last executing test programs: 21m59.511335099s ago: executing program 32 (id=377): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c40)={{{@in=@multicast1, @in=@private=0xa010102, 0x0, 0x8001, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4d2, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0xf}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000d40), 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0) read$FUSE(r3, &(0x7f00000010c0)={0x2020}, 0x2020) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003140)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000003180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000003200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003280), 0x651, 0x0) recvmmsg(r5, &(0x7f00000032c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003300)=0x6) ftruncate(0xffffffffffffffff, 0x10003) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r7, 0x0, 0x0, 0x14) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xf, 0x401d031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000003340), 0x680cbe19, 0x60140) read$FUSE(r8, &(0x7f0000003380)={0x2020}, 0x2020) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000053c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) sendmsg$key(r2, &(0x7f0000005400)={0x0, 0x0, &(0x7f0000005440)={&(0x7f0000005480)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f00000054c0)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000005540)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) 18m54.927325903s ago: executing program 0 (id=981): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0xe948abf0e47dd970}, 0x40010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xcbf0f}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 18m54.657932311s ago: executing program 0 (id=983): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x1, 0x0, 0x0, 'queue1\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000500)={0x0, 0x2, 0xbe}) close_range(r0, 0xffffffffffffffff, 0x0) 18m54.339822448s ago: executing program 0 (id=986): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0xb2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18m52.395939726s ago: executing program 0 (id=991): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x84000, 0x0) 18m51.915886741s ago: executing program 0 (id=995): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c40)={{{@in=@multicast1, @in=@private=0xa010102, 0x0, 0x8001, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4d2, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0xf}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000d40), 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0) read$FUSE(r3, &(0x7f00000010c0)={0x2020}, 0x2020) getpid() prlimit64(0x0, 0xe, &(0x7f0000003100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003140)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000003180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000003200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003280), 0x651, 0x0) recvmmsg(r5, &(0x7f00000032c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003300)=0x6) ftruncate(0xffffffffffffffff, 0x10003) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r7, 0x0, 0x0, 0x14) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xf, 0x401d031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000003340), 0x680cbe19, 0x60140) read$FUSE(r8, &(0x7f0000003380)={0x2020}, 0x2020) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000053c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) sendmsg$key(r2, &(0x7f0000005400)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r2, &(0x7f00000054c0)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000005540)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) 18m50.659654537s ago: executing program 4 (id=1001): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x100000, 0x0, {0x0, 0x0, 0x0, r2, 0x8a83}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0xbd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) 18m48.323140983s ago: executing program 4 (id=1006): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x1, 0x4e}, &(0x7f00000001c0), &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x401, @local, 0xb}, 0x1c) syz_ublk_setup_io_uring(0xe0a, &(0x7f0000000380)={0x0, 0xcaec, 0x800, 0x3, 0x2af, 0x0, r0}, &(0x7f0000000240)=0x0, &(0x7f0000000500), &(0x7f0000000300)) syz_io_uring_submit(r4, r1, r2, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x8, 0x28, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x835e, 0x20880, 0x0, {0x1}}) io_uring_enter(r0, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) 18m48.193458255s ago: executing program 4 (id=1009): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='./dev/sda1\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x149000, 0x19a) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000006c0)={0x5, 0xffffffffffffffff, 0x8001, 0x7ffb, 0xb, 0x3}) 18m47.952034471s ago: executing program 0 (id=1012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000012c0)={'syzkaller1\x00', @link_local}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="6a3f9ab8d42d2ffd508da7", 0xb}], 0x1}, 0x4000) write$tun(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 18m46.994724388s ago: executing program 33 (id=1012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000012c0)={'syzkaller1\x00', @link_local}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="6a3f9ab8d42d2ffd508da7", 0xb}], 0x1}, 0x4000) write$tun(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 18m46.971096955s ago: executing program 4 (id=1016): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000fc0)=""/4125, 0x101d}], 0x1, 0x4, 0x400) 18m45.034759915s ago: executing program 4 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x101002, 0x0) write(r0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000540)=r1, 0x12) 18m44.676201176s ago: executing program 4 (id=1021): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='./dev/sda1\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00', @ANYRES64]) 18m29.456669387s ago: executing program 34 (id=1021): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='./dev/sda1\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00', @ANYRES64]) 16m15.716948248s ago: executing program 2 (id=1363): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000019200)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000019240)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000019280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) nanosleep(&(0x7f00000192c0)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r8 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000019300)={0x0, 0x3e8}, 0x10) bind(r8, &(0x7f0000019340)=@generic={0x1f, "aaaaaaaaaa000100"}, 0x80) connect(r8, &(0x7f00000193c0)=@generic={0x1f, "0102030405060100"}, 0x80) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x1}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {[], [{}, {}, {}, {}, {}, {0x1}, {0x0, 0x8}]}, {}, {}, {[], [{}, {0xffffffff}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}, {[], [{}, {}, {0x0, 0x1}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {}, {[{0x0, 0x2}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 16m12.819572208s ago: executing program 2 (id=1366): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 16m11.218576857s ago: executing program 2 (id=1369): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x88a00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000480)={0x28, 0x4, r1, r3, 0x6, 0x80000000, 0x7f0}) 16m11.142574701s ago: executing program 2 (id=1370): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x38ff817, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x0) 16m10.782109214s ago: executing program 2 (id=1372): syz_open_dev$sg(&(0x7f0000000400), 0xffff0000, 0x2842) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000697000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000817000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000696000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m8.527801392s ago: executing program 2 (id=1375): socketpair(0x3, 0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x5509, &(0x7f0000000040)=0x18) 16m8.269765064s ago: executing program 35 (id=1375): socketpair(0x3, 0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x5509, &(0x7f0000000040)=0x18) 15m24.609052378s ago: executing program 5 (id=1476): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./proc\x00', &(0x7f00000008c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000940)='27', 0x2) r1 = memfd_create(&(0x7f0000000980)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1m\x13}\xe1\xdf4f!\xd5d\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85\b\x00\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5>j\x87\x04\x11y\xa1\xc8\x9f\x9etiHv\xef\x1a\xedS\xd6\x91%||/c\x87\x94Y\xa0\x8e\x03\x00\x00\x00\x00\x00\x00\x003:\x99\x1e\xac`\x00\x00\x00\x00m\xeaB\xf0K\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80', 0x1) write$binfmt_script(r1, 0x0, 0x0) execveat(r1, &(0x7f0000000a80)='\x00', 0x0, 0x0, 0x1000) 15m24.17159842s ago: executing program 5 (id=1478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000680)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m21.423511387s ago: executing program 5 (id=1482): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c40)={{{@in=@multicast1, @in=@private=0xa010102, 0x0, 0x8001, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4d2, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0xf}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000d40), 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0) read$FUSE(r3, &(0x7f00000010c0)={0x2020}, 0x2020) getpid() prlimit64(0x0, 0xe, &(0x7f0000003100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003140)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000003180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000003200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003280), 0x651, 0x0) recvmmsg(r5, &(0x7f00000032c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003300)=0x6) ftruncate(0xffffffffffffffff, 0x10003) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r7, 0x0, 0x0, 0x14) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xf, 0x401d031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000003340), 0x680cbe19, 0x60140) read$FUSE(r8, &(0x7f0000003380)={0x2020}, 0x2020) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000053c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) sendmsg$key(r2, &(0x7f0000005400)={0x0, 0x0, &(0x7f0000005440)={&(0x7f0000005480)=ANY=[@ANYBLOB="020b00"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f00000054c0)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000005540)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) 15m20.482061903s ago: executing program 5 (id=1483): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x111509e, 0x0) 15m20.330668977s ago: executing program 5 (id=1485): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000003c0)="000000000000000463656c6c00000001000000440000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010203040000000405060708", 0xa8, 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x3, 0x0, @pic={0x8, 0x7, 0x8, 0x2, 0x2, 0x7, 0xc5, 0x19, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000240)={0x7, 0xfffff60b, 0xfffffff9, 0x9, 0x2}) r6 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0x40405515, &(0x7f0000000ac0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) 15m18.393750452s ago: executing program 5 (id=1489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000540)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0xfffffffd}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 15m18.247565854s ago: executing program 36 (id=1489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000540)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0xfffffffd}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 10m28.764434493s ago: executing program 7 (id=2103): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$unix(0x1, 0x3, 0x0) bind$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) sendmsg$unix(r3, &(0x7f0000000680)={&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r4], 0x30}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) 10m27.77782178s ago: executing program 7 (id=2105): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 10m27.592770161s ago: executing program 7 (id=2106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000009f440000000000006b0a00fe0000000073130000000000009c000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 10m26.471405309s ago: executing program 7 (id=2108): mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f00000000c0)='.\x00', 0x0, 0x8b7840, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xff, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f00000001c0)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 10m26.375092795s ago: executing program 7 (id=2109): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fsopen(&(0x7f0000000280)='bpf\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10103c, 0x140) syz_open_dev$radio(&(0x7f0000000200), 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x80, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000006c0)={0x2e, 0x5e, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x10000001, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x40000, 0x2, 0x2100ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5008, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x3e3}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 10m23.283645505s ago: executing program 7 (id=2125): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) splice(r0, 0x0, r1, 0x0, 0x2000000008, 0x0) 10m22.863649349s ago: executing program 37 (id=2125): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) splice(r0, 0x0, r1, 0x0, 0x2000000008, 0x0) 7m44.115238704s ago: executing program 1 (id=2391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0xa, 0x3, 0x3a) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0xc80, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x1090c2, 0x0) 7m41.921552424s ago: executing program 1 (id=2393): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x0, 0x42) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount(0x0, 0x0, 0x0, 0x800040, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x3, 0x1, 0xc5, 0x9, 0x2b, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m39.843476297s ago: executing program 1 (id=2396): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xe0180) write$sndseq(r0, &(0x7f0000000500), 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f00005c5000/0x3000)=nil, 0x3000, 0x11) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @broadcast, 'batadv_slave_1\x00'}}, 0x1e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffd, @multicast, 'veth0_virt_wifi\x00'}}, 0x1e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000040)={'batadv_slave_1\x00', 0xcd}) 7m35.620995927s ago: executing program 1 (id=2401): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x4}, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 7m28.715596234s ago: executing program 1 (id=2413): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0xce, 0x4) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x4, 0x4) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000480)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000640)={0x0, 0x2, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 7m28.021883237s ago: executing program 1 (id=2415): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() getrlimit(0x6, &(0x7f00000004c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x183042, 0x25) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x161a02, 0x0) preadv2(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) 7m12.651904159s ago: executing program 38 (id=2415): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() getrlimit(0x6, &(0x7f00000004c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x183042, 0x25) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x161a02, 0x0) preadv2(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) 2m56.681515808s ago: executing program 9 (id=2697): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019400)) close(0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 2m55.033405634s ago: executing program 9 (id=2698): ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) r4 = msgget$private(0x0, 0x20) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000380)=""/45) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2m49.437664469s ago: executing program 9 (id=2704): syz_open_dev$vim2m(0x0, 0x5, 0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 2m44.717127812s ago: executing program 9 (id=2708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000000640)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x19, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m42.935711406s ago: executing program 9 (id=2709): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x183042, 