last executing test programs: 28m25.867768549s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 28m19.621020971s ago: executing program 2 (id=12): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203011b0000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7fff}}]}, 0x20}}, 0x0) unshare(0x2c020400) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r3) msgsnd(0x0, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf6944258ee9368b1ba1e73f5eac261096"}, 0x77, 0x800) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 28m16.359490903s ago: executing program 32 (id=8): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'gretap0\x00', 0x1000}) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffd0a, &(0x7f00000006c0)={&(0x7f0000000240)={0x34, r1, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB="0000000000000400000000000000000000f4f22c7d43ea49550000006126bf574484eb57992e12fd30ebba5a14a7e8a79f45a9d0f9903ad29b314224647ca00e869e7c9f39619aaa28fc1736d77a2f38874e30cdab639245055f85c72dc4f28f8ee11db25e52850a3bfe07275114d47e5123ed49b4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}}, 0x40000) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0xb, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) 28m16.286770318s ago: executing program 3 (id=14): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203011b0000000000000000000000000800010001"], 0x1c}}, 0x0) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r5) msgsnd(r3, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf6944258ee9368b1ba1e73f5eac261096"}, 0x77, 0x800) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 28m9.569255881s ago: executing program 3 (id=19): socketpair(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000080)=@caif=@dgm, 0x80, 0x0}, 0x40002100) 28m7.858215424s ago: executing program 3 (id=24): socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 28m6.493740198s ago: executing program 3 (id=26): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x0, 0x2}}, 0x2e) 28m5.790121634s ago: executing program 3 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$video(0x0, 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 28m3.984350258s ago: executing program 33 (id=12): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000203011b0000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7fff}}]}, 0x20}}, 0x0) unshare(0x2c020400) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r3) msgsnd(0x0, &(0x7f0000000180)={0x2, "8b51df41e042ab9c264074a9e67d6f8d1541cebc51e57e4e3af770088508323995a709e080cdbaf86f8d183f81b6f2536c220065880a93d14f2076817c50c439335327bf7d2bdb736ce9f9d589b42d449be7b80ce8ba8b85670274920df2bf6944258ee9368b1ba1e73f5eac261096"}, 0x77, 0x800) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 28m1.981933742s ago: executing program 3 (id=32): unshare(0x40060480) tkill(0x0, 0x13) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) syz_open_pts(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 27m45.422316026s ago: executing program 34 (id=32): unshare(0x40060480) tkill(0x0, 0x13) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) syz_open_pts(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 20m23.685084474s ago: executing program 0 (id=387): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 20m16.999571345s ago: executing program 0 (id=390): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x100) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r0, 0x0, &(0x7f0000000140)) 20m14.766891142s ago: executing program 0 (id=394): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x40881, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae000000540022c23031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r4}, 0x94) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r7, 0xbc7ae000) sendmsg$NFT_BATCH(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 20m9.162576419s ago: executing program 0 (id=396): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) mkdir(0x0, 0x21) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) 20m4.42522915s ago: executing program 0 (id=397): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 20m1.158910226s ago: executing program 0 (id=400): r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(0x0, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1ff) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 19m45.669586118s ago: executing program 35 (id=400): r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(0x0, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1ff) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 14m37.433473281s ago: executing program 36 (id=628): r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(0x0, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 12m2.633310938s ago: executing program 4 (id=696): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7fff}}]}, 0x20}}, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file1'}, 0xb) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffa) 11m58.59787349s ago: executing program 4 (id=697): memfd_create(0x0, 0x1) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=@newsa={0x120, 0x10, 0x421, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @replay_esn_val={0x1c, 0x17, {0x2000}}]}, 0x120}}, 0x0) r2 = msgget$private(0x0, 0x31) msgsnd(r2, &(0x7f00000035c0)=ANY=[@ANYBLOB="03"], 0x1b, 0x5f005e4c1fdd0237) msgrcv(r2, &(0x7f0000000040)={0x0, ""/175}, 0xb7, 0x3, 0x800) msgctl$IPC_STAT(r2, 0x2, &(0x7f00000003c0)=""/203) socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa1c0}, [@jmp={0x5, 0x0, 0x5, 0x7, 0x3, 0x20, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x4e, &(0x7f0000000280)=""/78, 0x41000, 0x40, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x7, 0x3, 0x5}, 0x10, 0x6150, 0xffffffffffffffff, 0x8, 0x0, &(0x7f00000005c0)=[{0x2, 0x1, 0xb, 0x7}, {0x0, 0x3, 0xfffffc01}, {0x4, 0x4, 0xf, 0x8}, {0x0, 0x1, 0x8, 0x10}, {0x1, 0x4, 0x9, 0x2}, {0x5, 0x2, 0x6, 0x8}, {0x1, 0x2, 0xa, 0x4}, {0x2, 0x3, 0x6, 0x2}], 0x10, 0x4}, 0x94) 11m54.277180337s ago: executing program 4 (id=698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="d405332bd2110f25b1e7ba53c15ecc4aefabe5d590b7791f2cffac79efb1b64f7da4b91af984a03317380dee4068dcd5165602d34b"], 0x24}, 0x1, 0x0, 0x0, 0x2004c095}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r5, 0x8b2c, &(0x7f0000000040)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000001500)={&(0x7f0000000380), 0xc, &(0x7f00000014c0)={&(0x7f00000003c0)={0x4c, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r6, r7}) r9 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x468, 0x398, 0x2c8, 0x1d0, 0x2c8, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @local, [], [0x0, 0x0, 0x0, 0xff000000], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@empty, 0xe, 0x1b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close(r8) 11m53.261753515s ago: executing program 4 (id=699): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m52.054136185s ago: executing program 4 (id=700): socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x0, 0x0, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) 11m41.893407805s ago: executing program 4 (id=701): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000a40)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@fmask={'fmask', 0x3d, 0x68e7}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x7fffffffffffffff}}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_role}, {@obj_role}, {@obj_type={'obj_type', 0x3d, '9p\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}, 0x1, 0x152f, &(0x7f00000037c0)="$eJzs3AucTVX7OPDnWWvtMSSdJrkMa61nc5LLIklySZJLkiRJkltC0iSvJCSG3JKGJCSXIbkMIblMTBr3+/2SkCRNkoTklqz/Z8r81Vvv/33f39svv/9vnu/nsz+znrP2s/ba85yzz977nJlvug6r1aR29UZEBP8R/OVHIgDEAsAgALgGAAIAKB9XPi6zP6fExP9sI+zP9VDKlZ4Bu5K4/tkb1z974/pnb1z/7I3rn71x/bM3rn/2xvVnLDvbMqPgtbxk34Xv/2dn/P7/v0hG6XFfrCt9fTeAmH81hev//z/8D3K5/v9rBf/KSlz/7I3rn13FXukJsP8B+PWfHeT4hz1c/+yN689Ydvbre8GxcOXvR//VC0Sy92cgV/r5xxhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsezjrL1MAkNW+0vNijDHGGGOMMcbYn8fnuNIzYIwxxhhjjDHG2H8/BAESFAQQAzkgFnJCLhAAMVn910IcXAd54XrIB/mhABSEeCgEhUGDAQsEIRSBohCFG6AY3AjFoQSUhFLgoDSUgZugLNwM5eAWKA+3QgW4DSpCJagMVeB2qAp3QDW4E6rDXVADakItqA13Qx24B+rCvVAP7oP6cD80gAegITwIjeAhaAwPQxN4BJrCo9AMmkMLaAmt/kv5L0BPeBF6QW9IhD7QF16CftAfBsBAGAQvw2B4BYbAq5AEQ2EYvAbD4XUYAW/ASBgFo+FNGANvwVgYB+NhAiTDRJgEb8NkeAemwFSYBtMhBWbATHgXZsFsmAPvwVx4H+bBfFgACyEVPoBFsBjS4ENYAh9BOiyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBR/DbvgE9sBe2Aefwn747N/MP/N3+d0QEFCgQIUKYzAGYzEWc2EuzI25MQ/mwQhGMA7jMC/mxXyYDwtgAYzHeCyMhdGgQULCIlgEoxjFYlgMi2NxLIkl0aHDMlgGy+LNWA7LYXksjxWwAlbESlgJq2AVrIpVsRpWw+pYHWtgDayFtfBuvBv7YF2si/WwHtbH+lm3p7ARNsLG2BibYBNsik2xGTbDFtgCW2ErbI2tsQ22wXbYDttje+yAHTABE7AjdsRO2Ak7Y2fsgl2wK3bFbtgdu2e8kAPwRXwRe2MN0Qf7Yl/sh0k5BuBAHIgv42B8BV/BVzEJh+IwfA1fw9dxBJ7GkTgKR+NorCrewrE4DklMwGRMxkk4CSfjZJyCU3EqTscUnIEzcSbOwtk4G9/Dufg+vo/zcT4uxFRMxUW4GNMwDZfgGUzHpbgMl+MKXIkrcDWuwdW4DtfjOtyIG3EzbsatuBW343bciTvxY1QA+Anuxb2YhPtxPx7AA3gQD+IhPIQZmIGH8TAewSN4FI/iMTyGx/EEnsQTeApP4Wk8g2fxLJ7H83gBn4v/qvHHJdYmgcikhBIxIkbEiliRS+QSuUVukUfkEREREXEiTuQVeUU+kU8UEAVEvIgXhUVhYYQRJMLMI4WIiqgoJoqJ4qK4KClKCiecKCPKiLKirCgnyony4lZRQdwmKopKoq2rIqqIqqKdqybuFNVFdVFD1BS1RG1RW9QRdURdUVfUE/VEfVFfNBAPiIaiDw7Ah0RmZZqIodhUDMNmormQl45QrcUIbCPainbiCTEKR2IH0doliKdFRzEWO4m/iXH4rOgiJmBX8bzoJrqLHuIF0VO0cb1EbzEF+4i+Yjr2E/3FADFQzMKa4j2cm7OWeFUkiaFimHhNLMTXxQjxhhgpRonR4k0xRrwlxopxYryYIJLFRDFJvC0mi3fEFDFVTBPTRYqYIWaKd8UsMVvMEe+JueJ9MU/MFwvEQpEqPhCLxGKRJj4US8RHIl0sFcvEcrFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHaxQ+wUu8THYrf4ROwRe8U+8anYLz4TB8Tn4qD4QhwSX4oM8ZU4LL4WR8Q34qj4VhwT34nj4oQ4Kb4Xp8QP4rQ4I86Kc+K8+FFcED+Ji8ILkCiFlFLJQMbIHDJW5pS55FUytwyyjv8yTl4n88rrZT6ZXxaQBWW8LCQLSy2NtJJkKIvIojIqb5DF5I2yuCwhS8pS0snSsoy8SZaVN8ty8hZZXt4qK8jbZEVZSVaWVeTtsqq8Q0Lkl23UkDVlLVlb3i0T4R5ZV94r68n7ZH15v2wgH5AN5YOykXxINpYPyybyEdlUPiqbyeayhWwpW8nHZGv5uGwj28p28gnZXj4pO8inZIJ8WnaU/tJT5FnZRT4nu8rnZTfZXfaQP8mL0stesreEPiD7ypdkP9lfDpAD5SD5shwsX5FD5KsySQ6Vw+Rrcrh8XY6Qb8iRcpQcLd+UY+RbcqwcJ8fLCTJZTpST5NtysnxHTpFT5TQ5XabIGXLApZHmSPlP89/+g/whP299s9wit8ptcrvcIXfKXfJjuVvulnvkHrlP7pP75X55QB6QB+VBeUgekhkyQx6Wh+UReUQelUflMXlMHpcn5Dn5vTwlf5Cn5Rl5Rp6T5+V5eeHS7wAUKqGkUipQMSqHilU5VS51lcqtrlZ51DUqoq5Vceo6lVddr/Kp/KqAKqjiVSFVWGlllFWkQlVEFVVRdQNeesKokqqUcqq0KqNu+nfyVTF1oyquSvwmP2t+if9gfq1UK9VatVZtVBvVTrVT7VV71UF1UAkqQXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UokpUfdVLqp/qrwaogWqQellk7sMQNUQlqSQ1TA1Tw9VwNUKNUCPVSDVajVZj1Bg1Vo1V49V4layS1SQ1SU1Wk9UUNUVNU9NUikpRM9VMNUvNUnPUHDVXzVXz1Dy1QC1QqSpVLVKLVJpKU0vUEpWulqqlarlarlaqlWq1Wq3WqrVqvVqvNqqNKl1tUVvUNrVN7VA71C61S+1Wu9UetUftU/vUfrVfHVAH1EF1UB1Sh1SGylCH1WF1RB1RR9VRdUwdU8fVcXVSnVSn1Cl1Wp1WZ9VZdV6dVxfUBXVRXcw87QtEIAIVqCAmiAlig9ggV5AryB3kDvIEeYJIEAnigrggb3B9kC/IHxQICgbxQaGgcKADE9hAXCp6NLghKBbcGBQPSgQlg1KBC0oHZYKbgrLBzUG54JagfHBrUCG4LagYVAoqB1WC24OqwR1BteDOoHpwV1AjqBnUCmoHdwd1gnuCusG9Qb3gvqB+cH/QIHggaBg8GDQKHgoaBw8HTYJHgqbBo0GzoHnQImgZtPpTx/f+dP7HXS/dWyfqPrqvfkn30/31AD1QD9Iv68H6FT1Ev6qT9FA9TL+mh+vX9Qj9hh6pR+nR+k09Rr+lx+pxeryeoJP1RD1Jv60n63f0FD1VT9PTdYqeoWfqd/UsPVvP0e/pufp9PU/P1wv0Qp2qP9CL9GKdpj/US/RHOl0v1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Uu/THerf+RO/Re/U+/anerz/TB/Tn+qD+Qh/SX+oM/ZU+rL/WR/Q3+qj+Vh/T3+nj+oQ+qb/Xp/QP+rQ+o8/qc/q8/lFf0D/pi9pnntxnvr0bZZSJMTEm1sSaXCaXyW1ymzwmj4mYiIkzcSavyWvymXymgClg4k28KWwKm0xkyBQxRUzURE0xU8wUN8VNSVPSOONMGVPGlDVlTTlTzpQ35U0FU8FUNBVNZVPZ3G5uN3eYO8yd5k5zl7nL1DQ1TW1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDPNTAvTwrQyrUxr09q0MW1MO9POtDftTQfTwSSYBNPRdDSdTCfT2XQ2XUwX09V0Nd1MN9PD9DA9TU/Ty/QyiSbR9DV9TT/TzwwwA8wgM8gMNoPNEDPEJJkkM8wMM8PNcDPCjDAjzSgzOvNE1bxlxppxZryZYJJNsplkJpnJZrKZYqaYaWaaSTEpZqaZaWaZWWaOmWPmmrlmnplnFpgFJtWkmkVmkUkzaWaJWWLSTbpZZpaZFWaFWWVWmTVmjVln1pkNsMFsMpvMFrPFbDPbzA6zw+wyu8xus9vsMXvMPrPP7Df7zQFzwBw0B80hc8hkmAxz2Bw2R8wRc9QcNcfMMXPcHDcnzUlzypwyp81pc9acNedN/kvvl97E2pw2l73K5rZX2zz2Gvv3cQFb0MbbQraw1Tafzf+b2Fhri9sStqQtZZ0tbcvYm34XV7SVbGVbxd5uq9o7bLXfxXXsPbauvdfWs/fZ2vbu38T17f22gX3ENkQEsM1tY9vSNrGP2Kb2UdvMNrctbEvb3j5pO9inbIJ92na0z/wuXmQX2zV2rV1n19s9dq89a8/ZI/Ybe97+aHvZ3naQfdkOtq/YIfZVm2SH/i4ebd+0Y+xbdqwdZ8fbCb+Lp9npNsXOsDPtu3aWnf27ONV+YOfaNDvPzrcL7MKf48w5pdkP7RL7kU23ASyzy+0Ku9Kusqv/71yX2412k91sd9tP7Da73e6wO+2urBNhu9fus5/a/fYze9h+bQ/aL+whe9Rm2K9+jjP376j91h6z39nj9oQ9ab+3p+wPKis7c9+/tz/Zi9ZbICQgSYoCiqEcFEs5KRddRbnpaspD11CErqU4uo7y0vWUj/JTASpI8VSICpMmQ5aIQipCRSlKN1DW9EpSKXJUmsrQTVSWbqZydAuVp1upAt1GFakSVaYqdDtVpTuoGt1J1ekuqkE1qRbVprupDt1Ddeleqkf3UX26nxrQA9SQHqRG9BA1poepCT1CTelRakbNqQW1pFb0GLWmx6kNtaV29AS1pyepAz1FCfQ0daRnqBP9jTrTs9SFnqOu9Dx1o+7Ug16gnvQi9aLelEh9qC+9RP2oPw2ggTSIXqbB9AoNoVcpiYbSMHqNhtPrNILeoJE0ikbTmzSG3qKxNI7G0wRKpok0id6myfQOTaGpNI2mUwrNoJn0Ls2i2TSH3qO59D7No/m0gBZSKn1Ai2gxpdGHtIQ+onRaSstoOa2glbSKVtMaWkvraD1toI20iTbTFtpK22g77aCdtIs+pt30Ce2hvbSPPqX99BkdoM/pIH1Bh+hLyqCv6DB9TUfoGzpK3/re9B0dpxN0kr6nU/QDnaYzdJbO0Xn6kS7QT3SRPEGIoQhlqMIgjAlzhLFhzjBXeFWYO7w6zBNeE0bCa8O48Lowb3h9mC/MHxYIC4bxYaGwcKhDE9qQwjAsEhYNo+ENYbHwxrB4WCIsGZYKXVg6LBPeFJYNbw7LhbeE5cNbwwrhbWHFsFL4yH1VwtvDquEdYbXwzrB6eFdYI6wZ1gprh3eHdcJ7wrrhvWG98L6wXHh/2CB8IGwYPhg2Ch8KG4cPh03CR8Km4aNhs7B52CJsGbYKHwtbh4+HbcK2YbvwqrB9+GTYIXwqTAifDjuGz/zcf//irP4nftefGPYJ+4YvhS+F3t8rF0QXRlOjH0QXRRdH06IfRpdEP4qmR5dGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0U3R72vnQMcOuGkUy5wMS6Hi3U5XS53lcvtrnZ53DUu4q51ce46l9dd7/K5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd4Mr5m50xV0JV9KVcs6VdmVcS9fKtXKt3eOujWvr2rkn3BPuSfeke8o95Z52Hd0zrpP7m+vsnnVd3HPuOfe86+a6ux7uBdfTTczzy2sy0fV1fV0/188NcAPcIDfIDXaD3RA3xCW5JDfMDXPD3XA3wo1wI91IN9qNdmPcGDfWjXXj3XiX7JLdJDfJTXaT3RQ3xU1z01yKS3Ez3Uw3y81yVWf/spV5bp5b4Ba4VJfqFrnMc8Y0t8Qtceku3S1zy9wKt8KtcqvcGrfGrXPr3Aa3wW1ym9wWt8Vtc9vcDrfD7XK73G632+3x1/wyqNvvDrgD7qA76A65L12G+8oddl+7I+4bd9R9646579xxd8KddN+7U+4Hd9qdcWfdOXfe/eguuJ/cReddcmRiZFLk7cjkyDuRKZGpkWmR6ZGUyIzIzMi7kVmR2ZE5kfcicyPvR+ZF5kcWRBZGUiMfRBZFFkfSIh9GlkQ+iqRHlkaWRZZHVkRWRrwvtC30RXxRH/U3+GL+Rl/cl/AlfSnvfGlfxt/ky/qbfTl/iy/vb/UV/G2+oq/kK/tHfTPf3LfwLX0r/5hv7R/3bXxb384/4dv7J30H/5RP8E/7jv4Z38n/zXf2z/ou/jnf1T/vu/nuvod/wff0L/pevrdP9H18X/+S7+f7+wF+oB/kX/aD/St+iH/VJ/mhfph/zQ/3r/sR/g0/0o/yo2Pe9GOyLpFhgk/2E/0k/7af7N/xU/xUP81P9yl+hp/p3/Wz/Gw/x7/n5/r3/Tw/3y/wC32q/8Av8ot9mv/QL/Ef+XS/NOumsV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mt/sdfqff5T/2u/0nfo/f6/f5T/1+/5k/4D/3B/0X/pD/0mf4r/xh/7U/4r/xR/23/pj/zh/3J/xJ/70/5X/wp/0Zf9af8+f9j/6C/8lf5L9ZY4wxxhj7l0y83BS/7fnldn6fP8gRv1q5LwBcvb1gxq/7M88oN+T7pd1fxLePAMDTvbs+lLXUqJGYmHhp3XQJQdH5AFmfBGX6+asHl+Kl0A6ehARoC2X/cP79Rffz9E/Gj94KkOtXObFwOb48/ucAmPgH4z/2xOhFFcKzcf+P8ecDFC96OScnXI6XQruf76+0hXL/YP75W/+T+ef8Ihmgza9ycsPl+PL8y8Dj8Awk/GZNxhhjjDHGGGPsF/1F5c5Z159Z3/j8o+vzeHU5Jwdcjv/Z9TljjDHGGGOMMcauvGe793jqsYSEtp3//Ua1/1LWv9xoCv9dI3PjDxveA2Q9ogDgPxwQILMh/8q92PqXbCvp0kvn77tWnPMB/M8o5Z/RuMIHJsYYY4wxxtif7vJJ/28fV1dqQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWDb0V/w7sSu9j4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtiV9n8CAAD//7wUAB0=") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 11m25.843487971s ago: executing program 37 (id=701): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000a40)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@fmask={'fmask', 0x3d, 0x68e7}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x7fffffffffffffff}}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_role}, {@obj_role}, {@obj_type={'obj_type', 0x3d, '9p\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 9m26.4123382s ago: executing program 5 (id=784): msgsnd(0x0, &(0x7f0000000040)=ANY=[], 0x8, 0x0) msgrcv(0x0, &(0x7f00000002c0), 0x8, 0x0, 0x800) 9m25.159314117s ago: executing program 5 (id=787): socket(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='cpuset\x00', 0x820000, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r4, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x92103, 0x0) fsopen(0x0, 0x1) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 9m15.974975811s ago: executing program 5 (id=790): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r2, &(0x7f0000000000)={0x6, 0x2d, 0x1, 0x3a, 0x6, 0x2c}, 0x48) ioctl$TIOCSETD(r1, 0x5423, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x149) fallocate(r3, 0x10, 0xffff, 0x8001) 9m13.216163035s ago: executing program 6 (id=791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m8.423838844s ago: executing program 5 (id=796): msgsnd(0x0, &(0x7f0000000040)=ANY=[], 0x8, 0x0) msgrcv(0x0, &(0x7f00000002c0), 0x8, 0x0, 0x800) 9m8.21875907s ago: executing program 6 (id=797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x71, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m6.571521677s ago: executing program 5 (id=799): socket(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='cpuset\x00', 0x820000, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r4, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x92103, 0x0) fsopen(0x0, 0x1) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 9m2.528293384s ago: executing program 6 (id=801): r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0xfffffffe, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8m56.338065046s ago: executing program 5 (id=802): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 8m53.313794522s ago: executing program 6 (id=805): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r2, &(0x7f0000000000)={0x6, 0x2d, 0x1, 0x3a, 0x6, 0x2c}, 0x48) ioctl$TIOCSETD(r1, 0x5423, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x149) fallocate(r3, 0x10, 0xffff, 0x8001) 8m51.680923558s ago: executing program 6 (id=808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 8m50.55286977s ago: executing program 6 (id=810): r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 8m40.031883199s ago: executing program 38 (id=802): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 8m34.839959395s ago: executing program 39 (id=810): r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 7m50.808018868s ago: executing program 1 (id=848): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x40881, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae000000540022c23031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r4}, 0x94) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000013c0)="bd31", 0x2, 0x0, 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r6, 0xbc7ae000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 7m49.361917586s ago: executing program 1 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000014c0)=0x4d) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @rand_addr, @loopback}, &(0x7f0000000240)=0xc) 7m38.771276534s ago: executing program 1 (id=854): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1088c, &(0x7f00000009c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51aa12c4e1790181917f9000000000000000d3c4a5e4f7224ec1900"/54, @ANYRES64, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa8f, &(0x7f0000001400)="$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") creat(&(0x7f00000004c0)='./file1\x00', 0x32) unlink(&(0x7f0000000040)='./file1\x00') 7m36.443699905s ago: executing program 1 (id=856): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800182, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303000000083ec4c0d6e84de0249d09f31ef580c3d000000000000000000"], 0x1, 0x191, &(0x7f00000002c0)="$eJzs3c+qElEcB/Cff5qkletoMdCmlVRPYIWCNBAULmpVYG00gtxMrXyL3qBX6XXClTsv3hHlyly4F64O1/l8Nn7xq5xzZjFnNWc+P/k+nfyYf/v77090Oo1o96Mfq0Z0oxmtKCwCADgnq/U6/q8LN/j56xNMCQA4slvu/wDAGbD/A0D92P8BoH4+fPz09lWWDd6naSdiucjH+bj4LPrhKBs8Ty919/9a5vm4tetfFH16tX8Qj7b9y9I+iWdPi37TvXmXHfQPY1I24X7jzq8BAAAAAAAAAAAAAAAAAAAAAACcWi/dKT3fp9dLrumLNBwl2+8Oz/dpx+N2yYDJUZYBAAAAAAAAAAAAAAAAAAAA99r81+/pl9ns609BEIRdqPrOBAAAAAAAAAAAAAAAAAAA9bN/6LfqmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAdfbv/z9e2IzTrHqhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU2kUAAAD//1z+TP8=") syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000500)='./bus\x00', 0x2925409, 0x0, 0x40, 0x0, &(0x7f0000000500)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 7m32.222083142s ago: executing program 1 (id=858): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0xfffffffe, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7m27.777101559s ago: executing program 1 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000014c0)=0x4d) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @rand_addr, @loopback}, &(0x7f0000000240)=0xc) 7m12.488404877s ago: executing program 40 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000014c0)=0x4d) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @rand_addr, @loopback}, &(0x7f0000000240)=0xc) 2m54.839834392s ago: executing program 8 (id=981): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m53.943549939s ago: executing program 8 (id=982): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000400)}, {&(0x7f0000000680)="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", 0x181}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113", 0x2b}, {&(0x7f0000000840)="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", 0x13e}], 0x4}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m53.424409785s ago: executing program 8 (id=983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 2m52.860726095s ago: executing program 8 (id=984): sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x8091) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1eb) 2m51.80400497s ago: executing program 8 (id=985): add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/power/pm_freeze_timeout', 0x82, 0x10a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m51.092856221s ago: executing program 8 (id=986): syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) 2m49.183844436s ago: executing program 41 (id=986): syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) 12.410996007s ago: executing program 7 (id=1023): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0433"], 0xf8) 11.737784292s ago: executing program 7 (id=1024): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000000000000100000400000003000000002e3000"], &(0x7f0000000f40)=""/4089, 0x34, 0xff9, 0x1}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000014c0)=0x4d) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @rand_addr, @loopback}, &(0x7f0000000240)=0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) 6.883163786s ago: executing program 7 (id=1025): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 6.538830042s ago: executing program 7 (id=1026): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x40881, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae000000540022c23031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r4}, 0x94) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000013c0)="bd31", 0x2, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r7, 0xbc7ae000) sendmsg$NFT_BATCH(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 401.991679ms ago: executing program 7 (id=1027): add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/power/pm_freeze_timeout', 0x82, 0x10a) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r2, &(0x7f00000001c0)="46050300", 0x4, 0x9, 0x0, 0x0, r2}]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 0s ago: executing program 7 (id=1028): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000300)=0x808c) kernel console output (not intermixed with test programs): ous mode [ 1647.531442][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.683029][T11726] loop8: detected capacity change from 0 to 128 [ 1648.011889][ T6118] bridge_slave_0: left allmulticast mode [ 1648.033346][ T6118] bridge_slave_0: left promiscuous mode [ 1648.076228][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.180230][ T6118] bridge_slave_1: left allmulticast mode [ 1648.229933][ T6118] bridge_slave_1: left promiscuous mode [ 1648.266469][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.324006][ T6118] bridge_slave_0: left allmulticast mode [ 1648.354246][ T6118] bridge_slave_0: left promiscuous mode [ 1648.406352][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.286981][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1650.350974][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.413816][ T6118] bond0 (unregistering): Released all slaves [ 1651.009399][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1651.073312][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1651.130326][ T6118] bond0 (unregistering): Released all slaves [ 1651.521991][T11621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.529886][T11621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.540298][T11621] bridge_slave_1: entered allmulticast mode [ 1651.555624][T11621] bridge_slave_1: entered promiscuous mode [ 1651.726794][T11743] No such timeout policy "syz1" [ 1652.076033][T11621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1652.102934][T11621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1652.252483][T11621] team0: Port device team_slave_0 added [ 1652.288571][T11621] team0: Port device team_slave_1 added [ 1652.417888][T11621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1652.426554][T11621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1652.460941][T11621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1652.491749][T11621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1652.504738][T11621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1652.534763][T11621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1653.144392][T11580] hsr_slave_0: entered promiscuous mode [ 1653.182397][T11580] hsr_slave_1: entered promiscuous mode [ 1653.212166][T11580] debugfs: 'hsr0' already exists in 'hsr' [ 1653.235884][T11580] Cannot create hsr debugfs directory [ 1653.336036][ T6118] hsr_slave_0: left promiscuous mode [ 1653.352761][ T6118] hsr_slave_1: left promiscuous mode [ 1653.386916][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1653.420803][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1653.445820][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1653.464479][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1653.560345][ T6118] hsr_slave_0: left promiscuous mode [ 1653.580482][ T6118] hsr_slave_1: left promiscuous mode [ 1653.608518][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1653.629747][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1653.668528][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1653.697943][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1653.858505][ T6118] veth1_macvtap: left promiscuous mode [ 1653.896032][ T6118] veth0_macvtap: left promiscuous mode [ 1653.914324][ T6118] veth1_vlan: left promiscuous mode [ 1653.955613][ T6118] veth0_vlan: left promiscuous mode [ 1653.964671][ T6118] veth1_macvtap: left promiscuous mode [ 1653.978574][ T6118] veth0_macvtap: left promiscuous mode [ 1653.984564][ T6118] veth1_vlan: left promiscuous mode [ 1654.024797][ T6118] veth0_vlan: left promiscuous mode [ 1659.323894][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 1659.401567][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 1660.144357][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 1660.196471][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 1662.107495][T11621] hsr_slave_0: entered promiscuous mode [ 1662.118709][T11621] hsr_slave_1: entered promiscuous mode [ 1663.022840][T11557] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1664.873834][T11557] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1665.029171][T11680] chnl_net:caif_netlink_parms(): no params data found [ 1665.068559][T11557] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1665.525417][T11557] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1666.033179][T11788] loop8: detected capacity change from 0 to 4096 [ 1666.068912][T11788] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1666.146122][T11788] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1666.313729][ T6118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.673692][ T6118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.001820][T11788] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))" [ 1667.010006][ T6118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.064501][ T29] audit: type=1800 audit(1774682062.316:50): pid=11788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.934" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1667.373713][T10112] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.406898][ T6118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.808667][T11680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.826444][T11680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.834467][T11680] bridge_slave_0: entered allmulticast mode [ 1667.882010][T11680] bridge_slave_0: entered promiscuous mode [ 1668.028383][T11680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.045828][T11680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.053634][T11680] bridge_slave_1: entered allmulticast mode [ 1668.092858][T11680] bridge_slave_1: entered promiscuous mode [ 1668.708579][T11680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1669.021642][T11680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.172265][T11813] loop8: detected capacity change from 0 to 128 [ 1670.427276][T11580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1670.598349][T11580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1671.196332][T11580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1671.514527][T11680] team0: Port device team_slave_0 added [ 1671.602245][ T6118] bridge_slave_1: left allmulticast mode [ 1671.665556][ T6118] bridge_slave_1: left promiscuous mode [ 1671.672390][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.806072][ T6118] bridge_slave_0: left allmulticast mode [ 1671.811973][ T6118] bridge_slave_0: left promiscuous mode [ 1671.882727][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.757232][T10735] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1672.785991][T10735] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1672.796933][T10735] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1672.812486][T10735] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1672.824499][T10735] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1673.542527][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1673.617788][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1673.670835][ T6118] bond0 (unregistering): Released all slaves [ 1673.896701][T11580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1674.038808][T11834] No such timeout policy "syz1" [ 1674.918910][T11680] team0: Port device team_slave_1 added [ 1674.955685][ T7705] Bluetooth: hci5: command tx timeout [ 1675.091869][ T6118] hsr_slave_0: left promiscuous mode [ 1675.168569][ T6118] hsr_slave_1: left promiscuous mode [ 1675.201615][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1675.248932][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1675.315823][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1675.350336][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1675.443515][ T6118] veth1_macvtap: left promiscuous mode [ 1675.472212][ T6118] veth0_macvtap: left promiscuous mode [ 1675.480711][ T6118] veth1_vlan: left promiscuous mode [ 1675.493344][ T6118] veth0_vlan: left promiscuous mode [ 1676.729091][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 1676.777619][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 1677.056696][ T7705] Bluetooth: hci5: command tx timeout [ 1678.597310][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.604617][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.131010][ T7705] Bluetooth: hci5: command tx timeout [ 1679.257528][T11680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.325939][T11680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.455128][T11680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.568485][T11680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.623361][T11680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.771456][T11680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1680.139471][T10735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1680.152420][T10735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1680.163901][T10735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1680.182478][T10735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1680.221296][T10735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1680.738629][T11849] loop8: detected capacity change from 0 to 512 [ 1680.865970][T11849] EXT4-fs (loop8): filesystem is read-only [ 1680.917246][T11849] EXT4-fs (loop8): filesystem is read-only [ 1680.923387][T11849] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1680.996523][T11849] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.939: bad orphan inode 16 [ 1681.072823][T11849] loop8: lost filesystem error report for type 5 error -117 [ 1681.074382][T11849] ext4_test_bit(bit=15, block=3) = 0 [ 1681.082159][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1681.082281][ C1] EXT4-fs (loop8): initial error at time 1774682076: ext4_orphan_get:1417 [ 1681.082427][ C1] EXT4-fs (loop8): last error at time 1774682076: ext4_orphan_get:1417 [ 1681.206423][T10735] Bluetooth: hci5: command tx timeout [ 1681.259179][T11849] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1681.969548][T11680] hsr_slave_0: entered promiscuous mode [ 1682.023370][T11680] hsr_slave_1: entered promiscuous mode [ 1682.076415][T11680] debugfs: 'hsr0' already exists in 'hsr' [ 1682.115303][T11680] Cannot create hsr debugfs directory [ 1682.135331][T11621] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1682.317669][T10735] Bluetooth: hci2: command tx timeout [ 1682.355590][T11621] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1682.443000][T11621] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1682.530933][T11621] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1682.829958][T10112] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1684.409338][T10735] Bluetooth: hci2: command tx timeout [ 1684.931531][T11825] chnl_net:caif_netlink_parms(): no params data found [ 1685.966407][ T6118] bridge_slave_1: left allmulticast mode [ 1685.972299][ T6118] bridge_slave_1: left promiscuous mode [ 1686.013157][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.086900][ T6118] bridge_slave_0: left allmulticast mode [ 1686.144080][ T6118] bridge_slave_0: left promiscuous mode [ 1686.196845][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.476099][T10735] Bluetooth: hci2: command tx timeout [ 1688.021131][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1688.061914][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1688.236185][T11887] loop8: detected capacity change from 0 to 128 [ 1688.555353][T10735] Bluetooth: hci2: command tx timeout [ 1688.598776][ T6118] bond0 (unregistering): Released all slaves [ 1689.832378][ T6118] hsr_slave_0: left promiscuous mode [ 1689.852832][ T6118] hsr_slave_1: left promiscuous mode [ 1689.900106][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1689.976070][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1690.104657][ T7705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1690.117382][ T7705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1690.131698][ T7705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1690.169907][ T7705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1690.185810][ T7705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1691.101488][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 1691.226594][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 1692.406981][ T7705] Bluetooth: hci3: command tx timeout [ 1692.595144][T11905] No such timeout policy "syz1" [ 1693.807175][T11825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.831034][T11825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.855678][T11825] bridge_slave_0: entered allmulticast mode [ 1693.890068][T11825] bridge_slave_0: entered promiscuous mode [ 1694.013575][T11844] chnl_net:caif_netlink_parms(): no params data found [ 1694.179901][T11825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.206615][T11825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.225447][T11825] bridge_slave_1: entered allmulticast mode [ 1694.264735][T11825] bridge_slave_1: entered promiscuous mode [ 1694.482056][ T7705] Bluetooth: hci3: command tx timeout [ 1695.218179][T11825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.352590][T11825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.788089][T11825] team0: Port device team_slave_0 added [ 1695.966627][T11825] team0: Port device team_slave_1 added [ 1696.259406][T11927] loop8: detected capacity change from 0 to 512 [ 1696.287307][T11680] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1696.322491][T11927] EXT4-fs (loop8): filesystem is read-only [ 1696.348673][T11927] EXT4-fs (loop8): filesystem is read-only [ 1696.370534][T11927] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1696.426564][T11927] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.946: bad orphan inode 16 [ 1696.449478][T11927] loop8: lost filesystem error report for type 5 error -117 [ 1696.450837][T11927] ext4_test_bit(bit=15, block=3) = 0 [ 1696.458595][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1696.458715][ C1] EXT4-fs (loop8): initial error at time 1774682091: ext4_orphan_get:1417 [ 1696.458857][ C1] EXT4-fs (loop8): last error at time 1774682091: ext4_orphan_get:1417 [ 1696.494670][T11927] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1696.555461][ T7705] Bluetooth: hci3: command tx timeout [ 1696.648631][T11825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1696.665333][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1696.701483][T11825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1696.820326][T11680] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1696.912644][T11680] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1697.043897][T11825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1697.059087][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1697.103579][T11825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1697.150349][T11680] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1697.341512][T11844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.351661][T11844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.378270][T11844] bridge_slave_0: entered allmulticast mode [ 1697.409140][T11844] bridge_slave_0: entered promiscuous mode [ 1697.959686][T10112] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1698.185592][T11844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.193221][T11844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.203234][T11844] bridge_slave_1: entered allmulticast mode [ 1698.213490][T11844] bridge_slave_1: entered promiscuous mode [ 1698.641058][ T7705] Bluetooth: hci3: command tx timeout [ 1698.932225][T11825] hsr_slave_0: entered promiscuous mode [ 1698.952741][T11825] hsr_slave_1: entered promiscuous mode [ 1698.964075][T11825] debugfs: 'hsr0' already exists in 'hsr' [ 1698.973405][T11825] Cannot create hsr debugfs directory [ 1699.147501][T11844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1699.219802][T11844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1699.463980][T11952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1699.496342][T11952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1699.516087][T11952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1699.534837][T11952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1699.554493][T11952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1700.077280][T11891] chnl_net:caif_netlink_parms(): no params data found [ 1700.229611][T11844] team0: Port device team_slave_0 added [ 1700.308390][T11844] team0: Port device team_slave_1 added [ 1700.515771][T11957] loop8: detected capacity change from 0 to 128 [ 1701.484764][T11844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.492311][T11844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.555607][T11844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1701.583245][T11844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1701.633499][T11844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.685145][ T7705] Bluetooth: hci0: command tx timeout [ 1701.701447][T11844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1703.755519][ T7705] Bluetooth: hci0: command tx timeout [ 1705.239995][ T6118] bridge_slave_1: left allmulticast mode [ 1705.269664][ T6118] bridge_slave_1: left promiscuous mode [ 1705.303046][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.404602][ T6118] bridge_slave_0: left allmulticast mode [ 1705.430486][ T6118] bridge_slave_0: left promiscuous mode [ 1705.516152][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.676978][ T6118] bridge_slave_1: left allmulticast mode [ 1705.683315][ T6118] bridge_slave_1: left promiscuous mode [ 1705.713504][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.837595][ T7705] Bluetooth: hci0: command tx timeout [ 1705.989652][ T6118] bridge_slave_0: left allmulticast mode [ 1706.027063][ T6118] bridge_slave_0: left promiscuous mode [ 1706.208957][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.225593][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1707.357978][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1707.416843][ T6118] bond0 (unregistering): Released all slaves [ 1707.742455][T11982] No such timeout policy "syz1" [ 1707.918033][ T7705] Bluetooth: hci0: command tx timeout [ 1708.268415][ T6118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1708.301906][ T6118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1708.343283][ T6118] bond0 (unregistering): Released all slaves [ 1708.935879][T11844] hsr_slave_0: entered promiscuous mode [ 1708.966565][T11844] hsr_slave_1: entered promiscuous mode [ 1708.999628][T11844] debugfs: 'hsr0' already exists in 'hsr' [ 1709.012819][T11844] Cannot create hsr debugfs directory [ 1709.311047][ T6118] hsr_slave_0: left promiscuous mode [ 1709.338570][ T6118] hsr_slave_1: left promiscuous mode [ 1709.386175][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1709.415153][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1709.494337][ T6118] hsr_slave_0: left promiscuous mode [ 1709.529723][ T6118] hsr_slave_1: left promiscuous mode [ 1709.568147][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1709.604009][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1710.407301][T11992] loop8: detected capacity change from 0 to 512 [ 1710.434716][T11992] EXT4-fs: Ignoring removed mblk_io_submit option [ 1710.456118][T11992] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 1710.468345][T11992] EXT4-fs (loop8): external journal has bad superblock [ 1712.462864][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 1712.549432][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 1713.076448][T12000] loop8: detected capacity change from 0 to 512 [ 1713.112208][T12000] EXT4-fs (loop8): filesystem is read-only [ 1713.159598][T12000] EXT4-fs (loop8): filesystem is read-only [ 1713.215764][T12000] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1713.222506][T12000] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.953: bad orphan inode 16 [ 1713.287651][T12000] loop8: lost filesystem error report for type 5 error -117 [ 1713.292661][T12000] ext4_test_bit(bit=15, block=3) = 0 [ 1713.300562][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1713.300679][ C0] EXT4-fs (loop8): initial error at time 1774682108: ext4_orphan_get:1417 [ 1713.300826][ C0] EXT4-fs (loop8): last error at time 1774682108: ext4_orphan_get:1417 [ 1713.388115][T12000] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1713.846898][ T6118] team0 (unregistering): Port device team_slave_1 removed [ 1713.883508][ T6118] team0 (unregistering): Port device team_slave_0 removed [ 1714.532119][T11891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.570991][T11891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.580905][T11891] bridge_slave_0: entered allmulticast mode [ 1714.593874][T11891] bridge_slave_0: entered promiscuous mode [ 1714.919767][T10112] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.985390][T11891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.006334][T11891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.014164][T11891] bridge_slave_1: entered allmulticast mode [ 1715.059258][T11891] bridge_slave_1: entered promiscuous mode [ 1715.923799][T11891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1715.992920][T11891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1716.289177][T11891] team0: Port device team_slave_0 added [ 1716.341484][T11891] team0: Port device team_slave_1 added [ 1716.590718][T11891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1716.611263][T11891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1716.690843][T11891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1716.743899][T11891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1716.765683][T11891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1716.823072][T12019] loop8: detected capacity change from 0 to 128 [ 1716.863716][T11891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1717.271422][T11951] chnl_net:caif_netlink_parms(): no params data found [ 1717.889629][T11891] hsr_slave_0: entered promiscuous mode [ 1717.900965][T11891] hsr_slave_1: entered promiscuous mode [ 1718.934633][T11825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1719.022483][T11825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1719.200914][T11825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1719.280395][T11825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1719.662930][T11951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.671561][T11951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.726261][T11951] bridge_slave_0: entered allmulticast mode [ 1719.980728][T12041] No such timeout policy "syz1" [ 1720.708843][T11951] bridge_slave_0: entered promiscuous mode [ 1722.485633][T11951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.493231][T11951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.523626][T11951] bridge_slave_1: entered allmulticast mode [ 1722.565283][T11951] bridge_slave_1: entered promiscuous mode [ 1722.861490][ T5312] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1722.917865][T11951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.982471][ T71] bridge_slave_1: left allmulticast mode [ 1722.992092][ T71] bridge_slave_1: left promiscuous mode [ 1723.018611][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 1723.033232][ T71] bridge_slave_0: left allmulticast mode [ 1723.039407][ T71] bridge_slave_0: left promiscuous mode [ 1723.050318][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.097078][ T5312] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1723.120098][ T5312] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.141458][ T5312] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1723.172792][ T5312] usb 9-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1723.190676][ T5312] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.200110][ T5312] usb 9-1: Product: syz [ 1723.204502][ T5312] usb 9-1: Manufacturer: syz [ 1723.210440][ T5312] usb 9-1: SerialNumber: syz [ 1723.426527][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1723.510881][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1723.550152][ T71] bond0 (unregistering): Released all slaves [ 1723.611661][T11951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1723.824402][ T5312] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1723.870226][ T5312] usb 9-1: USB disconnect, device number 21 [ 1723.937861][ T71] hsr_slave_0: left promiscuous mode [ 1723.980190][ T71] hsr_slave_1: left promiscuous mode [ 1724.011671][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1724.056452][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1724.086159][T11993] udevd[11993]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1724.506788][T12072] loop8: detected capacity change from 0 to 512 [ 1724.595556][T12072] EXT4-fs (loop8): filesystem is read-only [ 1724.620153][T12072] EXT4-fs (loop8): filesystem is read-only [ 1724.639308][T12072] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1724.685775][T12072] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.960: bad orphan inode 16 [ 1724.701153][ T71] team0 (unregistering): Port device team_slave_1 removed [ 1724.705276][T12072] loop8: lost filesystem error report for type 5 error -117 [ 1724.716116][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1724.730411][ C0] EXT4-fs (loop8): initial error at time 1774682119: ext4_orphan_get:1417 [ 1724.739268][ C0] EXT4-fs (loop8): last error at time 1774682119: ext4_orphan_get:1417 [ 1724.753719][T12072] ext4_test_bit(bit=15, block=3) = 0 [ 1724.761888][ T71] team0 (unregistering): Port device team_slave_0 removed [ 1724.762548][T12072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1725.489433][T11951] team0: Port device team_slave_0 added [ 1725.647863][T11951] team0: Port device team_slave_1 added [ 1725.780301][T11951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1725.789082][T11951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1725.819592][T11951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1725.860898][T11951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1725.886678][T11951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1725.965298][T11951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1726.319750][T10112] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1726.649314][T11844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1726.733319][T11844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1726.836362][T11951] hsr_slave_0: entered promiscuous mode [ 1726.873874][T11951] hsr_slave_1: entered promiscuous mode [ 1726.925909][T11951] debugfs: 'hsr0' already exists in 'hsr' [ 1726.932061][T11951] Cannot create hsr debugfs directory [ 1727.131632][T11844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1727.208941][T11844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1727.375793][T12084] loop8: detected capacity change from 0 to 4096 [ 1727.415430][T12084] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1727.570009][T12084] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1727.908602][T10112] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1729.224803][T11891] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1729.319349][T12097] loop8: detected capacity change from 0 to 128 [ 1729.362619][T11825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1729.453946][T11891] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1729.567953][T11891] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1729.753766][T11891] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1730.132905][T11825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1730.333419][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.341277][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1730.562032][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.569741][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1731.141811][T11844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1732.521626][T11844] 8021q: adding VLAN 0 to HW filter on device team0 [ 1732.688825][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.696709][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1732.897731][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.905520][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1733.381110][T11951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1733.661067][T11951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1734.031347][T11951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1734.248300][T11951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1734.477264][T11952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1734.507925][T11952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1734.535513][T11952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1734.572720][T11952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1734.585232][T11952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1734.879602][T12121] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1735.001320][T12121] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1735.993360][T11891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1736.716935][ T7705] Bluetooth: hci4: command tx timeout [ 1736.984631][T12139] loop8: detected capacity change from 0 to 512 [ 1737.014235][T12139] EXT4-fs (loop8): filesystem is read-only [ 1737.064598][T12139] EXT4-fs (loop8): filesystem is read-only [ 1737.071696][T12139] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1737.138133][T12139] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.967: bad orphan inode 16 [ 1737.208333][T11891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1737.224478][T12139] loop8: lost filesystem error report for type 5 error -117 [ 1737.225201][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1737.239466][ C1] EXT4-fs (loop8): initial error at time 1774682132: ext4_orphan_get:1417 [ 1737.248367][ C1] EXT4-fs (loop8): last error at time 1774682132: ext4_orphan_get:1417 [ 1737.266418][T12139] ext4_test_bit(bit=15, block=3) = 0 [ 1737.307875][T12139] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1737.458333][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.466057][T10524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1737.880427][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.888329][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1738.795702][ T7705] Bluetooth: hci4: command tx timeout [ 1738.900429][T10112] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1739.320447][T11951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1739.479645][T11952] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1739.498138][T11952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1739.508529][T11952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1739.523177][T11952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1739.536365][T11952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1740.025618][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.032397][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.049677][T12116] chnl_net:caif_netlink_parms(): no params data found [ 1740.514269][T12157] loop8: detected capacity change from 0 to 4096 [ 1740.554309][T12157] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1740.650109][T12157] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1740.660256][T11951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1740.832977][ T1096] bridge_slave_1: left allmulticast mode [ 1740.858713][ T1096] bridge_slave_1: left promiscuous mode [ 1740.875540][ T7705] Bluetooth: hci4: command tx timeout [ 1740.898698][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.981761][ T1096] bridge_slave_0: left allmulticast mode [ 1740.995113][ T1096] bridge_slave_0: left promiscuous mode [ 1741.020973][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.096983][T10112] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1741.596402][ T7705] Bluetooth: hci5: command tx timeout [ 1741.924703][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1742.042916][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1742.064728][ T1096] bond0 (unregistering): Released all slaves [ 1742.513795][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.521480][T10524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1742.722800][T10524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.730443][T10524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1743.005780][ T7705] Bluetooth: hci4: command tx timeout [ 1743.677952][ T7705] Bluetooth: hci5: command tx timeout [ 1743.716079][ T1096] hsr_slave_0: left promiscuous mode [ 1743.749993][ T1096] hsr_slave_1: left promiscuous mode [ 1743.790743][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1743.847628][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.393295][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 1745.524365][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 1745.793663][ T7705] Bluetooth: hci5: command tx timeout [ 1747.845120][ T7705] Bluetooth: hci5: command tx timeout [ 1748.528945][T12116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.585666][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.593589][T12116] bridge_slave_0: entered allmulticast mode [ 1748.694067][T12116] bridge_slave_0: entered promiscuous mode [ 1748.835756][T12116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.843352][T12116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.925706][T12116] bridge_slave_1: entered allmulticast mode [ 1748.963176][T12116] bridge_slave_1: entered promiscuous mode [ 1752.379063][T12116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1752.721130][T12116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1752.832376][T11952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1752.852847][T11952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1752.867212][T11952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1752.891972][T11952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1752.917483][T11952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1753.294803][T12116] team0: Port device team_slave_0 added [ 1753.581054][T12116] team0: Port device team_slave_1 added [ 1754.343192][T12116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1754.390015][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.455393][T12116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1754.474365][T12116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.493513][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.573938][T12116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1754.670676][T12152] chnl_net:caif_netlink_parms(): no params data found [ 1754.680177][T12216] loop8: detected capacity change from 0 to 256 [ 1754.848975][T12216] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 1754.958238][ T7705] Bluetooth: hci2: command tx timeout [ 1755.884424][T12116] hsr_slave_0: entered promiscuous mode [ 1755.910341][T12116] hsr_slave_1: entered promiscuous mode [ 1755.972382][T12116] debugfs: 'hsr0' already exists in 'hsr' [ 1756.001973][T12116] Cannot create hsr debugfs directory [ 1757.213214][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.8.974'. [ 1757.222744][T12230] netlink: 24 bytes leftover after parsing attributes in process `syz.8.974'. [ 1757.233249][ T7705] Bluetooth: hci2: command tx timeout [ 1758.259055][T11951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1759.161669][ T1096] bridge_slave_1: left allmulticast mode [ 1759.216896][ T1096] bridge_slave_1: left promiscuous mode [ 1759.223728][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.276553][ T7705] Bluetooth: hci2: command tx timeout [ 1759.576457][ T1096] bridge_slave_0: left allmulticast mode [ 1759.582354][ T1096] bridge_slave_0: left promiscuous mode [ 1759.676470][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.766616][T11952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1760.776134][T11952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1760.787571][T11952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1760.820261][T11952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1760.844665][T11952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1760.911732][T12248] loop8: detected capacity change from 0 to 4096 [ 1760.946296][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1760.989052][T12248] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1761.060366][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1761.084023][T12248] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1761.122013][ T1096] bond0 (unregistering): Released all slaves [ 1761.355871][T11952] Bluetooth: hci2: command tx timeout [ 1761.591800][T10112] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1762.085944][T12152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.098106][T12152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1762.136354][T12152] bridge_slave_0: entered allmulticast mode [ 1762.167446][T12152] bridge_slave_0: entered promiscuous mode [ 1762.247463][ T1096] hsr_slave_0: left promiscuous mode [ 1762.296485][ T1096] hsr_slave_1: left promiscuous mode [ 1762.315250][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1762.337398][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1762.955255][T11952] Bluetooth: hci3: command tx timeout [ 1763.579547][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 1763.617972][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 1765.038804][T11952] Bluetooth: hci3: command tx timeout [ 1767.115622][T11952] Bluetooth: hci3: command tx timeout [ 1767.455665][T12152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.463339][T12152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.505425][T12152] bridge_slave_1: entered allmulticast mode [ 1767.558186][T12152] bridge_slave_1: entered promiscuous mode [ 1768.190209][T12152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.531137][T12152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1769.189772][T12197] chnl_net:caif_netlink_parms(): no params data found [ 1769.215402][T11952] Bluetooth: hci3: command tx timeout [ 1769.557190][T12152] team0: Port device team_slave_0 added [ 1769.586738][T12152] team0: Port device team_slave_1 added [ 1772.308316][T12152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1772.350155][T12152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1772.455543][T12152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1772.495641][T12152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1772.503895][T12152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1772.586565][T12152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1773.314731][T12152] hsr_slave_0: entered promiscuous mode [ 1773.344402][T12152] hsr_slave_1: entered promiscuous mode [ 1773.373154][T12152] debugfs: 'hsr0' already exists in 'hsr' [ 1773.395155][T12152] Cannot create hsr debugfs directory [ 1773.689140][T12116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1774.035659][T12116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1774.112209][T12116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1774.598644][T12116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1774.793283][T12197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.820370][T12197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.845919][T12197] bridge_slave_0: entered allmulticast mode [ 1774.869777][T12197] bridge_slave_0: entered promiscuous mode [ 1774.880174][T12327] loop8: detected capacity change from 0 to 512 [ 1774.903569][T12197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.917529][T12197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.925669][T12327] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1774.937567][T12197] bridge_slave_1: entered allmulticast mode [ 1774.951107][T12197] bridge_slave_1: entered promiscuous mode [ 1774.986551][T12327] EXT4-fs (loop8): 1 truncate cleaned up [ 1775.074059][T12327] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1775.166047][T12250] chnl_net:caif_netlink_parms(): no params data found [ 1775.351221][ T29] audit: type=1800 audit(1774682170.606:51): pid=12327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.984" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 1776.090571][T10112] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1776.162153][T12197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1776.230856][T12197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1776.620115][T12197] team0: Port device team_slave_0 added [ 1776.784515][T12197] team0: Port device team_slave_1 added [ 1777.233963][T12250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.242258][T12250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.253329][T12250] bridge_slave_0: entered allmulticast mode [ 1777.267409][T12250] bridge_slave_0: entered promiscuous mode [ 1777.449643][T12250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.466422][T12250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.474363][T12250] bridge_slave_1: entered allmulticast mode [ 1777.502644][T12250] bridge_slave_1: entered promiscuous mode [ 1777.661354][T12197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1777.670603][T12197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1777.703356][T12197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.916937][T12250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1777.959729][T12197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.987338][T12197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1778.018949][T12197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1778.134506][T12250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1778.672190][ T1096] bridge_slave_1: left allmulticast mode [ 1778.691211][ T1096] bridge_slave_1: left promiscuous mode [ 1778.700228][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.730109][ T1096] bridge_slave_0: left allmulticast mode [ 1778.741743][ T1096] bridge_slave_0: left promiscuous mode [ 1778.750655][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1778.771755][ T1096] bridge_slave_1: left allmulticast mode [ 1778.815308][ T1096] bridge_slave_1: left promiscuous mode [ 1778.822504][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.823115][ T7705] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1778.852060][ T7705] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1778.861655][ T7705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1778.877431][ T7705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1778.891337][ T1096] bridge_slave_0: left allmulticast mode [ 1778.898366][ T1096] bridge_slave_0: left promiscuous mode [ 1778.899810][ T7705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1778.905120][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.782427][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1779.813079][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1779.830682][ T1096] bond0 (unregistering): Released all slaves [ 1780.212123][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1780.250106][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1780.276778][ T1096] bond0 (unregistering): Released all slaves [ 1780.331175][T12250] team0: Port device team_slave_0 added [ 1780.457106][T12197] hsr_slave_0: entered promiscuous mode [ 1780.500053][T12197] hsr_slave_1: entered promiscuous mode [ 1780.509963][T12197] debugfs: 'hsr0' already exists in 'hsr' [ 1780.521450][T12197] Cannot create hsr debugfs directory [ 1780.568051][T12250] team0: Port device team_slave_1 added [ 1780.902684][ T1096] hsr_slave_0: left promiscuous mode [ 1780.929213][ T1096] hsr_slave_1: left promiscuous mode [ 1780.952686][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1780.964994][T11952] Bluetooth: hci0: command tx timeout [ 1780.990589][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.020078][ T1096] hsr_slave_0: left promiscuous mode [ 1781.029972][ T1096] hsr_slave_1: left promiscuous mode [ 1781.043355][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.058789][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.708344][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 1781.743697][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 1782.288083][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 1782.310417][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 1782.617501][T12250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1782.624656][T12250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1782.657208][T12250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1782.798824][T12250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1782.807041][T12250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1782.840519][T12250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1783.035520][T11952] Bluetooth: hci0: command tx timeout [ 1783.372765][T12250] hsr_slave_0: entered promiscuous mode [ 1783.382792][T12250] hsr_slave_1: entered promiscuous mode [ 