last executing test programs: 5m57.353502251s ago: executing program 0 (id=1): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) 5m56.921448031s ago: executing program 0 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0xa}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x8, 0x9, 0x7d, 0x0, 0x1, 0x9, 0x3, 0x8, 0x1, 0x2, 0x5, 0x3d, 0x0, 0x0, 0x4, 0xc0, 0xfd, 0x9, 0x2, '\x00', 0x5, 0xfffffffc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m56.620283005s ago: executing program 0 (id=6): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 5m42.967632792s ago: executing program 0 (id=10): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{}, {0x18}, 0xfffffffc, 0x6}) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000006, 0x4) sendmsg$inet6(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000005) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x44, &(0x7f0000000000)={0xffffffffffffffb0, 0x0}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) socket(0x2a, 0x800, 0x7fff) rt_tgsigqueueinfo(0x0, 0x0, 0x2c, 0x0) 5m24.228346121s ago: executing program 32 (id=10): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{}, {0x18}, 0xfffffffc, 0x6}) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000006, 0x4) sendmsg$inet6(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000005) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x44, &(0x7f0000000000)={0xffffffffffffffb0, 0x0}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) socket(0x2a, 0x800, 0x7fff) rt_tgsigqueueinfo(0x0, 0x0, 0x2c, 0x0) 3m45.875063812s ago: executing program 1 (id=50): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0xb, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(&(0x7f0000000180)=@sg0, &(0x7f00000001c0)='./debug\x00', &(0x7f0000000680)='gfs2\x00', 0x200000, &(0x7f00000006c0)='data=writeback') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x4000002, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0xfffffffe, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x7f, 0xe, 0x8, 0x8000806f, 0x100006, 0x200, 0x1, 0x9, 0x200, 0x40, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x9, 0x4, 0xffffffff, 0x40], [0x10000009, 0x5ae, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c8, 0x9, 0xfffffffc, 0x8, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x3, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x3, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x1, 0x7f, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0x9, 0xffffff80, 0x4, 0x5, 0x0, 0x6, 0x5, 0x1, 0x82, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x200, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0xfff, 0x3, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ef, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0xb, 0x3, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x5, 0xc8, 0x2001, 0xfffff000, 0x2, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x8, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d683, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x401]}, 0x45c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) read$FUSE(r2, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, r3, {{0x2, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 3m36.805560462s ago: executing program 1 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) io_setup(0x5, &(0x7f0000000000)=0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0xfffffff5, "421ae3753785259286be000000000000004fdc9312f200fd4f00", 0xffffffffffffffff}) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$inet(r1, &(0x7f0000001940)={&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000018c0)=[{&(0x7f00000004c0)="8a11c73a041f69a6fc6ef33d7a2d89b5ee6090dbb3af9d8bb8e6f6f6f8822124cb98998d74645aa5fc570fa049a0c0b4298c67f6314b20966e6d2423275bce0e39b1da5fd542b946f72f2cfef81c673bdc0f7337d8d0c621197b1586e5407a8f7b340737aed1a265536d1106f7d7cdcfb38dfdcc5c256dfdc8ab6fc33f44fca2a807779ddccab051a5360e44a764fd11662f985bd5499704a9e7a92c407ce6cb0fe45d3f8b12b86b7dc343c0f60dea013b1d7a6ce9e292b3de7c567eac4aa97cace40607", 0xc4}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="9bad637aef1f52d4f2cbc7292a5ef04268a3776cb6341907b89baca8f74c365c67ffe262abb3024d5d0900008000000000375e4d0827260dc567ade0458f28734466a6135c66ea51e6d1ff932524832caa35bde1004f71687e63d8ff71ec", 0x5e}, {&(0x7f0000001640)="88758a802980145bf8b1b4206b65b1188b92addeb0b7bac37cd46f16728f8beb7a702b15113ec5ca0e99c3d4e184040dee9ef81e6becffd4a95a5ff0451cad94415077b67728f84101133decaf6cccf6be8a98845496cc9f0fdadd41dfb12d03f07b171b9df5f8202bf4b7270debc6b5056f8e648b386b14ee1ff07c8beca7a34d043014fab40c7846c7", 0x8a}, {&(0x7f0000001700)="68074ce5b041784b591f1c65467cc215dce62e9f1aeaf6117fd2bcd43ddbe5643a11c02863f249f28ad83d46e4519966c96eb0b8019c1de777640a2bf87a13732b13f4bb4966f1f6ee2097488dff1aa440a794f2741fbf9bce30e164cfab48b784e79ecb64a5", 0x66}, {&(0x7f0000001780)="d253fd2eb95b54759bccff583db3ceaa77", 0x11}, {&(0x7f00000017c0)="710e30aae95672fe829410c9d4be8595cf1e872b0cb5b10f75f27873cabeced0077f524cfec8b701b6fd7bbd694968757e4cf9b782d6c7e2cf1c2b7b9c982ab64a7fca954fb0c442db2caab8f7c7f967b7c050df9b878e495a8f65000e59ae8e1f946b02d1d626d9e6761e9750d524cf1e62a584a54c80bf68f322222a3ac24ef2fbd6501a0c834584ee473d371d760f9d1d9c5deab4b8edcd8c5e7fae018d05dbfdd3fb12da359788dea6d8e4e5d669bf242cc83e9ba420d8b9b4c0b84fdad524769d656085996b5a8c8049717820d8875520f5162241a7a022a254af29376b52e8c139f6cb54597c246b153c65e4", 0xef}], 0x7, &(0x7f0000001900)=[@ip_ttl={{0x10, 0x0, 0x2, 0x8000}}], 0x10}, 0xc0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r5, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000080)=""/240, 0xfffffffffffffcea, 0x10020, 0x0, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x2) r7 = syz_open_procfs(0x0, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x100000000000002a) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x8946, &(0x7f0000000100)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r9, &(0x7f00000002c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/my_zoned_dev\x00', 0x2, 0x110) read(r10, &(0x7f0000000400), 0x200) 3m22.202912815s