 345.150621][ T7626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.156539][ T7626] RIP: 0033:0x7f391839fb19 [ 345.160979][ T7626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.180609][ T7626] RSP: 002b:00007f3919251028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 345.189047][ T7626] RAX: ffffffffffffffda RBX: 00007f3918625fa0 RCX: 00007f391839fb19 [ 345.197043][ T7626] RDX: 0000200000006840 RSI: 0000200000006800 RDI: 00002000000067c0 [ 345.205034][ T7626] RBP: 00007f3918437b70 R08: 0000000000000000 R09: 0000000000000000 [ 345.213023][ T7626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.221015][ T7626] R13: 00007f3918626038 R14: 00007f3918625fa0 R15: 00007fff36c01b48 [ 345.230696][ T7626] [ 345.308234][ T7633] ubi: mtd0 is already attached to ubi0 [ 345.794597][ T7626] jffs2: warning: (7626) jffs2_sum_init: Can't allocate buffer for writing out summary information! [ 345.808361][ T7630] nvme_fabrics: missing parameter 'nqn=%s' [ 346.824155][ T7649] loop5: detected capacity change from 0 to 128 [ 347.848800][ T7656] netlink: 236 bytes leftover after parsing attributes in process `syz.5.848'. [ 348.402008][ T4557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.647465][ T4557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.818838][ T4557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.009324][ T4557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.071325][ T7673] md: serialize_policy is only effective for raid1 [ 349.310736][ T7684] nvme_fabrics: missing parameter 'nqn=%s' [ 350.948969][ T7708] loop5: detected capacity change from 0 to 128 [ 351.611009][ T7717] netlink: 236 bytes leftover after parsing attributes in process `syz.5.861'. [ 354.159419][ T7745] bridge0: port 3(netdevsim0) entered blocking state [ 354.192579][ T7745] bridge0: port 3(netdevsim0) entered disabled state [ 354.247659][ T7745] device netdevsim0 entered promiscuous mode [ 354.273194][ T7745] bridge0: port 3(netdevsim0) entered blocking state [ 354.280511][ T7745] bridge0: port 3(netdevsim0) entered forwarding state [ 354.678140][ T7758] nvme_fabrics: missing parameter 'nqn=%s' [ 354.684227][ T7758] FAULT_INJECTION: forcing a failure. [ 354.684227][ T7758] name fail_futex, interval 1, probability 0, space 0, times 0 [ 354.757105][ T7758] CPU: 1 PID: 7758 Comm: syz.2.871 Not tainted syzkaller #0 [ 354.764492][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 354.774637][ T7758] Call Trace: [ 354.777910][ T7758] [ 354.780830][ T7758] dump_stack_lvl+0x188/0x24e [ 354.785617][ T7758] ? show_regs_print_info+0x12/0x12 [ 354.790892][ T7758] ? load_image+0x410/0x410 [ 354.795618][ T7758] ? nvmf_dev_write+0x17a/0x2810 [ 354.800637][ T7758] should_fail_ex+0x390/0x4c0 [ 354.805381][ T7758] get_futex_key+0x1a6/0xe70 [ 354.810050][ T7758] ? futex_setup_timer+0xc0/0xc0 [ 354.815031][ T7758] futex_wake+0x123/0x4f0 [ 354.819375][ T7758] ? futex_wake_mark+0x150/0x150 [ 354.824340][ T7758] ? fsnotify_perm+0x5a/0x550 [ 354.829102][ T7758] ? file_end_write+0xd8/0x250 [ 354.833944][ T7758] ? vfs_write+0x777/0x9a0 [ 354.838353][ T7758] do_futex+0x2e2/0x320 [ 354.842503][ T7758] ? file_end_write+0x250/0x250 [ 354.847349][ T7758] ? __ia32_sys_get_robust_list+0x100/0x100 [ 354.853242][ T7758] __se_sys_futex+0x381/0x410 [ 354.857918][ T7758] ? __x64_sys_futex+0xf0/0xf0 [ 354.862694][ T7758] ? __x64_sys_futex+0x1d/0xf0 [ 354.867463][ T7758] do_syscall_64+0x4c/0xa0 [ 354.871886][ T7758] ? clear_bhb_loop+0x60/0xb0 [ 354.876667][ T7758] ? clear_bhb_loop+0x60/0xb0 [ 354.881347][ T7758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.887261][ T7758] RIP: 0033:0x7f887019fb19 [ 354.891676][ T7758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.911284][ T7758] RSP: 002b:00007f886e3f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 354.919721][ T7758] RAX: ffffffffffffffda RBX: 00007f8870425fa8 RCX: 00007f887019fb19 [ 354.927699][ T7758] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8870425fac [ 354.935675][ T7758] RBP: 00007f8870425fa0 R08: 0025ed08a2665c6c R09: 0000000000000000 [ 354.943745][ T7758] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 354.951770][ T7758] R13: 00007f8870426038 R14: 00007ffda995bb20 R15: 00007ffda995bc08 [ 354.959766][ T7758] [ 355.694844][ T7777] loop0: detected capacity change from 0 to 128 [ 355.941766][ T7787] netlink: 236 bytes leftover after parsing attributes in process `syz.0.876'. [ 365.186365][ T7287] syz.6.764 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 365.197696][ T7287] CPU: 1 PID: 7287 Comm: syz.6.764 Not tainted syzkaller #0 [ 365.205016][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 365.215092][ T7287] Call Trace: [ 365.218390][ T7287] [ 365.221321][ T7287] dump_stack_lvl+0x188/0x24e [ 365.226000][ T7287] ? ___ratelimit+0x14e/0x610 [ 365.230663][ T7287] ? show_regs_print_info+0x12/0x12 [ 365.235846][ T7287] ? load_image+0x410/0x410 [ 365.240330][ T7287] ? ___ratelimit+0x474/0x610 [ 365.244994][ T7287] ? radix_tree_cpu_dead+0x160/0x160 [ 365.250288][ T7287] dump_header+0xd8/0x820 [ 365.254629][ T7287] oom_kill_process+0x361/0x550 [ 365.259583][ T7287] out_of_memory+0xe25/0x1220 [ 365.264305][ T7287] ? mutex_lock_nested+0x10/0x10 [ 365.269260][ T7287] ? unregister_oom_notifier+0x20/0x20 [ 365.274716][ T7287] mem_cgroup_out_of_memory+0x2c0/0x390 [ 365.280375][ T7287] ? mem_cgroup_oom_trylock+0x210/0x210 [ 365.285920][ T7287] ? do_raw_spin_unlock+0x11d/0x230 [ 365.291131][ T7287] try_charge_memcg+0xc9d/0x17c0 [ 365.296102][ T7287] ? percpu_ref_put+0x180/0x180 [ 365.300955][ T7287] ? get_mem_cgroup_from_mm+0x34/0x290 [ 365.306423][ T7287] charge_memcg+0x117/0x3b0 [ 365.310955][ T7287] ? __mem_cgroup_charge+0x80/0x80 [ 365.316114][ T7287] ? get_mem_cgroup_from_mm+0x34/0x290 [ 365.321602][ T7287] ? get_mem_cgroup_from_mm+0x34/0x290 [ 365.327123][ T7287] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 365.332701][ T7287] __mem_cgroup_charge+0x21/0x80 [ 365.337665][ T7287] shmem_add_to_page_cache+0x8d7/0x1c90 [ 365.343308][ T7287] ? __filemap_get_folio+0x10f/0xde0 [ 365.348626][ T7287] ? __filemap_get_folio+0x10f/0xde0 [ 365.353913][ T7287] ? put_page+0x270/0x270 [ 365.358272][ T7287] ? mark_lock+0x94/0x320 [ 365.362972][ T7287] shmem_get_folio_gfp+0x1663/0x35e0 [ 365.368284][ T7287] ? __lock_acquire+0x7ea0/0x7ea0 [ 365.373637][ T7287] shmem_fault+0x1b6/0x790 [ 365.378085][ T7287] ? shmem_fallocate+0x1050/0x1050 [ 365.383226][ T7287] ? filemap_map_pages+0x1ae/0x11e0 [ 365.388484][ T7287] ? filemap_read_folio+0x7a0/0x7a0 [ 365.393726][ T7287] ? count_memcg_event_mm+0x8a/0x3c0 [ 365.399124][ T7287] __do_fault+0x13b/0x4e0 [ 365.403490][ T7287] ? handle_mm_fault+0x2600/0x3d40 [ 365.408692][ T7287] handle_mm_fault+0x2610/0x3d40 [ 365.413731][ T7287] ? numa_migrate_prep+0x250/0x250 [ 365.418862][ T7287] __get_user_pages+0x40d/0xec0 [ 365.423819][ T7287] ? populate_vma_page_range+0x2b0/0x2b0 [ 365.429477][ T7287] ? up_write+0x1b6/0x410 [ 365.433888][ T7287] ? __generic_file_write_iter+0x148/0x2a0 [ 365.439725][ T7287] ? get_dump_page+0xee/0x670 [ 365.444440][ T7287] ? down_read_killable+0x1cc/0x340 [ 365.449654][ T7287] get_dump_page+0x18c/0x670 [ 365.454255][ T7287] ? fault_in_readable+0x1f0/0x1f0 [ 365.459399][ T7287] ? dump_user_range+0x54b/0x7b0 [ 365.464365][ T7287] ? iov_iter_bvec+0x4a/0x1f0 [ 365.469067][ T7287] dump_user_range+0x128/0x7b0 [ 365.473841][ T7287] ? dump_skip+0x40/0x40 [ 365.478135][ T7287] elf_core_dump+0x30ca/0x3630 [ 365.483026][ T7287] ? load_elf_binary+0x2820/0x2820 [ 365.488148][ T7287] ? dump_vma_snapshot+0xaea/0xe40 [ 365.493264][ T7287] ? verify_lock_unused+0x140/0x140 [ 365.498492][ T7287] ? __lock_acquire+0x7ea0/0x7ea0 [ 365.503532][ T7287] ? mas_next_entry+0xe03/0xe90 [ 365.508482][ T7287] ? rcu_read_lock_any_held+0xb0/0x130 [ 365.514027][ T7287] ? 