last executing test programs: 22m39.003824598s ago: executing program 32 (id=146): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0xfffffffffffffc00}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x9e247000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000000800)=""/102392, 0x18ff8) getpgid(r0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000500)={0x0, 0x80000001, 0x4, 0xb48, 0x9, 0x5}) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200, 0xa401) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, 0x0) 17m5.654875727s ago: executing program 33 (id=711): socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() ptrace$peekuser(0x3, r0, 0x2) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x7, 0x100}, 0x0) getpid() 13m15.123450758s ago: executing program 1 (id=1181): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x6, 0x0) io_getevents(0x0, 0x2e5, 0x0, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)=""/146, &(0x7f0000000280)=0x92) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000400)) r3 = syz_open_pts(r2, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000440)=0xf) ioctl$TCSBRK(r3, 0x400455c8, 0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000480)=0xc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000004c0)=0x80) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000500)=0x2f) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13m11.918671574s ago: executing program 1 (id=1189): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 13m11.821958644s ago: executing program 1 (id=1190): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x80000000) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4) ppoll(&(0x7f0000000280)=[{r1, 0x5082}], 0x1, 0x0, 0x0, 0x1a) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000002c0)=0x5, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0x2, 0x8, 0x9, 0x0, 0x7, 0x9, 0xfffffffffffffffd, 0x9dc}, &(0x7f0000000140)={0xffffffffffffff39, 0x14a8f53c, 0x6, 0x5, 0x2, 0xfffffffffffffff8, 0x5, 0x9}, &(0x7f0000000300)={0x5, 0x1, 0xf757, 0x3e, 0x80, 0x6, 0x1000, 0xa8}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x9]}, 0x8}) connect$unix(r2, &(0x7f0000002040)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000020c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002100), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002140)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000eaffffffffffffff00"/28], 0x48) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xa2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f00000016c0)={0x1, @pix={0x0, 0x2, 0x33565348, 0x0, 0x0, 0x0, 0x3, 0xfeedcafc, 0x3, 0x2, 0x2, 0x4}}) 13m10.767696702s ago: executing program 1 (id=1194): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000f80)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x7f, 0x0, 0x0, 0x104, 0x4}}, 0x50) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) 13m7.798474224s ago: executing program 1 (id=1201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x4000007) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r7, @ANYBLOB="050000000000000100001300000008000300", @ANYRES64=r6, @ANYBLOB="0a000600080211000001000006001000", @ANYRES8=r6], 0x3c}}, 0xd4) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f0000000500)={0x11, 0x300, 0x0, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x24, r5, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) 13m1.841903281s ago: executing program 1 (id=1213): socket$inet6_sctp(0xa, 0x1, 0x84) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000880)=""/102392, 0x18ff8) inotify_init1(0x0) r1 = open(&(0x7f0000019900)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000019940)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r1, r1, &(0x7f0000019a00)=0x4, 0x8112) 12m46.270625287s ago: executing program 34 (id=1213): socket$inet6_sctp(0xa, 0x1, 0x84) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000880)=""/102392, 0x18ff8) inotify_init1(0x0) r1 = open(&(0x7f0000019900)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000019940)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r1, r1, &(0x7f0000019a00)=0x4, 0x8112) 11m11.702551743s ago: executing program 5 (id=1386): openat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x800, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) connect$unix(r1, &(0x7f0000001040)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000010c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001100), 0x10106, 0x2, 0x0) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0xa00010, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db289109be6892bc3dce41ae76eaf528dc889820692d753009e305000000000000003de68a0a923eec1dccf226b78adb7d968bafe76628bceade8672fb893f87dc8870da04f23446370bbfb544b73be399a686bafad027e28314c27c380ef12a67227e0c5b7fa2ee3599f8989310903923ed1b7428c3eccfd3ee4a407eb2df16518e779cf5774cc3e167230c3eda7df0fcd984c71620059c39e848d7b284f4e459f7b76fe90ffb927aa9db0302068e641bd25c71ed4a9d9dbfd4c8a2557b11a2bdfdcf70d732796fb254a1796b7a390f8daffac6de026e5472a32412be", @ANYRES64=0x0, @ANYRES64, @ANYRES8], 0x1, 0xc5b, &(0x7f00000003c0)="$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") 11m4.581642168s ago: executing program 5 (id=1397): getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) socket(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000740)=""/102392, 0x18ff8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket(0x28, 0x801, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000019780)={'syztnl2\x00', &(0x7f00000197c0)={'syztnl0\x00', 0x0, 0x4, 0x9, 0xf9, 0x2, 0x4a, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x20, 0x40, 0x5}}) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000019840)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000019880)=0x655e, 0x4) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000198c0)='.log\x00', 0x1, 0x0) dup2(r4, r2) shutdown(r2, 0x1) 11m1.350029837s ago: executing program 5 (id=1402): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x9000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '3\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x1010, 0x0, 0x0, @by_dev={r1}, [@raid={0x0, 0xc80, 0x0, 0x80, 'raid\x00', {'raid6_n_6', 0x20, '3 64 delta_disks 1', 0x20, 0x2, [{0x20, @none, 0x20, @rnull={'/dev/syzrnull', 0x0}}, {0x20, @dev=@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x0}}]}}]}) 11m0.584218255s ago: executing program 5 (id=1404): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000006000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000400"/28], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000003c0)={0x3, 0x1, 0x0, &(0x7f0000000500)=""/47, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000400)) r6 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000440)={0x1, r6}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000480)={0x1, r6}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 10m54.64845796s ago: executing program 5 (id=1411): getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000740)=""/102392, 0x18ff8) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket(0x28, 0x801, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000019780)={'syztnl2\x00', &(0x7f00000197c0)={'syztnl0\x00', 0x0, 0x4, 0x9, 0xf9, 0x2, 0x4a, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x20, 0x40, 0x5}}) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000019840)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000019880)=0x655e, 0x4) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000198c0)='.log\x00', 0x1, 0x0) dup2(r4, r2) shutdown(r2, 0x1) 10m50.732362359s ago: executing program 5 (id=1414): openat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x800, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) connect$unix(r1, &(0x7f0000001040)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000010c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001100), 0x10106, 0x2, 0x0) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x6) symlink(&(0x7f0000001180)='.\x00', &(0x7f00000011c0)='./file0/file0\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) shutdown(r4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0xa00010, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64=0x0, @ANYRES64, @ANYRES8], 0x1, 0xc5b, &(0x7f00000003c0)="$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") 10m47.716420567s ago: executing program 7 (id=1418): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f00000006c0), 0x80) syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x200008, &(0x7f0000000940)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x392, &(0x7f0000000980)="$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") socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) fanotify_init(0x20, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = gettid() tkill(r1, 0x21) 10m42.790676658s ago: executing program 7 (id=1428): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000006000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000400"/28], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000003c0)={0x3, 0x1, 0x0, &(0x7f0000000500)=""/47, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000400)) r7 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000440)={0x1, r7}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000480)={0x1, r7}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, 0x0, 0x0) 10m40.289122023s ago: executing program 7 (id=1430): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000006000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000400"/28], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000003c0)={0x3, 0x1, 0x0, &(0x7f0000000500)=""/47, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000400)) r6 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000440)={0x1, r6}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000480)={0x1, r6}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 10m34.944636648s ago: executing program 7 (id=1433): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x20040080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x141102) writev(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x641, 0x48001018, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x159502, 0x0) creat(&(0x7f0000000540)='./file1\x00', 0x108) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x10002, 0x2) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000600)) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000680)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000006c0)={0xf0f046, 0x100410}) fallocate(r4, 0x0, 0x1000000, 0x3) mount(&(0x7f0000000700)=@filename='./dev/sda1\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780)='ext4\x00', 0x8410, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000800)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x268, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xffffffff, 0xff, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'macvlan0\x00', 'vlan0\x00', {0xff}, {}, 0xc, 0x6, 0x0, 0x5a}, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x10000000, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000400000008001180040028808e3f840f0b34391c1dcfb10a0a53456c80b0f62f5e38ff42a10c2eb3ceeacfaf23373ba13e8c170eace08cec0b14d825f60ca0679673d04c485c9529b6c152d83ec5445d6709b44772f16f849aa5bc31a5bbdce4f1a823fe996c76825a7963c9d1967bebbbec41e9b1e53cf807ea8f12325c75f9d673e153860151850e250a97229bcc480f7afed90436bfc90a515d8117da70cd0e76dc0e2f64e365f7586be07d6c8dd70eeb535e0e110154aeec1786"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 10m34.904585862s ago: executing program 35 (id=1414): openat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x800, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) connect$unix(r1, &(0x7f0000001040)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000010c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001100), 0x10106, 0x2, 0x0) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x6) symlink(&(0x7f0000001180)='.\x00', &(0x7f00000011c0)='./file0/file0\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) shutdown(r4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0xa00010, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64=0x0, @ANYRES64, @ANYRES8], 0x1, 0xc5b, &(0x7f00000003c0)="$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") 10m32.800555146s ago: executing program 7 (id=1437): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) getpgrp(0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r6, &(0x7f0000002100)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f000001b100)={0x0, 0x0, &(0x7f000001b140)={&(0x7f000001b180)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 10m31.556651633s ago: executing program 7 (id=1440): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x6, 0x0) io_getevents(0x0, 0x2e5, 0x0, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)=""/146, &(0x7f0000000280)=0x92) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000400)) r4 = syz_open_pts(r3, 0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000440)=0xf) ioctl$TCSBRK(r4, 0x400455c8, 0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000480)=0xc0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000004c0)=0x80) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000500)=0x2f) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10m15.607508328s ago: executing program 36 (id=1440): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x6, 0x0) io_getevents(0x0, 0x2e5, 0x0, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)=""/146, &(0x7f0000000280)=0x92) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000400)) r4 = syz_open_pts(r3, 0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000440)=0xf) ioctl$TCSBRK(r4, 0x400455c8, 0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000480)=0xc0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000004c0)=0x80) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000500)=0x2f) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m35.273537174s ago: executing program 4 (id=1694): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x81, 0xa082) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 7m34.198245834s ago: executing program 4 (id=1697): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000004940)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f000001d940)=0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000070100dd21200100005b9132", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x905, 0x0, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x60281, 0x300}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) 7m32.918167404s ago: executing program 4 (id=1699): r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004480)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000004500)={0x1, &(0x7f0000004540)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7m32.36985691s ago: executing program 4 (id=1701): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000006000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000400"/28], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000003c0)={0x3, 0x1, 0x0, &(0x7f0000000500)=""/47, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000440)={0x1, r6}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000480)={0x1, r6}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 7m28.927244011s ago: executing program 4 (id=1705): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x58, 0x4002) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000013cc0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000002ccc0)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='status\x00') lseek(r4, 0x9, 0x0) socket$netlink(0x10, 0x3, 0xb) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) msgsnd(0x0, &(0x7f000002cd00)=ANY=[@ANYBLOB="eab446243c96c04247de08c918fdd89a2fee590cc8daf385c0f2a41cb14672ad60bad3b54bf251810a2ca166d7c631981b1e8c0508876b29a38ee051"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) 7m27.624092833s ago: executing program 4 (id=1708): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x80000000) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000280)=[{r1, 0x5082}], 0x1, 0x0, 0x0, 0x1a) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000002c0)=0x5, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0x2, 0x8, 0x9, 0x0, 0x7, 0x9, 0xfffffffffffffffd, 0x9dc}, &(0x7f0000000140)={0xffffffffffffff39, 0x14a8f53c, 0x6, 0x5, 0x2, 0xfffffffffffffff8, 0x5, 0x9}, &(0x7f0000000300)={0x5, 0x1, 0xf757, 0x3e, 0x80, 0x6, 0x1000, 0xa8}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x9]}, 0x8}) connect$unix(r2, &(0x7f0000002040)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000020c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002100), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002140)=0x6) r4 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x406, r4) write$tun(r5, &(0x7f0000000440)=ANY=[], 0xa2) 7m12.141050301s ago: executing program 37 (id=1708): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x80000000) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000280)=[{r1, 0x5082}], 0x1, 0x0, 0x0, 0x1a) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000002c0)=0x5, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0x2, 0x8, 0x9, 0x0, 0x7, 0x9, 0xfffffffffffffffd, 0x9dc}, &(0x7f0000000140)={0xffffffffffffff39, 0x14a8f53c, 0x6, 0x5, 0x2, 0xfffffffffffffff8, 0x5, 0x9}, &(0x7f0000000300)={0x5, 0x1, 0xf757, 0x3e, 0x80, 0x6, 0x1000, 0xa8}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x9]}, 0x8}) connect$unix(r2, &(0x7f0000002040)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000020c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002100), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002140)=0x6) r4 