ago: executing program 1 (id=56): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000400)={0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="40068a"], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 3m9.103203805s ago: executing program 1 (id=60): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0xb, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(&(0x7f0000000180)=@sg0, &(0x7f00000001c0)='./debug\x00', &(0x7f0000000680)='gfs2\x00', 0x200000, &(0x7f00000006c0)='data=writeback') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x4000002, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0xfffffffe, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x7f, 0xe, 0x8, 0x8000806f, 0x100006, 0x200, 0x1, 0x9, 0x200, 0x40, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x9, 0x4, 0xffffffff, 0x40], [0x10000009, 0x5ae, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c8, 0x9, 0xfffffffc, 0x8, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x3, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x3, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x1, 0x7f, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0x9, 0xffffff80, 0x4, 0x5, 0x0, 0x6, 0x5, 0x1, 0x82, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x200, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0xfff, 0x3, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ef, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0xb, 0x3, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x5, 0xc8, 0x2001, 0xfffff000, 0x2, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x8, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d683, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x401]}, 0x45c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) read$FUSE(r2, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, r3, {{0x2, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 2m58.804020973s ago: executing program 1 (id=62): syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda6d, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x1492) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 2m48.044926153s ago: executing program 1 (id=65): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m43.429190182s ago: executing program 3 (id=67): unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f00000022c0), 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRES64=r1, @ANYBLOB="2c6772ba6d705fe9643d5eef3353f79dbb39df286506369b195489b78fec604f2fcbcb26c053c22daf93ce4be6f9faabfb32e0dcb5eaac8267a125bc62fcbd05", @ANYRESDEC=0x0, @ANYBLOB=',all']) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m29.696741923s ago: executing program 33 (id=65): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m29.244019094s ago: executing program 3 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 2m21.694036962s ago: executing program 3 (id=72): syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda6d, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x1492) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 2m11.297158625s ago: executing program 3 (id=74): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m0.317475605s ago: executing program 3 (id=77): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) 1m50.215737084s ago: executing program 3 (id=79): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xec}}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) set_mempolicy(0x8006, 0x0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44) set_mempolicy(0x2, &(0x7f0000000600)=0x54, 0x6) ptrace(0x4206, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) 1m31.95318304s ago: executing program 34 (id=79): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xec}}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) set_mempolicy(0x8006, 0x0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44) set_mempolicy(0x2, &(0x7f0000000600)=0x54, 0x6) ptrace(0x4206, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) 41.379157818s ago: executing program 2 (id=88): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0xb, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(&(0x7f0000000180)=@sg0, &(0x7f00000001c0)='./debug\x00', &(0x7f0000000680)='gfs2\x00', 0x200000, &(0x7f00000006c0)='data=writeback') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x4000002, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0xfffffffe, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x7f, 0xe, 0x8, 0x8000806f, 0x100006, 0x200, 0x1, 0x9, 0x200, 0x40, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x9, 0x4, 0xffffffff, 0x40], [0x10000009, 0x5ae, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c8, 0x9, 0xfffffffc, 0x8, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x3, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x3, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x1, 0x7f, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0x9, 0xffffff80, 0x4, 0x5, 0x0, 0x6, 0x5, 0x1, 0x82, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x200, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0xfff, 0x3, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ef, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0xb, 0x3, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x5, 0xc8, 0x2001, 0xfffff000, 0x2, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x8, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d683, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x401]}, 0x45c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) read$FUSE(r2, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, r3, {{0x2, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 33.527293101s ago: executing program 2 (id=89): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 29.047890942s ago: executing program 2 (id=90): syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) 20.47247612s ago: executing program 2 (id=91): syz_emit_vhci(&(0x7f0000003980)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x2}, {0x0, 0xc8}}}, 0x6) 12.284990208s ago: executing program 2 (id=92): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_TDX_GET_CPUID(r0, 0xc004aeba, &(0x7f0000000640)={0x5, 0x0, &(0x7f0000000500)={0x7, 0x0, [{0x1, 0xe1e, 0x1, 0x60, 0x1000, 0xfffffff9, 0xffffffff}, {0x1, 0xdb37, 0x2, 0x3, 0x5, 0x80000001, 0xfff}, {0x0, 0x5, 0x3, 0x4, 0x800, 0x4, 0x1}, {0x1, 0x4, 0x6, 0x0, 0x6, 0x3, 0xfe}, {0x7, 0x3, 0xf, 0x3, 0x5, 0x3, 0x2}, {0xd, 0x8, 0x6, 0xad, 0x8, 0xc, 0x9f3d}, {0x80000007, 0x5, 0x4, 0xffffffa1, 0x4, 0x3, 0xfc}]}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000200)) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x8080}, 0x4001) 0s ago: executing program 2 (id=93): syz_emit_ethernet(0x5e, &(0x7f0000000280)={@link_local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, '9u\x00', 0x28, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@routing={0x21, 0x2, 0x0, 0xb, 0x0, [@mcast1]}], {{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '8(}', 0xff, "1d00"}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write(r0, &(0x7f0000000100)="520000002300010100020600"/41, 0x29) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 74.159834][ T5759] cgroup: Unknown subsys name 'net' [ 74.268612][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.644887][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.165751][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.174158][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.182847][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.192193][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.201928][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.211248][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.219112][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.227416][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.231876][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.237210][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.242547][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.248500][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.257309][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.263837][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.270601][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.277407][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.284094][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.292005][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.305782][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.312216][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.320311][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.330416][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.350804][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.358691][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.756643][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 77.816193][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 77.889307][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.897144][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.904985][ T5772] bridge_slave_0: entered allmulticast mode [ 77.912415][ T5772] bridge_slave_0: entered promiscuous mode [ 77.941720][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 77.954871][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.962766][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.970070][ T5772] bridge_slave_1: entered allmulticast mode [ 77.977204][ T5772] bridge_slave_1: entered promiscuous mode [ 78.064258][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.073601][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.080825][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.089038][ T5774] bridge_slave_0: entered allmulticast mode [ 78.095939][ T5774] bridge_slave_0: entered promiscuous mode [ 78.104967][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.112196][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.119391][ T5774] bridge_slave_1: entered allmulticast mode [ 78.127638][ T5774] bridge_slave_1: entered promiscuous mode [ 78.134562][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 78.152162][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.237346][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.260510][ T5772] team0: Port device team_slave_0 added [ 78.268695][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.276149][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.284068][ T5771] bridge_slave_0: entered allmulticast mode [ 78.290782][ T5771] bridge_slave_0: entered promiscuous mode [ 78.299938][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.331886][ T5772] team0: Port device team_slave_1 added [ 78.338543][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.346559][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.354117][ T5771] bridge_slave_1: entered allmulticast mode [ 78.360797][ T5771] bridge_slave_1: entered promiscuous mode [ 78.371013][ T5774] team0: Port device team_slave_0 added [ 78.408280][ T5774] team0: Port device team_slave_1 added [ 78.438206][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.445997][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.472246][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.512904][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.519889][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.548496][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.562018][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.583891][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.593376][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.600563][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.610329][ T5773] bridge_slave_0: entered allmulticast mode [ 78.617236][ T5773] bridge_slave_0: entered promiscuous mode [ 78.626491][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.633762][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.640933][ T5773] bridge_slave_1: entered allmulticast mode [ 78.647869][ T5773] bridge_slave_1: entered promiscuous mode [ 