0xffffffffff600000 [ 365.518180][ T7287] ? getname_kernel+0x142/0x2f0 [ 365.523038][ T7287] do_coredump+0x1702/0x25c0 [ 365.527672][ T7287] ? nfs_stat_to_errno+0x170/0x170 [ 365.532830][ T7287] ? lock_chain_count+0x20/0x20 [ 365.537698][ T7287] ? _raw_spin_unlock_irq+0x1f/0x40 [ 365.542915][ T7287] ? lockdep_hardirqs_on+0x94/0x140 [ 365.548230][ T7287] get_signal+0x1093/0x1340 [ 365.552927][ T7287] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 365.558926][ T7287] arch_do_signal_or_restart+0xc4/0x1310 [ 365.564649][ T7287] ? get_sigframe_size+0x10/0x10 [ 365.569597][ T7287] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 365.575613][ T7287] ? exit_to_user_mode_loop+0x3b/0x110 [ 365.581171][ T7287] exit_to_user_mode_loop+0x70/0x110 [ 365.588129][ T7287] exit_to_user_mode_prepare+0xee/0x180 [ 365.593686][ T7287] irqentry_exit_to_user_mode+0x5/0x30 [ 365.599514][ T7287] exc_page_fault+0x88/0x100 [ 365.604224][ T7287] asm_exc_page_fault+0x22/0x30 [ 365.609086][ T7287] RIP: 0033:0x7f783ca54db7 [ 365.613541][ T7287] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 22 24 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 365.633500][ T7287] RSP: 002b:00007f783da28120 EFLAGS: 00010202 [ 365.639569][ T7287] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f783cb9fb19 [ 365.647538][ T7287] RDX: 00007f783da28140 RSI: 00007f783da28270 RDI: 000000000000000b [ 365.655507][ T7287] RBP: 00007f783cc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 365.663474][ T7287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 365.671446][ T7287] R13: 00007f783ce26038 R14: 00007f783ce25fa0 R15: 00007ffe3d7a9aa8 [ 365.679436][ T7287] [ 365.707690][ T7287] memory: usage 307200kB, limit 307200kB, failcnt 21312 [ 365.714714][ T7287] memory+swap: usage 432128kB, limit 9007199254740988kB, failcnt 0 [ 365.723139][ T7287] kmem: usage 2604kB, limit 9007199254740988kB, failcnt 0 [ 365.730724][ T7287] Memory cgroup stats for /syz6: [ 365.731320][ T7287] anon 839680 [ 365.731320][ T7287] file 311054336 [ 365.731320][ T7287] kernel 2666496 [ 365.731320][ T7287] kernel_stack 98304 [ 365.731320][ T7287] pagetables 774144 [ 365.731320][ T7287] sec_pagetables 0 [ 365.731320][ T7287] percpu 1184 [ 365.731320][ T7287] sock 0 [ 365.731320][ T7287] vmalloc 0 [ 365.731320][ T7287] shmem 311054336 [ 365.731320][ T7287] zswap 0 [ 365.731320][ T7287] zswapped 0 [ 365.731320][ T7287] file_mapped 219484160 [ 365.731320][ T7287] file_dirty 0 [ 365.731320][ T7287] file_writeback 0 [ 365.731320][ T7287] swapcached 127926272 [ 365.731320][ T7287] anon_thp 0 [ 365.731320][ T7287] file_thp 0 [ 365.731320][ T7287] shmem_thp 0 [ 365.731320][ T7287] inactive_anon 26054656 [ 365.731320][ T7287] active_anon 285839360 [ 365.731320][ T7287] inactive_file 0 [ 365.731320][ T7287] active_file 0 [ 365.731320][ T7287] unevictable 0 [ 365.731320][ T7287] slab_reclaimable 1256888 [ 365.731320][ T7287] slab_unreclaimable 452888 [ 365.827620][ T7287] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.748,pid=7173,uid=0 [ 365.847799][ T7287] Memory cgroup out of memory: Killed process 7173 (syz.6.748) total-vm:200584kB, anon-rss:1572kB, file-rss:20672kB, shmem-rss:116552kB, UID:0 pgtables:348kB oom_score_adj:1000 [ 366.348651][ T7287] syz.6.764 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 366.358749][ T7287] CPU: 1 PID: 7287 Comm: syz.6.764 Not tainted syzkaller #0 [ 366.366067][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 366.376155][ T7287] Call Trace: [ 366.379445][ T7287] [ 366.382383][ T7287] dump_stack_lvl+0x188/0x24e [ 366.387201][ T7287] ? ___ratelimit+0x14e/0x610 [ 366.391911][ T7287] ? show_regs_print_info+0x12/0x12 [ 366.397225][ T7287] ? load_image+0x410/0x410 [ 366.401754][ T7287] ? ___ratelimit+0x474/0x610 [ 366.406453][ T7287] ? radix_tree_cpu_dead+0x160/0x160 [ 366.411758][ T7287] dump_header+0xd8/0x820 [ 366.416120][ T7287] oom_kill_process+0x361/0x550 [ 366.421019][ T7287] out_of_memory+0xe25/0x1220 [ 366.425703][ T7287] ? print_unlock_imbalance_bug+0x160/0x160 [ 366.431602][ T7287] ? mutex_lock_nested+0x10/0x10 [ 366.436542][ T7287] ? unregister_oom_notifier+0x20/0x20 [ 366.442006][ T7287] mem_cgroup_out_of_memory+0x2c0/0x390 [ 366.447571][ T7287] ? mem_cgroup_oom_trylock+0x210/0x210 [ 366.453137][ T7287] ? do_raw_spin_unlock+0x11d/0x230 [ 366.458338][ T7287] try_charge_memcg+0xc9d/0x17c0 [ 366.463299][ T7287] ? percpu_ref_put+0x180/0x180 [ 366.468186][ T7287] ? get_mem_cgroup_from_mm+0x34/0x290 [ 366.473649][ T7287] charge_memcg+0x117/0x3b0 [ 366.478154][ T7287] ? __mem_cgroup_charge+0x80/0x80 [ 366.483259][ T7287] ? get_mem_cgroup_from_mm+0x34/0x290 [ 366.488728][ T7287] ? get_mem_cgroup_from_mm+0x34/0x290 [ 366.494193][ T7287] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 366.499737][ T7287] __mem_cgroup_charge+0x21/0x80 [ 366.504675][ T7287] shmem_add_to_page_cache+0x8d7/0x1c90 [ 366.510216][ T7287] ? __filemap_get_folio+0x10f/0xde0 [ 366.515502][ T7287] ? __filemap_get_folio+0x10f/0xde0 [ 366.520786][ T7287] ? put_page+0x270/0x270 [ 366.525118][ T7287] ? mark_lock+0x94/0x320 [ 366.529461][ T7287] shmem_get_folio_gfp+0x1663/0x35e0 [ 366.534775][ T7287] ? __lock_acquire+0x7ea0/0x7ea0 [ 366.539813][ T7287] shmem_fault+0x1b6/0x790 [ 366.544235][ T7287] ? shmem_fallocate+0x1050/0x1050 [ 366.549351][ T7287] ? filemap_map_pages+0x1ae/0x11e0 [ 366.554642][ T7287] ? filemap_read_folio+0x7a0/0x7a0 [ 366.559837][ T7287] ? count_memcg_event_mm+0x8a/0x3c0 [ 366.565128][ T7287] __do_fault+0x13b/0x4e0 [ 366.569456][ T7287] ? handle_mm_fault+0x2600/0x3d40 [ 366.574567][ T7287] handle_mm_fault+0x2610/0x3d40 [ 366.579532][ T7287] ? numa_migrate_prep+0x250/0x250 [ 366.584747][ T7287] __get_user_pages+0x40d/0xec0 [ 366.589611][ T7287] ? populate_vma_page_range+0x2b0/0x2b0 [ 366.595245][ T7287] ? up_write+0x1b6/0x410 [ 366.599580][ T7287] ? __generic_file_write_iter+0x148/0x2a0 [ 366.605390][ T7287] ? get_dump_page+0xee/0x670 [ 366.610064][ T7287] ? down_read_killable+0x1cc/0x340 [ 366.615262][ T7287] get_dump_page+0x18c/0x670 [ 366.619865][ T7287] ? fault_in_readable+0x1f0/0x1f0 [ 366.625071][ T7287] ? dump_user_range+0x54b/0x7b0 [ 366.630033][ T7287] ? iov_iter_bvec+0x4a/0x1f0 [ 366.634713][ T7287] dump_user_range+0x128/0x7b0 [ 366.639481][ T7287] ? dump_skip+0x40/0x40 [ 366.643742][ T7287] elf_core_dump+0x30ca/0x3630 [ 366.648529][ T7287] ? load_elf_binary+0x2820/0x2820 [ 366.653652][ T7287] ? dump_vma_snapshot+0xaea/0xe40 [ 366.658766][ T7287] ? verify_lock_unused+0x140/0x140 [ 366.663972][ T7287] ? __lock_acquire+0x7ea0/0x7ea0 [ 366.669024][ T7287] ? mas_next_entry+0xe03/0xe90 [ 366.673904][ T7287] ? rcu_read_lock_any_held+0xb0/0x130 [ 366.679361][ T7287] ? 