0x25) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000001120003006269746d61703a69702c6d616300000005000400000000000900020073797a31000000002000078005000300200000000c0001800800014000000000080006400000000305000500020000"], 0x6c}, 0x1, 0x0, 0x0, 0x2004c8a0}, 0x40844) lseek(r3, 0x9, 0x0) 2m38.124542871s ago: executing program 9 (id=2713): socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f00000003c0)) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m22.121445593s ago: executing program 39 (id=2713): socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f00000003c0)) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.379386303s ago: executing program 8 (id=2843): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() setpriority(0x2, r0, 0x2a14b59) ptrace$setopts(0x4206, r0, 0x3, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = gettid() rt_sigprocmask(0x0, &(0x7f00000003c0)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, &(0x7f0000000400)={0x0, 0x1c, 0x4, @tid=r4}, &(0x7f0000000440)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000200)={{0x77359400}, {0x0, 0x9}}, 0x0) rt_sigtimedwait(&(0x7f0000000500)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 13.379035761s ago: executing program 8 (id=2845): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42c9, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd47, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x845, 0x2, 0x8, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe58c, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 11.351843676s ago: executing program 3 (id=2846): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000d40)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d80)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000dc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e40)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000ec0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0xd, 0x5, &(0x7f0000001000)=@framed={{0x76, 0xa, 0x0, 0x0, 0x1000000, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000001040)='GPL\x00'}, 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 10.049301678s ago: executing program 8 (id=2847): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c18599a9fba248"], 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000440)={@local, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a84d0", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x2, 0x4a22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x22, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}]}}}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 9.847403868s ago: executing program 3 (id=2848): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x47a9, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af25, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket(0xa, 0x1, 0x0) listen(r5, 0x7f) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(0xffffffffffffffff, 0xfff) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 8.320185661s ago: executing program 3 (id=2849): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='status\x00') read$msr(r0, &(0x7f00000001c0)=""/43, 0x2b) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) getresgid(&(0x7f00000028c0), &(0x7f0000002900), &(0x7f0000002940)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002980)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000002a80)=0xe8) getresgid(&(0x7f0000002ac0), 0x0, &(0x7f0000002b40)) r4 = syz_open_dev$evdev(&(0x7f0000002b80), 0x0, 0x2002) write$evdev(r4, &(0x7f0000002c80)=[{{}, 0x0, 0x2}], 0x37) 8.146242695s ago: executing program 8 (id=2850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000480)=0x7ffffffe, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2d, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r4 = add_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f00000004c0)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f0000000500)=""/4096, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xf}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) 3.163514286s ago: executing program 8 (id=2851): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000002a80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='0x12', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r2, &(0x7f0000000780)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000ac0)='dummy_udc.0\n', 0xc) 3.162484495s ago: executing program 3 (id=2852): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f0000000040), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r3, &(0x7f0000001180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7ff}, 0x1c) 1.676651003s ago: executing program 3 (id=2853): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local}) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) 1.632053992s ago: executing program 8 (id=2854): prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) mkdirat(0xffffffffffffffff, &(0x7f0000000980)='./trace\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./trace\x00', 0x1ff) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x8) syz_io_uring_setup(0x200025fb, &(0x7f0000000a40)={0x0, 0x8042a, 0x80000, 0x0, 0x64}, &(0x7f0000000ac0), &(0x7f0000000b00), 0x0) eventfd2(0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000d80)='./trace\x00', &(0x7f0000000dc0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./trace/set_event\x00', 0x121302, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 0s ago: executing program 3 (id=2855): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000, 0x190) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$xdp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x20000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x298, 0x200, 0x168, 0x168, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x2, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0xfffd, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) capset(&(0x7f0000000500)={0x20080522}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xe0bb, 0xfffffffffffffffe}) kernel console output (not intermixed with test programs): atadv_slave_0 [ 972.292194][T15130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.292219][T15130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.397735][T15130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.397753][T15130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.397779][T15130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.102541][T15466] key id 00000001 not found [ 973.109548][ T4898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 973.194583][ T4898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 973.262315][ T4898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 973.263427][ T4898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 973.264157][ T4898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 974.275657][T15130] hsr_slave_0: entered promiscuous mode [ 974.279697][T15130] hsr_slave_1: entered promiscuous mode [ 974.284567][T15130] debugfs: 'hsr0' already exists in 'hsr' [ 974.284595][T15130] Cannot create hsr debugfs directory [ 975.334274][T10889] Bluetooth: hci0: command tx timeout [ 977.660126][T10889] Bluetooth: hci0: command tx timeout [ 978.818847][T15258] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.818978][T15258] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.819168][T15258] bridge_slave_0: entered allmulticast mode [ 978.896239][T15258] bridge_slave_0: entered promiscuous mode [ 980.401360][T10889] Bluetooth: hci0: command tx timeout [ 981.585384][T15258] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.585507][T15258] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.585709][T15258] bridge_slave_1: entered allmulticast mode [ 981.588038][T15258] bridge_slave_1: entered promiscuous mode [ 982.093577][T15465] rxe_eth0 speed is unknown, defaulting to 1000 [ 982.128968][T15258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.204218][T15258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.447255][T10889] Bluetooth: hci0: command tx timeout [ 982.510006][T15258] team0: Port device team_slave_0 added [ 982.562939][T15258] team0: Port device team_slave_1 added [ 984.185807][T15258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.185824][T15258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.185850][T15258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.245903][T12413] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 987.416379][T12413] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 987.420414][T12413] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.420452][T12413] usb 10-1: Product: syz [ 987.420466][T12413] usb 10-1: Manufacturer: syz [ 987.420481][T12413] usb 10-1: SerialNumber: syz [ 988.139305][T12413] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 988.139373][T12413] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 988.286994][T15258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.287013][T15258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.287032][T15258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.372502][T15258] hsr_slave_0: entered promiscuous mode [ 989.373680][T12413] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 989.393276][T15258] hsr_slave_1: entered promiscuous mode [ 989.394225][T15258] debugfs: 'hsr0' already exists in 'hsr' [ 989.394250][T15258] Cannot create hsr debugfs directory [ 989.778217][T12413] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 989.778697][T12413] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 989.778756][T12413] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 989.838518][T12413] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 989.874452][T15703] syz_tun: entered allmulticast mode [ 989.892878][T12413] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 989.930172][T12413] usb 10-1: USB disconnect, device number 16 [ 992.165037][T10530] bridge_slave_1: left allmulticast mode [ 992.165074][T10530] bridge_slave_1: left promiscuous mode [ 992.165326][T10530] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.326469][T10530] bridge_slave_0: left allmulticast mode [ 992.326512][T10530] bridge_slave_0: left promiscuous mode [ 992.326771][T10530] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.860464][T15777] Device name cannot be null; rc = [-22] [ 993.590558][T10530] bridge_slave_1: left allmulticast mode [ 993.590595][T10530] bridge_slave_1: left promiscuous mode [ 993.590832][T10530] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.707071][T10530] bridge_slave_0: left allmulticast mode [ 993.707098][T10530] bridge_slave_0: left promiscuous mode [ 993.707244][T10530] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.975257][T10530] bridge_slave_1: left allmulticast mode [ 993.975283][T10530] bridge_slave_1: left promiscuous mode [ 993.975456][T10530] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.075801][T10530] bridge_slave_0: left allmulticast mode [ 994.075827][T10530] bridge_slave_0: left promiscuous mode [ 994.076061][T10530] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.187831][T10530] pimreg: left allmulticast mode [ 994.328454][T15789] overlayfs: failed to clone upperpath [ 994.367630][T15789] overlayfs: failed to clone upperpath [ 996.126109][T10530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.207329][T10530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.266187][T10530] bond0 (unregistering): Released all slaves [ 996.835375][T10530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.896703][T10530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.967963][T10530] bond0 (unregistering): Released all slaves [ 997.810673][ T4898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 997.904456][ T4898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 997.929911][ T4898] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 997.932274][ T4898] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 997.933678][ T4898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 998.235331][T15803] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 998.238008][T10530] bond0 (unregistering): (slave geneve2): Releasing backup interface [ 998.556499][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 998.559027][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 998.585975][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 998.615853][T10530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 998.695342][T10530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.740964][T10530] bond0 (unregistering): Released all slaves [ 998.786521][T10530] bond1 (unregistering): (slave veth3): Releasing backup interface [ 998.805247][T10530] veth3: left promiscuous mode [ 998.851311][T10530] bond1 (unregistering): Released all slaves [ 1000.146702][T10889] Bluetooth: hci2: command tx timeout [ 1000.961688][T10530] tipc: Disabling bearer [ 1000.961858][T10530] tipc: Left network mode [ 1000.962341][T15465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.962476][T15465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.962609][T15465] bridge_slave_0: entered allmulticast mode [ 1000.981708][T15465] bridge_slave_0: entered promiscuous mode [ 1000.994598][T15465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.994879][T15465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.995074][T15465] bridge_slave_1: entered allmulticast mode [ 1000.998212][T15465] bridge_slave_1: entered promiscuous mode [ 1002.616305][T10889] Bluetooth: hci2: command tx timeout [ 1003.185687][T15465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.196238][T15465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.208367][T15465] team0: Port device team_slave_0 added [ 1004.314259][T15797] rxe_eth0 speed is unknown, defaulting to 1000 [ 1004.334480][T15465] team0: Port device team_slave_1 added [ 1004.689572][T10889] Bluetooth: hci2: command tx timeout [ 1004.986847][T15465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.986865][T15465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.986891][T15465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.997763][T15465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.997781][T15465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.997805][T15465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.220981][T15465] hsr_slave_0: entered promiscuous mode [ 1005.223538][T15465] hsr_slave_1: entered promiscuous mode [ 1005.232260][T15465] debugfs: 'hsr0' already exists in 'hsr' [ 1005.232289][T15465] Cannot create hsr debugfs directory [ 1006.775179][T10889] Bluetooth: hci2: command tx timeout [ 1007.426352][T10530] hsr_slave_0: left promiscuous mode [ 1007.467880][T10530] hsr_slave_1: left promiscuous mode [ 1007.471388][T10530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.506084][T10530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.565452][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1008.565523][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1008.728327][T10530] hsr_slave_0: left promiscuous mode [ 1008.817070][T10530] hsr_slave_1: left promiscuous mode [ 1008.819038][T10530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.865915][T10530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.026555][T10530] hsr_slave_0: left promiscuous mode [ 1009.065725][T10530] hsr_slave_1: left promiscuous mode [ 1009.066801][T10530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.066819][T10530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.105538][T10530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.105566][T10530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.199285][T10530] veth1_macvtap: left promiscuous mode [ 1009.199390][T10530] veth0_macvtap: left promiscuous mode [ 1009.201205][T10530] veth1_vlan: left promiscuous mode [ 1009.201324][T10530] veth0_vlan: left promiscuous mode [ 1009.807110][T10530] team0 (unregistering): Port device team_slave_1 removed [ 1009.835370][T10530] team0 (unregistering): Port device team_slave_0 removed [ 1010.237253][T10530] team0 (unregistering): Port device team_slave_1 removed [ 1010.286123][T10530] team0 (unregistering): Port device team_slave_0 removed [ 1011.075783][T10530] team0 (unregistering): Port device team_slave_1 removed [ 1011.126627][T10530] team0 (unregistering): Port device team_slave_0 removed [ 1012.304947][T15797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.305110][T15797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.305233][T15797] bridge_slave_0: entered allmulticast mode [ 1012.306617][T15797] bridge_slave_0: entered promiscuous mode [ 1012.637924][T15797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.638012][T15797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.638149][T15797] bridge_slave_1: entered allmulticast mode [ 1012.641415][T15797] bridge_slave_1: entered promiscuous mode [ 1012.787778][T15797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.812224][T15797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.921297][ T4898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1013.019713][T15797] team0: Port device team_slave_0 added [ 1013.032136][T15797] team0: Port device team_slave_1 added [ 1013.051541][ T4898] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1013.070993][ T4898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1013.095625][ T4898] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1013.103339][ T4898] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1013.602710][T15797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.602727][T15797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.602749][T15797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.719681][T15797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.719700][T15797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.719727][T15797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.572444][T15797] hsr_slave_0: entered promiscuous mode [ 1014.573408][T15797] hsr_slave_1: entered promiscuous mode [ 1014.574249][T15797] debugfs: 'hsr0' already exists in 'hsr' [ 1014.574280][T15797] Cannot create hsr debugfs directory [ 1014.574500][T15917] rxe_eth0 speed is unknown, defaulting to 1000 [ 1015.165154][T10889] Bluetooth: hci3: command tx timeout [ 1016.070185][T15917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.070390][T15917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.070612][T15917] bridge_slave_0: entered allmulticast mode [ 1016.073026][T15917] bridge_slave_0: entered promiscuous mode [ 1016.103896][T15917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.104010][T15917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.104183][T15917] bridge_slave_1: entered allmulticast mode [ 1016.154036][T15917] bridge_slave_1: entered promiscuous mode [ 1016.190664][T15917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.204226][T15917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.308673][T15917] team0: Port device team_slave_0 added [ 1016.311377][T15917] team0: Port device team_slave_1 added [ 1016.342598][T15917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.342618][T15917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.342639][T15917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.343914][T15917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.343928][T15917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.343956][T15917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.486945][T15917] hsr_slave_0: entered promiscuous mode [ 1016.487703][T15917] hsr_slave_1: entered promiscuous mode [ 1016.488210][T15917] debugfs: 'hsr0' already exists in 'hsr' [ 1016.488234][T15917] Cannot create hsr debugfs directory [ 1017.247990][T10889] Bluetooth: hci3: command tx timeout [ 1017.522993][T15465] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1017.560696][T15465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1017.625410][T15465] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1017.658352][T15465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1017.659189][T15465] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1017.697338][T15465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1017.701387][T15465] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1017.741867][T15465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1017.912037][T15465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.954107][T15465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.970298][T10535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.970421][T10535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.991591][T10529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.991728][T10529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.626447][T10530] bridge_slave_1: left allmulticast mode [ 1018.626483][T10530] bridge_slave_1: left promiscuous mode [ 1018.626645][T10530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.801280][T10530] bridge_slave_0: left allmulticast mode [ 1018.801304][T10530] bridge_slave_0: left promiscuous mode [ 1018.801467][T10530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.065153][T10530] bridge_slave_1: left allmulticast mode [ 1019.065181][T10530] bridge_slave_1: left promiscuous mode [ 1019.065346][T10530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.215888][T10530] bridge_slave_0: left allmulticast mode [ 1019.215915][T10530] bridge_slave_0: left promiscuous mode [ 1019.216122][T10530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.325143][T10889] Bluetooth: hci3: command tx timeout [ 1019.425071][T10530] bridge_slave_1: left allmulticast mode [ 1019.425108][T10530] bridge_slave_1: left promiscuous mode [ 1019.425377][T10530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.536576][T10530] bridge_slave_0: left allmulticast mode [ 1019.536603][T10530] bridge_slave_0: left promiscuous mode [ 1019.536758][T10530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.935274][T10530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.035438][T10530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.096304][T10530] bond0 (unregistering): Released all slaves [ 1020.325654][T10530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.425363][T10530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.487029][T10530] bond0 (unregistering): Released all slaves [ 1020.735619][T10530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.848373][T10530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.927162][T10530] bond0 (unregistering): Released all slaves [ 1020.976622][ T5243] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1021.400987][T15465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.440243][T10889] Bluetooth: hci3: command tx timeout [ 1022.746776][T15465] veth0_vlan: entered promiscuous mode [ 1022.775880][T15465] veth1_vlan: entered promiscuous mode [ 1023.294899][T10530] hsr_slave_0: left promiscuous mode [ 1023.339486][T10530] hsr_slave_1: left promiscuous mode [ 1023.340267][T10530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.365522][T10530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.524924][T10530] hsr_slave_0: left promiscuous mode [ 1023.564996][T10530] hsr_slave_1: left promiscuous mode [ 1023.566046][T10530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.595440][T10530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.757749][T10530] hsr_slave_0: left promiscuous mode [ 1023.774850][T10530] hsr_slave_1: left promiscuous mode [ 1023.775697][T10530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.817523][T10530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.186046][T10530] team0 (unregistering): Port device team_slave_1 removed [ 1024.215376][T10530] team0 (unregistering): Port device team_slave_0 removed [ 1024.638208][T10530] team0 (unregistering): Port device team_slave_1 removed [ 1024.675297][T10530] team0 (unregistering): Port device team_slave_0 removed [ 1025.086176][T10530] team0 (unregistering): Port device team_slave_1 removed [ 1025.135592][T10530] team0 (unregistering): Port device team_slave_0 removed [ 1025.369331][T15465] veth0_macvtap: entered promiscuous mode [ 1025.384583][T15465] veth1_macvtap: entered promiscuous mode [ 1025.421306][T15465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.431479][T15465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.807531][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.807553][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.940008][ T4046] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.954835][T10526] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.954892][T10526] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.974853][ T4046] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.450437][ T340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.450460][ T340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.575229][T15797] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1027.629052][T15797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1027.839107][T15797] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1027.882225][T15797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1027.899933][T15797] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1027.995188][T15797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1029.031449][T15797] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1029.205657][T15797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1031.654342][T15917] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1031.802090][T15917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1031.832024][T15917] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1031.860594][T15917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1031.862460][T15917] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1032.134454][T15917] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1032.344422][T15917] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1032.399201][T15917] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1032.672411][T15797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.750244][T15797] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.811234][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.811622][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.881895][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.882030][ T4046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.106586][T15917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.280281][T15917] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.302325][T10526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.302533][T10526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.503366][T10530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.503503][T10530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.109511][T16140] FAULT_INJECTION: forcing a failure. [ 1039.109511][T16140] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.109553][T16140] CPU: 1 UID: 0 PID: 16140 Comm: syz.9.2370 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1039.109581][T16140] Tainted: [L]=SOFTLOCKUP [ 1039.109589][T16140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1039.109602][T16140] Call Trace: [ 1039.109611][T16140] [ 1039.109620][T16140] dump_stack_lvl+0xe8/0x150 [ 1039.109658][T16140] should_fail_ex+0x46b/0x600 [ 1039.109688][T16140] should_failslab+0xa8/0x100 [ 1039.109721][T16140] __kmalloc_cache_noprof+0x9c/0x670 [ 1039.109752][T16140] ? nfs_init_fs_context+0x57/0x1300 [ 1039.109824][T16140] ? nfs_init_fs_context+0x57/0x1300 [ 1039.109855][T16140] nfs_init_fs_context+0x57/0x1300 [ 1039.109886][T16140] alloc_fs_context+0x99e/0xd00 [ 1039.109918][T16140] __se_sys_fsopen+0x118/0x370 [ 1039.109948][T16140] do_syscall_64+0x166/0x520 [ 1039.109976][T16140] ? trace_irq_disable+0x3b/0x140 [ 1039.109999][T16140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.110017][T16140] ? clear_bhb_loop+0x70/0xc0 [ 1039.110040][T16140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.110059][T16140] RIP: 0033:0x7fbd18f9f559 [ 1039.110079][T16140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.110096][T16140] RSP: 002b:00007fbd171f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1039.110117][T16140] RAX: ffffffffffffffda RBX: 00007fbd19225fa0 RCX: 00007fbd18f9f559 [ 1039.110132][T16140] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000540 [ 1039.110145][T16140] RBP: 00007fbd19036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1039.110157][T16140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.110168][T16140] R13: 00007fbd19226038 R14: 00007fbd19225fa0 R15: 00007ffd1bb4c728 [ 1039.110195][T16140] [ 1040.927884][T15797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.338772][T15917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.684170][T15917] veth0_vlan: entered promiscuous mode [ 1042.726913][T15917] veth1_vlan: entered promiscuous mode [ 1044.692322][T15917] veth0_macvtap: entered promiscuous mode [ 1045.808775][T16213] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.2381'. [ 1046.005000][T15917] veth1_macvtap: entered promiscuous mode [ 1046.220920][T16216] FAULT_INJECTION: forcing a failure. [ 1046.220920][T16216] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.220987][T16216] CPU: 1 UID: 0 PID: 16216 Comm: syz.9.2382 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1046.221014][T16216] Tainted: [L]=SOFTLOCKUP [ 1046.221022][T16216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1046.221034][T16216] Call Trace: [ 1046.221043][T16216] [ 1046.221053][T16216] dump_stack_lvl+0xe8/0x150 [ 1046.221087][T16216] should_fail_ex+0x46b/0x600 [ 1046.221112][T16216] should_failslab+0xa8/0x100 [ 1046.221144][T16216] __kmalloc_cache_node_noprof+0xa7/0x670 [ 1046.221168][T16216] ? init_rescuer+0x167/0x530 [ 1046.221187][T16216] ? init_rescuer+0x167/0x530 [ 1046.221210][T16216] init_rescuer+0x167/0x530 [ 1046.221229][T16216] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1046.221257][T16216] ? rt_mutex_slowunlock+0x219/0x460 [ 1046.221277][T16216] ? __pfx_init_rescuer+0x10/0x10 [ 1046.221296][T16216] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1046.221323][T16216] ? __alloc_workqueue+0x1b29/0x1fe0 [ 1046.221355][T16216] __alloc_workqueue+0x1bd7/0x1fe0 [ 1046.221396][T16216] alloc_workqueue_noprof+0xe3/0x210 [ 1046.221428][T16216] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1046.221459][T16216] ? ceph_msgpool_init+0xdd/0x1c0 [ 1046.221514][T16216] ceph_osdc_init+0x5df/0x910 [ 1046.221626][T16216] ceph_create_client+0x246/0x310 [ 1046.221656][T16216] ceph_get_tree+0x1ca/0x1a40 [ 1046.221695][T16216] ? cap_capable+0x123/0x460 [ 1046.221722][T16216] ? safesetid_security_capable+0xa9/0x1a0 [ 1046.221756][T16216] vfs_get_tree+0x92/0x2a0 [ 1046.221784][T16216] do_new_mount+0x325/0xb00 [ 1046.221804][T16216] ? cap_capable+0x123/0x460 [ 1046.221834][T16216] ? __pfx_do_new_mount+0x10/0x10 [ 1046.221856][T16216] ? ns_capable+0x84/0xe0 [ 1046.221881][T16216] ? path_mount+0x647/0x1050 [ 1046.221905][T16216] ? user_path_at+0xd4/0x160 [ 1046.221930][T16216] __se_sys_mount+0x31d/0x420 [ 1046.221957][T16216] ? __pfx___se_sys_mount+0x10/0x10 [ 1046.221984][T16216] ? __x64_sys_mount+0x20/0xc0 [ 1046.222006][T16216] do_syscall_64+0x166/0x520 [ 1046.222032][T16216] ? trace_irq_disable+0x3b/0x140 [ 1046.222055][T16216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.222080][T16216] ? clear_bhb_loop+0x70/0xc0 [ 1046.222105][T16216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.222124][T16216] RIP: 0033:0x7fbd18f9f559 [ 1046.222143][T16216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.222160][T16216] RSP: 002b:00007fbd171f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1046.222182][T16216] RAX: ffffffffffffffda RBX: 00007fbd19225fa0 RCX: 00007fbd18f9f559 [ 1046.222197][T16216] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 1046.222211][T16216] RBP: 00007fbd19036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1046.222229][T16216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.222241][T16216] R13: 00007fbd19226038 R14: 00007fbd19225fa0 R15: 00007ffd1bb4c728 [ 1046.222273][T16216] [ 1046.222283][T16216] workqueue: Failed to allocate a rescuer for wq "ceph-watch-notify" [ 1046.521747][T15917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.611205][T15917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.614022][T15797] veth0_vlan: entered promiscuous mode [ 1046.714231][T15797] veth1_vlan: entered promiscuous mode [ 1048.409931][T15797] veth0_macvtap: entered promiscuous mode [ 1048.449553][ T6121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.449576][ T6121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.502582][T15797] veth1_macvtap: entered promiscuous mode [ 1049.408589][T15797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.482160][T15797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.519771][T10529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.519794][T10529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.896710][T10532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.896882][T10532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.897997][T10532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.053167][ T6121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.054354][ T6121] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.054533][ T6121] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.099808][ T6121] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.327443][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.941870][ T7216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.941904][ T7216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.416384][T10526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.416408][T10526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.216366][ T36] audit: type=1800 audit(1792655294.413:58): pid=16325 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.2402" name=08 dev="sda1" ino=2092 res=0 errno=0 [ 1060.339992][ T4898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1060.410975][ T4898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1060.426433][ T4898] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1060.433873][ T4898] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1060.441933][ T4898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1062.116057][T11987] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1062.414121][T11987] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1062.473126][T11987] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.473375][T11987] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.650045][T11987] usb 10-1: config 0 descriptor?? [ 1062.811307][T11987] pwc: Askey VC010 type 2 USB webcam detected. [ 1063.166918][T11987] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1063.173625][T11987] pwc: recv_control_msg error -32 req 02 val 2700 [ 1063.188208][T11987] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1063.193569][T11987] pwc: recv_control_msg error -32 req 04 val 1000 [ 1063.646100][T10889] Bluetooth: hci2: command tx timeout [ 1063.679541][T11987] pwc: recv_control_msg error -32 req 04 val 1300 [ 1064.367909][T11987] pwc: recv_control_msg error -32 req 04 val 1400 [ 1064.536115][T11987] pwc: recv_control_msg error -32 req 02 val 2000 [ 1064.541310][T11987] pwc: recv_control_msg error -32 req 02 val 2100 [ 1064.569394][T11987] pwc: recv_control_msg error -32 req 04 val 1500 [ 1064.571422][T11987] pwc: recv_control_msg error -32 req 02 val 2500 [ 1064.801808][T10526] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.943068][T11987] pwc: recv_control_msg error -71 req 02 val 2600 [ 1065.943375][T10889] Bluetooth: hci2: command tx timeout [ 1065.946879][T11987] pwc: recv_control_msg error -71 req 02 val 2900 [ 1065.947426][T11987] pwc: recv_control_msg error -71 req 02 val 2800 [ 1065.948067][T11987] pwc: recv_control_msg error -71 req 04 val 1100 [ 1065.948635][T11987] pwc: recv_control_msg error -71 req 04 val 1200 [ 1066.345113][T11987] pwc: Registered as video103. [ 1066.348157][T11987] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input25 [ 1066.390569][T11987] usb 10-1: USB disconnect, device number 17 [ 1066.631447][T16335] rxe_eth0 speed is unknown, defaulting to 1000 [ 1067.581779][T10526] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.714756][T16136] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1067.883033][T16136] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1067.883091][T16136] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1067.884154][T16136] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1067.884189][T16136] usb 4-1: can't read configurations, error -71 [ 1068.044842][T10889] Bluetooth: hci2: command tx timeout [ 1070.704453][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1070.704521][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1070.706897][T10889] Bluetooth: hci2: command tx timeout [ 1070.972108][T10526] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.655055][T10526] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.914535][ T4898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1082.978673][ T4898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1082.980722][ T4898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1082.981988][ T4898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1082.982819][ T4898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1084.027367][T16432] bond1: entered allmulticast mode [ 1084.212179][T16435] bond1: (slave ip6gretap1): making interface the new active one [ 1084.218849][T16435] ip6gretap1: entered allmulticast mode [ 1084.223771][T16435] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1085.750858][ T4898] Bluetooth: hci5: command tx timeout [ 1086.769559][T10368] syz_tun (unregistering): left allmulticast mode [ 1088.594171][ T4898] Bluetooth: hci5: command tx timeout [ 1091.000996][ T4898] Bluetooth: hci5: command tx timeout [ 1093.005964][T10889] Bluetooth: hci5: command tx timeout [ 1094.446055][T16335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.446182][T16335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.446378][T16335] bridge_slave_0: entered allmulticast mode [ 1094.448837][T16335] bridge_slave_0: entered promiscuous mode [ 1095.585993][T16503] fuse: Bad value for 'fd' [ 1096.018790][T16335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.018913][T16335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.019099][T16335] bridge_slave_1: entered allmulticast mode [ 1096.049687][T16335] bridge_slave_1: entered promiscuous mode [ 1097.125109][T10526] bridge_slave_1: left allmulticast mode [ 1097.125154][T10526] bridge_slave_1: left promiscuous mode [ 1097.125410][T10526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.341228][T10526] bridge_slave_0: left allmulticast mode [ 1097.341260][T10526] bridge_slave_0: left promiscuous mode [ 1097.341473][T10526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.484834][T10889] Bluetooth: hci0: command 0x0406 tx timeout [ 1098.439107][T10526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.485815][T10526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.510691][T10526] bond0 (unregistering): Released all slaves [ 1098.725104][T16335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.728562][T16425] rxe_eth0 speed is unknown, defaulting to 1000 [ 1098.767726][T16335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.923063][T16335] team0: Port device team_slave_0 added [ 1100.270366][T16335] team0: Port device team_slave_1 added [ 1105.687025][T16335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.687041][T16335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.687056][T16335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.771717][T16335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.771735][T16335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.771760][T16335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.804944][T16136] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1106.976392][T16136] usb 4-1: Using ep0 maxpacket: 32 [ 1106.987983][T16136] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1107.012960][T16136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.012998][T16136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.013020][T16136] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1107.013062][T16136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.038091][T16136] usb 4-1: config 0 descriptor?? [ 1107.086222][T16335] hsr_slave_0: entered promiscuous mode [ 1107.087473][T16335] hsr_slave_1: entered promiscuous mode [ 1107.088291][T16335] debugfs: 'hsr0' already exists in 'hsr' [ 1107.088316][T16335] Cannot create hsr debugfs directory [ 1107.090572][ T5243] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1108.767164][T16136] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0014/input/input26 [ 1109.130042][T16136] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0014/input/input27 [ 1110.024386][T16136] kye 0003:0458:5011.0014: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 1110.994733][T16136] usb 4-1: USB disconnect, device number 13 [ 1111.153854][T16609] fido_id[16609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1111.562037][T16620] fuse: Bad value for 'fd' [ 1114.731288][T10526] hsr_slave_0: left promiscuous mode [ 1115.049825][T10526] hsr_slave_1: left promiscuous mode [ 1115.058347][T10526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1115.058378][T10526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.490635][T16647] futex_wake_op: syz.9.2468 tries to shift op by 144; fix this program [ 1116.647359][T10526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.647391][T10526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.004208][ T36] audit: type=1326 audit(1792655353.193:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16659 comm="syz.9.2471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1118.005500][ T36] audit: type=1326 audit(1792655353.203:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16659 comm="syz.9.2471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1118.199403][ T36] audit: type=1326 audit(1792655353.193:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16659 comm="syz.9.2471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1118.527498][ T36] audit: type=1326 audit(1792655353.713:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16659 comm="syz.9.2471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1118.762529][T10526] veth1_macvtap: left promiscuous mode [ 1118.762634][T10526] veth0_macvtap: left promiscuous mode [ 1119.119470][T10526] veth1_vlan: left promiscuous mode [ 1119.276228][T10526] veth0_vlan: left promiscuous mode [ 1121.690772][T10889] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1122.442831][T10889] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1122.482284][T10889] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1122.515436][T10889] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1122.535886][T10889] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1124.851307][T10889] Bluetooth: hci4: command tx timeout [ 1125.842821][T16712] FAULT_INJECTION: forcing a failure. [ 1125.842821][T16712] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.842861][T16712] CPU: 0 UID: 0 PID: 16712 Comm: syz.8.2481 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1125.842890][T16712] Tainted: [L]=SOFTLOCKUP [ 1125.842898][T16712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1125.842910][T16712] Call Trace: [ 1125.842918][T16712] [ 1125.842928][T16712] dump_stack_lvl+0xe8/0x150 [ 1125.842967][T16712] should_fail_ex+0x46b/0x600 [ 1125.842998][T16712] should_failslab+0xa8/0x100 [ 1125.843032][T16712] __kmalloc_cache_noprof+0x9c/0x670 [ 1125.843059][T16712] ? device_add+0xb6/0xb80 [ 1125.843104][T16712] ? device_add+0xb6/0xb80 [ 1125.843133][T16712] device_add+0xb6/0xb80 [ 1125.843154][T16712] ? device_create+0x248/0x300 [ 1125.843182][T16712] device_create+0x269/0x300 [ 1125.843211][T16712] ? vgacon_build_attr+0x167/0x1f0 [ 1125.843270][T16712] ? __pfx_vgacon_build_attr+0x10/0x10 [ 1125.843299][T16712] ? __pfx_device_create+0x10/0x10 [ 1125.843334][T16712] ? is_console_locked+0x9/0x20 [ 1125.843369][T16712] ? csi_J+0x9d2/0xe80 [ 1125.843460][T16712] vcs_make_sysfs+0x32/0x80 [ 1125.843496][T16712] vc_allocate+0x61a/0x6f0 [ 1125.843521][T16712] ? lock_acquire+0x115/0x350 [ 1125.843549][T16712] ? __pfx_vc_allocate+0x10/0x10 [ 1125.843577][T16712] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1125.843614][T16712] con_install+0x9f/0x770 [ 1125.843640][T16712] ? __pfx_con_install+0x10/0x10 [ 1125.843659][T16712] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1125.843687][T16712] ? mutex_lock_nested+0x14d/0x1d0 [ 1125.843708][T16712] ? tty_init_dev+0x74/0x4d0 [ 1125.843746][T16712] tty_init_dev+0xd7/0x4d0 [ 1125.843776][T16712] tty_open+0x7ea/0xd90 [ 1125.843812][T16712] ? __pfx_tty_open+0x10/0x10 [ 1125.843831][T16712] ? rt_spin_unlock+0x159/0x200 [ 1125.843858][T16712] ? rt_spin_unlock+0x165/0x200 [ 1125.843883][T16712] chrdev_open+0x4dc/0x600 [ 1125.843915][T16712] ? __pfx_chrdev_open+0x10/0x10 [ 1125.843944][T16712] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1125.843979][T16712] ? __pfx_chrdev_open+0x10/0x10 [ 1125.844006][T16712] do_dentry_open+0x841/0x1410 [ 1125.844046][T16712] vfs_open_consume+0x4a/0x360 [ 1125.844072][T16712] ? path_openat+0x16e6/0x2100 [ 1125.844103][T16712] path_openat+0x1701/0x2100 [ 1125.844149][T16712] do_file_open+0x23e/0x4a0 [ 1125.844171][T16712] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1125.844205][T16712] ? __pfx_do_file_open+0x10/0x10 [ 1125.844253][T16712] ? alloc_fd+0x6b2/0x760 [ 1125.844285][T16712] do_sys_openat2+0x115/0x200 [ 1125.844313][T16712] ? __se_sys_futex+0x3a8/0x450 [ 1125.844342][T16712] ? __pfx_do_sys_openat2+0x10/0x10 [ 1125.844376][T16712] ? rcu_is_watching+0x16/0xb0 [ 1125.844408][T16712] __x64_sys_openat+0x138/0x170 [ 1125.844434][T16712] do_syscall_64+0x166/0x520 [ 1125.844460][T16712] ? trace_irq_disable+0x3b/0x140 [ 1125.844490][T16712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.844512][T16712] ? clear_bhb_loop+0x70/0xc0 [ 1125.844537][T16712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.844557][T16712] RIP: 0033:0x7f9259e8fd8e [ 1125.844577][T16712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1125.844594][T16712] RSP: 002b:00007f9258104b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1125.844613][T16712] RAX: ffffffffffffffda RBX: 00007f92581056c0 RCX: 00007f9259e8fd8e [ 1125.844627][T16712] RDX: 0000000000000002 RSI: 00007f9258104c00 RDI: ffffffffffffff9c [ 1125.844640][T16712] RBP: 00007f9259f66b20 R08: 0000000000000000 R09: 0000000000000000 [ 1125.844652][T16712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.844664][T16712] R13: 00007f925a156128 R14: 00007f925a156090 R15: 00007ffd240cb268 [ 1125.844698][T16712] [ 1126.924793][T10889] Bluetooth: hci4: command tx timeout [ 1127.190670][T10526] team0 (unregistering): Port device team_slave_1 removed [ 1128.217348][T10526] team0 (unregistering): Port device team_slave_0 removed [ 1130.508712][T10889] Bluetooth: hci4: command tx timeout [ 1131.652801][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1131.652876][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1133.390159][T10889] Bluetooth: hci4: command tx timeout [ 1137.190347][ T5243] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1137.484778][ T5690] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1137.685716][ T5690] usb 10-1: New USB device found, idVendor=00f0, idProduct=0000, bcdDevice= 0.00 [ 1137.685774][ T5690] usb 10-1: no configurations [ 1137.685787][ T5690] usb 10-1: can't read configurations, error -22 [ 1137.834707][ T5690] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1138.005433][ T5690] usb 10-1: New USB device found, idVendor=00f0, idProduct=0000, bcdDevice= 0.00 [ 1138.005492][ T5690] usb 10-1: no configurations [ 1138.005505][ T5690] usb 10-1: can't read configurations, error -22 [ 1138.005898][ T5690] usb usb10-port1: attempt power cycle [ 1138.433087][ T5690] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1138.462291][ T5690] usb 10-1: New USB device found, idVendor=00f0, idProduct=0000, bcdDevice= 0.00 [ 1138.462350][ T5690] usb 10-1: no configurations [ 1138.462363][ T5690] usb 10-1: can't read configurations, error -22 [ 1139.134794][ T5690] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1139.156252][ T5690] usb 10-1: New USB device found, idVendor=00f0, idProduct=0000, bcdDevice= 0.00 [ 1139.156311][ T5690] usb 10-1: no configurations [ 1139.156325][ T5690] usb 10-1: can't read configurations, error -22 [ 1139.160600][ T5690] usb usb10-port1: unable to enumerate USB device [ 1139.275411][T10889] Bluetooth: hci3: command 0x0406 tx timeout [ 1139.964753][T11986] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1139.965700][T16136] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1140.155993][T11986] usb 4-1: Using ep0 maxpacket: 8 [ 1140.156915][T11986] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1140.158211][T11986] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1140.158235][T11986] usb 4-1: config 179 has no interface number 0 [ 1140.158277][T11986] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1140.158302][T11986] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1140.158329][T11986] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1140.158351][T11986] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1140.158373][T11986] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1140.158417][T11986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.165080][T16790] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1140.166457][T16136] usb 9-1: not running at top speed; connect to a high speed hub [ 1140.166494][T16136] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1140.167990][T16136] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.168053][T16136] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.363879][T16136] uvcvideo 9-1:1.0: Found UVC 1.00 device (046d:0825) [ 1140.363990][T16136] uvcvideo 9-1:1.0: No streaming interface found for terminal 32770. [ 1140.446493][T16797] netlink: 'syz.9.2501': attribute type 13 has an invalid length. [ 1140.446515][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2501'. [ 1140.670878][T16136] usb 9-1: USB disconnect, device number 2 [ 1140.945654][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1140.945725][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1140.946150][T11986] usb 4-1: USB disconnect, device number 14 [ 1141.219961][T16797] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1141.242648][T16425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.242776][T16425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.242917][T16425] bridge_slave_0: entered allmulticast mode [ 1141.255201][T16425] bridge_slave_0: entered promiscuous mode [ 1141.264048][T16425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.264254][T16425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.264451][T16425] bridge_slave_1: entered allmulticast mode [ 1141.310353][T16425] bridge_slave_1: entered promiscuous mode [ 1141.321417][T16681] rxe_eth0 speed is unknown, defaulting to 1000 [ 1141.440127][T16809] Bluetooth: MGMT ver 1.23 [ 1143.733010][T10889] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1143.762275][T10889] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1143.772923][T10889] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1143.783973][T10889] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1143.793197][T10889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1146.811599][T10889] Bluetooth: hci6: command tx timeout [ 1147.100539][ T36] audit: type=1326 audit(1792655382.296:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16854 comm="syz.9.