78.662613][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.669605][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.696237][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.746585][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.754379][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.780401][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.808155][ T5771] team0: Port device team_slave_0 added [ 78.862770][ T5772] hsr_slave_0: entered promiscuous mode [ 78.869476][ T5772] hsr_slave_1: entered promiscuous mode [ 78.880171][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.891036][ T5771] team0: Port device team_slave_1 added [ 78.903050][ T5774] hsr_slave_0: entered promiscuous mode [ 78.909284][ T5774] hsr_slave_1: entered promiscuous mode [ 78.916957][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.924916][ T5774] Cannot create hsr debugfs directory [ 78.950974][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.009357][ T5773] team0: Port device team_slave_0 added [ 79.026619][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.033697][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.060217][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.081120][ T5773] team0: Port device team_slave_1 added [ 79.093434][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.100417][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.128741][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.198295][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.205613][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.232042][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.265648][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.273016][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.299085][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.382859][ T5785] Bluetooth: hci3: command tx timeout [ 79.382872][ T5087] Bluetooth: hci0: command tx timeout [ 79.394421][ T5087] Bluetooth: hci2: command tx timeout [ 79.394642][ T5087] Bluetooth: hci1: command tx timeout [ 79.413360][ T5773] hsr_slave_0: entered promiscuous mode [ 79.419884][ T5773] hsr_slave_1: entered promiscuous mode [ 79.426726][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.434401][ T5773] Cannot create hsr debugfs directory [ 79.445701][ T5771] hsr_slave_0: entered promiscuous mode [ 79.452246][ T5771] hsr_slave_1: entered promiscuous mode [ 79.458531][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.466699][ T5771] Cannot create hsr debugfs directory [ 79.669093][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.679646][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.709734][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.743650][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.840424][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.859067][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.875180][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.886954][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.981003][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.014280][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.025203][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.062620][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.119875][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.142741][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.153684][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.182516][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.247330][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.263791][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.324548][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.349472][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.356979][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.375908][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.403828][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.410977][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.445310][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.452534][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.465846][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.483530][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.490635][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.552699][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.561040][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.588990][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.596192][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.638795][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.645993][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.665173][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.736654][ T3423] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.743967][ T3423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.774911][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.782123][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.039600][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.176985][ T5774] veth0_vlan: entered promiscuous mode [ 81.215249][ T5774] veth1_vlan: entered promiscuous mode [ 81.279761][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.360391][ T5772] veth0_vlan: entered promiscuous mode [ 81.371297][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.395468][ T5774] veth0_macvtap: entered promiscuous mode [ 81.407308][ T5774] veth1_macvtap: entered promiscuous mode [ 81.426491][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.436144][ T5772] veth1_vlan: entered promiscuous mode [ 81.462214][ T5087] Bluetooth: hci3: command tx timeout [ 81.462362][ T5785] Bluetooth: hci2: command tx timeout [ 81.467633][ T5087] Bluetooth: hci1: command tx timeout [ 81.475318][ T5777] Bluetooth: hci0: command tx timeout [ 81.503631][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.531054][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.560080][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.570538][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.583750][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.593763][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.620320][ T5773] veth0_vlan: entered promiscuous mode [ 81.645372][ T5772] veth0_macvtap: entered promiscuous mode [ 81.667150][ T5772] veth1_macvtap: entered promiscuous mode [ 81.682194][ T5773] veth1_vlan: entered promiscuous mode [ 81.728051][ T5771] veth0_vlan: entered promiscuous mode [ 81.784391][ T5771] veth1_vlan: entered promiscuous mode [ 81.803090][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.814353][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.826967][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.837939][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.840101][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.857531][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.869552][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.880620][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.923257][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.932514][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.941249][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.953522][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.967538][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.976955][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.983898][ T5773] veth0_macvtap: entered promiscuous mode [ 82.017554][ T5773] veth1_macvtap: entered promiscuous mode [ 82.041182][ T5771] veth0_macvtap: entered promiscuous mode [ 82.068612][ T5771] veth1_macvtap: entered promiscuous mode [ 82.089366][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.100690][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.111160][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.127543][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.140101][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.180138][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.200307][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.212464][ T5838] random: crng reseeded on system resumption [ 82.214798][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.230569][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.247247][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.279391][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.289398][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.301826][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.310580][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.337081][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.348981][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.359328][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.370423][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.385937][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.397429][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.414467][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.442475][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.453352][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.464414][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.475318][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.485664][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.496515][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.508474][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.531029][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.541089][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.554129][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.564085][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.675819][ T5840] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.758502][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.766979][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.828410][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.842553][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.894977][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.913298][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.954501][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.980779][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.030944][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.073943][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.183408][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.191270][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.543160][ T5785] Bluetooth: hci1: command tx timeout [ 83.548706][ T5785] Bluetooth: hci2: command tx timeout [ 83.554599][ T5785] Bluetooth: hci3: command tx timeout [ 83.560125][ T5785] Bluetooth: hci0: command tx timeout [ 84.711114][ T5856] fuse: Unknown parameter '0xffffffffffffffff' [ 85.653084][ T5785] Bluetooth: hci0: command tx timeout [ 85.659410][ T5785] Bluetooth: hci3: command tx timeout [ 85.670847][ T5775] Bluetooth: hci2: command tx timeout [ 85.678987][ T5785] Bluetooth: hci1: command tx timeout [ 87.128124][ T23] cfg80211: failed to load regulatory.db [ 89.441867][ C0] hrtimer: interrupt took 1618067 ns [ 105.662849][ T27] audit: type=1326 audit(1789162595.307:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e439e159 code=0x7ffc0000 [ 105.781895][ T27] audit: type=1326 audit(1789162595.757:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e439e159 code=0x7ffc0000 [ 106.125550][ T27] audit: type=1326 audit(1789162596.177:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0e439e159 code=0x7ffc0000 [ 106.253231][ T27] audit: type=1326 audit(1789162596.177:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e439e159 code=0x7ffc0000 [ 106.422736][ T27] audit: type=1326 audit(1789162596.177:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e439e159 code=0x7ffc0000 [ 106.578379][ T27] audit: type=1326 audit(1789162596.357:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb0e439e159 code=0x7ffc0000 [ 106.749490][ T27] audit: type=1326 audit(1789162596.767:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e439e159 code=0x7ffc0000 [ 106.792468][ T5889] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 106.863361][ T27] audit: type=1326 audit(1789162596.767:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e439e159 