1783.610427][T12152] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1783.718630][T12116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1783.730227][T12152] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1783.876172][T12152] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1783.973684][T12152] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1784.126292][ T1096] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.214578][ T1096] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.296026][ T1096] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.602296][T12116] 8021q: adding VLAN 0 to HW filter on device team0 [ 1784.642662][ T1096] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.852135][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.859566][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1784.876275][T12355] chnl_net:caif_netlink_parms(): no params data found [ 1785.002671][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1785.010142][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1785.118488][T11952] Bluetooth: hci0: command tx timeout [ 1785.576701][ T1096] bridge_slave_1: left allmulticast mode [ 1785.582606][ T1096] bridge_slave_1: left promiscuous mode [ 1785.608736][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.623689][ T1096] bridge_slave_0: left allmulticast mode [ 1785.630596][ T1096] bridge_slave_0: left promiscuous mode [ 1785.637709][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.015842][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1786.063779][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1786.097514][ T1096] bond0 (unregistering): Released all slaves [ 1786.617308][T12355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.626136][T12355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.633777][T12355] bridge_slave_0: entered allmulticast mode [ 1786.643179][T12355] bridge_slave_0: entered promiscuous mode [ 1786.724733][T12355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.735920][T12355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.743722][T12355] bridge_slave_1: entered allmulticast mode [ 1786.760616][T12355] bridge_slave_1: entered promiscuous mode [ 1786.995270][ T1096] hsr_slave_0: left promiscuous mode [ 1787.003960][ T1096] hsr_slave_1: left promiscuous mode [ 1787.014791][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1787.023694][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1787.040524][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1787.054149][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1787.089445][ T1096] veth1_macvtap: left promiscuous mode [ 1787.096056][ T1096] veth0_macvtap: left promiscuous mode [ 1787.101989][ T1096] veth1_vlan: left promiscuous mode [ 1787.109614][ T1096] veth0_vlan: left promiscuous mode [ 1787.195338][T11952] Bluetooth: hci0: command tx timeout [ 1787.676398][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 1787.722628][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 1787.933033][T12355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1788.053378][T12355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1788.358609][T12197] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1788.399572][T12152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1788.422431][T12355] team0: Port device team_slave_0 added [ 1788.428875][T12197] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1788.491276][T12355] team0: Port device team_slave_1 added [ 1788.498666][T12197] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1788.651947][T12197] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1788.743111][T12355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.752009][T12355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.802539][T12355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1788.893212][T12355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1788.901361][T12355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.928038][T12355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1789.035968][T12152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1789.051478][T12250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1789.082571][T12250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1789.190540][T12116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1789.211602][T12250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1789.282380][T12355] hsr_slave_0: entered promiscuous mode [ 1789.294560][T12355] hsr_slave_1: entered promiscuous mode [ 1789.318586][T12355] debugfs: 'hsr0' already exists in 'hsr' [ 1789.332830][T12355] Cannot create hsr debugfs directory [ 1789.401535][T12250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1789.495775][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.503358][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1789.890494][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.898229][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1790.729357][T12116] veth0_vlan: entered promiscuous mode [ 1791.115060][T12116] veth1_vlan: entered promiscuous mode [ 1791.642944][T12197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1792.142427][T12250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1792.240854][T12355] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1792.315768][T12197] 8021q: adding VLAN 0 to HW filter on device team0 [ 1792.334246][T12116] veth0_macvtap: entered promiscuous mode [ 1792.399157][T12355] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1792.458526][T12355] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1792.519282][T12355] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1792.685832][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.693506][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1792.978766][T12250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1793.003729][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.011456][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1793.182631][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.190329][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1793.367427][T12152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1793.611383][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.619126][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1793.831468][ T7705] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1793.842246][ T7705] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1793.853150][ T7705] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1793.868677][ T7705] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1793.881269][ T7705] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1795.537544][T12152] veth0_vlan: entered promiscuous mode [ 1795.839437][T12152] veth1_vlan: entered promiscuous mode [ 1795.995707][T11952] Bluetooth: hci1: command tx timeout [ 1796.659791][T12355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1796.688194][T12197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1796.877095][T12423] chnl_net:caif_netlink_parms(): no params data found [ 1797.338502][ T12] bridge_slave_1: left allmulticast mode [ 1797.344402][ T12] bridge_slave_1: left promiscuous mode [ 1797.359190][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.382208][ T12] bridge_slave_0: left allmulticast mode [ 1797.393722][ T12] bridge_slave_0: left promiscuous mode [ 1797.402239][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.764497][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1797.783163][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1797.798280][ T12] bond0 (unregistering): Released all slaves [ 1797.897552][T12152] veth0_macvtap: entered promiscuous mode [ 1798.069065][T12355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1798.088078][T11952] Bluetooth: hci1: command tx timeout [ 1798.274148][ T12] hsr_slave_0: left promiscuous mode [ 1798.295216][ T12] hsr_slave_1: left promiscuous mode [ 1798.311060][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1798.361554][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.428767][ T12] veth0_macvtap: left promiscuous mode [ 1798.434787][ T12] veth1_vlan: left promiscuous mode [ 1798.453898][ T12] veth0_vlan: left promiscuous mode [ 1799.417247][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1799.494244][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1799.577345][ T7705] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1799.593066][ T7705] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1799.611299][ T7705] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1799.645561][ T7705] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1799.659377][ T7705] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1800.087604][T12152] veth1_macvtap: entered promiscuous mode [ 1800.173140][ T7705] Bluetooth: hci1: command tx timeout [ 1800.293525][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.301222][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1800.585962][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.593548][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1800.686831][T12423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.694408][T12423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.741225][T12423] bridge_slave_0: entered allmulticast mode [ 1800.771695][T12423] bridge_slave_0: entered promiscuous mode [ 1800.808207][T12423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.825698][T12423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.833517][T12423] bridge_slave_1: entered allmulticast mode [ 1800.878741][T12423] bridge_slave_1: entered promiscuous mode [ 1801.186546][T12423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1801.358412][T12250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1801.392664][T12423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1801.470360][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.483793][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1801.755302][ T7705] Bluetooth: hci4: command tx timeout [ 1801.905593][T12423] team0: Port device team_slave_0 added [ 1801.941938][T12423] team0: Port device team_slave_1 added [ 1802.236107][ T7705] Bluetooth: hci1: command tx timeout [ 1802.361799][T12423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1802.369372][T12423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1802.397535][T12423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1802.573971][T12423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1802.581886][T12423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1802.616526][T12423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1802.864586][T12197] veth0_vlan: entered promiscuous mode [ 1803.343203][T12423] hsr_slave_0: entered promiscuous mode [ 1803.354676][T12423] hsr_slave_1: entered promiscuous mode [ 1803.366152][T12423] debugfs: 'hsr0' already exists in 'hsr' [ 1803.372084][T12423] Cannot create hsr debugfs directory [ 1803.516411][T12197] veth1_vlan: entered promiscuous mode [ 1803.835475][ T7705] Bluetooth: hci4: command tx timeout [ 1804.399450][T12470] chnl_net:caif_netlink_parms(): no params data found [ 1804.704448][T12250] veth0_vlan: entered promiscuous mode [ 1804.990359][ T57] bridge_slave_1: left allmulticast mode [ 1805.008313][ T57] bridge_slave_1: left promiscuous mode [ 1805.024397][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.050564][ T57] bridge_slave_0: left allmulticast mode [ 1805.058677][ T57] bridge_slave_0: left promiscuous mode [ 1805.067811][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.496459][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1805.514173][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1805.534800][ T57] bond0 (unregistering): Released all slaves [ 1805.640508][T12250] veth1_vlan: entered promiscuous mode [ 1805.724179][ T57] hsr_slave_0: left promiscuous mode [ 1805.737949][ T57] hsr_slave_1: left promiscuous mode [ 1805.758157][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1805.778474][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1805.838683][ T57] veth1_macvtap: left promiscuous mode [ 1805.844345][ T57] veth0_macvtap: left promiscuous mode [ 1805.855736][ T57] veth1_vlan: left promiscuous mode [ 1805.861320][ T57] veth0_vlan: left promiscuous mode [ 1805.915513][ T7705] Bluetooth: hci4: command tx timeout [ 1806.752358][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1806.821845][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1807.421862][T12355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1807.610349][T12197] veth0_macvtap: entered promiscuous mode [ 1807.926355][T12197] veth1_macvtap: entered promiscuous mode [ 1807.995498][ T7705] Bluetooth: hci4: command tx timeout [ 1808.023848][T12470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1808.034388][T12470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.043697][T12470] bridge_slave_0: entered allmulticast mode [ 1808.066934][T12470] bridge_slave_0: entered promiscuous mode [ 1808.150526][T12470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.167255][T12470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.194325][T12470] bridge_slave_1: entered allmulticast mode [ 1808.218013][T12470] bridge_slave_1: entered promiscuous mode [ 1808.332336][T12250] veth0_macvtap: entered promiscuous mode [ 1808.544465][T12250] veth1_macvtap: entered promiscuous mode [ 1808.641411][T12470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1808.727428][T12470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1808.794616][T12197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1809.163943][T12470] team0: Port device team_slave_0 added [ 1809.208785][T12470] team0: Port device team_slave_1 added [ 1809.398236][T12423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1809.536217][T12423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1809.631270][T12250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1809.701998][T12470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1809.735115][T12470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1809.805619][T12470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1809.831924][T12470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1809.855394][T12470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1809.905353][T12470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1809.939517][T12423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1810.150688][T12423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1810.248512][T12250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1810.486843][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.525483][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.867912][T12470] hsr_slave_0: entered promiscuous mode [ 1810.909223][T12470] hsr_slave_1: entered promiscuous mode [ 1810.948636][T12470] debugfs: 'hsr0' already exists in 'hsr' [ 1810.954596][T12470] Cannot create hsr debugfs directory [ 1811.007852][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.034224][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.036897][T11952] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1811.074729][T11952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1811.097288][T11952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1811.113652][T11952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1811.130287][T11952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1812.528354][T12355] veth0_vlan: entered promiscuous mode [ 1813.038340][T12355] veth1_vlan: entered promiscuous mode [ 1813.205012][ T7705] Bluetooth: hci5: command tx timeout [ 1813.906386][ T1096] bridge_slave_1: left allmulticast mode [ 1813.912276][ T1096] bridge_slave_1: left promiscuous mode [ 1813.934160][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.953715][ T1096] bridge_slave_0: left allmulticast mode [ 1813.975535][ T1096] bridge_slave_0: left promiscuous mode [ 1813.982312][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.387174][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1814.401989][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1814.416074][ T1096] bond0 (unregistering): Released all slaves [ 1814.742950][ T1096] hsr_slave_0: left promiscuous mode [ 1814.771883][ T1096] hsr_slave_1: left promiscuous mode [ 1814.791551][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1814.800542][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1814.837633][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1814.909150][ T1096] veth1_macvtap: left promiscuous mode [ 1814.936046][ T1096] veth0_macvtap: left promiscuous mode [ 1814.942117][ T1096] veth1_vlan: left promiscuous mode [ 1814.961877][ T1096] veth0_vlan: left promiscuous mode [ 1815.275451][ T7705] Bluetooth: hci5: command tx timeout [ 1815.905076][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 1815.962182][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 1816.942574][T12355] veth0_macvtap: entered promiscuous mode [ 1816.957927][T12556] chnl_net:caif_netlink_parms(): no params data found [ 1817.094825][T12355] veth1_macvtap: entered promiscuous mode [ 1817.182868][T12470] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1817.232737][T12470] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1817.295165][T12423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1817.356406][ T7705] Bluetooth: hci5: command tx timeout [ 1817.390125][T12470] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1817.450303][T12470] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1817.760708][T12423] 8021q: adding VLAN 0 to HW filter on device team0 [ 1817.888429][T12355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1817.977164][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.984741][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.064441][T12355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1818.293247][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.300937][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.437557][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.590394][T12556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.598586][T12556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.612142][T12556] bridge_slave_0: entered allmulticast mode [ 1818.622689][T12556] bridge_slave_0: entered promiscuous mode [ 1818.640941][T12556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.648856][T12556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.656897][T12556] bridge_slave_1: entered allmulticast mode [ 1818.673230][T12556] bridge_slave_1: entered promiscuous mode [ 1818.727106][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.741582][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.992982][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.999712][ T6128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.048579][ T6128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.134425][T12556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1819.315623][T12556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1819.435503][ T7705] Bluetooth: hci5: command tx timeout [ 1819.766783][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.779463][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.800005][T12556] team0: Port device team_slave_0 added [ 1819.872480][T12556] team0: Port device team_slave_1 added [ 1819.931175][T12423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1820.417064][T12556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1820.424244][T12556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1820.505318][T12556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1820.540160][T12556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1820.585264][T12556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1820.678371][T12556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1821.394702][T12556] hsr_slave_0: entered promiscuous mode [ 1821.420559][T12556] hsr_slave_1: entered promiscuous mode [ 1821.467133][T12556] debugfs: 'hsr0' already exists in 'hsr' [ 1821.473089][T12556] Cannot create hsr debugfs directory [ 1821.923814][T12470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.409367][T11952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1822.428300][T11952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1822.454680][T11952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1822.470665][T11952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1822.482531][T11952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1823.056736][T12470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1823.119538][T12423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1823.556066][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.563745][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1823.831183][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.838972][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1824.248138][ T1096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.515508][ T1096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.636755][ T7705] Bluetooth: hci2: command tx timeout [ 1824.832155][ T1096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1825.044665][ T1096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1825.678693][T12423] veth0_vlan: entered promiscuous mode [ 1825.818027][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1825.883906][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1826.440909][T12650] chnl_net:caif_netlink_parms(): no params data found [ 1826.479542][T12556] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1826.527772][ T1096] bridge_slave_1: left allmulticast mode [ 1826.533688][ T1096] bridge_slave_1: left promiscuous mode [ 1826.556075][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.612700][ T1096] bridge_slave_0: left allmulticast mode [ 1826.635457][ T1096] bridge_slave_0: left promiscuous mode [ 1826.642248][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.716428][ T7705] Bluetooth: hci2: command tx timeout [ 1827.230837][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1827.269000][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1827.296402][ T1096] bond0 (unregistering): Released all slaves [ 1827.316830][T12423] veth1_vlan: entered promiscuous mode [ 1827.443846][T12556] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1827.632369][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1827.650913][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1827.775175][T12556] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1827.858478][T12556] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1828.194545][ T1096] hsr_slave_0: left promiscuous mode [ 1828.236625][ T1096] hsr_slave_1: left promiscuous mode [ 1828.255714][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1828.263347][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1828.293687][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1828.320777][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1828.390013][ T1096] veth1_macvtap: left promiscuous mode [ 1828.407769][ T1096] veth0_macvtap: left promiscuous mode [ 1828.413752][ T1096] veth1_vlan: left promiscuous mode [ 1828.435339][ T1096] veth0_vlan: left promiscuous mode [ 1828.795895][ T7705] Bluetooth: hci2: command tx timeout [ 1829.442251][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 1829.484090][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 1830.337244][T12423] veth0_macvtap: entered promiscuous mode [ 1830.402859][T12470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1830.607796][T12423] veth1_macvtap: entered promiscuous mode [ 1830.798567][T12650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.831899][T12650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.852799][T12650] bridge_slave_0: entered allmulticast mode [ 1830.863987][T12650] bridge_slave_0: entered promiscuous mode [ 1830.876300][ T7705] Bluetooth: hci2: command tx timeout [ 1830.952176][T12650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.975768][T12650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.984131][T12650] bridge_slave_1: entered allmulticast mode [ 1830.999789][T12650] bridge_slave_1: entered promiscuous mode [ 1831.322194][T12650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1831.434266][T12423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1831.472335][T12650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1831.501790][T12703] loop7: detected capacity change from 0 to 2048 [ 1831.581315][T12703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1831.784424][T12423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1831.864622][T12650] team0: Port device team_slave_0 added [ 1832.040496][T12650] team0: Port device team_slave_1 added [ 1832.377073][ T1096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.413101][T12650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1832.424142][T12650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1832.452529][T12650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1832.479970][T12470] veth0_vlan: entered promiscuous mode [ 1832.496157][ T1096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.510097][ T1096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.542725][T12556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1832.599026][T12650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1832.640392][T12650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1832.736488][T12650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1832.831939][ T1096] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.885423][ T7705] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1840.894134][ T7705] Bluetooth: hci0: Injecting HCI hardware error event [ 1841.896313][ T7705] Bluetooth: hci0: hardware error 0x00 [ 1844.210049][T12470] veth1_vlan: entered promiscuous mode [ 1845.200660][ T7705] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1846.191798][T12556] 8021q: adding VLAN 0 to HW filter on device team0 [ 1846.753405][T12650] hsr_slave_0: entered promiscuous mode [ 1846.817465][T12650] hsr_slave_1: entered promiscuous mode [ 1846.939846][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 1846.947549][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1847.352003][T12714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1847.359553][T12714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1848.391108][T12470] veth0_macvtap: entered promiscuous mode [ 1848.554506][T12470] veth1_macvtap: entered promiscuous mode [ 1849.064487][T12470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1849.282152][T12470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1849.365683][T12740] 9p: Bad value for 'rfdno' [ 1849.589521][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.615573][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.743313][T12714] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.785417][T12714] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1850.022742][T12650] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1850.195306][T12650] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1850.349526][T12650] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1850.595119][T12650] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1851.310009][T12757] loop7: detected capacity change from 0 to 2048 [ 1851.483347][T12556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1851.492997][T12757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1853.156336][T12650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1853.638961][T12650] 8021q: adding VLAN 0 to HW filter on device team0 [ 1853.763245][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.770967][T10524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1853.960221][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 1853.967878][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1862.900961][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1862.912011][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1863.573589][T12556] veth0_vlan: entered promiscuous mode [ 1863.586631][ T7705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1863.626315][ T7705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1863.646411][ T7705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1863.703419][ T7705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1863.723236][ T7705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1863.882152][T12556] veth1_vlan: entered promiscuous mode [ 1864.899688][T12556] veth0_macvtap: entered promiscuous mode [ 1865.291174][ T7705] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1865.307463][ T7705] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1865.319360][ T7705] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1865.336569][ T7705] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1865.350735][ T7705] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1865.428969][T12556] veth1_macvtap: entered promiscuous mode [ 1865.835405][ T7705] Bluetooth: hci3: command tx timeout [ 1865.890616][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.164725][T12650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1866.223857][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.314569][T12556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1866.510314][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.783102][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.939447][T12556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1867.099608][ T1096] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.114731][ T1096] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.354684][ T1096] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.378920][ T1096] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.438395][ T7705] Bluetooth: hci6: command tx timeout [ 1867.921501][ T7705] Bluetooth: hci3: command tx timeout [ 1868.245758][T12792] chnl_net:caif_netlink_parms(): no params data found [ 1868.459193][ T57] bridge_slave_1: left allmulticast mode [ 1868.471554][ T57] bridge_slave_1: left promiscuous mode [ 1868.495843][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.517447][ T57] bridge_slave_0: left allmulticast mode [ 1868.523408][ T57] bridge_slave_0: left promiscuous mode [ 1868.530896][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1869.332849][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1869.394286][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1869.424178][ T57] bond0 (unregistering): Released all slaves [ 1869.519058][ T7705] Bluetooth: hci6: command tx timeout [ 1870.016177][ T7705] Bluetooth: hci3: command tx timeout [ 1870.224234][T12650] veth0_vlan: entered promiscuous mode [ 1870.395163][ T57] hsr_slave_0: left promiscuous mode [ 1870.412850][ T57] hsr_slave_1: left promiscuous mode [ 1870.478354][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1870.503710][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1870.556841][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1870.564451][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1870.682714][ T57] veth1_macvtap: left promiscuous mode [ 1870.701241][ T57] veth0_macvtap: left promiscuous mode [ 1870.713015][ T57] veth1_vlan: left promiscuous mode [ 1870.737001][ T57] veth0_vlan: left promiscuous mode [ 1871.595200][ T7705] Bluetooth: hci6: command tx timeout [ 1872.085327][ T7705] Bluetooth: hci3: command tx timeout [ 1872.662873][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1872.763815][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1872.817661][T11952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1872.836493][T11952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1872.847446][T11952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1872.870097][T11952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1872.908009][T11952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1873.509635][T12799] chnl_net:caif_netlink_parms(): no params data found [ 1873.606355][T12650] veth1_vlan: entered promiscuous mode [ 1873.676695][ T7705] Bluetooth: hci6: command tx timeout [ 1874.389569][T12792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.417249][T12792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.429924][T12792] bridge_slave_0: entered allmulticast mode [ 1874.441829][T12792] bridge_slave_0: entered promiscuous mode [ 1874.515886][T12792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1874.523480][T12792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1874.546149][T12792] bridge_slave_1: entered allmulticast mode [ 1874.575674][T12792] bridge_slave_1: entered promiscuous mode [ 1874.871405][T12792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1874.950906][ T57] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.962408][ T7705] Bluetooth: hci1: command tx timeout [ 1875.049201][T12792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1875.311242][ T57] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.435639][T12799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1875.443236][T12799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1875.472665][T12799] bridge_slave_0: entered allmulticast mode [ 1875.483981][T12799] bridge_slave_0: entered promiscuous mode [ 1875.541883][ T57] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.588481][T12792] team0: Port device team_slave_0 added [ 1875.613693][T12792] team0: Port device team_slave_1 added [ 1875.714937][T12650] veth0_macvtap: entered promiscuous mode [ 1875.778190][T12799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1875.786073][T12799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1875.793869][T12799] bridge_slave_1: entered allmulticast mode [ 1875.807195][T12799] bridge_slave_1: entered promiscuous mode [ 1875.862395][ T57] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.102135][T12792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1876.113036][T12792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1876.147666][T12792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1876.229371][T12799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1876.255448][T12799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1876.298490][T12650] veth1_macvtap: entered promiscuous mode [ 1876.365673][T12792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1876.385594][T12792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1876.431419][T12792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1876.796877][T12799] team0: Port device team_slave_0 added [ 1876.932950][T12799] team0: Port device team_slave_1 added [ 1877.035470][ T7705] Bluetooth: hci1: command tx timeout [ 1877.276246][T12792] hsr_slave_0: entered promiscuous mode [ 1877.287348][T12792] hsr_slave_1: entered promiscuous mode [ 1877.298931][T12792] debugfs: 'hsr0' already exists in 'hsr' [ 1877.304774][T12792] Cannot create hsr debugfs directory [ 1877.366331][T12650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1877.377238][T12799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1877.384812][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1877.416125][T12799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1877.434588][T12799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1877.442055][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1877.468530][T12799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1877.679085][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.824604][T12650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1877.936891][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.789602][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.123401][ T7705] Bluetooth: hci1: command tx timeout [ 1879.694405][T12820] chnl_net:caif_netlink_parms(): no params data found [ 1879.746577][T12799] hsr_slave_0: entered promiscuous mode [ 1879.761216][T12799] hsr_slave_1: entered promiscuous mode [ 1879.773270][T12799] debugfs: 'hsr0' already exists in 'hsr' [ 1879.780145][T12799] Cannot create hsr debugfs directory [ 1879.839417][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.863929][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.975149][T10524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.314554][T10524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.342471][T10524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.429329][T12845] loop7: detected capacity change from 0 to 2048 [ 1880.501992][T12845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1881.206072][ T7705] Bluetooth: hci1: command tx timeout [ 1882.349857][ T57] bridge_slave_1: left allmulticast mode [ 1882.385800][ T57] bridge_slave_1: left promiscuous mode [ 1882.395126][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.276047][ T57] bridge_slave_0: left allmulticast mode [ 1891.745204][ T57] bridge_slave_0: left promiscuous mode [ 1891.751935][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.949394][ T57] bridge_slave_1: left allmulticast mode [ 1891.995352][ T57] bridge_slave_1: left promiscuous mode [ 1892.002067][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.126412][ T57] bridge_slave_0: left allmulticast mode [ 1892.132303][ T57] bridge_slave_0: left promiscuous mode [ 1892.176378][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.528518][T11952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1892.538685][T11952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1892.550437][T11952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1892.574380][T11952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1892.587403][T11952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1893.318054][T12864] loop7: detected capacity change from 0 to 40427 [ 1893.377762][T12864] F2FS-fs (loop7): invalid crc value [ 1893.725422][T12864] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1893.775569][T12864] F2FS-fs (loop7): Start checkpoint disabled! [ 1893.817119][T12864] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 1893.835234][T12864] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1893.958673][ T29] audit: type=1800 audit(1774682289.196:52): pid=12864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1008" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1894.157957][ T29] audit: type=1800 audit(1774682289.266:53): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1008" name="bus" dev="loop7" ino=10 res=0 errno=0 [ 1894.509763][T10524] kworker/u8:12: attempt to access beyond end of device [ 1894.509763][T10524] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1894.601224][T10524] CPU: 1 UID: 0 PID: 10524 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 1894.601440][T10524] Tainted: [L]=SOFTLOCKUP [ 1894.601506][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1894.601645][T10524] Workqueue: writeback wb_workfn (flush-7:7) [ 1894.601869][T10524] Call Trace: [ 1894.601933][T10524] [ 1894.601993][T10524] __dump_stack+0x26/0x30 [ 1894.602183][T10524] dump_stack_lvl+0x14c/0x1c0 [ 1894.602376][T10524] dump_stack+0x1e/0x25 [ 1894.602549][T10524] f2fs_handle_critical_error+0xa6f/0xc20 [ 1894.602835][T10524] f2fs_stop_checkpoint+0x65/0x80 [ 1894.603005][T10524] f2fs_write_end_io+0x12e6/0x2560 [ 1894.603249][T10524] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1894.603421][T10524] bio_endio+0x1006/0x1160 [ 1894.603640][T10524] submit_bio_noacct+0x533/0x2960 [ 1894.603894][T10524] submit_bio+0x57a/0x620 [ 1894.604090][T10524] f2fs_submit_write_bio+0x115/0x350 [ 1894.604335][T10524] __submit_merged_bio+0x16f/0x780 [ 1894.604575][T10524] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1894.604821][T10524] __submit_merged_write_cond+0x4ba/0xae0 [ 1894.605077][T10524] f2fs_write_data_pages+0x5073/0x5e10 [ 1894.605411][T10524] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1894.605667][T10524] ? __update_load_avg_cfs_rq+0xd80/0x1060 [ 1894.605902][T10524] ? kmsan_get_metadata+0xf1/0x160 [ 1894.606131][T10524] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1894.606379][T10524] ? kmsan_get_metadata+0xf1/0x160 [ 1894.606613][T10524] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1894.606848][T10524] ? kmsan_get_metadata+0xf1/0x160 [ 1894.607073][T10524] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1894.607307][T10524] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1894.607480][T10524] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1894.607659][T10524] do_writepages+0x3f2/0x860 [ 1894.607828][T10524] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1894.608072][T10524] ? queue_io+0x7b1/0x800 [ 1894.608266][T10524] ? kmsan_get_metadata+0xf1/0x160 [ 1894.608520][T10524] __writeback_single_inode+0xfc/0x1440 [ 1894.608754][T10524] ? kmsan_get_metadata+0xf1/0x160 [ 1894.609000][T10524] writeback_sb_inodes+0xb3b/0x1d90 [ 1894.609356][T10524] ? kmsan_get_metadata+0xf1/0x160 [ 1894.609591][T10524] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1894.609836][T10524] wb_writeback+0x4f1/0xcd0 [ 1894.610073][T10524] ? queue_io+0x4b1/0x800 [ 1894.610266][T10524] wb_workfn+0x3b9/0x19b0 [ 1894.610445][T10524] ? kmsan_get_metadata+0xf1/0x160 [ 1894.610700][T10524] ? __pfx_wb_workfn+0x10/0x10 [ 1894.610873][T10524] process_scheduled_works+0xb82/0x1e80 [ 1894.611139][T10524] worker_thread+0xee4/0x1590 [ 1894.611322][T10524] kthread+0x53f/0x600 [ 1894.611454][T10524] ? __pfx_worker_thread+0x10/0x10 [ 1894.611599][T10524] ? __pfx_kthread+0x10/0x10 [ 1894.611732][T10524] ret_from_fork+0x20f/0x910 [ 1894.611849][T10524] ? __switch_to+0x51c/0x750 [ 1894.611991][T10524] ? __pfx_kthread+0x10/0x10 [ 1894.612126][T10524] ret_from_fork_asm+0x1a/0x30 [ 1894.612285][T10524] [ 1894.937057][ T7705] Bluetooth: hci4: command tx timeout [ 1894.991657][T10524] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1895.170515][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1895.201032][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1895.230235][ T57] bond0 (unregistering): Released all slaves [ 1895.677308][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1895.720403][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1895.756977][ T57] bond0 (unregistering): Released all slaves [ 1896.312854][T12820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1896.329084][T12820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1896.344770][T12820] bridge_slave_0: entered allmulticast mode [ 1896.355797][T12820] bridge_slave_0: entered promiscuous mode [ 1896.373260][T12820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1896.387469][T12820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1896.401890][T12820] bridge_slave_1: entered allmulticast mode [ 1896.418219][T12820] bridge_slave_1: entered promiscuous mode [ 1896.533073][ T57] hsr_slave_0: left promiscuous mode [ 1896.542403][ T57] hsr_slave_1: left promiscuous mode [ 1896.574528][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1896.582633][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1896.593956][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1896.601986][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1896.641193][ T57] hsr_slave_0: left promiscuous mode [ 1896.651924][ T57] hsr_slave_1: left promiscuous mode [ 1896.661442][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1896.672844][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1896.694595][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1896.703051][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1896.768912][ T57] veth1_macvtap: left promiscuous mode [ 1896.774670][ T57] veth0_macvtap: left promiscuous mode [ 1896.781585][ T57] veth1_vlan: left promiscuous mode [ 1896.789081][ T57] veth0_vlan: left promiscuous mode [ 1896.800525][ T57] veth1_macvtap: left promiscuous mode [ 1896.819432][ T57] veth0_macvtap: left promiscuous mode [ 1896.833836][ T57] veth1_vlan: left promiscuous mode [ 1896.855299][ T57] veth0_vlan: left promiscuous mode [ 1896.966278][ T7705] Bluetooth: hci4: command tx timeout [ 1898.015402][ T5836] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1898.228637][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1898.247815][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1898.263835][ T5836] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1898.273822][ T5836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.303480][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1898.307702][ T5836] usb 8-1: config 0 descriptor?? [ 1898.382096][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1898.789195][ T5836] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0 [ 1898.833427][ T5836] hid-steam 0003:28DE:1142.0013: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0 [ 1898.916640][ T5836] hid-steam 0003:28DE:1142.0013: Steam wireless receiver connected [ 1898.952614][ T5836] hid-steam 0003:28DE:1142.0013: No HID_FEATURE_REPORT submitted - nothing to read [ 1898.993496][ T5836] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 1899.035356][ T7705] Bluetooth: hci4: command tx timeout [ 1899.081854][ T5836] hid-steam 0003:28DE:1142.0014: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0 [ 1899.174125][ T5836] usb 8-1: USB disconnect, device number 4 [ 1899.239454][ T5836] hid-steam 0003:28DE:1142.0013: Steam wireless receiver disconnected [ 1899.289555][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1899.356836][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1899.480717][T12877] fido_id[12877]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1900.191927][T12820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1900.259357][T12820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1900.694276][T12820] team0: Port device team_slave_0 added [ 1900.772907][T12820] team0: Port device team_slave_1 added [ 1901.111134][T12820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1901.118937][ T7705] Bluetooth: hci4: command tx timeout [ 1901.124737][T12820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1901.159879][T12820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1901.196164][T12820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1901.203581][T12820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1901.252531][T12820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1901.739176][T12820] hsr_slave_0: entered promiscuous mode [ 1901.769011][T12820] hsr_slave_1: entered promiscuous mode [ 1901.778472][T12820] debugfs: 'hsr0' already exists in 'hsr' [ 1901.784580][T12820] Cannot create hsr debugfs directory [ 1901.883702][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.042388][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.356617][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.613619][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.895924][T12792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1903.281984][T12792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1903.358107][T12792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1903.858666][T12792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1904.072773][T12865] chnl_net:caif_netlink_parms(): no params data found [ 1904.781744][T12799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1904.840921][T12799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1904.888076][T12896] loop7: detected capacity change from 0 to 2048 [ 1904.981837][T12896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1905.113902][T12799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1905.268480][ T57] bridge_slave_1: left allmulticast mode [ 1905.274374][ T57] bridge_slave_1: left promiscuous mode [ 1905.304379][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.354681][ T57] bridge_slave_0: left allmulticast mode [ 1905.386099][ T57] bridge_slave_0: left promiscuous mode [ 1905.392867][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1906.266874][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1906.348798][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1906.364405][ T57] bond0 (unregistering): Released all slaves [ 1906.440498][T12799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1911.723109][ T57] hsr_slave_0: left promiscuous mode [ 1914.535061][ T57] hsr_slave_1: left promiscuous mode [ 1914.543466][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1914.625082][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1914.713464][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1914.752722][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1914.835724][ T57] veth1_macvtap: left promiscuous mode [ 1914.841490][ T57] veth0_macvtap: left promiscuous mode [ 1914.865655][ T57] veth1_vlan: left promiscuous mode [ 1914.871285][ T57] veth0_vlan: left promiscuous mode [ 1916.287387][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1916.372961][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1916.916969][T11952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1916.946256][T11952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1916.960493][T11952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1916.990635][T11952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1917.007505][T11952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1918.291685][T12865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1918.316459][T12865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1918.324295][T12865] bridge_slave_0: entered allmulticast mode [ 1918.349012][T12865] bridge_slave_0: entered promiscuous mode [ 1918.391839][T12865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.425744][T12865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.433675][T12865] bridge_slave_1: entered allmulticast mode [ 1918.479683][T12865] bridge_slave_1: entered promiscuous mode [ 1919.002718][T12820] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1919.080493][T12820] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1919.125244][T11952] Bluetooth: hci2: command tx timeout [ 1919.250842][T12865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1919.345745][T12865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1919.388234][T12820] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1919.678834][T12820] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1920.096364][T12865] team0: Port device team_slave_0 added [ 1920.272310][T12865] team0: Port device team_slave_1 added [ 1920.612629][T12865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1920.635313][T12865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1920.695331][T12865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1920.896662][T12865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1920.903832][T12865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1920.975486][T12865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1921.195660][T11952] Bluetooth: hci2: command tx timeout [ 1922.284156][T12865] hsr_slave_0: entered promiscuous mode [ 1922.318773][T12865] hsr_slave_1: entered promiscuous mode [ 1922.654575][T12799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1923.170904][T12927] chnl_net:caif_netlink_parms(): no params data found [ 1923.285825][T11952] Bluetooth: hci2: command tx