0xffffffffff600000 [ 366.683518][ T7287] ? getname_kernel+0x142/0x2f0 [ 366.688375][ T7287] do_coredump+0x1702/0x25c0 [ 366.692988][ T7287] ? nfs_stat_to_errno+0x170/0x170 [ 366.698121][ T7287] ? lock_chain_count+0x20/0x20 [ 366.702982][ T7287] ? _raw_spin_unlock_irq+0x1f/0x40 [ 366.708179][ T7287] ? lockdep_hardirqs_on+0x94/0x140 [ 366.713413][ T7287] get_signal+0x1093/0x1340 [ 366.717924][ T7287] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 366.723911][ T7287] arch_do_signal_or_restart+0xc4/0x1310 [ 366.729563][ T7287] ? get_sigframe_size+0x10/0x10 [ 366.734502][ T7287] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 366.740493][ T7287] ? exit_to_user_mode_loop+0x3b/0x110 [ 366.745955][ T7287] exit_to_user_mode_loop+0x70/0x110 [ 366.751240][ T7287] exit_to_user_mode_prepare+0xee/0x180 [ 366.756792][ T7287] irqentry_exit_to_user_mode+0x5/0x30 [ 366.762246][ T7287] exc_page_fault+0x88/0x100 [ 366.766839][ T7287] asm_exc_page_fault+0x22/0x30 [ 366.771687][ T7287] RIP: 0033:0x7f783ca54db7 [ 366.776103][ T7287] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 22 24 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 366.795706][ T7287] RSP: 002b:00007f783da28120 EFLAGS: 00010202 [ 366.801859][ T7287] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f783cb9fb19 [ 366.809825][ T7287] RDX: 00007f783da28140 RSI: 00007f783da28270 RDI: 000000000000000b [ 366.817793][ T7287] RBP: 00007f783cc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 366.825759][ T7287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 366.833723][ T7287] R13: 00007f783ce26038 R14: 00007f783ce25fa0 R15: 00007ffe3d7a9aa8 [ 366.841716][ T7287] [ 366.864328][ T7287] memory: usage 296840kB, limit 307200kB, failcnt 21606 [ 366.885314][ T7287] memory+swap: usage 418828kB, limit 9007199254740988kB, failcnt 0 [ 366.895494][ T7287] kmem: usage 2224kB, limit 9007199254740988kB, failcnt 0 [ 366.912615][ T7287] Memory cgroup stats for /syz6: [ 366.912783][ T7287] anon 540672 [ 366.912783][ T7287] file 295706624 [ 366.912783][ T7287] kernel 2252800 [ 366.912783][ T7287] kernel_stack 98304 [ 366.912783][ T7287] pagetables 438272 [ 366.912783][ T7287] sec_pagetables 0 [ 366.912783][ T7287] percpu 1184 [ 366.912783][ T7287] sock 0 [ 366.912783][ T7287] vmalloc 0 [ 366.912783][ T7287] shmem 295706624 [ 366.912783][ T7287] zswap 0 [ 366.912783][ T7287] zswapped 0 [ 366.912783][ T7287] file_mapped 100036608 [ 366.912783][ T7287] file_dirty 0 [ 366.912783][ T7287] file_writeback 0 [ 366.912783][ T7287] swapcached 127926272 [ 366.912783][ T7287] anon_thp 0 [ 366.912783][ T7287] file_thp 0 [ 366.912783][ T7287] shmem_thp 0 [ 366.912783][ T7287] inactive_anon 26054656 [ 366.912783][ T7287] active_anon 270192640 [ 366.912783][ T7287] inactive_file 0 [ 366.912783][ T7287] active_file 0 [ 366.912783][ T7287] unevictable 0 [ 366.912783][ T7287] slab_reclaimable 1220256 [ 366.912783][ T7287] slab_unreclaimable 434864 [ 367.019851][ T7287] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.764,pid=7287,uid=0 [ 367.035331][ T7287] Memory cgroup out of memory: Killed process 7287 (syz.6.764) total-vm:200584kB, anon-rss:1572kB, file-rss:20672kB, shmem-rss:97544kB, UID:0 pgtables:308kB oom_score_adj:1000 [ 367.947226][ T7834] device bridge_slave_1 left promiscuous mode [ 367.953652][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.010824][ T7834] device bridge_slave_0 left promiscuous mode [ 368.025932][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.796045][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.808244][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.817622][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.826549][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.835860][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 369.843257][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.460370][ T7879] loop2: detected capacity change from 0 to 128 [ 370.519656][ T7872] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.628130][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 370.711495][ T7884] netlink: 232 bytes leftover after parsing attributes in process `syz.2.897'. [ 370.841359][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 371.317545][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x1cf0 instead [ 371.348162][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x303b instead [ 371.373701][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 371.401127][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 371.425941][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 371.456471][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 371.507132][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 371.519449][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 371.530571][ T7882] jffs2: Further such events for this erase block will not be printed [ 371.552363][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 371.616305][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 371.657411][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x1cf0 instead [ 371.755467][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x303b instead [ 371.885300][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 371.961442][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 372.170318][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 372.368914][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 372.488050][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 372.498584][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 372.545411][ T7882] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 372.616406][ T4557] device hsr_slave_0 left promiscuous mode [ 372.645381][ T7882] jffs2: Further such events for this erase block will not be printed [ 372.653918][ T7882] FAULT_INJECTION: forcing a failure. [ 372.653918][ T7882] name failslab, interval 1, probability 0, space 0, times 0 [ 372.683117][ T4557] device hsr_slave_1 left promiscuous mode [ 372.723647][ T7882] CPU: 0 PID: 7882 Comm: syz.5.898 Not tainted syzkaller #0 [ 372.731093][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 372.741188][ T7882] Call Trace: [ 372.744483][ T7882] [ 372.747430][ T7882] dump_stack_lvl+0x188/0x24e [ 372.752152][ T7882] ? show_regs_print_info+0x12/0x12 [ 372.757385][ T7882] ? load_image+0x410/0x410 [ 372.761918][ T7882] ? __lock_acquire+0x7ea0/0x7ea0 [ 372.766972][ T7882] should_fail_ex+0x390/0x4c0 [ 372.771685][ T7882] should_failslab+0x5/0x20 [ 372.776209][ T7882] slab_pre_alloc_hook+0x59/0x300 [ 372.781389][ T7882] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 372.787063][ T7882] kmem_cache_alloc+0x56/0x2f0 [ 372.791855][ T7882] ? jffs2_prealloc_raw_node_refs+0xf4/0x7f0 [ 372.797966][ T7882] jffs2_prealloc_raw_node_refs+0xf4/0x7f0 [ 372.803812][ T7882] jffs2_scan_medium+0x1859/0x6f20 [ 372.808983][ T7882] ? __kmalloc+0xb3/0x240 [ 372.813348][ T7882] ? jffs2_do_link+0x910/0x910 [ 372.818143][ T7882] ? jffs2_sum_init+0xb3/0x210 [ 372.822902][ T7882] ? rcu_is_watching+0x11/0xa0 [ 372.827667][ T7882] ? jffs2_sum_init+0xb3/0x210 [ 372.832426][ T7882] ? __kmalloc+0xe4/0x240 [ 372.836754][ T7882] ? jffs2_sum_init+0x10e/0x210 [ 372.841647][ T7882] jffs2_do_mount_fs+0x76c/0x22b0 [ 372.846689][ T7882] ? __raw_spin_lock_init+0x41/0x100 [ 372.851980][ T7882] jffs2_do_fill_super+0x551/0xc50 [ 372.857099][ T7882] ? jffs2_reconfigure+0x310/0x310 [ 372.862215][ T7882] mtd_get_sb+0xcb/0x2b0 [ 372.866534][ T7882] ? mtd_get_sb_by_nr+0x7c/0xa0 [ 372.871400][ T7882] get_tree_mtd+0x5e2/0x760 [ 372.875914][ T7882] ? jffs2_reconfigure+0x310/0x310 [ 372.881028][ T7882] ? mtd_proc_show+0x270/0x270 [ 372.885801][ T7882] ? apparmor_capable+0x12c/0x190 [ 372.890882][ T7882] ? bpf_lsm_capable+0x5/0x10 [ 372.895600][ T7882] ? security_capable+0x85/0xb0 [ 372.900450][ T7882] vfs_get_tree+0x88/0x270 [ 372.904865][ T7882] do_new_mount+0x247/0xa50 [ 372.909547][ T7882] __se_sys_mount+0x2e3/0x3d0 [ 372.914229][ T7882] ? __x64_sys_mount+0xc0/0xc0 [ 372.918996][ T7882] ? lockdep_hardirqs_on+0x94/0x140 [ 372.924191][ T7882] ? __x64_sys_mount+0x1c/0xc0 [ 372.928953][ T7882] do_syscall_64+0x4c/0xa0 [ 372.933368][ T7882] ? clear_bhb_loop+0x60/0xb0 [ 372.938072][ T7882] ? clear_bhb_loop+0x60/0xb0 [ 372.942767][ T7882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.948661][ T7882] RIP: 0033:0x7f63e9b9fb19 [ 372.953073][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.973028][ T7882] RSP: 002b:00007f63eaa24028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 372.981473][ T7882] RAX: ffffffffffffffda RBX: 00007f63e9e25fa0 