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x406, r4) write$tun(r5, &(0x7f0000000440)=ANY=[], 0xa2) 5m0.150151709s ago: executing program 6 (id=2020): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x81, 0xa082) dup(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0x10001, 0x8}) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) r5 = mq_open(0x0, 0x840, 0x20, 0x0) mq_notify(r5, 0x0) 4m58.069372421s ago: executing program 6 (id=2024): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x80000000) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4) ppoll(&(0x7f0000000280)=[{r1, 0x5082}], 0x1, 0x0, 0x0, 0x1a) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000002c0)=0x5, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0x2, 0x8, 0x9, 0x0, 0x7, 0x9, 0xfffffffffffffffd, 0x9dc}, &(0x7f0000000140)={0xffffffffffffff39, 0x14a8f53c, 0x6, 0x5, 0x2, 0xfffffffffffffff8, 0x5, 0x9}, &(0x7f0000000300)={0x5, 0x1, 0xf757, 0x3e, 0x80, 0x6, 0x1000, 0xa8}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x9]}, 0x8}) connect$unix(r2, &(0x7f0000002040)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000020c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002100), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002140)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000eaffffffffffffff00"/28], 0x48) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$tun(r4, &(0x7f0000000440)=ANY=[], 0xa2) read$FUSE(r4, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000440), 0xa7, 0x0) 4m57.065888123s ago: executing program 6 (id=2027): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000800), 0x8002, 0x0) socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = syz_io_uring_setup(0xd3a, &(0x7f00000001c0)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r7, &(0x7f0000000b00)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000019b40)='/proc/timer_list\x00', 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="9f0200007d200000050c00000000000005a7000000000a000000000000000000406100000000e0e5000005000000000000001b00046e6f6465767b65766f6f7e0545c60005080037d93a8b920000009b00704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb1403f196a51cd5157adc8103b494e18f7d5fb9b618cff1e72e9fdeecd8fdde55c91ee435d208f4a6e1a9b0d385080132093263a2e41e62ec2d74980816bc76f3da519638dcb7886486c8789faa06fe8c1638588392620179ccb58f7520ccc5d3b00a4afaf9525ae13f559d88e838233cc6ec97b2c600502700cfc36d07c500f04cd85f2a70f5e9930e5e989cd5ef4d51f60da7582c4a05c8f828f68dc1774d5de2e820862381f6686dd1bb8fd70000003e00f8f669fb716dcf315ecaf385409ac65b9408678c3c3b9e1d52c36cde7ba4a400b4b077dc74000000000000000007ec21cabff20f9c0089f90600000000002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1372d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae8948", @ANYRES32=0x0, @ANYRES32=0x0], 0x29f) 4m54.487091786s ago: executing program 6 (id=2030): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000300)={0x5, 0x1, 0xf757, 0x3e, 0x80, 0x6, 0x1000, 0xa8}, 0x0, &(0x7f00000003c0)={0x0}) connect$unix(r1, &(0x7f0000002040)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002100), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002140)=0x6) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x8002) 4m43.016586395s ago: executing program 6 (id=2040): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000740)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000780)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000000000001, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000800)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019800)=0x80000000000003) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000019880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc051}, 0x4000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f00000003c0)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000680)={0x2, {0x2, 0x107, 0x500, 0x100, 0x1, 0x4000}}) 4m40.560201255s ago: executing program 6 (id=2043): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x81, 0xa082) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0x10001, 0x8}) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) r6 = mq_open(0x0, 0x840, 0x20, 0x0) mq_notify(r6, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) 4m24.743097637s ago: executing program 38 (id=2043): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x81, 0xa082) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0x10001, 0x8}) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) r6 = mq_open(0x0, 0x840, 0x20, 0x0) mq_notify(r6, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) 1m1.53787925s ago: executing program 0 (id=2457): socket(0x2, 0x805, 0x0) syz_io_uring_setup(0x5c92, &(0x7f0000000100)={0x0, 0xc7ca, 0x42}, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x15, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 59.459261692s ago: executing program 0 (id=2461): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x80000000) connect$unix(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4) ppoll(&(0x7f0000000280)=[{r1, 0x5082}], 0x1, 0x0, 0x0, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0x2, 0x8, 0x9, 0x0, 0x7, 0x9, 0xfffffffffffffffd, 0x9dc}, 0x0, &(0x7f0000000300)={0x5, 0x1, 0xf757, 0x3e, 0x80, 0x6, 0x1000, 0xa8}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x9]}, 0x8}) connect$unix(r2, &(0x7f0000002040)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000020c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002100), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002140)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000eaffffffffffffff00"/28], 0x48) r4 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x406, r4) write$tun(r5, &(0x7f0000000440)=ANY=[], 0xa2) read$FUSE(r5, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000440), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05640, &(0x7f00000016c0)={0x1, @pix={0x0, 0x2, 0x33565348, 0x0, 0x0, 0x0, 0x3, 0xfeedcafc, 0x3, 0x2, 0x2, 0x4}}) 57.956154295s ago: executing program 0 (id=2465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 55.248093311s ago: executing program 0 (id=2469): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000d40)={0x2020}, 0xfffffe14) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002e00)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004ec0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000007040)='./file0\x00', 0x20c01, 0x0) writev(r1, &(0x7f0000009180)=[{&(0x7f00000091c0)='n', 0xfdef}], 0x1) dup3(r0, r1, 0x6700000000000000) creat(&(0x7f0000000000)='./file0\x00', 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 52.067993665s ago: executing program 0 (id=2474): sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)='X', 0x34000, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) 51.085876295s ago: executing program 0 (id=2476): openat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x800, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) connect$unix(r0, &(0x7f0000001040)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000010c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000001100), 0x10106, 0x2, 0x0) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x6) symlink(&(0x7f0000001180)='.\x00', &(0x7f00000011c0)='./file0/file0\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) shutdown(r3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0xa00010, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64=0x0, @ANYRES64, @ANYRES8], 0x1, 0xc5b, &(0x7f00000003c0)="$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") 36.043526208s ago: executing program 39 (id=2476): openat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x800, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) connect$unix(r0, &(0x7f0000001040)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000010c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000001100), 0x10106, 0x2, 0x0) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x6) symlink(&(0x7f0000001180)='.\x00', &(0x7f00000011c0)='./file0/file0\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) shutdown(r3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0xa00010, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64=0x0, @ANYRES64, @ANYRES8], 0x1, 0xc5b, &(0x7f00000003c0)="$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") 7.837347012s ago: executing program 2 (id=2566): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 6.602246397s ago: executing program 3 (id=2570): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0xede5) 6.501783957s ago: executing program 2 (id=2571): syz_usb_connect(0x0, 0x36, &(0x7f0000001140)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000011c0)={0x1, &(0x7f0000001200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 6.441214274s ago: executing program 3 (id=2572): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x138}, 0x8001) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) 6.097851029s ago: executing program 3 (id=2574): syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/vlan/vlan1\x00') r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000400)={0x1, 'vlan1\x00', {}, 0x5832}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) syz_open_procfs(0x0, &(0x7f0000000440)='fd/3\x00') 5.879124301s ago: executing program 8 (id=2576): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f000000a300)=ANY=[@ANYBLOB], 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) syz_emit_vhci(0x0, 0x7) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f000000a340)={0x0, 0x3, "a465d3", 0x3, 0xaa}) 5.774578642s ago: executing program 3 (id=2577): r0 = syz_usbip_server_init(0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000180), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0xab}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008be6d645f520a4fed42644b15fd13bfcc00010057dd8806721057ea59528112820e338731a09ad754fe07e2178312c83a65f0d3eecb5db0fccc47f4b0c27e74d664a9897f569a89d07d8971b5459284f91bcfba5cccef78ad755b396b60a028288ac77dd4d5d1dda4c30162d8dded509c33421a22e98f23eac71d876b696d0b03a1a0c178f5514f7dee5d777898d056433942c2d855b7b14878d682505340efcc541c58770ddbd1d7ab8e45f526a558235ba2df185e6747d57f4b5a40bc29fb94d086b55d44d5a7eb32c94a571229b4647a2479017b371f38f7730e7dae2baf", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000380)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2433f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x8000005, 0x88}}], 0x1, 0x0, 0x0) write$usbip_server(r0, &(0x7f00000001c0)=@ret_unlink={{0x4, 0x0, 0x0, 0x0, 0x7ff}, {0x8}}, 0x30) 5.556893734s ago: executing program 9 (id=2578): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x10, 0x1405, 0x1, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x95}, 0x4040000) 5.505923879s ago: executing program 9 (id=2579): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x113845, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB, @ANYBLOB=',group', @ANYRESDEC=0x0]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) r5 = socket(0x2, 0x3, 0x66) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x44804}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064d1, &(0x7f0000000040)={0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) read$FUSE(r0, &(0x7f0000003280)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pwritev2(r6, 0x0, 0x0, 0x65, 0x9, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_uring_setup(0x5822, &(0x7f0000000580)={0x0, 0x8270, 0x1000, 0x3, 0x846}) 4.773898153s ago: executing program 2 (id=2580): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x281, 0x0, 0x4e5}]}) 4.567593655s ago: executing program 2 (id=2581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x24, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={0x0, &(0x7f0000000700)=""/106, &(0x7f0000000780), &(0x7f00000007c0), 0x80, r6, 0x0, 0x7}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)) 4.3187428s ago: executing program 8 (id=2582): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r0, 0x84, 0x25, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket(0xa, 0x3, 0x87) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000480)={@private2, 0x18, r5}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1003, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 3.13640606s ago: executing program 8 (id=2583): sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280100000000000001"], 0x128}, 0x4004000) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 3.131324811s ago: executing program 2 (id=2584): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="81bc", 0x2}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 3.061088428s ago: executing program 3 (id=2585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.15392584s ago: executing program 8 (id=2586): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000480)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 2.132467143s ago: executing program 9 (id=2587): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x8) 1.979554678s ago: executing program 2 (id=2588): syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d00", @ANYRES8, @ANYBLOB="b23d"], 0x0) r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0x8) 1.925695294s ago: executing program 3 (id=2589): r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x103400, 0x0) personality(0xfe47fef9f5ff7379) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000440)={0x1, 0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000480)={0x2, 0x1, 0x4, 0x8}) fcntl$lock(r1, 0x24, &(0x7f00000004c0)={0x0, 0x1, 0x7, 0x4}) r2 = memfd_secret(0x80000) mmap(&(0x7f00000c0000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x590a2000) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0xffffff9e, &(0x7f0000000400)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000009240)=ANY=[@ANYBLOB="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"], 0x82bc}}, 0x40) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f00000002c0)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000340)={'broute\x00', 0x0, 0xfffffffc, 0x30, [0x2, 0xfffffffffffffffc, 0x4e83, 0x8, 0x9, 0x4], 0xfffffdb4, 0x0, 0x0}, &(0x7f00000003c0)=0xa8) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipmr_newroute={0x1c, 0x18, 0x1, 0x70bd26, 0x25dfdbfd, {0x80, 0x10, 0x10, 0xd4, 0xff, 0x0, 0xc8, 0x5, 0x2200}}, 0x1c}, 0x1, 0x2, 0x0, 0x8080}, 0x0) write(r3, &(0x7f0000000300)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 1.883717968s ago: executing program 9 (id=2590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x183000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) 1.738960513s ago: executing program 8 (id=2591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000340)='6', 0x1) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.233840645s ago: executing program 9 (id=2592): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x81, 0xa082) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0x10001, 0x8}) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) r5 = mq_open(0x0, 0x840, 0x20, 0x0) mq_notify(r5, 0x0) 313.014608ms ago: executing program 8 (id=2593): r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x94) fchdir(r1) chdir(&(0x7f0000000100)='./sys\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x2) getdents64(r2, &(0x7f00000001c0)=""/47, 0x2f) getdents64(r2, &(0x7f0000001640)=""/4096, 0x1000) 0s ago: executing program 9 (id=2594): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/sys/kernel/printk\x00', 0x1, 0x0) write(r2, &(0x7f0000000ac0)='0 0', 0x3) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/sys/kernel/panic_on_warn\x00', 0x1, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000bc0)='./sys\x00', &(0x7f0000000c00)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c40)='./sys/module/kernel/parameters/panic_on_warn\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r4, &(0x7f0000000cc0)='test,0x8000000000000000,0x1000\x00', 0x1e) close(r4) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, 0x0, 0x0) bind$rxrpc(r1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={0x0, 0x40c}}, 0x0) kernel console output (not intermixed with test programs): 0.494680][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 990.516116][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 990.554536][T11197] team0: Port device team_slave_0 added [ 990.572439][T11197] team0: Port device team_slave_1 added [ 990.641220][T11055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 990.821956][T11055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 990.878874][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 990.889774][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 990.898488][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 990.906990][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 990.916047][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 991.045500][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 991.054259][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 991.105022][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 991.155680][T11197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.188495][T11197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.538183][T11313] xt_hashlimit: max too large, truncated to 1048576 [ 991.545022][T11313] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 991.619052][T11197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.242336][T11197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.249290][T11197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.418224][T11197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.784578][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.790908][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.841775][T11197] device