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1147.101216][ T36] audit: type=1326 audit(1792655382.296:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16854 comm="syz.9.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1147.102764][ T36] audit: type=1326 audit(1792655382.296:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16854 comm="syz.9.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1147.104561][ T36] audit: type=1326 audit(1792655382.296:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16854 comm="syz.9.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1147.205088][ T36] audit: type=1326 audit(1792655382.306:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16854 comm="syz.9.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1147.205133][ T36] audit: type=1326 audit(1792655382.306:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16854 comm="syz.9.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1147.205171][ T36] audit: type=1326 audit(1792655382.306:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16854 comm="syz.9.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1147.205208][ T36] audit: type=1326 audit(1792655382.366:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16854 comm="syz.9.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1147.205242][ T36] audit: type=1326 audit(1792655382.366:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16854 comm="syz.9.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1147.205277][ T36] audit: type=1326 audit(1792655382.366:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16854 comm="syz.9.2509" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1147.911231][ T67] bridge_slave_1: left allmulticast mode [ 1147.911268][ T67] bridge_slave_1: left promiscuous mode [ 1147.911551][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.127011][T10889] Bluetooth: hci6: command tx timeout [ 1149.210017][ T67] bridge_slave_0: left allmulticast mode [ 1149.210055][ T67] bridge_slave_0: left promiscuous mode [ 1149.210317][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.174762][T10889] Bluetooth: hci6: command tx timeout [ 1152.573670][ T67] bond0 (unregistering): Released all slaves [ 1153.256594][T10889] Bluetooth: hci6: command tx timeout [ 1156.672217][T16825] rxe_eth0 speed is unknown, defaulting to 1000 [ 1163.197079][T16974] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1163.197660][T16974] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1163.403502][T16974] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1163.403566][T16974] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1163.558976][T16974] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1163.559027][T16974] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1163.841293][T16974] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1164.124520][T16974] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1164.124655][T16974] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1164.178781][T16681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.178860][T16681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.178978][T16681] bridge_slave_0: entered allmulticast mode [ 1164.192322][T16681] bridge_slave_0: entered promiscuous mode [ 1164.203127][T16681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.203243][T16681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.203441][T16681] bridge_slave_1: entered allmulticast mode [ 1164.272612][T16681] bridge_slave_1: entered promiscuous mode [ 1164.322239][T16974] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1164.972718][T16681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.022970][T16681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.399733][T16681] team0: Port device team_slave_0 added [ 1165.404863][T10889] Bluetooth: hci0: command 0x0406 tx timeout [ 1165.521592][T16681] team0: Port device team_slave_1 added [ 1165.604960][T10889] Bluetooth: hci3: command 0x0406 tx timeout [ 1165.809518][T16681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.809547][T16681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.809562][T16681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.815322][T16681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.815339][T16681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.815365][T16681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1166.204892][T10889] Bluetooth: hci4: command 0x0c1a tx timeout [ 1166.524889][T10889] Bluetooth: hci6: command 0x0c1a tx timeout [ 1166.601792][T16681] hsr_slave_0: entered promiscuous mode [ 1166.620413][T16681] hsr_slave_1: entered promiscuous mode [ 1166.631865][T16681] debugfs: 'hsr0' already exists in 'hsr' [ 1166.631894][T16681] Cannot create hsr debugfs directory [ 1167.517627][T10889] Bluetooth: hci0: command 0x0406 tx timeout [ 1167.644817][T10889] Bluetooth: hci3: command 0x0406 tx timeout [ 1168.284868][T10889] Bluetooth: hci4: command 0x0c1a tx timeout [ 1168.604865][T10889] Bluetooth: hci6: command 0x0c1a tx timeout [ 1169.936554][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 1169.936569][ T36] audit: type=1326 audit(1792655405.136:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17018 comm="syz.3.2528" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc355f559 code=0x7ffc0000 [ 1169.936744][ T36] audit: type=1326 audit(1792655405.136:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17018 comm="syz.3.2528" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc355f559 code=0x7ffc0000 [ 1169.938783][ T36] audit: type=1326 audit(1792655405.136:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17018 comm="syz.3.2528" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc355f559 code=0x7ffc0000 [ 1169.939032][ T36] audit: type=1326 audit(1792655405.136:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17018 comm="syz.3.2528" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc355f559 code=0x7ffc0000 [ 1169.939057][ T36] audit: type=1326 audit(1792655405.136:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17018 comm="syz.3.2528" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9bc355f559 code=0x7ffc0000 [ 1170.040046][ T36] audit: type=1326 audit(1792655405.236:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17018 comm="syz.3.2528" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc351fd8e code=0x7ffc0000 [ 1170.056726][ T36] audit: type=1326 audit(1792655405.256:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17018 comm="syz.3.2528" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc351fd8e code=0x7ffc0000 [ 1170.058810][ T36] audit: type=1326 audit(1792655405.256:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17018 comm="syz.3.2528" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc351fd8e code=0x7ffc0000 [ 1170.171401][ T36] audit: type=1326 audit(1792655405.366:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17018 comm="syz.3.2528" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc351fd8e code=0x7ffc0000 [ 1170.172736][ T36] audit: type=1326 audit(1792655405.366:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17018 comm="syz.3.2528" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc351fd8e code=0x7ffc0000 [ 1171.686934][T10889] Bluetooth: hci4: command 0x0c1a tx timeout [ 1171.686965][ T4898] Bluetooth: hci6: command 0x0c1a tx timeout [ 1172.006228][ T67] bridge_slave_1: left allmulticast mode [ 1172.006268][ T67] bridge_slave_1: left promiscuous mode [ 1172.006567][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.439524][ T67] bridge_slave_0: left allmulticast mode [ 1172.439551][ T67] bridge_slave_0: left promiscuous mode [ 1172.439742][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.845955][T17053] ucma_write: process 476 (syz.9.2535) changed security contexts after opening file descriptor, this is not allowed. [ 1180.398395][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.622869][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.666020][ T67] bond0 (unregistering): Released all slaves [ 1181.947704][T16825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.947828][T16825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.948019][T16825] bridge_slave_0: entered allmulticast mode [ 1181.954792][T16825] bridge_slave_0: entered promiscuous mode [ 1182.031647][T16825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.031774][T16825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.031971][T16825] bridge_slave_1: entered allmulticast mode [ 1182.067905][T16825] bridge_slave_1: entered promiscuous mode [ 1182.225561][T16825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.234516][T16825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.341401][T16825] team0: Port device team_slave_0 added [ 1182.356924][T16825] team0: Port device team_slave_1 added [ 1182.772065][T16825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.772082][T16825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.772109][T16825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.800464][T16825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.800482][T16825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.800509][T16825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.804230][T10889] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1184.929777][T10889] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1184.949738][T10889] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1184.953677][T10889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1185.295170][T10889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1186.070936][T17075] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (39424 ns). Using initial count to start timer. [ 1186.503879][T16825] hsr_slave_0: entered promiscuous mode [ 1186.505902][T16825] hsr_slave_1: entered promiscuous mode [ 1186.506785][T16825] debugfs: 'hsr0' already exists in 'hsr' [ 1186.506808][T16825] Cannot create hsr debugfs directory [ 1186.777640][ T67] hsr_slave_0: left promiscuous mode [ 1186.832824][ T67] hsr_slave_1: left promiscuous mode [ 1186.834152][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1186.867753][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.161556][T17094] syz.8.2545 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1188.071684][ T4898] Bluetooth: hci2: command tx timeout [ 1191.797780][ T4898] Bluetooth: hci2: command tx timeout [ 1192.694445][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1192.694514][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1193.361895][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1193.636549][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1193.805067][ T4898] Bluetooth: hci2: command tx timeout [ 1196.611015][ T4898] Bluetooth: hci2: command tx timeout [ 1196.956018][T17133] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2553'. [ 1197.994502][T17144] jffs2: notice: (17144) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1199.445213][T17160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1201.209480][ T36] kauditd_printk_skb: 148 callbacks suppressed [ 1201.209501][ T36] audit: type=1326 audit(1792655436.406:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17169 comm="syz.9.2559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1201.212350][ T36] audit: type=1326 audit(1792655436.406:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17169 comm="syz.9.2559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1201.222870][ T36] audit: type=1326 audit(1792655436.416:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17169 comm="syz.9.2559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1201.222919][ T36] audit: type=1326 audit(1792655436.416:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17169 comm="syz.9.2559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1201.266621][ T36] audit: type=1326 audit(1792655436.466:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17169 comm="syz.9.2559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd18f9f1eb code=0x7ffc0000 [ 1201.266664][ T36] audit: type=1326 audit(1792655436.466:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17169 comm="syz.9.2559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1201.266709][ T36] audit: type=1326 audit(1792655436.466:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17169 comm="syz.9.2559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1201.267416][ T36] audit: type=1326 audit(1792655436.466:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17169 comm="syz.9.2559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1201.267488][ T36] audit: type=1326 audit(1792655436.466:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17169 comm="syz.9.2559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd18f9f559 code=0x7ffc0000 [ 1201.270058][ T36] audit: type=1326 audit(1792655436.466:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17169 comm="syz.9.2559" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd18f9f1eb code=0x7ffc0000 [ 1202.592501][T17078] rxe_eth0 speed is unknown, defaulting to 1000 [ 1205.083133][ T4898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1205.172675][ T4898] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1205.191155][ T4898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1205.251606][ T4898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1205.252430][ T4898] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1205.825797][ T67] bridge_slave_1: left allmulticast mode [ 1205.825824][ T67] bridge_slave_1: left promiscuous mode [ 1205.825985][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.056006][ T67] bridge_slave_0: left allmulticast mode [ 1206.056031][ T67] bridge_slave_0: left promiscuous mode [ 1206.056213][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.645662][T10889] Bluetooth: hci4: command tx timeout [ 1209.083846][T17225] IPVS: length: 4096 != 24 [ 1209.151906][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1209.977958][T17232] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2564'. [ 1210.645929][T10889] Bluetooth: hci4: command tx timeout [ 1210.696969][T17231] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.2569'. [ 1210.702120][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.702376][T17231] netlink: 'syz.3.2569': attribute type 1 has an invalid length. [ 1210.815391][ T67] bond0 (unregistering): Released all slaves [ 1212.691801][T10889] Bluetooth: hci4: command tx timeout [ 1214.326417][ T5722] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1214.476037][ T5722] usb 9-1: not running at top speed; connect to a high speed hub [ 1214.476074][ T5722] usb 9-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1214.478090][ T5722] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.483351][ T5722] usb 9-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1214.483379][ T5722] usb 9-1: Product: syz [ 1214.483391][ T5722] usb 9-1: Manufacturer: syz [ 1214.625133][ T5722] uvcvideo 9-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 1214.764939][T10889] Bluetooth: hci4: command tx timeout [ 1214.782044][ T5722] uvcvideo 9-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1214.782716][ T5722] uvcvideo 9-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1214.782814][ T5722] uvcvideo 9-1:1.1: Failed to initialize the device (-71). [ 1214.898189][ T5722] uvcvideo 9-1:1.0: probe with driver uvcvideo failed with error -71 [ 1215.083507][ T5722] usb 9-1: USB disconnect, device number 3 [ 1215.229694][T17200] rxe_eth0 speed is unknown, defaulting to 1000 [ 1216.266530][T12629] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1216.385300][ T67] hsr_slave_0: left promiscuous mode [ 1216.424783][ T67] hsr_slave_1: left promiscuous mode [ 1216.428451][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1216.477308][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1216.551146][T12629] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1216.552672][T12629] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1216.556057][T12629] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1216.562844][T12629] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.562869][T12629] usb 9-1: Product: syz [ 1216.562883][T12629] usb 9-1: Manufacturer: syz [ 1216.562896][T12629] usb 9-1: SerialNumber: syz [ 1216.737340][T12629] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 1216.773497][T12629] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1216.840558][T12629] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1217.709479][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1217.849394][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1220.610487][T17318] FAULT_INJECTION: forcing a failure. [ 1220.610487][T17318] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.610542][T17318] CPU: 