last executing test programs: 9.290068764s ago: executing program 2 (id=24): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x51) 9.026320715s ago: executing program 2 (id=25): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r0, &(0x7f0000000000)={0x6, 0x2d, 0x0, 0x3a, 0x7, 0x2c}, 0x87) 8.69527427s ago: executing program 2 (id=27): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0x45eb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gre0\x00'}) r3 = socket$phonet(0x23, 0x2, 0x1) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r4, 0x60}], 0x1, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 6.280332896s ago: executing program 1 (id=29): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x1000}, @flat=@binder={0x73622a85, 0x10a, 0x3, 0xf0}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 6.135863453s ago: executing program 1 (id=30): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c80"], 0x250}}, 0x2000c000) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffe, 0x2}, 0xe) connect$packet(r0, &(0x7f00000001c0)={0x1f, 0x8, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, 0x0, 0x20044000) 5.224658704s ago: executing program 2 (id=32): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2204880, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f00005c8000/0x3000)=nil) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000080)={'exec ', ':\x00'}, 0x7) write$apparmor_exec(r3, &(0x7f0000000040)={'stack ', ':\x00'}, 0x8) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d57"], 0x24}}, 0x0) poll(&(0x7f0000000540)=[{r5, 0x8289}], 0x1, 0xc3cb) close_range(r3, r5, 0x0) r7 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000100)) sendmsg$key(r7, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xd, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0xfffffff9, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x15, 0xff, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_nat_t_type={0x1}]}, 0x68}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x20) 5.003123071s ago: executing program 1 (id=33): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) r2 = eventfd2(0x5, 0x81001) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x4000, r2}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r9 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r9, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r10 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0x2, &(0x7f0000000140)=0x4006, 0x54) 3.380936576s ago: executing program 1 (id=38): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000003c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x15}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000001980)=[{&(0x7f0000000880)="5f618b5a90", 0x5}, {0x0, 0xf4}], 0x2) 2.671587008s ago: executing program 0 (id=40): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x1, 0xc9}}}, 0x6) 2.632966484s ago: executing program 0 (id=41): socket(0x10, 0x803, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000800)={0x9}) 2.331370992s ago: executing program 2 (id=42): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a5", 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = dup2(r1, r1) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 2.063459711s ago: executing program 3 (id=43): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x5, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3ff, 0x7f, 0x15fe, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x295, 0x80000089, 0xfffffffc, 0x7, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]}) 1.817313936s ago: executing program 3 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) write$P9_RUNLINKAT(r0, 0x0, 0x0) 1.768287095s ago: executing program 3 (id=45): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x903, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x44800) 1.692075489s ago: executing program 3 (id=46): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) read$FUSE(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0xa) 1.355636079s ago: executing program 2 (id=47): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.194757724s ago: executing program 0 (id=48): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0xdb, 0x8, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x3ff, 0x200010, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x6, 0x9, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x10, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.116117284s ago: executing program 0 (id=49): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'aio_aio12_8\x00', [0xb, 0x2, 0x8, 0x84e1, 0x2f, 0x2003, 0x6, 0x8, 0x80ffa, 0x0, 0x0, 0x8500, 0x1003, 0x1000003, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x73c, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x6, 0x8, 0x0, 0x4, 0x7ffd]}) 1.073681499s ago: executing program 0 (id=50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x47ffff7, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) 778.314087ms ago: executing program 3 (id=51): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close(0x4) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0xee01, 0x0) landlock_restrict_self(r2, 0x9) 763.778937ms ago: executing program 