hsr_slave_0 entered promiscuous mode [ 992.887341][T11197] device hsr_slave_1 entered promiscuous mode [ 992.937419][T11197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 992.987620][T11197] Cannot create hsr debugfs directory [ 993.139951][T11055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.320405][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 993.338095][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 993.900034][ T5160] device hsr_slave_0 left promiscuous mode [ 993.925482][ T5160] device hsr_slave_1 left promiscuous mode [ 993.949381][ T5160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.045071][ T5160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.059938][ T5160] device bridge_slave_1 left promiscuous mode [ 994.120708][ T5160] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.202202][ T5160] device bridge_slave_0 left promiscuous mode [ 994.208370][ T5160] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.948522][T11351] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1567'. [ 995.070580][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 995.070615][ T26] audit: type=1326 audit(1793602704.484:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11348 comm="syz.4.1567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fef9f559 code=0x7ffc0000 [ 995.662077][ T26] audit: type=1326 audit(1793602704.484:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11348 comm="syz.4.1567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fef9f559 code=0x7ffc0000 [ 995.747373][ T26] audit: type=1326 audit(1793602704.494:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11348 comm="syz.4.1567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fef9f559 code=0x7ffc0000 [ 995.845885][ T26] audit: type=1326 audit(1793602704.494:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11348 comm="syz.4.1567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f28fef9f2c2 code=0x7ffc0000 [ 995.970099][ T26] audit: type=1326 audit(1793602704.494:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11348 comm="syz.4.1567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f28fef9f357 code=0x7ffc0000 [ 996.513546][ T26] audit: type=1326 audit(1793602704.494:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11348 comm="syz.4.1567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f28fef5c251 code=0x7ffc0000 [ 996.541226][ T26] audit: type=1326 audit(1793602704.494:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11348 comm="syz.4.1567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f28fefa0349 code=0x7ffc0000 [ 996.569227][ T26] audit: type=1326 audit(1793602704.494:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11348 comm="syz.4.1567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f28fef5c2bb code=0x7ffc0000 [ 996.597172][ T26] audit: type=1326 audit(1793602704.494:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11348 comm="syz.4.1567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fef9f559 code=0x7ffc0000 [ 996.632574][ T26] audit: type=1326 audit(1793602704.494:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11348 comm="syz.4.1567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fef9f559 code=0x7ffc0000 [ 996.706019][ T5160] team0 (unregistering): Port device team_slave_1 removed [ 996.886340][ T5160] team0 (unregistering): Port device team_slave_0 removed [ 997.006219][ T5160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.202701][ T5160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 998.176878][T11362] loop6: detected capacity change from 0 to 2048 [ 998.212642][T11362] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 998.223773][T11362] UDF-fs: error (device loop6): udf_read_inode: (ino 1376) failed !bh [ 998.232359][T11362] UDF-fs: error (device loop6): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 999.086103][ T5160] bond0 (unregistering): Released all slaves [ 999.379821][T11371] xt_hashlimit: max too large, truncated to 1048576 [ 999.386545][T11371] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1000.201145][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 1000.422016][T11381] 9pnet_fd: Insufficient options for proto=fd [ 1002.176326][T11197] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1002.244629][T11197] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1002.269905][T11197] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1002.321682][T11197] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1002.343741][T11399] loop3: detected capacity change from 0 to 2048 [ 1002.362332][T11399] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1002.442070][T11399] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 1002.450325][T11399] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1003.444519][T11197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.506971][T11197] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.530907][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1003.542411][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1003.634618][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1003.719056][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1003.852616][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.859909][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.908782][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1003.930438][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1004.262587][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1004.311572][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.318744][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.412525][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1004.473698][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1004.503704][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1004.567537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1004.612612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1004.663656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1004.722961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1004.754982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1004.786450][T11197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1004.824033][T11197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1004.863303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1004.901306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1004.921656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1004.952556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1004.972412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1005.003103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1005.032339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1005.049761][T11055] device veth0_vlan entered promiscuous mode [ 1005.061191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1005.115333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1005.175831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1005.227055][T11055] device veth1_vlan entered promiscuous mode [ 1005.372383][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1005.392419][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1005.432105][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1005.487901][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1005.529092][T11055] device veth0_macvtap entered promiscuous mode [ 1005.577081][T11055] device veth1_macvtap entered promiscuous mode [ 1005.613808][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1005.635216][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1005.699653][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.759127][ T5880] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1005.989764][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.026117][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.113699][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.125214][ T5880] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1006.150640][ T5880] usb 4-1: config 1 has no interface number 0 [ 1006.212585][ T5880] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1006.231887][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.285395][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.306579][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.341341][ T5880] usb 4-1: Product: syz [ 1006.361358][ T5880] usb 4-1: Manufacturer: syz [ 1006.389778][T11055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.414238][ T5880] usb 4-1: SerialNumber: syz [ 1006.439262][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1006.516528][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1006.550986][T11197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.579542][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.596061][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.617685][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.654670][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.674959][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.704836][ T5880] usb 4-1: 3:0 : does not exist [ 1006.709920][ T5880] usb 4-1: 3:0 : does not exist [ 1006.727152][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.852410][T11055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.027853][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1007.081715][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1007.327155][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1007.336482][ T5880] usb 4-1: USB disconnect, device number 5 [ 1007.522349][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1007.605591][T11374] udevd[11374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1007.655632][T11055] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.705624][T11055] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.903139][T11055] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.944420][T11055] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.301996][T11462] loop4: detected capacity change from 0 to 2048 [ 1008.609897][T11462] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1008.620608][T11462] UDF-fs: error (device loop4): udf_read_inode: (ino 1376) failed !bh [ 1008.629397][T11462] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1009.056636][T11467] 9pnet_fd: Insufficient options for proto=fd [ 1009.278750][ T5160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.352568][ T5160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.472263][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1009.531940][ T5160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.539790][ T5160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.853008][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1010.139751][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1588'. [ 1011.879829][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1589'. [ 1013.763579][T11499] xt_hashlimit: max too large, truncated to 1048576 [ 1013.770249][T11499] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1014.569857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1014.579734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1014.681258][T11197] device veth0_vlan entered promiscuous mode [ 1014.713407][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1014.727184][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1014.773721][T11197] device veth1_vlan entered promiscuous mode [ 1014.803304][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1014.821156][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1014.870756][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1014.907798][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1014.935998][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1015.435150][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1015.472536][T11516] loop4: detected capacity change from 0 to 8 [ 1015.545956][T11197] device veth0_macvtap entered promiscuous mode [ 1015.593853][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1015.692437][T11516] squashfs image failed sanity check [ 1015.754361][T11197] device veth1_macvtap entered promiscuous mode [ 1015.843169][T11197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.894962][T11197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.922041][T11197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.025479][T11197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.061868][T11197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.137259][T11197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.661416][T11197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.946588][T11197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.095227][T11197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.139724][T11197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.047383][T11197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.071825][T11197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.091822][T11197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.101653][T11197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.188844][T11197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.238866][T11197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.360074][T11541] loop4: detected capacity change from 0 to 2048 [ 1019.747505][T11541] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1019.758079][T11541] UDF-fs: error (device loop4): udf_read_inode: (ino 1376) failed !bh [ 1019.766649][T11541] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1020.023128][T11197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.066888][T11197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.099349][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'. [ 1020.118734][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1020.131751][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1020.154252][T11542] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1020.179553][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1020.308081][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1020.358476][T11197] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.381954][T11197] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.390669][T11197] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.481855][T11197] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.618655][T11547] 9pnet_fd: Insufficient options for proto=fd [ 1022.471942][ T4619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.508067][ T4619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.538869][ T4619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.548219][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1022.560776][ T4619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.586421][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1024.209487][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 1024.209593][ T26] audit: type=1326 audit(1793602733.624:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.9.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dc39f559 code=0x7ffc0000 [ 1024.909592][ T26] audit: type=1326 audit(1793602733.624:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.9.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dc39f559 code=0x7ffc0000 [ 1025.007858][ T26] audit: type=1326 audit(1793602733.624:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.9.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dc39f559 code=0x7ffc0000 [ 1025.132668][ T26] audit: type=1326 audit(1793602733.624:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.9.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f87dc39f559 code=0x7ffc0000 [ 1025.247330][ T26] audit: type=1326 audit(1793602733.624:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.9.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dc39f559 code=0x7ffc0000 [ 1025.366801][ T26] audit: type=1326 audit(1793602733.624:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.9.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dc39f559 code=0x7ffc0000 [ 1025.410736][T11574] Set syz1 is full, maxelem 6117 reached [ 1025.517346][ T26] audit: type=1326 audit(1793602733.624:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.9.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dc39f559 code=0x7ffc0000 [ 1025.680835][ T26] audit: type=1326 audit(1793602733.624:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.9.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87dc39f559 code=0x7ffc0000 [ 1026.126068][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1603'. [ 1027.223369][ T26] audit: type=1326 audit(1793602733.634:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.9.