0 UID: 0 PID: 17318 Comm: syz.3.2577 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1220.610570][T17318] Tainted: [L]=SOFTLOCKUP [ 1220.610578][T17318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1220.610590][T17318] Call Trace: [ 1220.610598][T17318] [ 1220.610608][T17318] dump_stack_lvl+0xe8/0x150 [ 1220.610630][T17318] should_fail_ex+0x46b/0x600 [ 1220.610663][T17318] should_failslab+0xa8/0x100 [ 1220.610682][T17318] __kmalloc_noprof+0xf6/0x790 [ 1220.610696][T17318] ? tomoyo_realpath_from_path+0xef/0x640 [ 1220.610709][T17318] ? tomoyo_realpath_from_path+0xef/0x640 [ 1220.610724][T17318] tomoyo_realpath_from_path+0xef/0x640 [ 1220.610742][T17318] tomoyo_check_open_permission+0x229/0x470 [ 1220.610757][T17318] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1220.610771][T17318] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1220.610785][T17318] ? __asan_memset+0x22/0x50 [ 1220.610812][T17318] ? mnt_get_write_access+0x66/0x2d0 [ 1220.610833][T17318] security_file_open+0xa9/0x240 [ 1220.610849][T17318] do_dentry_open+0x4b3/0x1410 [ 1220.610870][T17318] vfs_open_consume+0x4a/0x360 [ 1220.610883][T17318] ? path_openat+0x16e6/0x2100 [ 1220.610897][T17318] path_openat+0x1701/0x2100 [ 1220.610919][T17318] do_file_open+0x23e/0x4a0 [ 1220.610930][T17318] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1220.610948][T17318] ? __pfx_do_file_open+0x10/0x10 [ 1220.610966][T17318] ? __pfx_kfree_link+0x10/0x10 [ 1220.610982][T17318] ? alloc_fd+0x6b2/0x760 [ 1220.610998][T17318] do_sys_openat2+0x115/0x200 [ 1220.611012][T17318] ? __se_sys_futex+0x3a8/0x450 [ 1220.611028][T17318] ? __pfx_do_sys_openat2+0x10/0x10 [ 1220.611045][T17318] ? rcu_is_watching+0x16/0xb0 [ 1220.611061][T17318] __x64_sys_openat+0x138/0x170 [ 1220.611074][T17318] do_syscall_64+0x166/0x520 [ 1220.611088][T17318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.611099][T17318] ? clear_bhb_loop+0x70/0xc0 [ 1220.611111][T17318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.611121][T17318] RIP: 0033:0x7f9bc351fd8e [ 1220.611133][T17318] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1220.611142][T17318] RSP: 002b:00007f9bc178cec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1220.611154][T17318] RAX: ffffffffffffffda RBX: 00007f9bc178d6c0 RCX: 00007f9bc351fd8e [ 1220.611162][T17318] RDX: 0000000000000002 RSI: 00007f9bc178cf90 RDI: ffffffffffffff9c [ 1220.611169][T17318] RBP: 00007f9bc35f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 1220.611176][T17318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.611183][T17318] R13: 00007f9bc37e6128 R14: 00007f9bc37e6090 R15: 00007ffe52361128 [ 1220.611200][T17318] [ 1220.611221][T17318] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1221.102656][T17272] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 1221.375220][T17272] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 1221.509392][T17272] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 1221.516010][ T5724] usb 9-1: USB disconnect, device number 4 [ 1222.665958][ T5724] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1222.672651][ T5724] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1222.673292][ T5724] ti_usb_3410_5052 9-1:2.0: device disconnected [ 1225.621284][T17349] overlayfs: missing 'lowerdir' [ 1226.792203][T17078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.792327][T17078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.792515][T17078] bridge_slave_0: entered allmulticast mode [ 1226.794143][T17078] bridge_slave_0: entered promiscuous mode [ 1226.797573][T17078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.797654][T17078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.797758][T17078] bridge_slave_1: entered allmulticast mode [ 1226.799076][T17078] bridge_slave_1: entered promiscuous mode [ 1227.974116][T17078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.825084][T17078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1229.098875][T17078] team0: Port device team_slave_0 added [ 1229.101212][T17078] team0: Port device team_slave_1 added [ 1229.250169][T17078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.250188][T17078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.250213][T17078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.307057][T17078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.307075][T17078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.307101][T17078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.235127][ T67] bridge_slave_1: left allmulticast mode [ 1232.235168][ T67] bridge_slave_1: left promiscuous mode [ 1232.235434][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.625558][ T67] bridge_slave_0: left allmulticast mode [ 1234.625584][ T67] bridge_slave_0: left promiscuous mode [ 1234.625743][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.673085][T17397] file system registered [ 1237.118757][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.685820][T17403] kvm [17402]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x100000080 [ 1238.716320][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.806708][ T67] bond0 (unregistering): Released all slaves [ 1239.496368][T17078] hsr_slave_0: entered promiscuous mode [ 1239.499810][T17078] hsr_slave_1: entered promiscuous mode [ 1239.518189][T17078] debugfs: 'hsr0' already exists in 'hsr' [ 1239.518211][T17078] Cannot create hsr debugfs directory [ 1246.166180][T17443] kvm [17437]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 1246.194774][ T67] hsr_slave_0: left promiscuous mode [ 1246.234755][ T67] hsr_slave_1: left promiscuous mode [ 1246.236022][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1246.285624][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1247.328346][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1247.636635][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1247.926688][ T4898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1247.992594][ T4898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1248.009435][ T4898] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1248.036249][ T4898] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1248.037259][ T4898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1248.967414][T17497] ubi0: attaching mtd0 [ 1249.083653][T17497] ubi0: scanning is finished [ 1249.084162][T17497] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1249.958379][T17497] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1250.214277][ T4898] Bluetooth: hci2: command tx timeout [ 1250.335525][T17200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.340391][T17200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.340601][T17200] bridge_slave_0: entered allmulticast mode [ 1250.396986][T17200] bridge_slave_0: entered promiscuous mode [ 1250.411292][T17200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.415340][T17200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.415552][T17200] bridge_slave_1: entered allmulticast mode [ 1250.423094][T17200] bridge_slave_1: entered promiscuous mode [ 1250.667643][T17200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.683707][T17200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.284700][ T4898] Bluetooth: hci2: command tx timeout [ 1252.293767][T17200] team0: Port device team_slave_0 added [ 1252.385796][T17200] team0: Port device team_slave_1 added [ 1252.505850][T17531] jffs2: notice: (17531) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1252.899940][T17200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.899957][T17200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.899978][T17200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.903651][T17200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.903666][T17200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.903688][T17200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.326371][T17200] hsr_slave_0: entered promiscuous mode [ 1253.327647][T17200] hsr_slave_1: entered promiscuous mode [ 1253.332040][T17200] debugfs: 'hsr0' already exists in 'hsr' [ 1253.332066][T17200] Cannot create hsr debugfs directory [ 1254.137766][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1254.137837][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1254.599956][ T4898] Bluetooth: hci2: command tx timeout [ 1254.618707][T17480] rxe_eth0 speed is unknown, defaulting to 1000 [ 1255.693653][T17545] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input29 [ 1256.644647][T10889] Bluetooth: hci2: command tx timeout [ 1256.921558][T10889] Bluetooth: hci0: unexpected event for opcode 0x202d [ 1260.325959][T17595] tipc: Failed to remove unknown binding: 66,0,2/0:4004044152/4004044153 [ 1260.423791][T17595] tipc: Failed to remove unknown binding: 66,0,2/0:4004044152/4004044153 [ 1264.115791][ T1245] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1264.267156][ T1245] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1264.268602][ T1245] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.268625][ T1245] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1264.268661][ T1245] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.371443][ T1245] usb 10-1: config 0 descriptor?? [ 1264.504909][T10889] Bluetooth: hci3: unexpected event 0x04 length: 12 > 10 [ 1264.541933][T10889] Bluetooth: hci3: connection err: -111 [ 1266.099869][ T4898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1266.157798][ T4898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1266.166380][ T4898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1266.202323][ T4898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1266.203295][ T4898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1268.748846][ T4898] Bluetooth: hci5: command tx timeout [ 1270.122982][T12413] usb 10-1: USB disconnect, device number 22 [ 1271.283168][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1271.283208][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.340255][ T4898] Bluetooth: hci5: command tx timeout [ 1274.571674][T10889] Bluetooth: hci5: command tx timeout [ 1275.538426][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.538464][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.815871][T17628] rxe_eth0 speed is unknown, defaulting to 1000 [ 1277.468886][ T4898] Bluetooth: hci5: command tx timeout [ 1278.991074][T17693] Invalid ELF header len 1 [ 1279.050920][T17695] jffs2: notice: (17695) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1280.494015][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1280.494052][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.907558][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1284.908272][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1284.908302][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.090105][T17480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.090249][T17480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.090371][T17480] bridge_slave_0: entered allmulticast mode [ 1285.105065][T17480] bridge_slave_0: entered promiscuous mode [ 1285.146240][T17480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.146363][T17480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.147179][T17480] bridge_slave_1: entered allmulticast mode [ 1285.170268][T17480] bridge_slave_1: entered promiscuous mode [ 1287.935968][T17480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.955129][T17480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.148205][T17480] team0: Port device team_slave_0 added [ 1288.244648][T17746] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1289.121382][T17480] team0: Port device team_slave_1 added [ 1289.383954][T17480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.383972][T17480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.383995][T17480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.460940][T17480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.460958][T17480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.460984][T17480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.683534][T17480] hsr_slave_0: entered promiscuous mode [ 1289.696512][T17480] hsr_slave_1: entered promiscuous mode [ 1289.697449][T17480] debugfs: 'hsr0' already exists in 'hsr' [ 1289.697475][T17480] Cannot create hsr debugfs directory [ 1291.493313][T17761] trusted_key: encrypted_key: key trusted:syz not found [ 1294.598767][T17773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1301.365054][ T67] bridge_slave_1: left allmulticast mode [ 1301.365126][ T67] bridge_slave_1: left promiscuous mode [ 1301.365389][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.386011][ T67] bridge_slave_0: left allmulticast mode [ 1302.386038][ T67] bridge_slave_0: left promiscuous mode [ 1302.386223][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.918378][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 1302.918398][ T36] audit: type=1800 audit(1792655538.116:374): pid=17812 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.2661" name="file1" dev="sda1" ino=2071 res=0 errno=0 [ 1309.046069][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.166836][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.256811][ T67] bond0 (unregistering): Released all slaves [ 1309.625060][ T67] erspan0 (unregistering): left promiscuous mode [ 1309.864820][ T67] geneve1 (unregistering): left promiscuous mode [ 1313.052973][ T67] bond1 (unregistering): (slave bridge0): Releasing backup interface [ 1313.053010][ T67] bridge0 (unregistering): left promiscuous mode [ 1314.564734][ T4898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1314.675690][ T4898] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1314.679140][ T4898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1314.680248][ T4898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1314.680967][ T4898] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1315.325551][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1315.412553][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1315.609807][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.610316][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1315.754981][ T67] bond0 (unregistering): Released all slaves [ 1316.041213][ T67] bond1 (unregistering): Released all slaves [ 1316.134876][ T67] bond2 (unregistering): Released all slaves [ 1316.183868][T17628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.184008][T17628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.184205][T17628] bridge_slave_0: entered allmulticast mode [ 1316.191594][T17628] bridge_slave_0: entered promiscuous mode [ 1316.251923][T17628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.252045][T17628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.252243][T17628] bridge_slave_1: entered allmulticast mode [ 1316.337642][T17628] bridge_slave_1: entered promiscuous mode [ 1317.911776][T10889] Bluetooth: hci4: command tx timeout [ 1318.694911][T17628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.722278][T17628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1320.120491][T10889] Bluetooth: hci4: command tx timeout [ 1322.843490][T10889] Bluetooth: hci4: command tx timeout [ 1324.772430][T17628] team0: Port device team_slave_0 added [ 1324.789065][T17628] team0: Port device team_slave_1 added [ 1324.915293][T10889] Bluetooth: hci4: command tx timeout [ 1330.124187][T17855] rxe_eth0 speed is unknown, defaulting to 1000 [ 1330.444466][ T4898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1330.537946][ T4898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1330.554090][ T4898] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1330.564898][ T4898] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1330.569192][ T4898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1332.924114][ T4898] Bluetooth: hci2: command tx timeout [ 1335.025447][ T4898] Bluetooth: hci2: command tx timeout [ 1337.411363][ T4898] Bluetooth: hci2: command tx timeout [ 1338.164965][ T5243] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1339.635559][ T4898] Bluetooth: hci2: command tx timeout [ 1344.099059][T17954] rxe_eth0 speed is unknown, defaulting to 1000 [ 1349.759108][T18060] netlink: 'syz.8.2707': attribute type 1 has an invalid length. [ 1350.018919][T18060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1351.833905][T18062] bond1: (slave geneve2): making interface the new active one [ 1351.988487][T18062] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1351.991795][ T5243] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1354.383699][ T36] audit: type=1800 audit(1792655589.186:375): pid=18082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2706" name=08 dev="sda1" ino=2092 res=0 errno=0 [ 1355.305693][T17855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.307517][T17855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.307733][T17855] bridge_slave_0: entered allmulticast mode [ 1355.318201][T17855] bridge_slave_0: entered promiscuous mode [ 1355.349414][T17855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.349590][T17855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.349792][T17855] bridge_slave_1: entered allmulticast mode [ 1355.359485][T17855] bridge_slave_1: entered promiscuous mode [ 1355.619086][T17855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.709129][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2709'. [ 1356.603951][T18091] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2713'. [ 1356.613989][ T67] hsr_slave_0: left promiscuous mode [ 1356.644727][ T67] hsr_slave_1: left promiscuous mode [ 1356.645988][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.678629][T18092] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2713'. [ 1356.705755][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.824707][ T67] hsr_slave_0: left promiscuous mode [ 1356.866216][ T67] hsr_slave_1: left promiscuous mode [ 1356.867108][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1356.867126][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.906111][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1356.906141][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.953429][ T4898] Bluetooth: hci3: unexpected event for opcode 0x080d [ 1357.917004][ T67] veth1_vlan: left promiscuous mode [ 1357.918751][ T67] veth0_vlan: left promiscuous mode [ 1361.052316][ T4898] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1361.052772][ T4898] Bluetooth: hci3: Injecting HCI hardware error event [ 1361.068045][ T4898] Bluetooth: hci3: hardware error 0x00 [ 1363.211247][ T4898] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1367.940707][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1368.790113][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1372.225265][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1372.245368][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1372.744093][T18116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1372.814258][T18116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1372.870191][T18116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1372.882088][T18116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1372.883494][T18116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1374.121171][T17855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.927243][T18116] Bluetooth: hci5: command tx timeout [ 1375.223383][T18116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1375.258143][T18116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1375.287112][T18116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1375.306197][T18116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1375.329359][T18116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1377.041184][T18116] Bluetooth: hci5: command tx timeout [ 1377.694724][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1377.694794][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1377.704809][T18116] Bluetooth: hci6: command tx timeout [ 1379.578114][T18116] Bluetooth: hci5: command tx timeout [ 1379.724708][T18116] Bluetooth: hci6: command tx timeout [ 1380.662213][ T5243] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1380.675593][ T7216] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1381.200730][T18152] rxe_eth0 speed is unknown, defaulting to 1000 [ 1381.346738][T18209] FAULT_INJECTION: forcing a failure. [ 1381.346738][T18209] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1381.346779][T18209] CPU: 0 UID: 0 PID: 18209 Comm: syz.3.2731 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1381.346806][T18209] Tainted: [L]=SOFTLOCKUP [ 1381.346814][T18209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1381.346826][T18209] Call Trace: [ 1381.346836][T18209] [ 1381.346845][T18209] dump_stack_lvl+0xe8/0x150 [ 1381.346885][T18209] should_fail_ex+0x46b/0x600 [ 1381.346916][T18209] prepare_alloc_pages+0x21e/0x650 [ 1381.346952][T18209] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 1381.346983][T18209] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1381.347014][T18209] ? __pfx_policy_nodemask+0x10/0x10 [ 1381.347033][T18209] ? rcu_is_watching+0x16/0xb0 [ 1381.347059][T18209] ? relay_open_buf+0x208/0xda0 [ 1381.347124][T18209] alloc_pages_mpol+0xd4/0x280 [ 1381.347149][T18209] alloc_pages_noprof+0xd2/0x2f0 [ 1381.347172][T18209] relay_open_buf+0x288/0xda0 [ 1381.347205][T18209] ? relay_open+0x3a4/0x900 [ 1381.347227][T18209] relay_open+0x413/0x900 [ 1381.347253][T18209] blk_trace_setup_prepare+0x425/0x5a0 [ 1381.347288][T18209] blk_trace_setup+0x2f5/0x520 [ 1381.347319][T18209] ? __pfx_blk_trace_setup+0x10/0x10 [ 1381.347363][T18209] ? snprintf+0xe8/0x140 [ 1381.347413][T18209] blk_trace_ioctl+0x37f/0x910 [ 1381.347445][T18209] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1381.347476][T18209] ? kasan_quarantine_put+0xbb/0x1f0 [ 1381.347511][T18209] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1381.347541][T18209] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1381.347571][T18209] ? do_vfs_ioctl+0x1184/0x1550 [ 1381.347600][T18209] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1381.347625][T18209] ? __pfx_smack_log+0x10/0x10 [ 1381.347659][T18209] ? smk_tskacc+0x2f6/0x370 [ 1381.347686][T18209] ? smack_file_ioctl+0x2c4/0x370 [ 1381.347713][T18209] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1381.347747][T18209] blkdev_ioctl+0x4c4/0x750 [ 1381.347794][T18209] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1381.347823][T18209] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1381.347846][T18209] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1381.347873][T18209] __se_sys_ioctl+0xff/0x170 [ 1381.347901][T18209] do_syscall_64+0x166/0x520 [ 1381.347928][T18209] ? trace_irq_disable+0x3b/0x140 [ 1381.347950][T18209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.347972][T18209] ? clear_bhb_loop+0x70/0xc0 [ 1381.347996][T18209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.348016][T18209] RIP: 0033:0x7f9bc355f559 [ 1381.348036][T18209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1381.348053][T18209] RSP: 002b:00007f9bc17ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.348074][T18209] RAX: ffffffffffffffda RBX: 00007f9bc37e5fa0 RCX: 00007f9bc355f559 [ 1381.348088][T18209] RDX: 0000200000000480 RSI: 00000000c0481273 RDI: 0000000000000004 [ 1381.348101][T18209] RBP: 00007f9bc35f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 1381.348113][T18209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1381.348125][T18209] R13: 00007f9bc37e6038 R14: 00007f9bc37e5fa0 R15: 00007ffe52361128 [ 1381.348157][T18209] [ 1381.665726][T18116] Bluetooth: hci5: command tx timeout [ 1381.804929][T18116] Bluetooth: hci6: command tx timeout [ 1382.046637][T17954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.046754][T17954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.046930][T17954] bridge_slave_0: entered allmulticast mode [ 1382.049301][T17954] bridge_slave_0: entered promiscuous mode [ 1383.194667][ T4819] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1383.199412][T17954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.201163][T17954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.201391][T17954] bridge_slave_1: entered allmulticast mode [ 1383.397558][T17954] bridge_slave_1: entered promiscuous mode [ 1383.569304][T18169] rxe_eth0 speed is unknown, defaulting to 1000 [ 1383.583325][T10535] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1383.584695][ T340] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1384.996768][T18116] Bluetooth: hci6: command tx timeout [ 1385.249394][T17954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.355420][T17954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.582602][T17954] team0: Port device team_slave_0 added [ 1385.602378][T17954] team0: Port device team_slave_1 added [ 1385.710404][ T67] IPVS: stop unused estimator thread 0... [ 1385.844938][T17954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1385.844958][T17954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.844985][T17954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1385.847702][T17954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1385.847717][T17954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.847742][T17954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1386.197328][T17954] hsr_slave_0: entered promiscuous mode [ 1386.198637][T17954] hsr_slave_1: entered promiscuous mode [ 1386.202653][T17954] debugfs: 'hsr0' already exists in 'hsr' [ 1386.202681][T17954] Cannot create hsr debugfs directory [ 1386.512439][ T5243] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1391.425084][ T4898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1391.661888][ T4898] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1391.696377][ T4898] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1391.722467][ T4898] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1391.801982][ T4898] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1393.239931][ T67] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.220432][T18116] Bluetooth: hci1: command tx timeout [ 1396.307441][T18116] Bluetooth: hci1: command tx timeout [ 1397.888626][ T67] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.365034][T18116] Bluetooth: hci1: command tx timeout [ 1399.758872][ T67] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.783487][T18116] Bluetooth: hci1: command tx timeout [ 1400.959032][T18152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.959302][T18152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.959491][T18152] bridge_slave_0: entered allmulticast mode [ 1400.963917][T18152] bridge_slave_0: entered promiscuous mode [ 1401.266476][T18152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.266645][T18152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.266876][T18152] bridge_slave_1: entered allmulticast mode [ 1401.269795][T18152] bridge_slave_1: entered promiscuous mode [ 1403.005536][ T67] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.766492][T18255] rxe_eth0 speed is unknown, defaulting to 1000 [ 1404.135599][T18152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1404.204915][T11789] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1404.251417][T11789] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1404.256849][T18152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.406602][T18169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.406826][T18169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.406995][T18169] bridge_slave_0: entered allmulticast mode [ 1404.409814][T18169] bridge_slave_0: entered promiscuous mode [ 1404.429889][T18152] team0: Port device team_slave_0 added [ 1404.430109][T18169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.430349][T18169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.430527][T18169] bridge_slave_1: entered allmulticast mode [ 1404.434316][T18169] bridge_slave_1: entered promiscuous mode [ 1404.448084][T18152] team0: Port device team_slave_1 added [ 1404.522523][T11789] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1405.148528][T11789] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1405.244686][T18342] ceph: No mds server is up or the cluster is laggy [ 1405.332610][T10526] IPVS: starting estimator thread 0... [ 1405.458432][T18357] IPVS: using max 11 ests per chain, 26400 per kthread [ 1406.535807][T18169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1406.724778][T18152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.724797][T18152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.724823][T18152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.731984][T18169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.879978][T18152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.879994][T18152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.880009][T18152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.365188][T18367] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 1408.659934][T18367] exFAT-fs (nbd3): unable to read boot sector [ 1408.660697][T18367] exFAT-fs (nbd3): failed to read boot sector [ 1408.661618][T18367] exFAT-fs (nbd3): failed to recognize exfat type [ 1409.386680][T18169] team0: Port device team_slave_0 added [ 1409.437340][T18169] team0: Port device team_slave_1 added [ 1409.687369][T18381] jffs2: notice: (18381) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1409.848614][T18152] hsr_slave_0: entered promiscuous mode [ 1409.849931][T18152] hsr_slave_1: entered promiscuous mode [ 1409.853867][T18152] debugfs: 'hsr0' already exists in 'hsr' [ 1409.878624][T18152] Cannot create hsr debugfs directory [ 1409.888978][T18169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1409.888997][T18169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.889022][T18169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1409.902358][T18169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1409.902404][T18169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.902458][T18169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.822750][T18398] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1411.823280][T18398] CIFS: Attempting to mount //127.0.0.1/share [ 1412.271562][T18169] hsr_slave_0: entered promiscuous mode [ 1412.272322][T18169] hsr_slave_1: entered promiscuous mode [ 1412.272926][T18169] debugfs: 'hsr0' already exists in 'hsr' [ 1412.272942][T18169] Cannot create hsr debugfs directory [ 1413.405758][T18398] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1415.095154][T18418] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2762'. [ 1421.202470][T18255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.202607][T18255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.202779][T18255] bridge_slave_0: entered allmulticast mode [ 1421.205136][T18255] bridge_slave_0: entered promiscuous mode [ 1421.249960][T18255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.250086][T18255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.250292][T18255] bridge_slave_1: entered allmulticast mode [ 1421.252625][T18255] bridge_slave_1: entered promiscuous mode [ 1421.427581][T18255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.455571][T18255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.139738][T18255] team0: Port device team_slave_0 added [ 1424.182863][T18255] team0: Port device team_slave_1 added [ 1424.969436][T18472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2771'. [ 1427.128258][T18255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1427.128278][T18255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1427.128305][T18255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1427.880975][T18255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1427.880993][T18255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1427.881019][T18255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1427.942441][ T5243] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1430.167087][T18255] hsr_slave_0: entered promiscuous mode [ 1430.168495][T18255] hsr_slave_1: entered promiscuous mode [ 1430.169376][T18255] debugfs: 'hsr0' already exists in 'hsr' [ 1430.169401][T18255] Cannot create hsr debugfs directory [ 1431.800899][T18152] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1433.255893][T18152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1437.351704][T18116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1437.397156][T18116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1437.444018][T18116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1437.458435][T18116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1437.484191][T18116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1437.606259][T15133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1437.652633][T15133] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1437.661748][T15133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1437.663182][T15133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1437.788183][T15133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1438.568580][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1438.568659][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1439.812918][T18116] Bluetooth: hci2: command tx timeout [ 1439.881821][T18541] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1439.881821][T18541] [ 1439.882127][T18541] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1439.882219][T18541] CIFS: Attempting to mount //127.0.0.1/share [ 1440.045073][T18116] Bluetooth: hci4: command tx timeout [ 1440.480219][T18541] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1441.888737][T18116] Bluetooth: hci2: command tx timeout [ 1442.271088][T18116] Bluetooth: hci4: command tx timeout [ 1443.991336][T18116] Bluetooth: hci2: command tx timeout [ 1444.934582][T18116] Bluetooth: hci4: command tx timeout [ 1445.210642][T18594] FAULT_INJECTION: forcing a failure. [ 1445.210642][T18594] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.210735][T18594] CPU: 1 UID: 0 PID: 18594 Comm: syz.3.2786 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1445.210764][T18594] Tainted: [L]=SOFTLOCKUP [ 1445.210771][T18594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1445.210785][T18594] Call Trace: [ 1445.210794][T18594] [ 