timeout [ 1923.390583][T12799] 8021q: adding VLAN 0 to HW filter on device team0 [ 1923.962686][ T1096] bridge_slave_1: left allmulticast mode [ 1923.982987][ T1096] bridge_slave_1: left promiscuous mode [ 1924.012503][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.099651][ T1096] bridge_slave_0: left allmulticast mode [ 1924.129144][ T1096] bridge_slave_0: left promiscuous mode [ 1924.145978][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.350112][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1924.358982][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1924.752596][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1924.787971][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1924.827223][ T1096] bond0 (unregistering): Released all slaves [ 1924.951006][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.958739][T10524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1925.175760][ T1096] hsr_slave_0: left promiscuous mode [ 1925.198666][ T1096] hsr_slave_1: left promiscuous mode [ 1925.246270][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1925.317635][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1925.355454][T11952] Bluetooth: hci2: command tx timeout [ 1925.645240][ T5312] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1925.865234][ T5312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1925.925042][ T5312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1925.995199][ T5312] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1926.004571][ T5312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.043833][ T5312] usb 8-1: config 0 descriptor?? [ 1926.371296][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 1926.488552][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 1926.613735][ T7705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1926.635780][ T5312] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 1926.643969][ T7705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1926.663257][ T7705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1926.683234][ T5312] hid-steam 0003:28DE:1142.0015: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0 [ 1926.713198][ T7705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1926.727184][ T7705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1926.765159][ T5312] hid-steam 0003:28DE:1142.0015: Steam wireless receiver connected [ 1926.785130][ T5312] hid-steam 0003:28DE:1142.0015: No HID_FEATURE_REPORT submitted - nothing to read [ 1926.834730][ T5312] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 1926.873075][ T5312] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0 [ 1927.010990][ T5312] usb 8-1: USB disconnect, device number 5 [ 1927.096788][ T5312] hid-steam 0003:28DE:1142.0015: Steam wireless receiver disconnected [ 1927.870405][T12995] fido_id[12995]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1928.797078][T11952] Bluetooth: hci3: command tx timeout [ 1928.870513][T12927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1928.884287][T12927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1928.892892][T12927] bridge_slave_0: entered allmulticast mode [ 1928.904422][T12927] bridge_slave_0: entered promiscuous mode [ 1929.043085][T12927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1929.107294][T12927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.135727][T12927] bridge_slave_1: entered allmulticast mode [ 1929.171880][T12927] bridge_slave_1: entered promiscuous mode [ 1929.310259][T13007] loop7: detected capacity change from 0 to 2048 [ 1929.380950][T13007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1929.835342][T12927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1929.999752][T12927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1930.243461][T12820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1930.491352][T12927] team0: Port device team_slave_0 added [ 1930.699647][T12927] team0: Port device team_slave_1 added [ 1930.892520][T12820] 8021q: adding VLAN 0 to HW filter on device team0 [ 1930.942664][ T7705] Bluetooth: hci3: command tx timeout [ 1931.114546][T12927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1931.122795][T12927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1931.151196][T12927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1931.173686][T12927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1931.183707][T12927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1931.212103][T12927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1931.239560][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1931.247330][T10524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1931.273978][T10524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1931.281861][T10524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1931.661293][T13019] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1021'. [ 1932.342100][T12927] hsr_slave_0: entered promiscuous mode [ 1932.367259][T12927] hsr_slave_1: entered promiscuous mode [ 1932.393462][T12927] debugfs: 'hsr0' already exists in 'hsr' [ 1932.400531][T12927] Cannot create hsr debugfs directory [ 1932.453709][T12865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1932.956308][T11952] Bluetooth: hci3: command tx timeout [ 1934.137850][T12865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1934.759509][T12865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1934.829102][ T7705] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1934.849604][ T7705] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1934.865452][ T7705] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1934.898198][ T7705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1934.914282][ T7705] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1935.037570][ T7705] Bluetooth: hci3: command tx timeout [ 1935.104328][T12865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1935.496885][ T1096] bridge_slave_1: left allmulticast mode [ 1935.502779][ T1096] bridge_slave_1: left promiscuous mode [ 1935.542874][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.594112][ T1096] bridge_slave_0: left allmulticast mode [ 1935.608828][ T1096] bridge_slave_0: left promiscuous mode [ 1935.656208][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.444674][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1936.556333][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1936.609932][ T1096] bond0 (unregistering): Released all slaves [ 1936.956563][T12990] chnl_net:caif_netlink_parms(): no params data found [ 1936.966048][ T7705] Bluetooth: hci5: command tx timeout [ 1937.075368][ T1096] hsr_slave_0: left promiscuous mode [ 1937.122559][ T1096] hsr_slave_1: left promiscuous mode [ 1937.132180][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1937.162202][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1937.906483][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 1937.954234][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 1939.045645][ T7705] Bluetooth: hci5: command tx timeout [ 1941.145325][ T7705] Bluetooth: hci5: command tx timeout [ 1941.215376][T12990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1941.254706][T12990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1941.276937][T12990] bridge_slave_0: entered allmulticast mode [ 1941.328091][T12990] bridge_slave_0: entered promiscuous mode [ 1941.401493][T12990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1941.476784][T12990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1941.534742][T12990] bridge_slave_1: entered allmulticast mode [ 1941.581354][T12990] bridge_slave_1: entered promiscuous mode [ 1941.980944][T13077] No such timeout policy "syz1" [ 1942.362956][T12990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1942.577923][T12990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1942.648085][T13030] chnl_net:caif_netlink_parms(): no params data found [ 1943.205393][ T7705] Bluetooth: hci5: command tx timeout [ 1943.311760][T12990] team0: Port device team_slave_0 added [ 1943.508527][T12990] team0: Port device team_slave_1 added [ 1944.019379][T12990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1944.035995][T12990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1944.149178][T12990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1944.205563][T12990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1944.212738][T12990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1944.302915][T12990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1944.340212][T12927] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1944.426155][ T1096] bridge_slave_1: left allmulticast mode [ 1944.432259][ T1096] bridge_slave_1: left promiscuous mode [ 1944.440507][T11952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1944.456659][T11952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1944.475588][T11952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1944.479853][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1944.511654][T11952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1944.525380][T11952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1944.578801][ T1096] bridge_slave_0: left allmulticast mode [ 1944.584700][ T1096] bridge_slave_0: left promiscuous mode [ 1944.630213][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1945.396705][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1945.429170][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1945.466166][ T1096] bond0 (unregistering): Released all slaves [ 1945.569848][T12927] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1945.839604][T12927] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1945.997948][T13030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1946.012353][T13030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1946.022414][T13030] bridge_slave_0: entered allmulticast mode [ 1946.035937][T13030] bridge_slave_0: entered promiscuous mode [ 1946.182472][ T1096] hsr_slave_0: left promiscuous mode [ 1946.192176][ T1096] hsr_slave_1: left promiscuous mode [ 1946.202202][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1946.224485][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1946.638065][ T7705] Bluetooth: hci1: command tx timeout [ 1946.862159][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 1946.926323][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 1947.453140][T12927] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1948.231730][T13030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1948.240219][T13030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.250568][T13030] bridge_slave_1: entered allmulticast mode [ 1948.268426][T13030] bridge_slave_1: entered promiscuous mode [ 1948.386113][T13096] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1948.395428][T13096] ===================================================== [ 1948.402884][T13096] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 1948.410990][T13096] dvbdmx_release_ts_feed+0x198/0x290 [ 1948.416748][T13096] dvb_dmxdev_add_pid+0xacc/0xb50 [ 1948.421976][T13096] dvb_demux_do_ioctl+0x78b/0xc80 [ 1948.427508][T13096] dvb_usercopy+0x263/0x500 [ 1948.432197][T13096] dvb_demux_ioctl+0x46/0x70 [ 1948.437202][T13096] __se_sys_ioctl+0x23c/0x400 [ 1948.442105][T13096] __x64_sys_ioctl+0x97/0xe0 [ 1948.447174][T13096] x64_sys_call+0x1975/0x3ea0 [ 1948.452157][T13096] do_syscall_64+0x134/0xf80 [ 1948.457325][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1948.463449][T13096] [ 1948.466019][T13096] Uninit was created at: [ 1948.470626][T13096] __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 1948.476956][T13096] alloc_pages_mpol+0x328/0x860 [ 1948.482056][T13096] alloc_pages_noprof+0x101/0x280 [ 1948.487398][T13096] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 1948.493517][T13096] __vmalloc_noprof+0x128/0x1f0 [ 1948.498707][T13096] vmalloc_array_noprof+0x48/0x80 [ 1948.503986][T13096] dvb_dmx_init+0x121/0x930 [ 1948.508998][T13096] vidtv_bridge_probe+0x1b1f/0x2690 [ 1948.514544][T13096] platform_probe+0x213/0x370 [ 1948.519630][T13096] really_probe+0x4d5/0xe40 [ 1948.524318][T13096] __driver_probe_device+0x25e/0x370 [ 1948.529916][T13096] driver_probe_device+0x70/0x8f0 [ 1948.535257][T13096] __driver_attach+0x541/0xaa0 [ 1948.540197][T13096] bus_for_each_dev+0x33b/0x580 [ 1948.545459][T13096] driver_attach+0x51/0x70 [ 1948.550041][T13096] bus_add_driver+0x54f/0xdb0 [ 1948.555078][T13096] driver_register+0x42e/0x6a0 [ 1948.560036][T13096] __platform_driver_register+0x65/0x80 [ 1948.566056][T13096] vidtv_bridge_init+0x73/0x100 [ 1948.571292][T13096] do_one_initcall+0x237/0xbb0 [ 1948.576461][T13096] do_initcall_level+0x157/0x350 [ 1948.581723][T13096] do_initcalls+0x176/0x310 [ 1948.586534][T13096] do_basic_setup+0x1d/0x30 [ 1948.591225][T13096] kernel_init_freeable+0x213/0x460 [ 1948.596831][T13096] kernel_init+0x2f/0x5e0 [ 1948.601465][T13096] ret_from_fork+0x20f/0x910 [ 1948.606364][T13096] ret_from_fork_asm+0x1a/0x30 [ 1948.611364][T13096] [ 1948.613816][T13096] CPU: 1 UID: 0 PID: 13096 Comm: syz.7.1028 Tainted: G L syzkaller #0 PREEMPT(full) [ 1948.625223][T13096] Tainted: [L]=SOFTLOCKUP [ 1948.629674][T13096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1948.640070][T13096] ===================================================== [ 1948.647339][T13096] Disabling lock debugging due to kernel taint [ 1948.654795][T13096] Kernel panic - not syncing: kmsan.panic set ... [ 1948.661377][T13096] CPU: 1 UID: 0 PID: 13096 Comm: syz.7.1028 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1948.672561][T13096] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1948.678220][T13096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1948.688425][T13096] Call Trace: [ 1948.691829][T13096] [ 1948.694870][T13096] __dump_stack+0x26/0x30 [ 1948.699423][T13096] dump_stack_lvl+0x50/0x1c0 [ 1948.704226][T13096] ? dump_stack+0x12/0x25 [ 1948.708778][T13096] dump_stack+0x1e/0x25 [ 1948.713153][T13096] vpanic+0x7b4/0x1430 [ 1948.717490][T13096] panic+0x15d/0x160 [ 1948.721666][T13096] kmsan_report+0x31a/0x320 [ 1948.726444][T13096] ? vprintk_emit+0xb60/0xba0 [ 1948.731364][T13096] ? __msan_warning+0x1b/0x30 [ 1948.736279][T13096] ? dvbdmx_release_ts_feed+0x198/0x290 [ 1948.742058][T13096] ? dvb_dmxdev_add_pid+0xacc/0xb50 [ 1948.747471][T13096] ? dvb_demux_do_ioctl+0x78b/0xc80 [ 1948.753134][T13096] ? dvb_usercopy+0x263/0x500 [ 1948.757993][T13096] ? dvb_demux_ioctl+0x46/0x70 [ 1948.762955][T13096] ? __se_sys_ioctl+0x23c/0x400 [ 1948.768041][T13096] ? __x64_sys_ioctl+0x97/0xe0 [ 1948.773031][T13096] ? x64_sys_call+0x1975/0x3ea0 [ 1948.778135][T13096] ? do_syscall_64+0x134/0xf80 [ 1948.783127][T13096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1948.789412][T13096] ? irqentry_exit+0x8f/0x6c0 [ 1948.794314][T13096] ? kmsan_get_metadata+0xf1/0x160 [ 1948.799693][T13096] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1948.806292][T13096] ? kmsan_get_metadata+0xf1/0x160 [ 1948.811668][T13096] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1948.817767][T13096] ? preempt_schedule_common+0x5b/0x80 [ 1948.823461][T13096] ? preempt_schedule+0x30/0x40 [ 1948.828516][T13096] ? preempt_schedule_thunk+0x16/0x30 [ 1948.834099][T13096] ? _raw_spin_unlock_irq+0x47/0x50 [ 1948.839591][T13096] ? kmsan_get_metadata+0x146/0x160 [ 1948.845082][T13096] __msan_warning+0x1b/0x30 [ 1948.849845][T13096] dvbdmx_release_ts_feed+0x198/0x290 [ 1948.855474][T13096] dvb_dmxdev_add_pid+0xacc/0xb50 [ 1948.860710][T13096] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 1948.867143][T13096] dvb_demux_do_ioctl+0x78b/0xc80 [ 1948.872408][T13096] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1948.878266][T13096] dvb_usercopy+0x263/0x500 [ 1948.882962][T13096] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1948.888770][T13096] ? kmsan_get_metadata+0xf1/0x160 [ 1948.894168][T13096] dvb_demux_ioctl+0x46/0x70 [ 1948.899004][T13096] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1948.904498][T13096] __se_sys_ioctl+0x23c/0x400 [ 1948.909428][T13096] __x64_sys_ioctl+0x97/0xe0 [ 1948.914446][T13096] x64_sys_call+0x1975/0x3ea0 [ 1948.919368][T13096] do_syscall_64+0x134/0xf80 [ 1948.924194][T13096] ? clear_bhb_loop+0x50/0xa0 [ 1948.929083][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1948.935230][T13096] RIP: 0033:0x7f456079c799 [ 1948.939816][T13096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1948.959643][T13096] RSP: 002b:00007f45615a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1948.968292][T13096] RAX: ffffffffffffffda RBX: 00007f4560a16180 RCX: 00007f456079c799 [ 1948.976480][T13096] RDX: 0000200000000300 RSI: 0000000040026f33 RDI: 0000000000000007 [ 1948.984658][T13096] RBP: 00007f4560832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1948.992876][T13096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1949.001001][T13096] R13: 00007f4560a16218 R14: 00007f4560a16180 R15: 00007fff1cfe57c8 [ 1949.009188][T13096] [ 1949.012762][T13096] Kernel Offset: disabled [ 1949.017176][T13096] Rebooting in 86400 seconds..