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dc39f559 code=0x7ffc0000 [ 1027.247619][ T26] audit: type=1326 audit(1793602733.634:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.9.1457" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dc39f559 code=0x7ffc0000 [ 1027.533208][T11598] loop8: detected capacity change from 0 to 512 [ 1027.860712][T11609] loop3: detected capacity change from 0 to 2048 [ 1028.487904][T11609] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1028.497680][T11609] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 1028.506218][T11609] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1028.971419][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1610'. [ 1030.789175][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1604'. [ 1032.827884][T11638] loop8: detected capacity change from 0 to 2048 [ 1033.419403][T11638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1033.436317][T11638] UDF-fs: error (device loop8): udf_read_inode: (ino 1376) failed !bh [ 1033.444556][T11638] UDF-fs: error (device loop8): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1033.891950][T11651] xt_hashlimit: max too large, truncated to 1048576 [ 1033.898652][T11651] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1035.033972][T11654] vivid-000: kernel_thread() failed [ 1037.438333][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 1037.438345][ T26] audit: type=1326 audit(1793602746.864:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedad9f559 code=0x7ffc0000 [ 1037.471829][ T26] audit: type=1326 audit(1793602746.864:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedad9f559 code=0x7ffc0000 [ 1037.519349][ T26] audit: type=1326 audit(1793602746.864:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedad9f559 code=0x7ffc0000 [ 1037.549130][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1627'. [ 1037.735788][ T26] audit: type=1326 audit(1793602746.864:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fcedad9f559 code=0x7ffc0000 [ 1038.677581][ T26] audit: type=1326 audit(1793602746.864:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedad9f559 code=0x7ffc0000 [ 1038.703566][ T26] audit: type=1326 audit(1793602746.864:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedad9f559 code=0x7ffc0000 [ 1038.727852][ T26] audit: type=1326 audit(1793602746.864:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedad9f559 code=0x7ffc0000 [ 1038.792467][T11690] loop4: detected capacity change from 0 to 512 [ 1038.811523][ T26] audit: type=1326 audit(1793602746.904:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedad9f559 code=0x7ffc0000 [ 1038.836392][ T26] audit: type=1326 audit(1793602746.904:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedad9f559 code=0x7ffc0000 [ 1038.933469][ T26] audit: type=1326 audit(1793602746.904:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.3.1617" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcedad9f559 code=0x7ffc0000 [ 1039.204579][T11700] xt_hashlimit: max too large, truncated to 1048576 [ 1039.211225][T11700] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1041.850989][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1624'. [ 1041.917048][T11716] xt_hashlimit: max too large, truncated to 1048576 [ 1041.924129][T11716] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1043.015230][T11726] loop3: detected capacity change from 0 to 2048 [ 1043.048284][T11726] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1043.058896][T11726] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 1043.067488][T11726] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1043.695288][T11612] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1043.711792][T11728] 9pnet_fd: Insufficient options for proto=fd [ 1045.217628][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'. [ 1045.709101][T11747] loop6: detected capacity change from 0 to 2048 [ 1046.309876][T11747] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1046.319763][T11747] UDF-fs: error (device loop6): udf_read_inode: (ino 1376) failed !bh [ 1046.328348][T11747] UDF-fs: error (device loop6): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1053.391980][ T8794] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1053.633846][ T8794] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1053.677157][ T8794] usb 7-1: config 1 has no interface number 0 [ 1053.785770][ T8794] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1053.912439][T11797] loop4: detected capacity change from 0 to 8 [ 1053.927410][ T8794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.058328][ T8794] usb 7-1: Product: syz [ 1054.129617][T11797] squashfs image failed sanity check [ 1054.139681][ T8794] usb 7-1: Manufacturer: syz [ 1054.160794][ T8794] usb 7-1: SerialNumber: syz [ 1054.224001][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.230289][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.658228][ T8794] usb 7-1: 3:0 : does not exist [ 1054.672835][ T8794] usb 7-1: 3:0 : does not exist [ 1055.107158][ T8794] usb 7-1: USB disconnect, device number 4 [ 1055.495681][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1654'. [ 1055.995308][T11822] loop8: detected capacity change from 0 to 2048 [ 1056.632562][T11822] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1056.642371][T11822] UDF-fs: error (device loop8): udf_read_inode: (ino 1376) failed !bh [ 1056.650742][T11822] UDF-fs: error (device loop8): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1057.219646][T11834] xt_hashlimit: max too large, truncated to 1048576 [ 1057.226419][T11834] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1059.724534][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1659'. [ 1061.090880][T11862] xt_hashlimit: max too large, truncated to 1048576 [ 1061.106195][T11862] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1062.455674][T11869] vivid-000: kernel_thread() failed [ 1063.550355][T11885] loop9: detected capacity change from 0 to 2048 [ 1063.565440][T11885] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1063.579472][T11885] UDF-fs: error (device loop9): udf_read_inode: (ino 1376) failed !bh [ 1063.587835][T11885] UDF-fs: error (device loop9): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1064.602540][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1671'. [ 1065.252163][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1673'. [ 1066.581161][T11920] loop8: detected capacity change from 0 to 2048 [ 1066.592179][T11920] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1066.601564][T11920] UDF-fs: error (device loop8): udf_read_inode: (ino 1376) failed !bh [ 1066.609843][T11920] UDF-fs: error (device loop8): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1066.946712][T11890] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1067.113132][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1674'. [ 1068.653926][T11928] vivid-000: kernel_thread() failed [ 1069.527877][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1679'. [ 1072.586233][T11952] vivid-000: kernel_thread() failed [ 1072.802860][T11961] loop6: detected capacity change from 0 to 2048 [ 1072.825465][T11961] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1072.841540][T11961] UDF-fs: error (device loop6): udf_read_inode: (ino 1376) failed !bh [ 1072.849943][T11961] UDF-fs: error (device loop6): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1073.958189][T11972] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1693'. [ 1073.986268][T11972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1074.001884][T11972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1074.010023][T11972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1075.145953][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 1076.627830][T12000] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1687'. [ 1077.065628][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 1077.688073][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1689'. [ 1079.736197][T12020] vivid-000: kernel_thread() failed [ 1079.802951][T12023] loop9: detected capacity change from 0 to 8 [ 1079.959850][T12023] squashfs image failed sanity check [ 1080.323785][T12036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1697'. [ 1080.364247][T12036] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1080.381357][T12036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1080.390211][T12036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1083.603447][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1703'. [ 1084.885390][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1701'. [ 1085.056610][T12082] loop9: detected capacity change from 0 to 2048 [ 1085.069780][T12082] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1085.079713][T12082] UDF-fs: error (device loop9): udf_read_inode: (ino 1376) failed !bh [ 1085.087957][T12082] UDF-fs: error (device loop9): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1086.666779][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1707'. [ 1087.830525][ T7416] Bluetooth: hci2: command 0x0406 tx timeout [ 1090.665724][T12123] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1710'. [ 1090.722818][T12123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1090.731400][T12123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1090.756592][T12123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1090.765399][T12123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1092.024374][T12141] loop9: detected capacity change from 0 to 2048 [ 1092.656674][T12141] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1092.666176][T12141] UDF-fs: error (device loop9): udf_read_inode: (ino 1376) failed !bh [ 1092.674476][T12141] UDF-fs: error (device loop9): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1092.776515][T12142] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1092.866841][T12148] loop3: detected capacity change from 0 to 8 [ 1092.964910][T12148] squashfs image failed sanity check [ 1093.290684][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1717'. [ 1093.370810][T12151] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1095.305961][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1716'. [ 1096.814516][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1720'. [ 1098.625391][T12184] xt_hashlimit: max too large, truncated to 1048576 [ 1098.637279][T12184] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1099.646662][T12195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1725'. [ 1099.712959][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1099.729775][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1099.738362][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1101.492169][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1729'. [ 1102.382478][ T7416] Bluetooth: hci5: command 0x0406 tx timeout [ 1103.609816][T12236] xt_hashlimit: max too large, truncated to 1048576 [ 1103.616572][T12236] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1104.873064][T12240] xt_hashlimit: max too large, truncated to 1048576 [ 1104.879846][T12240] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1107.034092][ T4482] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.151986][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1737'. [ 1107.221278][ T4482] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.269588][ T7416] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1107.278796][ T7416] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1107.288655][ T7416] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1107.297325][ T7416] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1107.307949][ T7416] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1107.316944][ T7416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1107.362259][ T4482] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.493291][T12260] rxe_eth0 speed is unknown, defaulting to 1000 [ 1107.598903][T12268] loop9: detected capacity change from 0 to 512 [ 1107.624033][ T4482] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.602023][T12277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1741'. [ 1108.620245][T12280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1108.632209][T12280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1108.639881][T12280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1109.352105][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 1109.951493][T12284] vivid-000: kernel_thread() failed [ 1111.422309][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 1113.000236][T12304] vivid-000: kernel_thread() failed [ 1113.394565][T12260] chnl_net:caif_netlink_parms(): no params data found [ 1113.502041][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 1115.406257][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1750'. [ 1115.586347][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 1115.675566][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.729618][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.618885][T12260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.652114][T12260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.659930][T12260] device bridge_slave_0 entered promiscuous mode [ 1117.793252][T12260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.803488][T12260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.083560][T12260] device bridge_slave_1 entered promiscuous mode [ 1119.304102][T12260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.147582][T12359] vivid-000: kernel_thread() failed [ 1120.306253][T12260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.717321][T12260] team0: Port device team_slave_0 added [ 1120.810579][T12260] team0: Port device team_slave_1 added [ 1122.241398][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'. [ 1123.508740][T12260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.583713][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.779372][T12260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.843232][T12260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.891836][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.150021][T12260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.342191][T12260] device hsr_slave_0 entered promiscuous mode [ 1124.406083][T12260] device hsr_slave_1 entered promiscuous mode [ 1124.456894][T12260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1125.200451][T12260] Cannot create hsr debugfs directory [ 1125.566001][ T4482] device hsr_slave_0 left promiscuous mode [ 1125.632496][T12408] fuse: Bad value for 'user_id' [ 1125.695528][ T4482] device hsr_slave_1 left promiscuous mode [ 1125.722179][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.738820][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.798566][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1125.811405][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.903747][ T4482] device bridge_slave_1 left promiscuous mode [ 1125.910155][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.065519][T12414] fuse: Unknown parameter 'grou00000000000000000000' [ 1126.082332][ T4482] device bridge_slave_0 left promiscuous mode [ 1126.088729][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.428189][ T4482] device veth1_macvtap left promiscuous mode [ 1126.448123][ T4482] device veth0_macvtap left promiscuous mode [ 1126.490288][ T4482] device veth1_vlan left promiscuous mode [ 1126.521358][ T4482] device veth0_vlan left promiscuous mode [ 1127.108839][T12423] netlink: 1092 bytes leftover after parsing attributes in process `syz.9.1772'. [ 1128.007477][T12429] loop3: detected capacity change from 0 to 2048 [ 1128.018831][T12429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1128.028480][T12429] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 1128.036995][T12429] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1128.599989][T12447] fuse: Bad value for 'fd' [ 1128.734395][T12452] fuse: Unknown parameter 'grou00000000000000000000' [ 1130.913434][ T4482] team0 (unregistering): Port device team_slave_1 removed [ 1131.147443][ T4482] team0 (unregistering): Port device team_slave_0 removed [ 1131.393097][ T4482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.683244][ T4482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.623088][T12472] loop6: detected capacity change from 0 to 2048 [ 1133.635174][T12472] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1133.647341][T12472] UDF-fs: error (device loop6): udf_read_inode: (ino 1376) failed !bh [ 1133.655579][T12472] UDF-fs: error (device loop6): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1133.761333][T12473] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1134.435922][ T4482] bond0 (unregistering): Released all slaves [ 1135.352472][T12487] fuse: Unknown parameter 'grou00000000000000000000' [ 1135.479182][T12490] fuse: Bad value for 'fd' [ 1135.848207][T12498] loop8: detected capacity change from 0 to 512 [ 1139.766408][T12260] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1139.798740][T12260] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1139.827366][T12260] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1139.913689][T12538] loop6: detected capacity change from 0 to 2048 [ 1139.942446][T12538] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1139.952304][T12538] UDF-fs: error (device loop6): udf_read_inode: (ino 1376) failed !bh [ 1139.960530][T12538] UDF-fs: error (device loop6): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1140.955122][T12260] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1141.528873][T12550] netlink: 1092 bytes leftover after parsing attributes in process `syz.8.1802'. [ 1142.213988][T12260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.348302][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1142.357094][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1142.384453][T12260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.222961][T12554] fuse: Unknown parameter 'group_i00000000000000000000' [ 1143.232052][T12561] fuse: Bad value for 'fd' [ 1143.257083][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1143.303101][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1143.424809][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.432137][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.166187][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1144.192510][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1144.248682][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1144.316690][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.323980][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.371023][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1144.506161][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1145.128064][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1145.183972][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1145.366683][T12584] loop8: detected capacity change from 0 to 2048 [ 1145.539250][T12584] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1145.552506][T12584] UDF-fs: error (device loop8): udf_read_inode: (ino 1376) failed !bh [ 1145.561100][T12584] UDF-fs: error (device loop8): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1145.861181][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1146.063693][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1146.452592][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1146.809523][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1146.907763][T12594] loop8: detected capacity change from 0 to 2048 [ 1146.921334][T12594] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1146.931118][T12594] UDF-fs: error (device loop8): udf_read_inode: (ino 1376) failed !bh [ 1146.939508][T12594] UDF-fs: error (device loop8): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1147.170324][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1147.202133][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1147.224755][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1147.234568][T12585] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1147.275356][T12260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1148.504537][T12613] fuse: Bad value for 'fd' [ 1148.752175][T12618] fuse: Unknown parameter 'group_i00000000000000000000' [ 1149.479887][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1149.512897][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1149.568363][T12260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.688542][T12627] loop9: detected capacity change from 0 to 512 [ 1149.839961][T12260] device veth0_vlan entered promiscuous mode [ 1149.946947][T12260] device veth1_vlan entered promiscuous mode [ 1150.161546][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1150.301610][T12634] loop3: detected capacity change from 0 to 2048 [ 1150.342092][T12634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1150.353951][T12634] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 1150.362565][T12634] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1150.388205][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1150.457767][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1150.546882][T12640] loop8: detected capacity change from 0 to 8 [ 1150.598350][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1150.608270][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1150.659679][T12260] device veth0_macvtap entered promiscuous mode [ 1150.737460][T12640] squashfs image failed sanity check [ 1150.827210][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1150.858712][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1150.877309][T12644] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1150.989180][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1151.005439][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1151.018215][T12260] device veth1_macvtap entered promiscuous mode [ 1151.035705][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1151.055036][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1151.100425][T12260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.158487][T12260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.178646][T12260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.233554][T12260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.243742][T12260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.254363][T12260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.264652][T12260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.284241][T12260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.322804][T12260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.332842][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1151.357670][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1151.367401][T12661] fuse: Bad value for 'fd' [ 1151.409841][T12260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.439926][T12260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.522766][T12260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.616013][T12260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.736132][T12260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.787460][T12260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.827949][T12260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.848902][T12260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.889732][T12260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.937940][T12260] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.017693][T12260] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.133675][T12260] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.207461][T12260] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.670105][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1152.692598][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1152.851468][T12678] fuse: Unknown parameter 'group_i00000000000000000000' [ 1153.027538][T11931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.076077][T11931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.103743][T11931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1153.157058][ T9894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.182568][ T9894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.205475][T12681] loop6: detected capacity change from 0 to 512 [ 1153.224853][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1154.980730][T12698] loop2: detected capacity change from 0 to 2048 [ 1155.002689][T12698] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1155.013055][T12698] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1155.021408][T12698] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1155.624098][T12707] fuse: Bad value for 'fd' [ 1157.164749][T12720] fuse: Unknown parameter 'group_id00000000000000000000' [ 1157.663720][T12730] xt_hashlimit: max too large, truncated to 1048576 [ 1157.670412][T12730] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1158.338702][T12727] vivid-000: kernel_thread() failed [ 1158.917783][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 1160.644134][T12743] loop6: detected capacity change from 0 to 512 [ 1160.996331][T12755] xt_hashlimit: max too large, truncated to 1048576 [ 1161.004060][T12755] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1161.525553][T12761] loop9: detected capacity change from 0 to 2048 [ 1161.540032][T12761] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1161.550840][T12761] UDF-fs: error (device loop9): udf_read_inode: (ino 1376) failed !bh [ 1161.559172][T12761] UDF-fs: error (device loop9): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1162.438306][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1853'. [ 1162.776301][T12748] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1162.973329][T12776] fuse: Invalid rootmode [ 1164.228359][T12803] fuse: Unknown parameter 'group_id00000000000000000000' [ 1164.590353][T12816] loop8: detected capacity change from 0 to 512 [ 1164.596605][T12811] loop2: detected capacity change from 0 to 2048 [ 1164.615055][T12811] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1164.624995][T12811] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1164.625899][T12815] fuse: Bad value for 'group_id' [ 1164.638421][T12811] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1165.872591][T12827] fuse: Invalid rootmode [ 1165.917825][T12831] loop2: detected capacity change from 0 to 2048 [ 1165.986149][T12831] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1165.995601][T12831] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1166.003903][T12831] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1167.950254][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 1167.984768][T12850] fuse: Unknown parameter 'group_id00000000000000000000' [ 1169.317067][T12876] fuse: Invalid rootmode [ 1169.396808][T12880] loop8: detected capacity change from 0 to 512 [ 1170.959223][T12901] fuse: Bad value for 'user_id' [ 1171.034437][T12906] loop8: detected capacity change from 0 to 2048 [ 1171.737284][T12906] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1171.746755][T12906] UDF-fs: error (device loop8): udf_read_inode: (ino 1376) failed !bh [ 1171.755057][T12906] UDF-fs: error (device loop8): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1172.426599][T12924] fuse: Bad value for 'rootmode' [ 1173.919909][T12947] xt_hashlimit: max too large, truncated to 1048576 [ 1173.926744][T12947] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1174.649025][T12951] loop8: detected capacity change from 0 to 512 [ 1174.687244][T12956] loop2: detected capacity change from 0 to 2048 [ 1175.537609][T12956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1175.547061][T12956] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1175.555914][T12956] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1176.661544][T12970] fuse: Bad value for 'user_id' [ 1176.998488][T12976] loop3: detected capacity change from 0 to 2048 [ 1177.010129][T12976] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1177.019636][T12976] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 1177.027971][T12976] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1177.105617][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.112098][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.129023][T12994] fuse: Bad value for 'rootmode' [ 1178.135422][T12986] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1902'. [ 1179.469606][T12986] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1179.482148][T12986] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1179.503060][T12986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1179.511232][T12986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1180.554655][T13013] xt_hashlimit: max too large, truncated to 1048576 [ 1180.561328][T13013] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1181.188071][T13020] fuse: Bad value for 'user_id' [ 1182.190777][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1913'. [ 1183.776566][T13048] loop8: detected capacity change from 0 to 8 [ 1184.595757][T13048] squashfs image failed sanity check [ 1185.097148][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1917'. [ 1186.778667][T13070] loop3: detected capacity change from 0 to 512 [ 1190.702002][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1931'. [ 1192.854420][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 1192.854435][ T26] audit: type=1400 audit(1793602902.284:1106): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=13134 comm="syz.8.1933" name="p" offset=43 [ 1193.293585][T13146] fuse: Bad value for 'fd' [ 1193.925612][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1940'. [ 1197.187654][T13179] vivid-000: kernel_thread() failed [ 1197.290273][T13185] loop2: detected capacity change from 0 to 8 [ 1197.393878][T13185] squashfs image failed sanity check [ 1197.775612][T13191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1932'. [ 1197.831526][T13192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1197.839910][T13192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1197.847425][T13192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1198.507769][T13203] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.1943'. [ 1198.871904][ T26] audit: type=1400 audit(1793602908.294:1107): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=13206 comm="syz.8.1947" name="p" offset=43 [ 1199.127826][T13214] fuse: Bad value for 'fd' [ 1199.662503][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1949'. [ 1203.513634][T13244] 9pnet_fd: Insufficient options for proto=fd [ 1204.153839][T13258] loop3: detected capacity change from 0 to 2048 [ 1204.172100][T13258] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1204.181612][T13258] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 1204.189878][T13258] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1204.364469][T13259] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1204.394424][T13260] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1956'. [ 1204.652360][ T26] audit: type=1400 audit(1793602914.074:1108): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=13267 comm="syz.2.1960" name="p" offset=43 [ 1205.065070][T13276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1962'. [ 1205.406864][T13276] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1205.415232][T13276] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1205.517380][T13276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1205.524957][T13276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1207.788994][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1963'. [ 1211.039534][T13331] loop3: detected capacity change from 0 to 512 [ 1211.111990][ T26] audit: type=1400 audit(1793602920.524:1109): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=13325 comm="syz.6.1972" name="p" offset=69 [ 1212.007677][T13341] xt_hashlimit: max too large, truncated to 1048576 [ 1212.014441][T13341] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1215.350034][T13381] loop6: detected capacity change from 0 to 2048 [ 1215.398472][T13381] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1215.612483][T13381] UDF-fs: error (device loop6): udf_read_inode: (ino 1376) failed !bh [ 1215.620766][T13381] UDF-fs: error (device loop6): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1215.715893][ T26] audit: type=1400 audit(1793602925.144:1110): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=13385 comm="syz.3.1985" name="p" offset=69 [ 1219.508923][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 1221.847060][T13430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1996'. [ 1222.576555][T13437] loop2: detected capacity change from 0 to 2048 [ 1222.590081][T13437] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1222.599570][T13437] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1222.607912][T13437] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1222.637584][ T26] audit: type=1400 audit(1793602932.064:1111): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=13442 comm="syz.8.1999" name="p" offset=69 [ 1224.018895][T13458] vivid-000: kernel_thread() failed [ 1225.610031][T13481] xt_hashlimit: max too large, truncated to 1048576 [ 1225.616786][T13481] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1225.991630][T13475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2004'. [ 1226.003275][T13475] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1226.011474][T13475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1226.018955][T13475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1226.677374][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2006'. [ 1226.874316][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2008'. [ 1229.194031][ T26] audit: type=1400 audit(1793602938.624:1112): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=13506 comm="syz.2.2010" name="p" offset=79 [ 1230.287113][T13523] loop2: detected capacity change from 0 to 2048 [ 1230.562059][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 1230.877583][T13523] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1230.887273][T13523] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1230.896421][T13523] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1233.149962][T13542] xt_hashlimit: max too large, truncated to 1048576 [ 1233.156757][T13542] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1233.794484][T13539] vivid-000: kernel_thread() failed [ 1234.237665][T13550] loop2: detected capacity change from 0 to 2048 [ 1234.857239][T13550] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1235.742955][T13550] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1235.751251][T13550] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1237.078688][ T26] audit: type=1400 audit(1793602946.494:1113): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=13562 comm="syz.2.2025" name="p" offset=79 [ 1238.545288][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.552470][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.649617][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2026'. [ 1245.023296][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2031'. [ 1246.104145][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2023'. [ 1253.792880][T13654] xt_hashlimit: max too large, truncated to 1048576 [ 1253.799507][T13654] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1254.305008][T13663] loop9: detected capacity change from 0 to 512 [ 1259.203998][T13697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2050'. [ 1261.496368][T13712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2054'. [ 1261.507678][T13712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1261.515991][T13712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1261.523388][T13712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1262.051858][T13732] loop3: detected capacity change from 0 to 2048 [ 1262.062812][T13732] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1262.072226][T13732] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 1262.080477][T13732] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1264.295110][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2062'. [ 1267.258962][T13767] loop2: detected capacity change from 0 to 2048 [ 1267.281634][T13767] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1267.302480][T13767] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1267.310741][T13767] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1269.575740][T13790] xt_hashlimit: max too large, truncated to 1048576 [ 1269.582421][T13790] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1270.096119][T13796] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2070'. [ 1270.159387][T13798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1270.171428][T13798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1270.179292][T13798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1271.946224][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1271.955617][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1271.963974][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1271.972620][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1272.017330][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1272.024958][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1272.160205][T13818] 9pnet_fd: Insufficient options for proto=fd [ 1272.713243][T13812] rxe_eth0 speed is unknown, defaulting to 1000 [ 1274.062803][ T7416] Bluetooth: hci4: command 0x0409 tx timeout [ 1274.132384][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 1274.660407][T13839] loop9: detected capacity change from 0 to 512 [ 1276.201700][ T7416] Bluetooth: hci4: command 0x041b tx timeout [ 1277.039476][T13812] chnl_net:caif_netlink_parms(): no params data found [ 1277.245437][T13863] loop3: detected capacity change from 0 to 2048 [ 1277.288474][T13863] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1277.300090][T13863] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 1277.308686][T13863] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1278.221912][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 1278.471999][ T26] audit: type=1400 audit(1793602987.854:1114): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=13878 comm="syz.8.2085" name="p" offset=79 [ 1278.528519][T13870] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2084'. [ 1278.539802][T13870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1278.548078][T13870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1278.555464][T13870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1278.692382][T13812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.721857][T13812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.729556][T13812] device bridge_slave_0 entered promiscuous mode [ 1278.815296][T13812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.862265][T13812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.902450][T13812] device bridge_slave_1 entered promiscuous mode [ 1280.142494][T13812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.160661][T13812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1280.178689][T13897] loop3: detected capacity change from 0 to 512 [ 1280.260461][T13812] team0: Port device team_slave_0 added [ 1280.311800][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 1281.044032][T13898] vivid-000: kernel_thread() failed [ 1281.071304][T13812] team0: Port device team_slave_1 added [ 1281.207651][T13812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.309725][T13812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.150283][T13812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.192843][T13812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.199789][T13812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.240136][T13812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.294442][T13812] device hsr_slave_0 entered promiscuous mode [ 1282.323038][T13812] device hsr_slave_1 entered promiscuous mode [ 1282.339408][T13812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1283.304373][T13920] loop2: detected capacity change from 0 to 2048 [ 1283.481758][T13920] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1283.493276][T13920] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1283.501524][T13920] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1283.548274][T13812] Cannot create hsr debugfs directory [ 1283.909603][T13927] fuse: Unknown parameter 'grou00000000000000000000' [ 1285.737324][T13953] vivid-000: kernel_thread() failed [ 1286.106197][T13961] fuse: Bad value for 'fd' [ 1286.922792][T13812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1286.980234][T13812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1287.089326][T13812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1288.464824][T13812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1289.295086][T13812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.313297][T13812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1289.344135][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1289.376914][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1289.413495][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1289.551707][T13992] loop8: detected capacity change from 0 to 2048 [ 1289.591411][T13992] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1289.602772][T13992] UDF-fs: error (device loop8): udf_read_inode: (ino 1376) failed !bh [ 1289.611174][T13992] UDF-fs: error (device loop8): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1289.822654][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1289.927172][ T4482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.934347][ T4482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.139514][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1290.183699][T13817] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1290.252417][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1290.300079][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1290.357087][ T4482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.364264][ T4482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.469552][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1291.084602][T14003] loop8: detected capacity change from 0 to 2048 [ 1291.127239][T14003] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1291.292615][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1291.328865][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1291.349152][T14003] UDF-fs: error (device loop8): udf_read_inode: (ino 1376) failed !bh [ 1291.357521][T14003] UDF-fs: error (device loop8): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1291.411723][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1291.482418][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1291.543177][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1291.578378][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1291.609719][T14009] fuse: Unknown parameter '0x0000000000000004' [ 1291.626977][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1291.709998][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1291.796922][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1291.871568][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1291.982408][T14023] loop9: detected capacity change from 0 to 2048 [ 1292.156841][T14023] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1292.166081][T14023] UDF-fs: error (device loop9): udf_read_inode: (ino 1376) failed !bh [ 1292.174285][T14023] UDF-fs: error (device loop9): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1292.641791][T13812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1293.925028][T14041] loop8: detected capacity change from 0 to 512 [ 1294.209167][T14049] loop9: detected capacity change from 0 to 2048 [ 1294.247316][T14049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1294.258604][T14049] UDF-fs: error (device loop9): udf_read_inode: (ino 1376) failed !bh [ 1294.267793][T14049] UDF-fs: error (device loop9): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1294.575197][T14052] fuse: Unknown parameter '0x0000000000000004' [ 1294.864400][T13813] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1295.098154][T14062] fuse: Unknown parameter 'grou00000000000000000000' [ 1295.237888][T14064] netlink: 1028 bytes leftover after parsing attributes in process `syz.8.2130'. [ 1295.385598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1295.402283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1295.428701][T13812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.599045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1296.612904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1296.855520][T13812] device veth0_vlan entered promiscuous mode [ 1296.926428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1296.966749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1297.036702][T13812] device veth1_vlan entered promiscuous mode [ 1297.068710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1297.097164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1297.145919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1297.602098][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1297.690721][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1297.731140][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1297.838507][T13812] device veth0_macvtap entered promiscuous mode [ 1297.944023][T13812] device veth1_macvtap entered promiscuous mode [ 1298.223508][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.662572][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.148582][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1299.301127][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.432523][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1299.585776][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.737792][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1299.893825][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.990110][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.996505][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.095675][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1300.209574][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.221383][T13812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.231780][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1300.244089][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.254260][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1300.264997][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.275000][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1300.285839][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.292021][T14104] fuse: Unknown parameter '0x0000000000000004' [ 1300.295782][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1300.313486][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.329795][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1300.340513][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.353580][T13812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.364408][T13812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.373376][T13812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.382553][T13812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.391487][T13812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.418618][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 1300.438294][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1300.461212][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1300.502853][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1300.533113][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1300.559627][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1300.578947][ T4743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1300.742141][T14115] loop9: detected capacity change from 0 to 2048 [ 1300.840331][T14115] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1300.851574][T14115] UDF-fs: error (device loop9): udf_read_inode: (ino 1376) failed !bh [ 1300.860033][T14115] UDF-fs: error (device loop9): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1301.493536][ T4826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.501395][ T4826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.512699][T14121] loop3: detected capacity change from 0 to 512 [ 1301.620770][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1301.687314][ T4471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.705961][ T4471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.732917][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1301.763428][T14128] netlink: 1028 bytes leftover after parsing attributes in process `syz.9.2142'. [ 1304.819923][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2146'. [ 1306.495355][T14156] loop8: detected capacity change from 0 to 2048 [ 1308.475690][T14180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2149'. [ 1308.489574][T14180] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1308.497510][T14180] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1308.506464][T14180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1308.513960][T14180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1308.845206][T14190] loop3: detected capacity change from 0 to 8 [ 1308.977025][T14192] loop2: detected capacity change from 0 to 2048 [ 1309.387470][T14190] squashfs image failed sanity check [ 1309.404940][T14192] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1309.415890][T14192] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1309.425463][T14192] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1310.268413][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2154'. [ 1310.551613][T14208] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.2155'. [ 1313.917294][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2162'. [ 1315.466363][T14244] vivid-000: kernel_thread() failed [ 1315.672401][T14254] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.2167'. [ 1316.153978][T14257] loop9: detected capacity change from 0 to 2048 [ 1316.181517][T14257] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1316.190880][T14257] UDF-fs: error (device loop9): udf_read_inode: (ino 1376) failed !bh [ 1316.199159][T14257] UDF-fs: error (device loop9): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1316.712589][T14271] loop2: detected capacity change from 0 to 2048 [ 1316.750476][T14271] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1316.820674][T14271] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1316.846408][T14284] 9pnet_fd: Insufficient options for proto=fd [ 1317.567850][T14271] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1317.740695][T14290] loop9: detected capacity change from 0 to 8 [ 1317.782412][T14294] fuse: Unknown parameter 'group_i00000000000000000000' [ 1317.819205][T14290] squashfs image failed sanity check [ 1318.288457][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2177'. [ 1319.173519][T14304] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2164'. [ 1319.185547][T14304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1319.193847][T14304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1319.201197][T14304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1325.829727][T14356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2190'. [ 1325.841074][T14356] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1325.849431][T14356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1325.856842][T14356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1327.430373][T14390] 9pnet_fd: Insufficient options for proto=fd [ 1330.576375][T14417] loop2: detected capacity change from 0 to 2048 [ 1330.625374][T14417] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1330.635081][T14417] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1330.643377][T14417] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1332.232626][T14431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2203'. [ 1332.244239][T14431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1332.253107][T14431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1332.260576][T14431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1334.038246][T14449] loop3: detected capacity change from 0 to 512 [ 1334.282432][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'. [ 1336.296008][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2219'. [ 1337.909301][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2204'. [ 1345.460696][T14547] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2225'. [ 1349.059115][T14560] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2226'. [ 1349.217301][T14562] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1349.226045][T14562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1349.233522][T14562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1350.324049][T14579] vivid-000: kernel_thread() failed [ 1351.727759][ T5880] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1352.282663][ T5880] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1353.399903][T14614] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1354.795889][T14638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 1361.425270][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.431818][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.831263][ T9535] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1366.445825][ T9535] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1367.390972][T14708] fido_id[14708]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1374.855248][T14774] loop8: detected capacity change from 0 to 2048 [ 1374.950325][T14774] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1374.960103][T14774] UDF-fs: error (device loop8): udf_read_inode: (ino 1376) failed !bh [ 1374.968554][T14774] UDF-fs: error (device loop8): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1375.213218][T14775] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1382.180257][T14842] vivid-000: kernel_thread() failed [ 1382.525099][T14858] loop3: detected