RCX: 00007f63e9b9fb19 [ 372.989440][ T7882] RDX: 0000200000006840 RSI: 0000200000006800 RDI: 00002000000067c0 [ 372.997409][ T7882] RBP: 00007f63e9c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 373.005461][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.013695][ T7882] R13: 00007f63e9e26038 R14: 00007f63e9e25fa0 R15: 00007ffeb4ea86a8 [ 373.021682][ T7882] [ 373.048690][ T4557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.065296][ T4557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.099412][ T4557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.125642][ T4557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.133765][ T4557] device bridge_slave_1 left promiscuous mode [ 373.172957][ T4557] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.205974][ T4557] device bridge_slave_0 left promiscuous mode [ 373.212273][ T4557] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.323077][ T4557] device veth1_macvtap left promiscuous mode [ 373.353888][ T4557] device veth0_macvtap left promiscuous mode [ 373.395341][ T4557] device veth1_vlan left promiscuous mode [ 373.411446][ T4557] device veth0_vlan left promiscuous mode [ 373.965321][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 374.955432][ T7939] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 376.045260][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 376.354130][ T7943] loop5: detected capacity change from 0 to 128 [ 376.532443][ T7945] netlink: 232 bytes leftover after parsing attributes in process `syz.5.909'. [ 377.443919][ T4557] team0 (unregistering): Port device team_slave_1 removed [ 377.533406][ T4557] team0 (unregistering): Port device team_slave_0 removed [ 377.616032][ T4557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.125318][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 378.152293][ T4557] bond0 (unregistering): Released all slaves [ 378.311922][ T7923] device syzkaller0 entered promiscuous mode [ 378.447899][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.454258][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.790874][ T7953] FAULT_INJECTION: forcing a failure. [ 378.790874][ T7953] name failslab, interval 1, probability 0, space 0, times 0 [ 379.167081][ T7953] CPU: 0 PID: 7953 Comm: syz.7.912 Not tainted syzkaller #0 [ 379.174446][ T7953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 379.184521][ T7953] Call Trace: [ 379.187830][ T7953] [ 379.190781][ T7953] dump_stack_lvl+0x188/0x24e [ 379.195489][ T7953] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 379.201153][ T7953] ? show_regs_print_info+0x12/0x12 [ 379.206386][ T7953] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 379.212050][ T7953] ? dump_stack+0x5/0x12 [ 379.216325][ T7953] should_fail_ex+0x390/0x4c0 [ 379.221035][ T7953] should_failslab+0x5/0x20 [ 379.225554][ T7953] slab_pre_alloc_hook+0x59/0x300 [ 379.230602][ T7953] ? psi_cgroup_alloc+0x52/0x1f0 [ 379.235562][ T7953] __kmem_cache_alloc_node+0x4f/0x270 [ 379.240958][ T7953] ? psi_cgroup_alloc+0x52/0x1f0 [ 379.245914][ T7953] kmalloc_trace+0x26/0xe0 [ 379.250347][ T7953] psi_cgroup_alloc+0x52/0x1f0 [ 379.255133][ T7953] cgroup_mkdir+0x59d/0xe70 [ 379.259758][ T7953] ? css_task_iter_end+0x280/0x280 [ 379.264892][ T7953] ? up_read+0x20/0x20 [ 379.268988][ T7953] ? preempt_schedule_thunk+0x16/0x18 [ 379.274427][ T7953] ? kernfs_iop_permission+0x26d/0x350 [ 379.279990][ T7953] ? css_task_iter_end+0x280/0x280 [ 379.285122][ T7953] kernfs_iop_mkdir+0x23d/0x3d0 [ 379.290006][ T7953] vfs_mkdir+0x386/0x570 [ 379.294309][ T7953] do_mkdirat+0x1d8/0x440 [ 379.298663][ T7953] ? vfs_mkdir+0x570/0x570 [ 379.303107][ T7953] __x64_sys_mkdirat+0x85/0x90 [ 379.307896][ T7953] do_syscall_64+0x4c/0xa0 [ 379.312339][ T7953] ? clear_bhb_loop+0x60/0xb0 [ 379.317072][ T7953] ? clear_bhb_loop+0x60/0xb0 [ 379.321781][ T7953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.327700][ T7953] RIP: 0033:0x7faef5f9fb19 [ 379.332151][ T7953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.351874][ T7953] RSP: 002b:00007faef6ed3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 379.360309][ T7953] RAX: ffffffffffffffda RBX: 00007faef6225fa0 RCX: 00007faef5f9fb19 [ 379.368305][ T7953] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 379.376296][ T7953] RBP: 00007faef6037b70 R08: 0000000000000000 R09: 0000000000000000 [ 379.384292][ T7953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.392288][ T7953] R13: 00007faef6226038 R14: 00007faef6225fa0 R15: 00007ffdf9c7efa8 [ 379.400305][ T7953] [ 383.411540][ T7973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.652656][ T7988] loop0: detected capacity change from 0 to 128 [ 383.858381][ T7992] netlink: 232 bytes leftover after parsing attributes in process `syz.0.921'. [ 386.243781][ T7872] chnl_net:caif_netlink_parms(): no params data found [ 386.943823][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.060320][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.286917][ T7872] device bridge_slave_0 entered promiscuous mode [ 387.466163][ T4557] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.480030][ T8029] loop2: detected capacity change from 0 to 128 [ 387.584910][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.599944][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.623481][ T7872] device bridge_slave_1 entered promiscuous mode [ 387.718329][ T8042] netlink: 236 bytes leftover after parsing attributes in process `syz.2.933'. [ 387.936050][ T4557] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.443518][ T8039] device syzkaller0 entered promiscuous mode [ 388.532718][ T7872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.251505][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 389.344047][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 389.354902][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x1cf0 instead [ 389.365689][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x303b instead [ 389.376367][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 389.387086][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 389.399249][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 389.432327][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 389.465279][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 389.523492][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 389.585688][ T8062] jffs2: Further such events for this erase block will not be printed [ 389.628278][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 389.672442][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 389.708306][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x1cf0 instead [ 389.749522][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x303b instead [ 389.785561][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 389.827312][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 389.859952][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 389.894026][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 389.932948][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 389.995455][ T8062] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 390.024211][ T8062] jffs2: Further such events for this erase block will not be printed [ 390.063829][ T8062] FAULT_INJECTION: forcing a failure. [ 390.063829][ T8062] name failslab, interval 1, probability 0, space 0, times 0 [ 390.125936][ T8062] CPU: 1 PID: 8062 Comm: syz.0.938 Not tainted syzkaller #0 [ 390.133291][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 390.143380][ T8062] Call Trace: [ 390.146676][ T8062] [ 390.149633][ T8062] dump_stack_lvl+0x188/0x24e [ 390.154360][ T8062] ? show_regs_print_info+0x12/0x12 [ 