0 (id=52): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYBLOB="b70795"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0xa4, 0x7fff0003}]}) close_range(r0, 0xffffffffffffffff, 0x0) 626.684096ms ago: executing program 3 (id=53): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x5, {"c7517da9e7a8757d9c02fd45c7ed7c6a", "f61ac59ed63a57d6df15bd7dae0ceb42", "d08098bd12cdd439c06442623f678bba"}, 0x10001, 0x7}) 184.016565ms ago: executing program 1 (id=54): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="ea7715", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)='\a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='=&`', 0x3}], 0x1}}], 0x3, 0x119e75c40673edef) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=55): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x6a040000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 67.109165][ T5826] cgroup: Unknown subsys name 'net' [ 67.265001][ T5826] cgroup: Unknown subsys name 'cpuset' [ 67.274089][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.700484][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.706083][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.716358][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.725442][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.733556][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.741923][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.809528][ T5159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.823601][ T5159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.840470][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.850707][ T5159] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.861197][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.861612][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.871226][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.876390][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.885294][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.897970][ T5159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.900585][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.907611][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.913910][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.945345][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.954456][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.361715][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 71.430634][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.437702][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.514606][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 71.567630][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 71.617155][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 71.665888][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.673343][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.680812][ T5837] bridge_slave_0: entered allmulticast mode [ 71.688605][ T5837] bridge_slave_0: entered promiscuous mode [ 71.728243][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.735442][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.743336][ T5837] bridge_slave_1: entered allmulticast mode [ 71.750258][ T5837] bridge_slave_1: entered promiscuous mode [ 71.804105][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.811364][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.818969][ T5841] bridge_slave_0: entered allmulticast mode [ 71.826124][ T5841] bridge_slave_0: entered promiscuous mode [ 71.859521][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.866801][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.874177][ T5841] bridge_slave_1: entered allmulticast mode [ 71.881230][ T5841] bridge_slave_1: entered promiscuous mode [ 71.900053][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.929339][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.936591][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.943823][ T5844] bridge_slave_0: entered allmulticast mode [ 71.950947][ T5844] bridge_slave_0: entered promiscuous mode [ 71.960039][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.987177][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.994369][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.001667][ T5844] bridge_slave_1: entered allmulticast mode [ 72.008691][ T5844] bridge_slave_1: entered promiscuous mode [ 72.024180][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.031430][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.038603][ T5848] bridge_slave_0: entered allmulticast mode [ 72.045796][ T5848] bridge_slave_0: entered promiscuous mode [ 72.055083][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.082950][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.090299][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.097875][ T5848] bridge_slave_1: entered allmulticast mode [ 72.104808][ T5848] bridge_slave_1: entered promiscuous mode [ 72.113537][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.132972][ T5837] team0: Port device team_slave_0 added [ 72.158922][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.170171][ T5837] team0: Port device team_slave_1 added [ 