capacity change from 0 to 2048 [ 1382.557105][T14858] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1382.566748][T14858] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 1382.575062][T14858] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1382.856728][T14862] loop9: detected capacity change from 0 to 2048 [ 1382.868738][T14862] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1382.884651][T14862] UDF-fs: error (device loop9): udf_read_inode: (ino 1376) failed !bh [ 1382.893062][T14862] UDF-fs: error (device loop9): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1383.028332][T14849] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1394.221658][ T7416] Bluetooth: hci4: command 0x0406 tx timeout [ 1394.730394][T14980] loop8: detected capacity change from 0 to 2048 [ 1403.057027][ T4264] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1403.162837][ T4264] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1404.602625][T15075] fido_id[15075]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1406.677919][ T9535] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1406.794925][ T9535] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1409.550175][T15136] fido_id[15136]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1411.756019][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'. [ 1413.154306][T15181] fuse: Unknown parameter '0x0000000000000004' [ 1413.709184][T15189] loop2: detected capacity change from 0 to 512 [ 1416.818478][T15216] xt_hashlimit: max too large, truncated to 1048576 [ 1416.899487][T15216] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1420.356001][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2340'. [ 1421.916130][T15247] loop2: detected capacity change from 0 to 2048 [ 1422.021160][T15247] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1422.124026][T15247] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1423.783226][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.792699][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.883119][T15247] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1424.220938][T15264] fuse: Unknown parameter '0x0000000000000004' [ 1427.435917][T15317] loop9: detected capacity change from 0 to 512 [ 1428.449243][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2354'. [ 1430.467751][T15331] xt_hashlimit: max too large, truncated to 1048576 [ 1430.474413][T15331] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1430.642511][T15337] fuse: Unknown parameter '0x0000000000000004' [ 1431.596344][ T33] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1431.773753][ T33] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1432.433952][T15348] fido_id[15348]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1435.787871][T15392] vivid-000: kernel_thread() failed [ 1436.067868][T15397] fuse: Unknown parameter 'fd0x0000000000000004' [ 1436.486615][T15408] loop2: detected capacity change from 0 to 512 [ 1437.843159][ T9477] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1439.627223][ T9477] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1440.050850][T15424] fido_id[15424]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1444.385803][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2386'. [ 1444.797364][T15490] loop0: detected capacity change from 0 to 2048 [ 1445.412700][T15487] fuse: Unknown parameter 'fd0x0000000000000004' [ 1445.431514][T15490] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1445.441175][T15490] UDF-fs: error (device loop0): udf_read_inode: (ino 1376) failed !bh [ 1445.449705][T15490] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1448.000872][ T128] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1448.138146][ T128] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1449.219742][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2397'. [ 1450.573070][T15538] loop2: detected capacity change from 0 to 128 [ 1450.609830][T15538] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1450.842701][T15550] fuse: Unknown parameter 'fd0x0000000000000004' [ 1450.856808][T15528] fido_id[15528]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1451.248823][T15560] loop8: detected capacity change from 0 to 2048 [ 1451.283711][T15560] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1451.294357][T15560] UDF-fs: error (device loop8): udf_read_inode: (ino 1376) failed !bh [ 1451.302799][T15560] UDF-fs: error (device loop8): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1451.953135][T15536] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1455.595536][T15605] loop8: detected capacity change from 0 to 512 [ 1456.281374][T15634] loop9: detected capacity change from 0 to 2048 [ 1456.334840][T15626] loop3: detected capacity change from 0 to 2048 [ 1456.384411][T15634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1456.393913][T15634] UDF-fs: error (device loop9): udf_read_inode: (ino 1376) failed !bh [ 1456.402199][T15634] UDF-fs: error (device loop9): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1456.572433][T15626] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1456.677340][T15626] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh [ 1456.781231][ T128] kernel write not supported for file /sequencer2 (pid: 128 comm: kworker/1:2) [ 1458.021647][T15626] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1460.450306][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2419'. [ 1462.706201][T15723] loop2: detected capacity change from 0 to 2048 [ 1462.722998][T15723] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1462.732603][T15723] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1462.740830][T15723] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1462.875673][T15727] loop9: detected capacity change from 0 to 2048 [ 1463.105363][T15727] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1463.116649][T15727] UDF-fs: error (device loop9): udf_read_inode: (ino 1376) failed !bh [ 1463.125778][T15727] UDF-fs: error (device loop9): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1464.092747][T15744] loop9: detected capacity change from 0 to 128 [ 1464.163315][T15744] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1465.421506][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'. [ 1467.873434][T15787] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2443'. [ 1467.885070][T15787] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1467.893488][T15787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1467.900895][T15787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1470.053489][ T128] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1470.109222][ T128] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1476.952168][T15873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2464'. [ 1476.963762][T15873] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1476.972247][T15873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1476.979704][T15873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1478.810386][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2467'. [ 1479.339729][T15917] loop2: detected capacity change from 0 to 2048 [ 1479.385958][T15917] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1479.397131][T15917] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1479.406310][T15917] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1480.438685][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2458'. [ 1484.303577][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.309908][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.520759][T15958] loop8: detected capacity change from 0 to 2048 [ 1485.544532][T15958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1485.554323][T15958] UDF-fs: error (device loop8): udf_read_inode: (ino 1376) failed !bh [ 1485.562803][T15958] UDF-fs: error (device loop8): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1485.794962][T15959] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1485.877334][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'. [ 1485.969241][T15966] loop0: detected capacity change from 0 to 2048 [ 1485.984525][T15966] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1485.996443][T15966] UDF-fs: error (device loop0): udf_read_inode: (ino 1376) failed !bh [ 1486.004715][T15966] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1487.628990][T15975] vivid-000: kernel_thread() failed [ 1487.671847][ T5880] kernel write not supported for file /sequencer2 (pid: 5880 comm: kworker/1:8) [ 1495.284181][T16033] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2498'. [ 1496.912315][T16052] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2500'. [ 1496.969198][T16055] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1496.978246][T16055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1496.985737][T16055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1500.255520][T16091] loop2: detected capacity change from 0 to 2048 [ 1500.403958][T16091] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1501.624810][T16091] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 1501.833884][T16102] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2513'. [ 1501.845609][T16102] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1501.853949][T16102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1501.861395][T16102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1501.895529][T16091] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1502.117405][T16107] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1502.135951][T16107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1502.145278][T16107] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1502.153801][T16107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1502.168590][T16107] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1502.179741][T16107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1502.422723][T15731] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.454117][T16106] rxe_eth0 speed is unknown, defaulting to 1000 [ 1502.540749][T15731] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.760168][T15731] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.864103][T15731] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.722224][ T7416] Bluetooth: hci4: command 0x0409 tx timeout [ 1506.176972][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2509'. [ 1506.740319][T16157] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2522'. [ 1506.781692][T16107] Bluetooth: hci4: command 0x041b tx timeout [ 1506.890863][T16165] loop3: detected capacity change from 0 to 8 [ 1506.915970][T16165] squashfs image failed sanity check [ 1507.211105][T16106] chnl_net:caif_netlink_parms(): no params data found [ 1508.861820][T16107] Bluetooth: hci4: command 0x040f tx timeout [ 1510.941656][T16107] Bluetooth: hci4: command 0x0419 tx timeout [ 1510.985801][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'. [ 1512.361672][ T4779] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1512.422471][ T4779] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1514.413079][T16106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.416981][T16211] fido_id[16211]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1514.420184][T16106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.443095][T16106] device bridge_slave_0 entered promiscuous mode [ 1514.452515][T16106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.490847][T16106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.535093][T16106] device bridge_slave_1 entered promiscuous mode [ 1514.736046][T16106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1514.774680][T16106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1514.906858][T16106] team0: Port device team_slave_0 added [ 1516.234309][T16106] team0: Port device team_slave_1 added [ 1516.861353][T16238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2534'. [ 1517.676931][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2532'. [ 1517.694789][T16106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.703557][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.736523][T16106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.775968][T16106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.803097][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.967409][T16247] xt_hashlimit: max too large, truncated to 1048576 [ 1517.974162][T16247] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 1518.040392][T16106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1521.363533][T16106] device hsr_slave_0 entered promiscuous mode [ 1521.412329][T16106] device hsr_slave_1 entered promiscuous mode [ 1521.499350][T16106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1521.521589][T16106] Cannot create hsr debugfs directory [ 1521.616372][T15731] device hsr_slave_0 left promiscuous mode [ 1521.648226][T15731] device hsr_slave_1 left promiscuous mode [ 1521.661886][T15731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1521.687119][T15731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1521.722363][T15731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1521.750081][T15731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1521.782591][T15731] device bridge_slave_1 left promiscuous mode [ 1521.803790][T15731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.835056][T15731] device bridge_slave_0 left promiscuous mode [ 1521.850215][T15731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.919166][T15731] device veth1_macvtap left promiscuous mode [ 1521.929840][T15731] device veth0_macvtap left promiscuous mode [ 1521.949083][T15731] device veth1_vlan left promiscuous mode [ 1521.990812][T15731] device veth0_vlan left promiscuous mode [ 1522.427687][T16297] Bluetooth: MGMT ver 1.22 [ 1522.579810][T16277] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1522.893601][T16307] FAULT_INJECTION: forcing a failure. [ 1522.893601][T16307] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.974505][T16307] CPU: 1 PID: 16307 Comm: syz.9.2548 Not tainted syzkaller #0 [ 1522.981981][T16307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1522.992032][T16307] Call Trace: [ 1522.995313][T16307] [ 1522.998230][T16307] dump_stack_lvl+0x188/0x24e [ 1523.002905][T16307] ? show_regs_print_info+0x12/0x12 [ 1523.008105][T16307] ? load_image+0x410/0x410 [ 1523.012604][T16307] ? __lock_acquire+0x7ea0/0x7ea0 [ 1523.017620][T16307] ? __x64_sys_unshare+0x34/0x40 [ 1523.022613][T16307] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1523.028686][T16307] should_fail_ex+0x390/0x4c0 [ 1523.033387][T16307] should_failslab+0x5/0x20 [ 1523.037965][T16307] slab_pre_alloc_hook+0x59/0x300 [ 1523.043096][T16307] ? alloc_super+0x5a/0x930 [ 1523.047643][T16307] __kmem_cache_alloc_node+0x4f/0x270 [ 1523.053004][T16307] ? alloc_super+0x5a/0x930 [ 1523.057493][T16307] kmalloc_trace+0x26/0xe0 [ 1523.061907][T16307] alloc_super+0x5a/0x930 [ 1523.066254][T16307] ? kill_litter_super+0xa0/0xa0 [ 1523.071204][T16307] sget_fc+0x2d4/0x750 [ 1523.075292][T16307] ? kill_litter_super+0xa0/0xa0 [ 1523.080250][T16307] ? mqueue_get_tree+0xe0/0xe0 [ 1523.085111][T16307] get_tree_nodev+0x26/0x160 [ 1523.089721][T16307] vfs_get_tree+0x88/0x270 [ 1523.094158][T16307] fc_mount+0x18/0xa0 [ 1523.098195][T16307] mq_init_ns+0x39d/0x510 [ 1523.102516][T16307] copy_ipcs+0x2de/0x500 [ 1523.106760][T16307] create_new_namespaces+0x212/0x700 [ 1523.112094][T16307] unshare_nsproxy_namespaces+0x116/0x160 [ 1523.117806][T16307] ksys_unshare+0x4f6/0x8e0 [ 1523.122327][T16307] ? sighand_ctor+0x40/0x40 [ 1523.126824][T16307] ? lock_chain_count+0x20/0x20 [ 1523.131682][T16307] ? syscall_enter_from_user_mode+0x21/0x80 [ 1523.137561][T16307] __x64_sys_unshare+0x34/0x40 [ 1523.142315][T16307] do_syscall_64+0x4c/0xa0 [ 1523.146732][T16307] ? clear_bhb_loop+0x60/0xb0 [ 1523.151413][T16307] ? clear_bhb_loop+0x60/0xb0 [ 1523.156076][T16307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1523.161961][T16307] RIP: 0033:0x7f87dc39f559 [ 1523.166376][T16307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.185979][T16307] RSP: 002b:00007f87dd1d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1523.194386][T16307] RAX: ffffffffffffffda RBX: 00007f87dc625fa0 RCX: 00007f87dc39f559 [ 1523.202348][T16307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1523.210309][T16307] RBP: 00007f87dc436b50 R08: 0000000000000000 R09: 0000000000000000 [ 1523.218266][T16307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1523.226226][T16307] R13: 00007f87dc626038 R14: 00007f87dc625fa0 R15: 00007ffc400b34c8 [ 1523.234197][T16307] [ 1523.787765][T16322] input: syz0 as /devices/virtual/input/input6 [ 1523.863369][T16218] udevd[16218]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 1523.890670][T16218] udevd[16218]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1523.996163][T15731] team0 (unregistering): Port device team_slave_1 removed [ 1524.122869][T15731] team0 (unregistering): Port device team_slave_0 removed [ 1524.193729][T15731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1524.264643][T16330] capability: warning: `syz.3.2554' uses 32-bit capabilities (legacy support in use) [ 1524.386918][T15731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1524.833375][T15731] bond0 (unregistering): Released all slaves [ 1524.922449][T16314] device bridge0 entered promiscuous mode [ 1524.935594][T16314] bridge0: port 3(macvlan2) entered blocking state [ 1524.964836][T16314] bridge0: port 3(macvlan2) entered disabled state [ 1524.979424][T16314] device bridge0 left promiscuous mode [ 1525.550210][T16357] FAULT_INJECTION: forcing a failure. [ 1525.550210][T16357] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1525.651865][T16357] CPU: 