390.159867][ T8062] ? load_image+0x410/0x410 [ 390.164418][ T8062] ? __lock_acquire+0x7ea0/0x7ea0 [ 390.169495][ T8062] should_fail_ex+0x390/0x4c0 [ 390.174214][ T8062] should_failslab+0x5/0x20 [ 390.178819][ T8062] slab_pre_alloc_hook+0x59/0x300 [ 390.183866][ T8062] kmem_cache_alloc+0x56/0x2f0 [ 390.188656][ T8062] ? jffs2_prealloc_raw_node_refs+0xf4/0x7f0 [ 390.194677][ T8062] jffs2_prealloc_raw_node_refs+0xf4/0x7f0 [ 390.200530][ T8062] jffs2_scan_medium+0x1859/0x6f20 [ 390.205697][ T8062] ? __kmalloc+0xb3/0x240 [ 390.210065][ T8062] ? jffs2_do_link+0x910/0x910 [ 390.214886][ T8062] ? jffs2_sum_init+0xb3/0x210 [ 390.219667][ T8062] ? rcu_is_watching+0x11/0xa0 [ 390.224455][ T8062] ? jffs2_sum_init+0xb3/0x210 [ 390.229235][ T8062] ? __kmalloc+0xe4/0x240 [ 390.233592][ T8062] ? jffs2_sum_init+0x10e/0x210 [ 390.238503][ T8062] jffs2_do_mount_fs+0x76c/0x22b0 [ 390.243561][ T8062] ? __raw_spin_lock_init+0x41/0x100 [ 390.248968][ T8062] jffs2_do_fill_super+0x551/0xc50 [ 390.254114][ T8062] ? jffs2_reconfigure+0x310/0x310 [ 390.259246][ T8062] mtd_get_sb+0xcb/0x2b0 [ 390.264021][ T8062] ? mtd_get_sb_by_nr+0x7c/0xa0 [ 390.268888][ T8062] get_tree_mtd+0x5e2/0x760 [ 390.273405][ T8062] ? jffs2_reconfigure+0x310/0x310 [ 390.278554][ T8062] ? mtd_proc_show+0x270/0x270 [ 390.283341][ T8062] vfs_get_tree+0x88/0x270 [ 390.287783][ T8062] do_new_mount+0x247/0xa50 [ 390.292323][ T8062] __se_sys_mount+0x2e3/0x3d0 [ 390.297036][ T8062] ? __x64_sys_mount+0xc0/0xc0 [ 390.301835][ T8062] ? lockdep_hardirqs_on+0x94/0x140 [ 390.307145][ T8062] ? __x64_sys_mount+0x1c/0xc0 [ 390.311952][ T8062] do_syscall_64+0x4c/0xa0 [ 390.316435][ T8062] ? clear_bhb_loop+0x60/0xb0 [ 390.321141][ T8062] ? clear_bhb_loop+0x60/0xb0 [ 390.325851][ T8062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.331771][ T8062] RIP: 0033:0x7f391839fb19 [ 390.336211][ T8062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.355837][ T8062] RSP: 002b:00007f3919251028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 390.364296][ T8062] RAX: ffffffffffffffda RBX: 00007f3918625fa0 RCX: 00007f391839fb19 [ 390.372275][ T8062] RDX: 0000200000006840 RSI: 0000200000006800 RDI: 00002000000067c0 [ 390.380265][ T8062] RBP: 00007f3918437b70 R08: 0000000000000000 R09: 0000000000000000 [ 390.388251][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.396222][ T8062] R13: 00007f3918626038 R14: 00007f3918625fa0 R15: 00007fff36c01b48 [ 390.404202][ T8062] [ 390.540943][ T4291] block nbd0: Receive control failed (result -107) [ 390.591479][ T8079] block nbd0: shutting down sockets [ 390.691491][ T8084] trusted_key: encrypted_key: insufficient parameters specified [ 391.797939][ T8084] udc dummy_udc.0: failed to start g1: -4 [ 391.820684][ T8084] configfs-gadget.g1: probe of gadget.0 failed with error -4 [ 391.911269][ T8084] UDC core: g1: couldn't find an available UDC or it's busy [ 392.175049][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 392.203937][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 392.227667][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x1cf0 instead [ 392.298653][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x303b instead [ 392.365387][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 392.433568][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 392.485154][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 392.551143][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 392.607429][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 392.665899][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 392.720698][ T8102] jffs2: Further such events for this erase block will not be printed [ 392.777043][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 392.828946][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 392.884548][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x1cf0 instead [ 392.946062][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x303b instead [ 393.045581][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 393.056133][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 393.066653][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 393.077642][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 393.088546][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 393.099395][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 393.109891][ T8102] jffs2: Further such events for this erase block will not be printed [ 393.119007][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 393.129525][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 393.140095][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x1cf0 instead [ 393.150561][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xfb04 instead [ 393.161022][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 393.172412][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 393.183015][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x1cf0 instead [ 393.193943][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xfb04 instead [ 393.204559][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 393.215486][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 393.231032][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x1cf0 instead [ 393.243883][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xfb04 instead [ 393.254664][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 393.265696][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 393.276175][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x1cf0 instead [ 393.293297][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xfb04 instead [ 393.311622][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 393.322529][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 393.333300][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x1cf0 instead [ 393.344037][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xfb04 instead [ 393.355753][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 393.366249][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 393.376944][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x1cf0 instead [ 393.403604][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xfb04 instead [ 393.421424][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 393.436860][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 393.452464][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x1cf0 instead [ 393.472147][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xfb04 instead [ 393.494470][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 393.563410][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 393.629520][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x1cf0 instead [ 393.677007][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xfb04 instead [ 393.731842][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 393.777780][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 393.836845][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x1cf0 instead [ 393.884116][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xfb04 instead [ 393.956743][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 394.002591][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 394.060286][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x1cf0 instead [ 394.110400][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xfb04 instead [ 394.176777][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 394.221246][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 394.265766][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x1cf0 instead [ 394.298119][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xfb04 instead [ 