72.195116][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.216355][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.227421][ T5841] team0: Port device team_slave_0 added [ 72.252715][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.263780][ T5841] team0: Port device team_slave_1 added [ 72.278590][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.285661][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.311922][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.343888][ T5844] team0: Port device team_slave_0 added [ 72.356307][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.363343][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.389662][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.418983][ T5844] team0: Port device team_slave_1 added [ 72.433911][ T5848] team0: Port device team_slave_0 added [ 72.440711][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.447912][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.474398][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.507077][ T5848] team0: Port device team_slave_1 added [ 72.513336][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.520426][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.547628][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.572178][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.579226][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.605366][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.644793][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.651860][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.677913][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.698894][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.706004][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.732244][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.749724][ T5837] hsr_slave_0: entered promiscuous mode [ 72.756244][ T5837] hsr_slave_1: entered promiscuous mode [ 72.771951][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.778903][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.805137][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.811887][ T5846] Bluetooth: hci0: command tx timeout [ 72.888196][ T5841] hsr_slave_0: entered promiscuous mode [ 72.894651][ T5841] hsr_slave_1: entered promiscuous mode [ 72.900684][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 72.906552][ T5841] Cannot create hsr debugfs directory [ 72.941401][ T5846] Bluetooth: hci1: command tx timeout [ 72.946373][ T5844] hsr_slave_0: entered promiscuous mode [ 72.953284][ T5844] hsr_slave_1: entered promiscuous mode [ 72.959270][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 72.965239][ T5844] Cannot create hsr debugfs directory [ 72.975593][ T5848] hsr_slave_0: entered promiscuous mode [ 72.982031][ T5848] hsr_slave_1: entered promiscuous mode [ 72.987989][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 72.993971][ T5848] Cannot create hsr debugfs directory [ 73.020986][ T5847] Bluetooth: hci2: command tx timeout [ 73.027002][ T5846] Bluetooth: hci3: command tx timeout [ 73.400674][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.414145][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.429341][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.448230][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.517724][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.534607][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.546294][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.556951][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.648665][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.659355][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.672150][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.683831][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.765065][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.805182][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.820384][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.836571][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.854347][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.862893][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.898034][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.905710][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.931363][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.938501][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.978623][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.034499][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.057578][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.064713][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.104888][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.112298][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.139064][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.189141][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.203940][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.234934][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.242171][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.288531][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.295783][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.324185][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.366558][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.373781][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.424785][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.431984][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.484866][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.655413][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.683428][ T5837] veth0_vlan: entered promiscuous mode [ 74.715110][ T5837] veth1_vlan: entered promiscuous mode [ 74.812218][ T5844] veth0_vlan: entered promiscuous mode [ 74.840729][ T5844] veth1_vlan: entered promiscuous mode [ 74.851391][ T5837] veth0_macvtap: entered promiscuous mode [ 74.862271][ T5846] Bluetooth: hci0: command tx timeout [ 74.876481][ T5837] veth1_macvtap: entered promiscuous mode [ 74.908713][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.928741][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.942312][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.959631][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.980451][ T5844] veth0_macvtap: entered promiscuous mode [ 74.992707][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.002611][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.015598][ T5844] veth1_macvtap: entered promiscuous mode [ 75.024213][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.033656][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.035661][ T5846] Bluetooth: hci1: command tx timeout [ 75.102220][ T5847] Bluetooth: hci2: command tx timeout [ 75.102267][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.107960][ T5846] Bluetooth: hci3: command tx timeout [ 75.155908][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.186935][ T5848] veth0_vlan: entered promiscuous mode [ 75.195014][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.203949][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.228420][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.237850][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.257019][ T5841] veth0_vlan: entered promiscuous mode [ 75.277095][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.278970][ T5848] veth1_vlan: entered promiscuous mode [ 75.287315][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.302072][ T5841] veth1_vlan: entered promiscuous mode [ 75.398426][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.410837][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.422330][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.426272][ T5848] veth0_macvtap: entered promiscuous mode [ 75.446469][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.453846][ T5848] veth1_macvtap: entered promiscuous mode [ 75.493176][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.533939][ T5841] veth0_macvtap: entered promiscuous mode [ 75.539529][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.543374][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.566092][ T561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.575235][ T561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.595563][ T5841] veth1_macvtap: entered promiscuous mode [ 75.612630][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.639656][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.682816][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.692512][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.713231][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.765383][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.834431][ T3522] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.850576][ T3522] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.867580][ T3522] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.878590][ T3522] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.005095][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.023159][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.106564][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.131291][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.144132][ T561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.168528][ T561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.203036][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.227526][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.687776][ T5939] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.045365][ T5846] Bluetooth: hci0: command tx timeout [ 77.075307][ T993] kernel read not supported for file /dsp (pid: 993 comm: kworker/0:2) [ 77.255226][ T5846] Bluetooth: hci1: command tx timeout [ 77.262207][ T5846] Bluetooth: hci2: command tx timeout [ 77.267869][ T5846] Bluetooth: hci3: command tx timeout [ 78.713586][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.831002][ T5868] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.889097][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 78.901986][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 78.914525][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.923696][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 78.934933][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 78.958392][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 