1445.210805][T18594] dump_stack_lvl+0xe8/0x150 [ 1445.210843][T18594] should_fail_ex+0x46b/0x600 [ 1445.210873][T18594] should_failslab+0xa8/0x100 [ 1445.210906][T18594] __kmalloc_cache_noprof+0x9c/0x670 [ 1445.210934][T18594] ? netstat_seq_show+0x10d/0xe50 [ 1445.210960][T18594] ? netstat_seq_show+0x10d/0xe50 [ 1445.210984][T18594] ? seq_write+0xd8/0x140 [ 1445.211007][T18594] netstat_seq_show+0x10d/0xe50 [ 1445.211047][T18594] seq_read_iter+0x464/0xcb0 [ 1445.211086][T18594] ? memset_orig+0x92/0xb0 [ 1445.211117][T18594] seq_read+0x36a/0x490 [ 1445.211153][T18594] ? __pfx_seq_read+0x10/0x10 [ 1445.211180][T18594] ? __lock_acquire+0x747/0x2de0 [ 1445.211219][T18594] ? __pfx_seq_read+0x10/0x10 [ 1445.211243][T18594] proc_reg_read+0x1f6/0x2f0 [ 1445.211302][T18594] ? __pfx_proc_reg_read+0x10/0x10 [ 1445.211329][T18594] vfs_read+0x219/0xa90 [ 1445.211357][T18594] ? preempt_schedule_thunk+0x16/0x40 [ 1445.211384][T18594] ? __pfx_vfs_read+0x10/0x10 [ 1445.211405][T18594] ? preempt_schedule_thunk+0x16/0x40 [ 1445.211434][T18594] ? _raw_spin_unlock_irqrestore+0x76/0x80 [ 1445.211463][T18594] ? mutex_lock_nested+0x14d/0x1d0 [ 1445.211485][T18594] ? fdget_pos+0x11e/0x160 [ 1445.211515][T18594] ksys_read+0x156/0x270 [ 1445.211541][T18594] ? __pfx_ksys_read+0x10/0x10 [ 1445.211562][T18594] ? __x64_sys_read+0x1d/0x90 [ 1445.211588][T18594] ? __sanitizer_cov_trace_pc+0x61/0x80 [ 1445.211616][T18594] do_syscall_64+0x166/0x520 [ 1445.211642][T18594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.211670][T18594] ? clear_bhb_loop+0x70/0xc0 [ 1445.211696][T18594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.211715][T18594] RIP: 0033:0x7f9bc355f559 [ 1445.211736][T18594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.211753][T18594] RSP: 002b:00007f9bc176c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1445.211775][T18594] RAX: ffffffffffffffda RBX: 00007f9bc37e6180 RCX: 00007f9bc355f559 [ 1445.211790][T18594] RDX: 0000000000000229 RSI: 0000200000000780 RDI: 0000000000000007 [ 1445.211803][T18594] RBP: 00007f9bc35f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 1445.211817][T18594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1445.211829][T18594] R13: 00007f9bc37e6218 R14: 00007f9bc37e6180 R15: 00007ffe52361128 [ 1445.211863][T18594] [ 1446.087568][T18532] Bluetooth: hci2: command tx timeout [ 1446.993010][T18611] tipc: Enabling of bearer rejected, failed to enable media [ 1447.004602][T18532] Bluetooth: hci4: command tx timeout [ 1447.478256][T18630] jffs2: notice: (18630) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 1447.521352][ T67] bridge_slave_1: left allmulticast mode [ 1447.521377][ T67] bridge_slave_1: left promiscuous mode [ 1447.521566][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.106255][ T67] bridge_slave_0: left allmulticast mode [ 1449.106293][ T67] bridge_slave_0: left promiscuous mode [ 1449.106706][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.366352][ T67] bridge_slave_1: left allmulticast mode [ 1449.366389][ T67] bridge_slave_1: left promiscuous mode [ 1449.366637][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.475610][ T67] bridge_slave_0: left allmulticast mode [ 1449.475637][ T67] bridge_slave_0: left promiscuous mode [ 1449.475808][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.715007][ T67] bridge_slave_1: left allmulticast mode [ 1449.715041][ T67] bridge_slave_1: left promiscuous mode [ 1449.715284][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.868199][T18116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1451.926872][T18116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1451.931616][T18116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1451.988639][T18116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1452.527218][T18116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1452.649016][ T67] bridge_slave_0: left allmulticast mode [ 1452.649054][ T67] bridge_slave_0: left promiscuous mode [ 1452.649398][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.204857][ T67] bridge_slave_1: left allmulticast mode [ 1454.204895][ T67] bridge_slave_1: left promiscuous mode [ 1454.205142][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.026411][T18532] Bluetooth: hci5: command tx timeout [ 1455.436208][ T67] bridge_slave_0: left allmulticast mode [ 1455.436246][ T67] bridge_slave_0: left promiscuous mode [ 1455.436486][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.846072][ T67] bridge_slave_1: left allmulticast mode [ 1455.846110][ T67] bridge_slave_1: left promiscuous mode [ 1455.846262][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.916265][ T67] bridge_slave_0: left allmulticast mode [ 1456.916313][ T67] bridge_slave_0: left promiscuous mode [ 1456.916563][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.204848][T18532] Bluetooth: hci5: command tx timeout [ 1458.018626][T18688] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1458.018656][T18688] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1458.402320][T18688] vhci_hcd vhci_hcd.0: Device attached [ 1458.611900][T18689] vhci_hcd: connection closed [ 1458.901862][T11789] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1459.258092][T18532] Bluetooth: hci5: command tx timeout [ 1459.298195][T11789] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1459.405539][T18690] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1459.407933][ T7216] vhci_hcd vhci_hcd.3: stop threads [ 1459.409407][ T7216] vhci_hcd vhci_hcd.3: release socket [ 1459.503948][ T7216] vhci_hcd vhci_hcd.3: disconnect device [ 1461.235276][ T67] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1461.235309][ T67] ip6gretap1 (unregistering): left allmulticast mode [ 1461.324571][T18532] Bluetooth: hci5: command tx timeout [ 1462.015420][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1462.095171][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.136497][ T67] bond0 (unregistering): Released all slaves [ 1462.142665][ T67] bond1 (unregistering): Released all slaves [ 1464.521069][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1464.594725][T11789] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1464.646100][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.737094][ T67] bond0 (unregistering): Released all slaves [ 1465.116897][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.158454][T18733] fuse: fd is not a fuse device [ 1465.247442][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1465.305966][ T67] bond0 (unregistering): Released all slaves [ 1465.328465][T18732] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (39424 ns). Using initial count to start timer. [ 1465.579250][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.655189][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1466.666713][T18738] o2cb: This node has not been configured. [ 1466.666725][T18738] o2cb: Cluster check failed. Fix errors before retrying. [ 1466.666790][T18738] (syz.8.2817,18738,1):user_dlm_register:674 ERROR: status = -22 [ 1466.666833][T18738] (syz.8.2817,18738,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1466.682860][ T67] bond0 (unregistering): Released all slaves [ 1467.338294][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1467.762307][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.102930][ T67] bond0 (unregistering): Released all slaves [ 1473.109652][T18528] rxe_eth0 speed is unknown, defaulting to 1000 [ 1479.049691][ T5243] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1479.052236][T18526] rxe_eth0 speed is unknown, defaulting to 1000 [ 1480.264584][ T36] audit: type=1800 audit(1792655715.436:376): pid=18813 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.2827" name=08 dev="sda1" ino=2092 res=0 errno=0 [ 1481.139767][T18653] rxe_eth0 speed is unknown, defaulting to 1000 [ 1484.000388][T18519] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1484.404844][T18519] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1484.413085][T18519] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.413144][T18519] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1484.413165][T18519] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1484.413188][T18519] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1484.437127][T18519] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1484.437155][T18519] usb 4-1: Product: syz [ 1484.437169][T18519] usb 4-1: Manufacturer: syz [ 1484.501502][T18519] mos7840 4-1:1.0: required endpoints missing [ 1487.513801][ T5722] usb 4-1: USB disconnect, device number 15 [ 1492.192832][ T5243] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1493.306868][T18872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1501.314259][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1501.314330][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1502.966783][T18116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1503.031266][T18116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1503.059217][T18116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1503.094295][T18116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1503.106064][T18116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1504.644372][T18116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1504.716628][T18116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1504.770486][T18116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1504.771763][T18116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1504.824201][T18116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1505.334776][T18116] Bluetooth: hci2: command tx timeout [ 1509.008718][T18116] Bluetooth: hci6: command tx timeout [ 1510.846374][T18116] Bluetooth: hci2: command tx timeout [ 1511.123419][T18116] Bluetooth: hci6: command tx timeout [ 1511.666366][T18903] rxe_eth0 speed is unknown, defaulting to 1000 [ 1511.787769][T18952] udc dummy_udc.0: failed to start g1: -19 [ 1511.795998][T18952] UDC core: g1: couldn't find an available UDC or it's busy [ 1512.979272][T18116] Bluetooth: hci2: command tx timeout [ 1513.164516][T18116] Bluetooth: hci6: command tx timeout [ 1513.595326][ T36] audit: type=1800 audit(1792655748.706:377): pid=18965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2853" name=08 dev="sda1" ino=2092 res=0 errno=0 [ 1515.244870][ C0] ------------[ cut here ]------------ [ 1515.244890][ C0] workqueue: cannot queue hci_conn_timeout on wq hci1 [ 1515.245040][ C0] WARNING: kernel/workqueue.c:2353 at __queue_work+0xdcd/0x1130, CPU#0: ktimers/0/16 [ 1515.266793][ C0] Modules linked in: [ 1515.270713][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1515.281867][ C0] Tainted: [L]=SOFTLOCKUP [ 1515.286202][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1515.296281][ C0] RIP: 0010:__queue_work+0xdef/0x1130 [ 1515.301696][ C0] Code: 00 4c 8d 35 03 d0 46 0f 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 20 7f a5 00 48 8b 5c 24 08 48 8b 73 18 4c 89 f7 4c 89 ea <67> 48 0f b9 3a 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df [ 1515.321427][ C0] RSP: 0018:ffffc90000157988 EFLAGS: 00010046 [ 1515.327520][ C0] RAX: 1ffff1100790b95d RBX: ffff88803c85cad0 RCX: ffff88801daf8000 [ 1515.335518][ C0] RDX: ffff8880430af168 RSI: ffffffff8a4ec890 RDI: ffffffff90d4edb0 [ 1515.343515][ C0] RBP: 0000000000000100 R08: 0000000000000100 R09: 0000000000000100 [ 1515.351504][ C0] R10: dffffc0000000000 R11: ffffffff818e24e0 R12: dffffc0000000000 [ 1515.359497][ C0] R13: ffff8880430af168 R14: ffffffff90d4edb0 R15: ffff88801daf8bfc [ 1515.367503][ C0] FS: 0000000000000000(0000) GS:ffff8881247ad000(0000) knlGS:0000000000000000 [ 1515.376449][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1515.383056][ C0] CR2: 00007f010615a286 CR3: 0000000059340000 CR4: 00000000003526f0 [ 1515.391058][ C0] Call Trace: [ 1515.394353][ C0] [ 1515.397307][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1515.402718][ C0] call_timer_fn+0x18d/0x5f0 [ 1515.407355][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1515.413193][ C0] ? call_timer_fn+0xd5/0x5f0 [ 1515.417921][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1515.423078][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1515.428918][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1515.434052][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1515.439902][ C0] __run_timer_base+0x73c/0x9b0 [ 1515.444799][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1515.446524][T18116] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1515.447936][T18116] Bluetooth: hci2: command tx timeout [ 1515.447971][T18116] Bluetooth: hci6: command tx timeout [ 1515.467039][ C0] run_timer_softirq+0xb7/0x170 [ 1515.471914][ C0] handle_softirqs+0x1da/0x6d0 [ 1515.476736][ C0] run_ktimerd+0x6a/0x100 [ 1515.481094][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 1515.486055][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 1515.491115][ C0] kthread+0x38b/0x470 [ 1515.495217][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1515.500706][ C0] ? __pfx_kthread+0x10/0x10 [ 1515.505348][ C0] ret_from_fork+0x514/0xb70 [ 1515.510012][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1515.515164][ C0] ? __switch_to+0xc78/0x1410 [ 1515.519918][ C0] ? __pfx_kthread+0x10/0x10 [ 1515.524555][ C0] ret_from_fork_asm+0x1a/0x30 [ 1515.529398][ C0] [ 1515.532456][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1515.539778][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1515.550918][ C0] Tainted: [L]=SOFTLOCKUP [ 1515.555260][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1515.565342][ C0] Call Trace: [ 1515.568646][ C0] [ 1515.571601][ C0] vpanic+0x56d/0xa60 [ 1515.575638][ C0] ? __pfx__printk+0x10/0x10 [ 1515.580238][ C0] ? __pfx_vpanic+0x10/0x10 [ 1515.584748][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1515.590050][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1515.595269][ C0] panic+0xc5/0xd0 [ 1515.598994][ C0] ? __pfx_panic+0x10/0x10 [ 1515.603416][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1515.608373][ C0] __warn+0x315/0x4c0 [ 1515.612381][ C0] ? __queue_work+0xdcd/0x1130 [ 1515.617177][ C0] ? __queue_work+0xdcd/0x1130 [ 1515.621957][ C0] __report_bug+0x276/0x570 [ 1515.626555][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1515.631967][ C0] ? __queue_work+0xdcd/0x1130 [ 1515.636765][ C0] ? __pfx___report_bug+0x10/0x10 [ 1515.641797][ C0] ? __pfx_hci_conn_timeout+0x10/0x10 [ 1515.647181][ C0] ? look_up_lock_class+0x57/0x110 [ 1515.652312][ C0] ? register_lock_class+0x31/0x2e0 [ 1515.657530][ C0] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 1515.663100][ C0] report_bug_entry+0x19b/0x290 [ 1515.667967][ C0] ? __queue_work+0xdef/0x1130 [ 1515.672755][ C0] ? __queue_work+0xdf4/0x1130 [ 1515.677528][ C0] handle_bug+0xce/0x200 [ 1515.681788][ C0] exc_invalid_op+0x1a/0x50 [ 1515.686308][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1515.691169][ C0] RIP: 0010:__queue_work+0xdef/0x1130 [ 1515.696580][ C0] Code: 00 4c 8d 35 03 d0 46 0f 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 20 7f a5 00 48 8b 5c 24 08 48 8b 73 18 4c 89 f7 4c 89 ea <67> 48 0f b9 3a 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df [ 1515.716201][ C0] RSP: 0018:ffffc90000157988 EFLAGS: 00010046 [ 1515.722280][ C0] RAX: 1ffff1100790b95d RBX: ffff88803c85cad0 RCX: ffff88801daf8000 [ 1515.730259][ C0] RDX: ffff8880430af168 RSI: ffffffff8a4ec890 RDI: ffffffff90d4edb0 [ 1515.738238][ C0] RBP: 0000000000000100 R08: 0000000000000100 R09: 0000000000000100 [ 1515.746215][ C0] R10: dffffc0000000000 R11: ffffffff818e24e0 R12: dffffc0000000000 [ 1515.754198][ C0] R13: ffff8880430af168 R14: ffffffff90d4edb0 R15: ffff88801daf8bfc [ 1515.762203][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1515.768060][ C0] ? __pfx_hci_conn_timeout+0x10/0x10 [ 1515.773455][ C0] ? __queue_work+0xd9d/0x1130 [ 1515.778250][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1515.783652][ C0] call_timer_fn+0x18d/0x5f0 [ 1515.788277][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1515.794097][ C0] ? call_timer_fn+0xd5/0x5f0 [ 1515.798798][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1515.803950][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1515.809786][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1515.814913][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1515.820727][ C0] __run_timer_base+0x73c/0x9b0 [ 1515.825607][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1515.831013][ C0] run_timer_softirq+0xb7/0x170 [ 1515.835904][ C0] handle_softirqs+0x1da/0x6d0 [ 1515.840708][ C0] run_ktimerd+0x6a/0x100 [ 1515.845051][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 1515.850027][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 1515.855086][ C0] kthread+0x38b/0x470 [ 1515.859189][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1515.864669][ C0] ? __pfx_kthread+0x10/0x10 [ 1515.869290][ C0] ret_from_fork+0x514/0xb70 [ 1515.873892][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1515.879023][ C0] ? __switch_to+0xc78/0x1410 [ 1515.883724][ C0] ? __pfx_kthread+0x10/0x10 [ 1515.888350][ C0] ret_from_fork_asm+0x1a/0x30 [ 1515.893150][ C0] [ 1515.896501][ C0] Kernel Offset: disabled [ 1515.900833][ C0] Rebooting in 86400 seconds..