394.313480][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 394.358130][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 394.387698][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x1cf0 instead [ 394.403853][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xfb04 instead [ 394.414644][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 394.425357][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 394.444028][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x1cf0 instead [ 394.462158][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xfb04 instead [ 394.484198][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 394.506190][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 394.516875][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x1cf0 instead [ 394.531578][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xfb04 instead [ 394.543291][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 394.560006][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 394.570648][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x1cf0 instead [ 394.581316][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xfb04 instead [ 394.591924][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 394.604616][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 394.615555][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x1cf0 instead [ 394.626018][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xfb04 instead [ 394.636555][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 394.647078][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 394.664614][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x1cf0 instead [ 394.675601][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xfb04 instead [ 394.686367][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 394.697479][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 394.708095][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x1cf0 instead [ 394.718772][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xfb04 instead [ 394.729672][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 394.740109][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 394.751002][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1cf0 instead [ 394.761444][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xfb04 instead [ 394.779091][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 394.789596][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 394.800073][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x1cf0 instead [ 394.810681][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xfb04 instead [ 394.831120][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 394.851329][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 394.879440][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x1cf0 instead [ 394.895842][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xfb04 instead [ 394.913340][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 394.925889][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 394.937347][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x1cf0 instead [ 394.953914][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xfb04 instead [ 394.966808][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 394.983982][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 394.994871][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x1cf0 instead [ 395.006226][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xfb04 instead [ 395.017401][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 395.028252][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 395.038682][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x1cf0 instead [ 395.049134][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xfb04 instead [ 395.059999][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 395.070615][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 395.081062][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x1cf0 instead [ 395.092453][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xfb04 instead [ 395.103003][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 395.113437][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 395.123893][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x1cf0 instead [ 395.134506][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xfb04 instead [ 395.152091][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 395.164401][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 395.176034][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x1cf0 instead [ 395.186490][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xfb04 instead [ 395.197168][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 395.207625][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 395.218321][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x1cf0 instead [ 395.228859][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xfb04 instead [ 395.239659][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 395.250184][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 395.261286][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x1cf0 instead [ 395.273986][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xfb04 instead [ 395.284482][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 395.295127][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 395.305878][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x1cf0 instead [ 395.316422][ T8102] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xfb04 instead [ 395.327046][ T8102] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 395.336525][ T8102] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 395.478046][ T8122] [U] ¥ [ 395.481265][ T8122] [U] [ 395.483963][ T8122] [U] [ 395.486663][ T8122] [U] [ 395.502139][ T8122] [U] [ 395.504921][ T8122] [U] [ 395.507630][ T8122] [U] [ 395.510340][ T8122] [U] [ 395.520861][ T8122] [U] [ 395.523608][ T8122] [U] [ 395.526318][ T8122] [U] [ 395.529016][ T8122] [U] [ 395.533448][ T8122] [U] [ 395.536181][ T8122] [U] [ 395.538902][ T8122] [U] [ 395.541608][ T8122] [U] [ 395.552398][ T8122] [U] [ 395.555160][ T8122] [U] [ 395.557904][ T8122] [U] [ 395.560615][ T8122] [U] [ 395.563830][ T8122] [U] [ 395.566549][ T8122] [U] [ 395.569255][ T8122] [U] [ 395.571965][ T8122] [U] [ 395.580899][ T8122] [U] [ 395.583598][ T8122] [U] [ 395.586282][ T8122] [U] [ 395.588965][ T8122] [U] [ 395.594758][ T8122] [U] [ 395.597492][ T8122] [U] [ 395.600188][ T8122] [U] [ 395.602887][ T8122] [U] [ 395.624467][ T8122] [U] [ 395.627231][ T8122] [U] [ 395.629936][ T8122] [U] [ 395.632663][ T8122] [U] [ 395.700259][ T8122] [U] [ 395.703020][ T8122] [U] [ 395.705723][ T8122] [U] [ 395.708432][ T8122] [U] [ 395.771457][ T8122] [U] [ 395.774207][ T8122] [U] [ 395.776927][ T8122] [U] [ 395.779633][ T8122] [U] [ 395.832831][ T8122] [U] [ 395.835582][ T8122] [U] [ 395.838286][ T8122] [U] [ 395.840998][ T8122] [U] [ 395.904157][ T8122] [U] [ 395.906903][ T8122] [U] [ 395.909608][ T8122] [U] [ 395.912314][ T8122] [U] [ 395.961221][ T8122] [U] [ 395.963980][ T8122] [U] [ 395.966695][ T8122] [U] [ 395.969409][ T8122] [U] [ 396.019844][ T8122] [U] [ 396.022853][ T8122] [U] [ 396.025564][ T8122] [U] [ 396.028262][ T8122] [U] [ 396.077019][ T8122] [U] [ 396.079767][ T8122] [U] [ 396.082470][ T8122] [U] [ 396.085166][ T8122] [U] [ 396.136485][ T8122] [U] [ 396.139239][ T8122] [U] [ 396.141939][ T8122] [U] [ 396.144645][ T8122] [U] [ 396.194735][ T8122] [U] [ 396.197484][ T8122] [U] [ 396.200190][ T8122] [U] [ 396.202892][ T8122] [U] [ 396.263215][ T8122] [U] [ 396.266000][ T8122] [U] [ 396.268705][ T8122] [U] [ 