code=0x7ffc0000 [ 107.125623][ T27] audit: type=1326 audit(1789162597.167:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.0.10" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb0e439e159 code=0x7ffc0000 [ 107.774444][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.582420][ T5899] Zero length message leads to an empty skb [ 116.394519][ T5905] fuse: Unknown parameter '0xffffffffffffffff' [ 126.856147][ T5920] overlayfs: failed to resolve './file1': -2 [ 126.959276][ T5923] /dev/sg0: Can't lookup blockdev [ 133.176305][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.194764][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.647545][ T5928] overlayfs: overlapping lowerdir path [ 142.008881][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.053479][ T5943] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(9) [ 143.253319][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.563738][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.820705][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.855623][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.899142][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.954101][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.026287][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.047681][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.084267][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.282639][ T5775] Bluetooth: hci2: command tx timeout [ 152.344246][ T5775] Bluetooth: hci2: command tx timeout [ 153.198025][ T5957] fuse: Unknown parameter '0xffffffffffffffff' [ 154.422906][ T5775] Bluetooth: hci2: command tx timeout [ 156.509226][ T5775] Bluetooth: hci2: command tx timeout [ 162.078925][ T5983] overlayfs: failed to resolve './file1': -2 [ 175.415109][ T11] hsr_slave_0: left promiscuous mode [ 175.614468][ T11] hsr_slave_1: left promiscuous mode [ 175.825165][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.922398][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.125501][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.234086][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.552191][ T11] bridge_slave_1: left allmulticast mode [ 176.558338][ T11] bridge_slave_1: left promiscuous mode [ 176.634497][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.938348][ T11] bridge_slave_0: left allmulticast mode [ 177.011719][ T11] bridge_slave_0: left promiscuous mode [ 177.019043][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.006964][ T11] veth1_macvtap: left promiscuous mode [ 178.059226][ T11] veth0_macvtap: left promiscuous mode [ 178.093550][ T11] veth1_vlan: left promiscuous mode [ 178.100692][ T11] veth0_vlan: left promiscuous mode [ 183.046252][ T6021] fuse: Unknown parameter '0xffffffffffffffff' [ 192.699949][ T6034] overlayfs: failed to resolve './file1': -2 [ 192.775911][ T6037] /dev/sg0: Can't lookup blockdev [ 194.616062][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.641109][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.674871][ T11] team0 (unregistering): Port device team_slave_1 removed [ 201.797488][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.806362][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 201.806895][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 203.735862][ T11] team0 (unregistering): Port device team_slave_0 removed [ 205.398770][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.746511][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.476038][ T6053] /dev/sg0: Can't lookup blockdev [ 211.446371][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.460063][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.523633][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.687551][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.703938][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.834834][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.048934][ T5777] Bluetooth: hci4: command tx timeout [ 216.102215][ T5777] Bluetooth: hci4: command tx timeout [ 216.588524][ T6061] fuse: Unknown parameter '0xffffffffffffffff' [ 218.185156][ T5777] Bluetooth: hci4: command tx timeout [ 218.692139][ T6066] overlayfs: failed to resolve './file0': -2 [ 218.753243][ T6071] /dev/sg0: Can't lookup blockdev [ 219.682970][ T11] bond0 (unregistering): Released all slaves [ 220.262716][ T5777] Bluetooth: hci4: command tx timeout [ 229.360071][ T6088] jffs2: notice: (6088) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 229.518089][ T6085] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 231.853068][ T27] audit: type=1800 audit(1789162721.877:11): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.53" name="power" dev="configfs" ino=9238 res=0 errno=0 [ 236.124083][ T6058] chnl_net:caif_netlink_parms(): no params data found [ 238.284117][ T6107] binder: 6104:6107 ioctl c0306201 0 returned -14 [ 242.752863][ T5780] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 243.131993][ T5780] usb 2-1: Using ep0 maxpacket: 8 [ 243.273260][ T5780] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 243.313718][ T5780] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.419704][ T5780] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.490050][ T5780] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.582098][ T5780] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.672934][ T5780] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 243.761692][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.353256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 249.546482][ T5780] usb 2-1: usb_control_msg returned -110 [ 249.562406][ T5780] usbtmc 2-1:16.0: can't read capabilities [ 250.255203][ T5816] usb 2-1: USB disconnect, device number 2 [ 256.045199][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.073112][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.248163][ T6134] /dev/sg0: Can't lookup blockdev [ 256.330141][ T27] audit: type=1800 audit(1789162746.377:12): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.60" name="file0" dev="overlay" ino=130 res=0 errno=0 [ 261.652610][ T3501] bond0 (unregistering): Released all slaves [ 267.391473][ T6147] jffs2: notice: (6147) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 276.413888][ T6162] overlayfs: failed to resolve './file0': -2 [ 276.499467][ T6167] /dev/sg0: Can't lookup blockdev [ 279.682532][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.705443][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.784080][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.884531][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.985799][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.034889][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.352945][ T5785] Bluetooth: hci2: command tx timeout [ 283.128520][ T6178] fuse: Unknown parameter '0xffffffffffffffff' [ 283.200396][ T60] bond0 (unregistering): Released all slaves [ 284.422645][ T5785] Bluetooth: hci2: command tx timeout [ 286.501969][ T5785] Bluetooth: hci2: command tx timeout [ 288.591951][ T5785] Bluetooth: hci2: command tx timeout [ 296.051539][ C1] sched: RT throttling activated [ 300.889990][ T6174] chnl_net:caif_netlink_parms(): no params data found [ 303.449726][ T6202] jffs2: notice: (6202) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 305.892459][ T6213] /dev/sg0: Can't lookup blockdev [ 314.318796][ T6220] binder_alloc: 6219: binder_alloc_buf, no vma [ 315.516785][ T6223] overlayfs: failed to resolve './file0': -2 [ 315.642311][ T6226] /dev/sg0: Can't lookup blockdev [ 317.507248][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.515682][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.339408][ T3446] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.600665][ T3446] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.072525][ T3446] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.960360][ T3446] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.176760][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.264748][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.345159][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.367107][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.444485][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 328.493343][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 330.823052][ T5777] Bluetooth: hci3: command tx timeout [ 332.902353][ T5777] Bluetooth: hci3: command tx timeout [ 334.345459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 334.652794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 334.755864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 335.062601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 335.165056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 335.472394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 335.574331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 335.652332][ T5785] Bluetooth: hci3: command tx timeout [ 336.904141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 337.211965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 337.702984][ T5785] Bluetooth: hci3: command tx timeout [ 351.119450][ T6262] jffs2: notice: (6262) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 351.668790][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.698011][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.720775][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.743592][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.775277][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 351.796209][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.944004][ T5777] Bluetooth: hci2: command tx timeout [ 356.022829][ T5777] Bluetooth: hci2: command tx timeout [ 358.103440][ T5777] Bluetooth: hci2: command tx timeout [ 360.184707][ T5777] Bluetooth: hci2: command tx timeout [ 360.398667][ T6274] /dev/sg0: Can't lookup blockdev [ 363.081925][ T3446] hsr_slave_0: left promiscuous mode [ 363.296746][ T3446] hsr_slave_1: left promiscuous mode [ 363.373339][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.381025][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.682220][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.690296][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.881873][ T3446] bridge_slave_1: left allmulticast mode [ 363.888061][ T3446] bridge_slave_1: left promiscuous mode [ 363.964745][ T3446] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.171225][ T3446] bridge_slave_0: left allmulticast mode [ 364.231654][ T3446] bridge_slave_0: left promiscuous mode [ 364.238711][ T3446] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.435284][ T3446] veth1_macvtap: left promiscuous mode [ 365.442103][ T3446] veth0_macvtap: left promiscuous mode [ 365.533263][ T3446] veth1_vlan: left promiscuous mode [ 365.540734][ T3446] veth0_vlan: left promiscuous mode [ 378.936860][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.944815][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.426588][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.477012][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.507601][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.593698][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.632896][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 380.646298][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.822606][ T5777] Bluetooth: hci0: command tx timeout [ 384.904638][ T5777] Bluetooth: hci0: command tx timeout [ 385.832426][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.861346][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.915424][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.949199][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.992642][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 386.023697][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 386.983358][ T5775] Bluetooth: hci0: command tx timeout [ 388.267073][ T5775] Bluetooth: hci3: command tx timeout [ 389.132142][ T5775] Bluetooth: hci0: command tx timeout [ 389.173039][ T3446] team0 (unregistering): Port device team_slave_1 removed [ 390.342327][ T5775] Bluetooth: hci3: command tx timeout [ 390.723107][ T3446] team0 (unregistering): Port device team_slave_0 removed [ 392.435255][ T5775] Bluetooth: hci3: command tx timeout [ 392.534690][ T3446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.466875][ T3446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.513255][ T5775] Bluetooth: hci3: command tx timeout [ 395.998898][ T6312] jffs2: notice: (6312) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 398.837567][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 398.865400][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 398.885278][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 398.933396][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 398.964848][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 398.982122][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 399.685474][ T3446] bond0 (unregistering): Released all slaves [ 401.061899][ T5777] Bluetooth: hci4: command tx timeout [ 403.153498][ T5777] Bluetooth: hci4: command tx timeout [ 405.224085][ T5777] Bluetooth: hci4: command tx timeout [ 407.302682][ T5777] Bluetooth: hci4: command tx timeout [ 421.128763][ T3526] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.022730][ T3526] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.301157][ T3526] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.535012][ T3526] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.205475][ T6315] chnl_net:caif_netlink_parms(): no params data found [ 440.445449][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.461837][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.233659][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 444.274847][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 444.288727][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 444.312723][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 444.334091][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 444.382457][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 446.132830][ T6367] Bluetooth: MGMT ver 1.22 [ 446.197015][ T5777] list_del corruption, ffff88805b0a8e00->next is LIST_POISON1 (dead000000000100) [ 446.212072][ T5777] ------------[ cut here ]------------ [ 446.218017][ T5777] kernel BUG at lib/list_debug.c:58! [ 446.228824][ T5777] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 446.234935][ T5777] CPU: 0 PID: 5777 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 446.242489][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.252543][ T5777] Workqueue: hci0 hci_cmd_sync_work [ 446.257771][ T5777] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 446.264712][ T5777] Code: 48 89 de e8 69 78 49 06 0f 0b 48 c7 c7 60 39 1d 8b 48 89 de e8 58 78 49 06 0f 0b 48 c7 c7 c0 39 1d 8b 48 89 de e8 47 78 49 06 <0f> 0b 48 c7 c7 20 3a 1d 8b 48 89 de e8 36 78 49 06 0f 0b 48 c7 c7 [ 446.284340][ T5777] RSP: 0018:ffffc90004b8fa00 EFLAGS: 00010246 [ 446.290408][ T5777] RAX: 000000000000004e RBX: ffff88805b0a8e00 RCX: 345f51646985ba00 [ 446.298378][ T5777] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 446.306345][ T5777] RBP: 1ffff1100b6151c3 R08: ffffc90004b8f707 R09: 1ffff92000971ee0 [ 446.314315][ T5777] R10: dffffc0000000000 R11: fffff52000971ee1 R12: dffffc0000000000 [ 446.322290][ T5777] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 446.330442][ T5777] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 446.339394][ T5777] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.346002][ T5777] CR2: 0000558d8b0d3d2d CR3: 00000000302bf000 CR4: 00000000003506f0 [ 446.354004][ T5777] Call Trace: [ 446.357285][ T5777] [ 446.360222][ T5777] mgmt_pending_remove+0x53/0x1f0 [ 446.365260][ T5777] mgmt_add_adv_patterns_monitor_complete+0x45d/0x730 [ 446.372035][ T5777] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 446.378456][ T5777] ? msft_monitor_supported+0x69/0x80 [ 446.383835][ T5777] ? hci_add_adv_monitor+0x17d/0x2a0 [ 446.389148][ T5777] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 446.395564][ T5777] hci_cmd_sync_work+0x24b/0x380 [ 446.400510][ T5777] ? process_scheduled_works+0x975/0x1600 [ 446.406233][ T5777] process_scheduled_works+0xa60/0x1600 [ 446.411831][ T5777] ? worker_attach_to_pool+0x370/0x370 [ 446.417304][ T5777] ? assign_work+0x3cc/0x5d0 [ 446.421900][ T5777] worker_thread+0xa5e/0xfe0 [ 446.426504][ T5777] ? _raw_spin_unlock+0x40/0x40 [ 446.431348][ T5777] ? __kthread_parkme+0x71/0x1c0 [ 446.436298][ T5777] kthread+0x2fa/0x390 [ 446.440374][ T5777] ? pr_cont_work+0x550/0x550 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 446.445058][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 446.449647][ T5777] ret_from_fork+0x48/0x80 [ 446.454063][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 446.458652][ T5777] ret_from_fork_asm+0x11/0x20 [ 446.463436][ T5777] [ 446.466465][ T5777] Modules linked in: [ 446.501674][ T5775] Bluetooth: hci3: command tx timeout [ 446.551586][ T5777] ---[ end trace 0000000000000000 ]--- [ 446.557103][ T5777] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 446.564166][ T5777] Code: 48 89 de e8 69 78 49 06 0f 0b 48 c7 c7 60 39 1d 8b 48 89 de e8 58 78 49 06 0f 0b 48 c7 c7 c0 39 1d 8b 48 89 de e8 47 78 49 06 <0f> 0b 48 c7 c7 20 3a 1d 8b 48 89 de e8 36 78 49 06 0f 0b 48 c7 c7 [ 446.584508][ T5777] RSP: 0018:ffffc90004b8fa00 EFLAGS: 00010246 [ 446.590608][ T5777] RAX: 000000000000004e RBX: ffff88805b0a8e00 RCX: 345f51646985ba00 [ 446.598741][ T5777] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 446.606779][ T5777] RBP: 1ffff1100b6151c3 R08: ffffc90004b8f707 R09: 1ffff92000971ee0 [ 446.614809][ T5777] R10: dffffc0000000000 R11: fffff52000971ee1 R12: dffffc0000000000 [ 446.622894][ T5777] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 446.630896][ T5777] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 446.641535][ T5777] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.648152][ T5777] CR2: 00007ffc4c4d2fb8 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 446.656300][ T5777] Kernel panic - not syncing: Fatal exception [ 446.662631][ T5777] Kernel Offset: disabled [ 446.666956][ T5777] Rebooting in 86400 seconds..