78.967869][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 78.977725][ T24] usb 4-1: Product: syz [ 78.982682][ T24] usb 4-1: Manufacturer: syz [ 78.988142][ T5971] netlink: 'syz.1.16': attribute type 3 has an invalid length. [ 78.991471][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 79.024625][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 79.046495][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 79.052532][ T5868] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 79.065078][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 79.076323][ T5868] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 79.093957][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 79.103070][ T5868] usb 3-1: Product: syz [ 79.111520][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 79.113354][ T5847] Bluetooth: hci0: command tx timeout [ 79.117613][ T5868] usb 3-1: Manufacturer: syz [ 79.130754][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 79.140929][ T5868] usb 3-1: SerialNumber: syz [ 79.171064][ T5868] usb 3-1: config 0 descriptor?? [ 79.191880][ T5956] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 79.250219][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.257068][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.264463][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.271102][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.278870][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 79.280403][ T5868] usb 4-1: USB disconnect, device number 2 [ 79.285496][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 79.285517][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 79.339538][ T5977] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.351698][ T5846] Bluetooth: hci2: command tx timeout [ 79.353501][ T51] Bluetooth: hci1: command tx timeout [ 79.357668][ T5847] Bluetooth: hci3: command tx timeout [ 79.366276][ T5977] block device autoloading is deprecated and will be removed. [ 79.465735][ T5921] usb 3-1: USB disconnect, device number 2 [ 79.679223][ T5983] Zero length message leads to an empty skb [ 79.701136][ T5983] netlink: 'syz.1.20': attribute type 4 has an invalid length. [ 79.711635][ T5983] netlink: 152 bytes leftover after parsing attributes in process `syz.1.20'. [ 79.842793][ T5983] .`: renamed from bond0 (while UP) [ 80.070963][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 80.237906][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.259796][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 80.274047][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 80.283545][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.318771][ T9] usb 1-1: config 0 descriptor?? [ 80.346934][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 80.365021][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 80.402886][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 80.409595][ T5995] evm: overlay not supported [ 80.413005][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 80.425627][ T9] usb 1-1: media controller created [ 80.435118][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.527209][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 80.575009][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 80.642340][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 80.645195][ T5998] kernel profiling enabled (shift: 6) [ 80.699783][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 80.709565][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 80.863340][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 80.885867][ T9] dvb-usb: error while querying for an remote control event. [ 81.100576][ T5847] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 81.121298][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 81.121326][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.121340][ T5847] Workqueue: hci2 hci_rx_work [ 81.121389][ T5847] Call Trace: [ 81.121397][ T5847] [ 81.121406][ T5847] dump_stack_lvl+0xe8/0x150 [ 81.121440][ T5847] sysfs_create_dir_ns+0x271/0x2a0 [ 81.121470][ T5847] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 81.121497][ T5847] ? do_raw_spin_unlock+0xf5/0x210 [ 81.121526][ T5847] kobject_add_internal+0x62b/0xd00 [ 81.121566][ T5847] kobject_add+0x163/0x240 [ 81.121592][ T5847] ? __pfx_kobject_add+0x10/0x10 [ 81.121613][ T5847] ? _raw_spin_unlock+0x28/0x50 [ 81.121643][ T5847] ? get_device_parent+0x366/0x3a0 [ 81.121669][ T5847] device_add+0x408/0xb70 [ 81.121694][ T5847] hci_conn_add_sysfs+0xd5/0x210 [ 81.121724][ T5847] le_conn_complete_evt+0xf1d/0x1430 [ 81.121757][ T5847] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 81.121776][ T5847] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 81.121810][ T5847] ? __pfx___mutex_lock+0x10/0x10 [ 81.121841][ T5847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.121871][ T5847] ? skb_pull_data+0xfb/0x200 [ 81.121897][ T5847] hci_le_conn_complete_evt+0x187/0x470 [ 81.121938][ T5847] hci_event_packet+0x7af/0x12c0 [ 81.121973][ T5847] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 81.122006][ T5847] ? __pfx_hci_event_packet+0x10/0x10 [ 81.122039][ T5847] ? kcov_remote_start+0x49a/0x7a0 [ 81.122065][ T5847] ? hci_send_to_monitor+0xe2/0x590 [ 81.122091][ T5847] hci_rx_work+0x3ee/0x1040 [ 81.122126][ T5847] ? process_scheduled_works+0xa70/0x1860 [ 81.122158][ T5847] process_scheduled_works+0xb5d/0x1860 [ 81.122220][ T5847] ? __pfx_process_scheduled_works+0x10/0x10 [ 81.122257][ T5847] ? assign_work+0x3d5/0x5e0 [ 81.122291][ T5847] worker_thread+0xa53/0xfc0 [ 81.122352][ T5847] kthread+0x388/0x470 [ 81.122376][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 81.122404][ T5847] ? __pfx_kthread+0x10/0x10 [ 81.122428][ T5847] ret_from_fork+0x514/0xb70 [ 81.122462][ T5847] ? __pfx_ret_from_fork+0x10/0x10 [ 81.122489][ T5847] ? __switch_to+0xc7d/0x1420 [ 81.122518][ T5847] ? __pfx_kthread+0x10/0x10 [ 81.122542][ T5847] ret_from_fork_asm+0x1a/0x30 [ 81.122585][ T5847] [ 81.123608][ T5847] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 81.318207][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 81.389054][ T5847] Bluetooth: hci2: failed to register connection device [ 82.333829][ T6010] warning: `syz.3.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.432122][ T5868] usb 1-1: USB disconnect, device number 2 [ 83.007081][ T9] dvb-usb: error while querying for an remote control event. [ 83.186570][ T5868] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 83.628096][ T6018] netlink: 332 bytes leftover after parsing attributes in process `syz.1.30'. [ 83.639244][ T6018] netlink: 196 bytes leftover after parsing attributes in process `syz.1.30'. [ 84.330737][ T6021] 9pnet_virtio: no channels available for device syz [ 84.462707][ T6024] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 84.701269][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.457698][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 85.660423][ T6027] nvme_fabrics: missing parameter 'transport=%s' [ 85.667148][ T6027] nvme_fabrics: missing parameter 'nqn=%s' [ 85.942021][ T9] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 85.950773][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 85.996082][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 86.047145][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 86.058929][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 86.070775][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.086643][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.096886][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.251033][ T5967] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.318252][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 86.323855][ T9] usbtmc 3-1:16.0: can't read capabilities [ 86.400969][ T5967] usb 4-1: Using ep0 maxpacket: 8 [ 86.407455][ T5967] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.418414][ T5967] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.428488][ T5967] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 60960, setting to 1024 [ 86.439785][ T5967] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 86.450064][ T5967] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.463191][ T5967] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.472521][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.533533][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 86.595779][ T9] usb 3-1: USB disconnect, device number 3 [ 86.693211][ T5967] usb 4-1: GET_CAPABILITIES returned 0 [ 86.698851][ T5967] usbtmc 4-1:16.0: can't read capabilities [ 86.792800][ T47] cfg80211: failed to load regulatory.db [ 86.913600][ T9] usb 4-1: USB disconnect, device number 3 [ 87.141045][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.290946][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 87.297789][ T47] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 87.309285][ T47] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 87.319356][ T47] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.329349][ T47] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.345684][ T47] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.355049][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.571619][ T47] usb 1-1: GET_CAPABILITIES returned 0 [ 87.577215][ T47] usbtmc 1-1:16.0: can't read capabilities [ 87.789696][ T993] usb 1-1: USB disconnect, device number 3 [ 87.982510][ T5847] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 87.989718][ T51] Bluetooth: hci0: command 0x206a tx timeout [ 88.339130][ T6066] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 88.434478][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.487073][ T6070] loop3: detected capacity change from 0 to 2640 [ 88.497078][ T6070] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.505585][ T6070] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.513623][ T6070] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.521653][ T6070] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.530456][ T6070] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.538782][ T6070] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.547035][ T6070] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.555044][ T6070] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.564197][ T6070] ldm_validate_partition_table(): Disk read failed. [ 88.570993][ T6070] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.578993][ T6070] Buffer I/O error on dev loop3, logical block 0, async page read [ 88.587236][ T6070] Dev loop3: unable to read RDB block 0 [ 88.593422][ T6070] loop3: unable to read partition table [ 88.599246][ T6070] loop_reread_partitions: partition scan of loop3 (3Ÿ ¾‚³˜) failed (rc=-5) [ 88.617159][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.636109][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.656715][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.671307][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.680400][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.696393][ T9] usb 3-1: config 0 descriptor?? [ 89.071042][ T5921] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.140344][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 89.141003][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.230969][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 89.238432][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 89.249567][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 89.261408][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 89.274633][ T5921] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 89.284758][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.293439][ T5921] usb 1-1: Product: syz [ 89.297773][ T5921] usb 1-1: Manufacturer: syz [ 89.302466][ T5921] usb 1-1: SerialNumber: syz [ 89.310960][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 89.313737][ T5921] usb 1-1: config 0 descriptor?? [ 89.331445][ T24] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 89.339564][ T5921] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 89.352301][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 89.362855][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.367095][ T24] usb 4-1: config 0 descriptor?? [ 89.431253][ C0] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 89.456542][ T24] as10x_usb: device has been detected [ 89.487997][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 89.558779][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880696e4800: rx timeout, send abort [ 89.581832][ T5967] usb 3-1: USB disconnect, device number 4 [ 89.609244][ T6077] ------------[ cut here ]------------ [ 89.612275][ T6064] usb 3-1: string descriptor 0 read error: -19 [ 89.614925][ T6077] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 89.621057][ T6077] WARNING: kernel/locking/mutex.c:611 at __mutex_lock+0x11c1/0x1420, CPU#1: syz.3.53/6077 [ 89.636888][ T6077] Modules linked in: [ 89.640824][ T6077] CPU: 1 UID: 0 PID: 6077 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) [ 89.650079][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.660219][ T6077] RIP: 0010:__mutex_lock+0x11c8/0x1420 [ 89.664983][ T6081] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -19 [ 89.665873][ T6077] Code: 34 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 36 02 00 00 83 3d 6c 02 77 04 00 75 13 48 8d 3d 1f 1a 7a 04 48 c7 c6 c0 e7 cc 8b <67> 48 0f b9 3a 90 e9 91 ef ff ff 90 0f 0b 90 e9 a6 f3 ff ff 90 0f [ 89.693926][ T6077] RSP: 0018:ffffc90004617a20 EFLAGS: 00010246 [ 89.700475][ T6077] RAX: 0000000000000000 RBX: 1ffff920008c2f5c RCX: 0000000000080000 [ 89.708575][ T6077] RDX: ffffc90006272000 RSI: ffffffff8bcce7c0 RDI: ffffffff903792a0 [ 89.716664][ T6077] RBP: ffffc90004617bd8 R08: ffffffff90347ae3 R09: 1ffffffff2068f5c [ 89.724706][ T6077] R10: dffffc0000000000 R11: fffffbfff2068f5d R12: ffff8880764e0b30 [ 89.732783][ T6077] R13: dffffc0000000000 R14: ffff8880764e0000 R15: 0000000000000000 [ 89.740775][ T6077] FS: 00007f853be616c0(0000) GS:ffff8881252f3000(0000) knlGS:0000000000000000 [ 89.744361][ T5921] usb 1-1: USB disconnect, device number 4 [ 89.749781][ C0] xpad 1-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 89.749841][ T6077] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.770416][ T6077] CR2: 0000001b31e1fff8 CR3: 000000005d02a000 CR4: 00000000003526f0 [ 89.778493][ T6077] Call Trace: [ 89.781818][ T6077] [ 89.784749][ T6077] ? trace_contention_end+0x3d/0x140 [ 89.790022][ T6077] ? __mutex_lock+0x320/0x1420 [ 89.795307][ T6077] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 89.801424][ T6077] ? __pfx___mutex_lock+0x10/0x10 [ 89.806503][ T6077] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 89.812242][ T6077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 89.818511][ T6077] ? do_raw_spin_lock+0x12b/0x2f0 [ 89.823783][ T6077] as102_dvb_dmx_start_feed+0x70/0x290 [ 89.829298][ T6077] dmx_section_feed_start_filtering+0x518/0x6c0 [ 89.835635][ T6077] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 89.841256][ T6077] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 89.846771][ T6077] dvb_demux_do_ioctl+0x470/0x540 [ 89.851875][ T6077] dvb_usercopy+0x199/0x2e0 [ 89.856399][ T6077] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 89.862062][ T6077] ? __pfx_dvb_usercopy+0x10/0x10 [ 89.867123][ T6077] ? __fget_files+0x3a0/0x420 [ 89.871889][ T6077] ? __fget_files+0x2a/0x420 [ 89.876520][ T6077] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 89.881889][ T6077] dvb_demux_ioctl+0x29/0x40 [ 89.886594][ T6077] __se_sys_ioctl+0xfc/0x170 [ 89.891270][ T6077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.897919][ T6077] do_syscall_64+0x15f/0xf80 [ 89.903217][ T6077] ? trace_irq_disable+0x3b/0x140 [ 89.908555][ T6077] ? clear_bhb_loop+0x40/0x90 [ 89.913337][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.919243][ T6077] RIP: 0033:0x7f853af9c799 [ 89.923765][ T6077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.943560][ T6077] RSP: 002b:00007f853be61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.952053][ T6077] RAX: ffffffffffffffda RBX: 00007f853b215fa0 RCX: 00007f853af9c799 [ 89.960218][ T6077] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 89.968280][ T6077] RBP: 00007f853b032c99 R08: 0000000000000000 R09: 0000000000000000 [ 89.976405][ T6077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.985097][ T6077] R13: 00007f853b216038 R14: 00007f853b215fa0 R15: 00007ffc5b038c48 [ 89.993354][ T6077] [ 89.996445][ T6077] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.003740][ T6077] CPU: 1 UID: 0 PID: 6077 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) [ 90.012960][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.023287][ T6077] Call Trace: [ 90.026579][ T6077] [ 90.029520][ T6077] vpanic+0x56c/0xa60 [ 90.034023][ T6077] ? __pfx__printk+0x10/0x10 [ 90.038992][ T6077] ? __pfx_vpanic+0x10/0x10 [ 90.043514][ T6077] ? is_bpf_text_address+0x292/0x2b0 [ 90.048826][ T6077] ? is_bpf_text_address+0x26/0x2b0 [ 90.054048][ T6077] panic+0xc5/0xd0 [ 90.057768][ T6077] ? __pfx_panic+0x10/0x10 [ 90.062173][ T6077] __warn+0x315/0x4c0 [ 90.066155][ T6077] ? __mutex_lock+0x11c1/0x1420 [ 90.071006][ T6077] ? __mutex_lock+0x11c1/0x1420 [ 90.075846][ T6077] __report_bug+0x29a/0x540 [ 90.080341][ T6077] ? lock_release+0x4b/0x3c0 [ 90.084929][ T6077] ? lock_release+0x4b/0x3c0 [ 90.089509][ T6077] ? __mutex_lock+0x11c1/0x1420 [ 90.094351][ T6077] ? __pfx___report_bug+0x10/0x10 [ 90.099364][ T6077] ? is_bpf_text_address+0x26/0x2b0 [ 90.104566][ T6077] ? __lock_acquire+0x6b5/0x2cf0 [ 90.109502][ T6077] report_bug_entry+0x19a/0x290 [ 90.114345][ T6077] ? __mutex_lock+0x11c8/0x1420 [ 90.119199][ T6077] ? __mutex_lock+0x11cd/0x1420 [ 90.124046][ T6077] handle_bug+0xce/0x200 [ 90.128274][ T6077] exc_invalid_op+0x1a/0x50 [ 90.132760][ T6077] asm_exc_invalid_op+0x1a/0x20 [ 90.137595][ T6077] RIP: 0010:__mutex_lock+0x11c8/0x1420 [ 90.143049][ T6077] Code: 34 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 36 02 00 00 83 3d 6c 02 77 04 00 75 13 48 8d 3d 1f 1a 7a 04 48 c7 c6 c0 e7 cc 8b <67> 48 0f b9 3a 90 e9 91 ef ff ff 90 0f 0b 90 e9 a6 f3 ff ff 90 0f [ 90.162641][ T6077] RSP: 0018:ffffc90004617a20 EFLAGS: 00010246 [ 90.168699][ T6077] RAX: 0000000000000000 RBX: 1ffff920008c2f5c RCX: 0000000000080000 [ 90.176653][ T6077] RDX: ffffc90006272000 RSI: ffffffff8bcce7c0 RDI: ffffffff903792a0 [ 90.184613][ T6077] RBP: ffffc90004617bd8 R08: ffffffff90347ae3 R09: 1ffffffff2068f5c [ 90.192569][ T6077] R10: dffffc0000000000 R11: fffffbfff2068f5d R12: ffff8880764e0b30 [ 90.200524][ T6077] R13: dffffc0000000000 R14: ffff8880764e0000 R15: 0000000000000000 [ 90.208527][ T6077] ? trace_contention_end+0x3d/0x140 [ 90.213810][ T6077] ? __mutex_lock+0x320/0x1420 [ 90.218571][ T6077] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 90.224198][ T6077] ? __pfx___mutex_lock+0x10/0x10 [ 90.229215][ T6077] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 90.234844][ T6077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 90.240819][ T6077] ? do_raw_spin_lock+0x12b/0x2f0 [ 90.245839][ T6077] as102_dvb_dmx_start_feed+0x70/0x290 [ 90.251293][ T6077] dmx_section_feed_start_filtering+0x518/0x6c0 [ 90.257546][ T6077] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 90.263082][ T6077] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 90.268527][ T6077] dvb_demux_do_ioctl+0x470/0x540 [ 90.273537][ T6077] dvb_usercopy+0x199/0x2e0 [ 90.278037][ T6077] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 90.283574][ T6077] ? __pfx_dvb_usercopy+0x10/0x10 [ 90.288598][ T6077] ? __fget_files+0x3a0/0x420 [ 90.293265][ T6077] ? __fget_files+0x2a/0x420 [ 90.297842][ T6077] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 90.303121][ T6077] dvb_demux_ioctl+0x29/0x40 [ 90.307710][ T6077] __se_sys_ioctl+0xfc/0x170 [ 90.312286][ T6077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.318341][ T6077] do_syscall_64+0x15f/0xf80 [ 90.322923][ T6077] ? trace_irq_disable+0x3b/0x140 [ 90.328034][ T6077] ? clear_bhb_loop+0x40/0x90 [ 90.332699][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.338580][ T6077] RIP: 0033:0x7f853af9c799 [ 90.342981][ T6077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.362596][ T6077] RSP: 002b:00007f853be61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.371002][ T6077] RAX: ffffffffffffffda RBX: 00007f853b215fa0 RCX: 00007f853af9c799 [ 90.378963][ T6077] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 90.386923][ T6077] RBP: 00007f853b032c99 R08: 0000000000000000 R09: 0000000000000000 [ 90.394890][ T6077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.402852][ T6077] R13: 00007f853b216038 R14: 00007f853b215fa0 R15: 00007ffc5b038c48 [ 90.410818][ T6077] [ 90.414101][ T6077] Kernel Offset: disabled [ 90.418417][ T6077] Rebooting in 86400 seconds..