396.271406][ T8122] [U] [ 396.353662][ T8122] [U] [ 396.356427][ T8122] [U] [ 396.359134][ T8122] [U] [ 396.361833][ T8122] [U] [ 396.438865][ T8122] [U] [ 396.641161][ T8128] trusted_key: encrypted_key: insufficient parameters specified [ 396.727809][ T4557] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.743052][ T7872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.887896][ T8128] usb0: HOST MAC ae:0b:a6:4d:05:4f [ 396.932505][ T8128] usb0: MAC 02:f0:59:52:91:8f [ 396.942160][ T4557] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.073788][ T7872] team0: Port device team_slave_0 added [ 397.126182][ T7872] team0: Port device team_slave_1 added [ 397.371045][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.378899][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.926029][ T4346] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 397.944877][ T8154] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 398.028499][ T8154] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 398.054140][ T8154] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x1cf0 instead [ 398.067683][ T8154] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x303b instead [ 398.083169][ T7872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.128298][ T8154] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 398.176737][ T8154] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 398.191636][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.206555][ T4346] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.209276][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.239033][ T4346] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 398.253314][ T8154] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 398.285644][ T8154] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 398.296382][ T4346] usb 1-1: Dual-Role OTG device on HNP port [ 398.320818][ T4346] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 398.325704][ T7872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.335242][ T8154] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 398.364931][ T4346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.388799][ C1] ------------[ cut here ]------------ [ 398.394731][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 398.401872][ C1] WARNING: CPU: 1 PID: 8161 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x27c/0x4d0 [ 398.412024][ C1] Modules linked in: [ 398.415945][ C1] CPU: 1 PID: 8161 Comm: syz.5.970 Not tainted syzkaller #0 [ 398.423263][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 398.433348][ C1] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 398.438761][ C1] Code: 49 8b 0e 48 c7 c0 80 08 5e 8b 49 c7 c0 a0 08 5e 8b 4c 0f 44 c0 48 c7 c7 40 08 5e 8b 48 c7 c6 a9 84 85 8c 89 ea e8 e4 b3 d2 fa <0f> 0b e9 c4 fe ff ff e8 18 52 07 fb 49 bc 00 00 00 00 00 fc ff df [ 398.458441][ C1] RSP: 0018:ffffc900001e0768 EFLAGS: 00010046 [ 398.464567][ C1] RAX: efbef6e51c1d8c00 RBX: ffff888025c540e0 RCX: ffff88802e9ada00 [ 398.472582][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 398.480604][ C1] RBP: 0000000000000081 R08: ffff8880b8d279db R09: 1ffff110171a4f3b [ 398.488608][ C1] R10: dffffc0000000000 R11: ffffed10171a4f3c R12: dffffc0000000000 [ 398.496611][ C1] R13: ffff888025c5410d R14: ffff888025c540e8 R15: ffff888021bd543a [ 398.504693][ C1] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 398.513621][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.520268][ C1] CR2: 0000001b2d222ff8 CR3: 000000008c79a000 CR4: 00000000003506e0 [ 398.528241][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.536210][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 398.544266][ C1] Call Trace: [ 398.547580][ C1] [ 398.550424][ C1] hidg_set_alt+0x126/0xa00 [ 398.555006][ C1] ? usb_gadget_set_state+0x142/0x310 [ 398.560381][ C1] set_config+0x6e8/0xf70 [ 398.564724][ C1] composite_setup+0x194c/0x2b00 [ 398.569677][ C1] configfs_composite_setup+0xc3/0x100 [ 398.575145][ C1] dummy_timer+0x12ed/0x35d0 [ 398.579763][ C1] ? mark_lock+0x94/0x320 [ 398.584108][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 398.589137][ C1] ? lock_chain_count+0x20/0x20 [ 398.594330][ C1] ? dummy_free_streams+0x520/0x520 [ 398.599564][ C1] __hrtimer_run_queues+0x522/0xc90 [ 398.604847][ C1] ? dummy_free_streams+0x520/0x520 [ 398.610089][ C1] ? hrtimer_interrupt+0x980/0x980 [ 398.615210][ C1] hrtimer_run_softirq+0x173/0x290 [ 398.620325][ C1] handle_softirqs+0x291/0x910 [ 398.625092][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 398.629976][ C1] ? do_softirq+0x210/0x210 [ 398.634475][ C1] ? hrtimer_interrupt+0x775/0x980 [ 398.639642][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 398.644948][ C1] __irq_exit_rcu+0x13b/0x230 [ 398.649631][ C1] ? irq_exit_rcu+0x20/0x20 [ 398.654143][ C1] irq_exit_rcu+0x5/0x20 [ 398.658382][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 398.664017][ C1] [ 398.666943][ C1] [ 398.669868][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 398.675853][ C1] RIP: 0010:folio_memcg_lock+0x103/0x320 [ 398.681491][ C1] Code: 48 c7 c2 60 74 b8 8a e8 cb 63 8a ff 0f 1f 44 00 00 4c 89 e7 e8 0e d5 ff ff 48 85 c0 0f 84 ce 01 00 00 49 89 c7 4c 89 64 24 10 <48> b8 00 00 00 00 00 fc ff df 41 c6 44 06 04 00 48 c7 44 24 40 00 [ 398.701108][ C1] RSP: 0018:ffffc90003b67340 EFLAGS: 00000286 [ 398.707182][ C1] RAX: ffff88813fef8000 RBX: ffffea0001c50c40 RCX: ffffffff81da83d3 [ 398.715150][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001c50c40 [ 398.723125][ C1] RBP: ffffc90003b67410 R08: ffffea0001c50c47 R09: 1ffffd400038a188 [ 398.731104][ C1] R10: dffffc0000000000 R11: fffff9400038a189 R12: ffffea0001c50c40 [ 398.739074][ C1] R13: 0000000000000000 R14: 1ffff9200076ce6c R15: ffff88813fef8000 [ 398.747062][ C1] ? __folio_memcg+0x63/0x170 [ 398.755251][ C1] ? folio_memcg_lock+0x7d/0x320 [ 398.760198][ C1] ? mem_cgroup_get_oom_group+0x350/0x350 [ 398.765920][ C1] ? folio_mark_accessed+0x329/0x14e0 [ 398.771296][ C1] ? folio_activate_fn+0x1ff0/0x1ff0 [ 398.776610][ C1] page_remove_rmap+0x2e/0xef0 [ 398.781456][ C1] unmap_page_range+0x10db/0x25b0 [ 398.786586][ C1] unmap_vmas+0x260/0x390 [ 398.790911][ C1] ? unmap_vmas+0x1bd/0x390 [ 398.795413][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 398.800608][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 398.805673][ C1] exit_mmap+0x20d/0x970 [ 398.809920][ C1] ? vm_brk+0x20/0x20 [ 398.813898][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 398.819536][ C1] ? exit_mm+0x23d/0x350 [ 398.824038][ C1] ? uprobe_clear_state+0x274/0x290 [ 398.829244][ C1] __mmput+0x118/0x3a0 [ 398.833312][ C1] exit_mm+0x24d/0x350 [ 398.837384][ C1] ? sysctl_delayacct+0x220/0x220 [ 398.842499][ C1] ? do_exit+0x2570/0x2570 [ 398.846920][ C1] ? tty_audit_exit+0x149/0x1f0 [ 398.851825][ C1] do_exit+0x958/0x2570 [ 398.855995][ C1] ? put_task_struct+0x80/0x80 [ 398.860763][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 398.866747][ C1] ? lock_chain_count+0x20/0x20 [ 398.871598][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 398.876623][ C1] do_group_exit+0x229/0x2e0 [ 398.881214][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 398.886442][ C1] get_signal+0x1259/0x1340 [ 398.890960][ C1] ? futex_wake+0x426/0x4f0 [ 398.895471][ C1] arch_do_signal_or_restart+0xc4/0x1310 [ 398.901128][ C1] ? do_futex+0x2e2/0x320 [ 398.905459][ C1] ? get_sigframe_size+0x10/0x10 [ 398.910401][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 398.916324][ C1] ? fput+0x150/0x1a0 [ 398.920320][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 398.925791][ C1] exit_to_user_mode_loop+0x70/0x110 [ 398.931086][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 398.936634][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 398.942090][ C1] do_syscall_64+0x58/0xa0 [ 398.946505][ C1] ? clear_bhb_loop+0x60/0xb0 [ 398.951215][ C1] ? clear_bhb_loop+0x60/0xb0 [ 398.955891][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.961812][ C1] RIP: 0033:0x7f63e9b9fb19 [ 398.966224][ C1] Code: Unable to access opcode bytes at 0x7f63e9b9faef. [ 398.973231][ C1] RSP: 002b:00007f63eaa240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 398.981643][ C1] RAX: 0000000000000001 RBX: 00007f63e9e25fa8 RCX: 00007f63e9b9fb19 [ 398.989612][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f63e9e25fac [ 398.997580][ C1] RBP: 00007f63e9e25fa0 R08: 00140b663f084224 R09: 0000000000000000 [ 399.005561][ C1] R10: 0000000000000089 R11: 0000000000000246 R12: 0000000000000000 [ 399.013528][ C1] R13: 00007f63e9e26038 R14: 00007ffeb4ea85c0 R15: 00007ffeb4ea86a8 [ 399.021521][ C1] [ 399.024540][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 399.031806][ C1] CPU: 1 PID: 8161 Comm: syz.5.970 Not tainted syzkaller #0 [ 399.039096][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 399.049163][ C1] Call Trace: [ 399.052444][ C1] [ 399.055300][ C1] dump_stack_lvl+0x188/0x24e [ 399.060006][ C1] ? memcpy+0x3c/0x60 [ 399.063985][ C1] ? show_regs_print_info+0x12/0x12 [ 399.069183][ C1] ? load_image+0x410/0x410 [ 399.073780][ C1] panic+0x2d3/0x710 [ 399.077673][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 399.082178][ C1] __warn+0x2f8/0x4f0 [ 399.086239][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 399.090998][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 399.095764][ C1] report_bug+0x2ba/0x4f0 [ 399.100277][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 399.105066][ C1] handle_bug+0x3a/0x70 [ 399.109216][ C1] exc_invalid_op+0x16/0x40 [ 399.113731][ C1] asm_exc_invalid_op+0x16/0x20 [ 399.118588][ C1] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 399.123957][ C1] Code: 49 8b 0e 48 c7 c0 80 08 5e 8b 49 c7 c0 a0 08 5e 8b 4c 0f 44 c0 48 c7 c7 40 08 5e 8b 48 c7 c6 a9 84 85 8c 89 ea e8 e4 b3 d2 fa <0f> 0b e9 c4 fe ff ff e8 18 52 07 fb 49 bc 00 00 00 00 00 fc ff df [ 399.143574][ C1] RSP: 0018:ffffc900001e0768 EFLAGS: 00010046 [ 399.149656][ C1] RAX: efbef6e51c1d8c00 RBX: ffff888025c540e0 RCX: ffff88802e9ada00 [ 399.157633][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 399.165693][ C1] RBP: 0000000000000081 R08: ffff8880b8d279db R09: 1ffff110171a4f3b [ 399.173668][ C1] R10: dffffc0000000000 R11: ffffed10171a4f3c R12: dffffc0000000000 [ 399.181637][ C1] R13: ffff888025c5410d R14: ffff888025c540e8 R15: ffff888021bd543a [ 399.189668][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 399.194440][ C1] hidg_set_alt+0x126/0xa00 [ 399.198952][ C1] ? usb_gadget_set_state+0x142/0x310 [ 399.204328][ C1] set_config+0x6e8/0xf70 [ 399.208663][ C1] composite_setup+0x194c/0x2b00 [ 399.213604][ C1] configfs_composite_setup+0xc3/0x100 [ 399.219067][ C1] dummy_timer+0x12ed/0x35d0 [ 399.223679][ C1] ? mark_lock+0x94/0x320 [ 399.228016][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 399.233055][ C1] ? lock_chain_count+0x20/0x20 [ 399.237919][ C1] ? dummy_free_streams+0x520/0x520 [ 399.243211][ C1] __hrtimer_run_queues+0x522/0xc90 [ 399.248777][ C1] ? dummy_free_streams+0x520/0x520 [ 399.253977][ C1] ? hrtimer_interrupt+0x980/0x980 [ 399.259095][ C1] hrtimer_run_softirq+0x173/0x290 [ 399.264205][ C1] handle_softirqs+0x291/0x910 [ 399.268979][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 399.273834][ C1] ? do_softirq+0x210/0x210 [ 399.278326][ C1] ? hrtimer_interrupt+0x775/0x980 [ 399.283524][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 399.288736][ C1] __irq_exit_rcu+0x13b/0x230 [ 399.293406][ C1] ? irq_exit_rcu+0x20/0x20 [ 399.297951][ C1] irq_exit_rcu+0x5/0x20 [ 399.302202][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 399.307860][ C1] [ 399.310793][ C1] [ 399.313722][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 399.319746][ C1] RIP: 0010:folio_memcg_lock+0x103/0x320 [ 399.325407][ C1] Code: 48 c7 c2 60 74 b8 8a e8 cb 63 8a ff 0f 1f 44 00 00 4c 89 e7 e8 0e d5 ff ff 48 85 c0 0f 84 ce 01 00 00 49 89 c7 4c 89 64 24 10 <48> b8 00 00 00 00 00 fc ff df 41 c6 44 06 04 00 48 c7 44 24 40 00 [ 399.345105][ C1] RSP: 0018:ffffc90003b67340 EFLAGS: 00000286 [ 399.351199][ C1] RAX: ffff88813fef8000 RBX: ffffea0001c50c40 RCX: ffffffff81da83d3 [ 399.359461][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001c50c40 [ 399.367433][ C1] RBP: ffffc90003b67410 R08: ffffea0001c50c47 R09: 1ffffd400038a188 [ 399.375488][ C1] R10: dffffc0000000000 R11: fffff9400038a189 R12: ffffea0001c50c40 [ 399.383477][ C1] R13: 0000000000000000 R14: 1ffff9200076ce6c R15: ffff88813fef8000 [ 399.391453][ C1] ? __folio_memcg+0x63/0x170 [ 399.396143][ C1] ? folio_memcg_lock+0x7d/0x320 [ 399.401102][ C1] ? mem_cgroup_get_oom_group+0x350/0x350 [ 399.406826][ C1] ? folio_mark_accessed+0x329/0x14e0 [ 399.412198][ C1] ? folio_activate_fn+0x1ff0/0x1ff0 [ 399.417481][ C1] page_remove_rmap+0x2e/0xef0 [ 399.422241][ C1] unmap_page_range+0x10db/0x25b0 [ 399.427279][ C1] unmap_vmas+0x260/0x390 [ 399.431598][ C1] ? unmap_vmas+0x1bd/0x390 [ 399.436180][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 399.441374][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 399.446428][ C1] exit_mmap+0x20d/0x970 [ 399.450683][ C1] ? vm_brk+0x20/0x20 [ 399.454667][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 399.460347][ C1] ? exit_mm+0x23d/0x350 [ 399.464603][ C1] ? uprobe_clear_state+0x274/0x290 [ 399.469800][ C1] __mmput+0x118/0x3a0 [ 399.473868][ C1] exit_mm+0x24d/0x350 [ 399.477939][ C1] ? sysctl_delayacct+0x220/0x220 [ 399.482969][ C1] ? do_exit+0x2570/0x2570 [ 399.488026][ C1] ? tty_audit_exit+0x149/0x1f0 [ 399.492871][ C1] do_exit+0x958/0x2570 [ 399.497039][ C1] ? put_task_struct+0x80/0x80 [ 399.501822][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 399.507825][ C1] ? lock_chain_count+0x20/0x20 [ 399.512713][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 399.517745][ C1] do_group_exit+0x229/0x2e0 [ 399.522339][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 399.527547][ C1] get_signal+0x1259/0x1340 [ 399.532079][ C1] ? futex_wake+0x426/0x4f0 [ 399.536630][ C1] arch_do_signal_or_restart+0xc4/0x1310 [ 399.542282][ C1] ? do_futex+0x2e2/0x320 [ 399.546607][ C1] ? get_sigframe_size+0x10/0x10 [ 399.551541][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 399.557430][ C1] ? fput+0x150/0x1a0 [ 399.561513][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 399.567061][ C1] exit_to_user_mode_loop+0x70/0x110 [ 399.572346][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 399.577892][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 399.583347][ C1] do_syscall_64+0x58/0xa0 [ 399.587769][ C1] ? clear_bhb_loop+0x60/0xb0 [ 399.592466][ C1] ? clear_bhb_loop+0x60/0xb0 [ 399.597147][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.603034][ C1] RIP: 0033:0x7f63e9b9fb19 [ 399.607442][ C1] Code: Unable to access opcode bytes at 0x7f63e9b9faef. [ 399.614446][ C1] RSP: 002b:00007f63eaa240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 399.622850][ C1] RAX: 0000000000000001 RBX: 00007f63e9e25fa8 RCX: 00007f63e9b9fb19 [ 399.631077][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f63e9e25fac [ 399.639062][ C1] RBP: 00007f63e9e25fa0 R08: 00140b663f084224 R09: 0000000000000000 [ 399.647023][ C1] R10: 0000000000000089 R11: 0000000000000246 R12: 0000000000000000 [ 399.655010][ C1] R13: 00007f63e9e26038 R14: 00007ffeb4ea85c0 R15: 00007ffeb4ea86a8 [ 399.662988][ C1] [ 399.666598][ C1] Kernel Offset: disabled [ 399.670984][ C1] Rebooting in 86400 seconds..