1 PID: 16357 Comm: syz.8.2558 Not tainted syzkaller #0 [ 1525.659371][T16357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1525.669438][T16357] Call Trace: [ 1525.672728][T16357] [ 1525.675670][T16357] dump_stack_lvl+0x188/0x24e [ 1525.680374][T16357] ? show_regs_print_info+0x12/0x12 [ 1525.685596][T16357] ? load_image+0x410/0x410 [ 1525.690117][T16357] ? __lock_acquire+0x1359/0x7ea0 [ 1525.695173][T16357] should_fail_ex+0x390/0x4c0 [ 1525.699872][T16357] get_futex_key+0x1a6/0xe70 [ 1525.704471][T16357] ? verify_lock_unused+0x140/0x140 [ 1525.709674][T16357] ? futex_setup_timer+0xc0/0xc0 [ 1525.714606][T16357] ? slab_free_freelist_hook+0x133/0x1b0 [ 1525.720235][T16357] futex_wake+0x123/0x4f0 [ 1525.724561][T16357] ? futex_wake_mark+0x150/0x150 [ 1525.729509][T16357] do_futex+0x2e2/0x320 [ 1525.733657][T16357] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1525.739541][T16357] ? percpu_ref_put+0x1e/0x230 [ 1525.744396][T16357] __se_sys_futex+0x381/0x410 [ 1525.749064][T16357] ? __x64_sys_io_submit+0x80/0x80 [ 1525.754181][T16357] ? __x64_sys_futex+0xf0/0xf0 [ 1525.758943][T16357] ? __x64_sys_futex+0x1d/0xf0 [ 1525.763696][T16357] do_syscall_64+0x4c/0xa0 [ 1525.768112][T16357] ? clear_bhb_loop+0x60/0xb0 [ 1525.772784][T16357] ? clear_bhb_loop+0x60/0xb0 [ 1525.777457][T16357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1525.783344][T16357] RIP: 0033:0x7fa0e6d9f559 [ 1525.787755][T16357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1525.807350][T16357] RSP: 002b:00007fa0e7d1b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1525.815755][T16357] RAX: ffffffffffffffda RBX: 00007fa0e7026098 RCX: 00007fa0e6d9f559 [ 1525.823719][T16357] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa0e702609c [ 1525.831706][T16357] RBP: 00007fa0e7026090 R08: 001e1f96f70ea678 R09: 0000000000000000 [ 1525.839667][T16357] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1525.847629][T16357] R13: 00007fa0e7026128 R14: 00007ffc1b35bd00 R15: 00007ffc1b35bde8 [ 1525.855600][T16357] [ 1525.966368][T16364] ALSA: mixer_oss: invalid OSS volume '' [ 1527.526394][T16406] loop0: detected capacity change from 0 to 7 [ 1527.605805][T16381] Dev loop0: unable to read RDB block 7 [ 1527.611474][T16381] loop0: unable to read partition table [ 1527.631497][T16381] loop0: partition table beyond EOD, truncated [ 1527.650114][T16406] Dev loop0: unable to read RDB block 7 [ 1527.690443][T16406] loop0: unable to read partition table [ 1527.700062][T16406] loop0: partition table beyond EOD, truncated [ 1527.738474][T16406] loop_reread_partitions: partition scan of loop0 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1527.911643][ T128] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1528.113394][ T128] usb 3-1: Using ep0 maxpacket: 8 [ 1528.120359][ T128] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1528.151731][ T128] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1528.178746][T16106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1528.192764][ T128] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1528.222480][T16106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1528.232189][T16402] syz.9.2568 (16402) used greatest stack depth: 18096 bytes left [ 1528.243101][ T128] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1528.271031][T16106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1528.276563][ T128] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1528.319823][ T128] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1528.334423][T16430] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1528.341139][T16430] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1528.368633][ T128] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1528.372546][T16106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1528.380239][ T128] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1528.394664][ T128] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1528.428624][ T128] usb 3-1: string descriptor 0 read error: -22 [ 1528.442860][ T128] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1528.461011][T16430] vhci_hcd vhci_hcd.0: Device attached [ 1528.464354][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.490683][ T128] adutux 3-1:168.0: interrupt endpoints not found [ 1528.636690][T16106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.649242][T16431] vhci_hcd: cannot find the pending unlink 0 [ 1528.696214][ T128] usb 3-1: USB disconnect, device number 2 [ 1528.758965][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1528.761771][ T9535] usb 40-1: SetAddress Request (2) to port 0 [ 1528.774977][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1528.790443][ T9535] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1528.809282][T16106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.835029][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1528.850124][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1528.876398][T10838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.883522][T10838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1528.923704][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1528.954396][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1528.967751][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1528.995291][ T9894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.002454][ T9894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1529.029208][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1529.053270][ T9831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1529.073775][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1529.101468][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1529.117686][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1529.139200][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1529.149072][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1529.159187][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1529.159561][T16441] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1529.174620][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1529.189596][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1529.207788][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1529.218823][T16106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1529.252970][T16431] vhci_hcd: connection reset by peer [ 1529.260819][ T9831] vhci_hcd: stop threads [ 1529.283895][ T9831] vhci_hcd: release socket [ 1529.302498][ T9831] vhci_hcd: disconnect device [ 1529.616295][T16427] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1530.899513][T16107] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1530.908097][T16107] Bluetooth: hci1: Injecting HCI hardware error event [ 1530.918605][T16107] Bluetooth: hci1: hardware error 0x00 [ 1532.126710][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1532.163843][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1532.193586][T16106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1532.274353][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1532.307658][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1532.369728][T16500] FAULT_INJECTION: forcing a failure. [ 1532.369728][T16500] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.377396][T16106] device veth0_vlan entered promiscuous mode [ 1532.397915][T16106] device veth1_vlan entered promiscuous mode [ 1532.405263][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1532.431130][T16500] CPU: 1 PID: 16500 Comm: syz.8.2591 Not tainted syzkaller #0 [ 1532.438616][T16500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1532.448667][T16500] Call Trace: [ 1532.451940][T16500] [ 1532.454867][T16500] dump_stack_lvl+0x188/0x24e [ 1532.459552][T16500] ? show_regs_print_info+0x12/0x12 [ 1532.464752][T16500] ? load_image+0x410/0x410 [ 1532.469253][T16500] ? __lock_acquire+0x7ea0/0x7ea0 [ 1532.474280][T16500] should_fail_ex+0x390/0x4c0 [ 1532.478953][T16500] should_failslab+0x5/0x20 [ 1532.483448][T16500] slab_pre_alloc_hook+0x59/0x300 [ 1532.488468][T16500] ? key_alloc+0x346/0x1030 [ 1532.492967][T16500] __kmem_cache_alloc_node+0x4f/0x270 [ 1532.498335][T16500] ? key_alloc+0x346/0x1030 [ 1532.502832][T16500] __kmalloc_node_track_caller+0xa0/0x240 [ 1532.508549][T16500] kmemdup+0x27/0x60 [ 1532.512538][T16500] key_alloc+0x346/0x1030 [ 1532.516873][T16500] keyring_alloc+0x41/0xa0 [ 1532.521289][T16500] lookup_user_key+0x44f/0x1120 [ 1532.526142][T16500] ? lookup_user_key_possessed+0x40/0x40 [ 1532.531773][T16500] ? search_process_keyrings_rcu+0x360/0x360 [ 1532.537750][T16500] ? __check_object_size+0x86/0xa70 [ 1532.543006][T16500] ? pkcs_1_v1_5_decode_emsa+0x1f1/0x250 [ 1532.548633][T16500] ? strncpy_from_user+0x1dc/0x340 [ 1532.553739][T16500] __se_sys_add_key+0x311/0x410 [ 1532.558595][T16500] ? __x64_sys_add_key+0xc0/0xc0 [ 1532.563540][T16500] ? lockdep_hardirqs_on+0x94/0x140 [ 1532.568731][T16500] ? __x64_sys_add_key+0x1c/0xc0 [ 1532.573667][T16500] do_syscall_64+0x4c/0xa0 [ 1532.578084][T16500] ? clear_bhb_loop+0x60/0xb0 [ 1532.582756][T16500] ? clear_bhb_loop+0x60/0xb0 [ 1532.587429][T16500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1532.593315][T16500] RIP: 0033:0x7fa0e6d9f559 [ 1532.597720][T16500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.617320][T16500] RSP: 002b:00007fa0e7d3c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1532.625728][T16500] RAX: ffffffffffffffda RBX: 00007fa0e7025fa0 RCX: 00007fa0e6d9f559 [ 1532.633692][T16500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 1532.641655][T16500] RBP: 00007fa0e6e36b50 R08: ffffffffffffffff R09: 0000000000000000 [ 1532.649625][T16500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1532.657590][T16500] R13: 00007fa0e7026038 R14: 00007fa0e7025fa0 R15: 00007ffc1b35bde8 [ 1532.665569][T16500] [ 1532.669918][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1532.678538][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1532.696421][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1532.705390][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1532.714628][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1532.732139][ T9477] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1532.741187][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1532.752193][ T9894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1532.758457][ T128] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1532.763195][T16106] device veth0_macvtap entered promiscuous mode [ 1532.779048][T16106] device veth1_macvtap entered promiscuous mode [ 1532.820792][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.838912][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.849246][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.860505][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.871088][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.882237][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.892562][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.922558][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.936995][ T9477] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.961228][ T9477] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1532.987176][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1533.021353][ T9477] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1533.029493][ T128] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1533.055590][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.101827][T16107] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1533.125004][ T9477] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1533.182385][T16106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1533.206845][ T9477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1533.239967][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1533.281276][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1533.297296][ T9477] usb 4-1: Product: syz [ 1533.324762][ T9477] usb 4-1: Manufacturer: syz [ 1533.349069][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1533.433919][T16493] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1533.493294][ T9477] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 1533.505449][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1533.611007][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.763029][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.798905][ T128] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1533.812321][ T128] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1533.820737][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.821882][ T9477] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1533.832157][ T128] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1533.848480][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.858362][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.868893][ T128] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1533.877149][ T128] usb 3-1: Product: syz [ 1533.882203][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.892161][ T128] usb 3-1: Manufacturer: syz [ 1533.896769][ T128] usb 3-1: SerialNumber: syz [ 1533.901916][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.902886][ T9535] usb 40-1: device descriptor read/8, error -110 [ 1533.914236][ T128] usb 3-1: config 0 descriptor?? [ 1533.923930][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.942761][T16106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.956421][ T128] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 1533.971761][T16106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.077430][T16384] udevd[16384]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1534.083650][T16106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1534.129068][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1534.157134][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1534.179758][ T128] usb 3-1: USB disconnect, device number 3 [ 1534.199919][T16106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.214283][T15346] usb 4-1: USB disconnect, device number 6 [ 1534.225200][T16106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.252276][T15346] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1534.271351][T16106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.286808][T15346] garmin_gps 4-1:1.0: device disconnected [ 1534.293588][T16106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.306458][T16516] ioremap: invalid physical address 8000000000000000 [ 1534.322390][T16516] ------------[ cut here ]------------ [ 1534.327924][T16516] WARNING: CPU: 1 PID: 16516 at arch/x86/mm/ioremap.c:201 __ioremap_caller+0x4f8/0x620 [ 1534.337788][T16516] Modules linked in: [ 1534.341763][T16516] CPU: 1 PID: 16516 Comm: syz.9.2594 Not tainted syzkaller #0 [ 1534.349244][T16516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1534.359400][T16516] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 1534.365097][T16516] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a9 ca 48 00 48 8b 74 24 60 48 c7 c7 a0 b1 a9 8a e8 88 7a f2 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 1534.384753][T16516] RSP: 0018:ffffc900045878e0 EFLAGS: 00010246 [ 1534.390865][T16516] RAX: 0000000000000032 RBX: 1ffff920008b0f00 RCX: c614ade62413fb00 [ 1534.398893][T16516] RDX: ffffc900153ca000 RSI: 00000000000061d3 RDI: 00000000000061d4 [ 1534.406913][T16516] RBP: ffffc900045879f0 R08: ffffc900045875e7 R09: 1ffff920008b0ebc [ 1534.414944][T16516] R10: dffffc0000000000 R11: fffff520008b0ebd R12: 000000000000002e [ 1534.422972][T16516] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 1534.427841][ T9535] usb usb40-port1: attempt power cycle [ 1534.430947][T16516] FS: 00007f87dd1d36c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1534.445438][T16516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1534.452097][T16516] CR2: 0000001b30a17ff8 CR3: 0000000057a93000 CR4: 00000000003506e0 [ 1534.460101][T16516] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1534.468132][T16516] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1534.476156][T16516] Call Trace: [ 1534.479466][T16516] [ 1534.482460][T16516] ? register_device+0x129/0x570 [ 1534.487534][T16516] ? ioremap+0x30/0x30 [ 1534.491677][T16516] register_device+0x129/0x570 [ 1534.496469][T16516] ? kstrtoull+0x12c/0x1c0 [ 1534.500978][T16516] phram_setup+0x78a/0xa30 [ 1534.505454][T16516] ? rcu_is_watching+0x11/0xa0 [ 1534.510342][T16516] ? phram_param_call+0x70/0x70 [ 1534.515296][T16516] ? mutex_lock_nested+0x10/0x10 [ 1534.520292][T16516] ? kernfs_fop_write_iter+0x1d8/0x520 [ 1534.525876][T16516] ? read_lock_is_recursive+0x10/0x10 [ 1534.531282][T16516] param_attr_store+0x20a/0x300 [ 1534.536249][T16516] ? param_attr_show+0x170/0x170 [ 1534.541216][T16516] ? sysfs_kf_read+0x350/0x350 [ 1534.546034][T16516] module_attr_store+0x5b/0x80 [ 1534.550832][T16516] kernfs_fop_write_iter+0x3a0/0x520 [ 1534.556181][T16516] vfs_write+0x482/0x9a0 [ 1534.560454][T16516] ? file_end_write+0x250/0x250 [ 1534.565370][T16516] ? __fget_files+0x3fc/0x460 [ 1534.570109][T16516] ? __fdget_pos+0x2ae/0x360 [ 1534.574778][T16516] ? ksys_write+0x70/0x260 [ 1534.579279][T16516] ksys_write+0x14d/0x260 [ 1534.583667][T16516] ? __ia32_sys_read+0x80/0x80 [ 1534.588452][T16516] ? lockdep_hardirqs_on+0x94/0x140 [ 1534.593716][T16516] do_syscall_64+0x4c/0xa0 [ 1534.598159][T16516] ? clear_bhb_loop+0x60/0xb0 [ 1534.603123][T16516] ? clear_bhb_loop+0x60/0xb0 [ 1534.607916][T16516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1534.613869][T16516] RIP: 0033:0x7f87dc39f559 [ 1534.618342][T16516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1534.638021][T16516] RSP: 002b:00007f87dd1d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1534.646499][T16516] RAX: ffffffffffffffda RBX: 00007f87dc625fa0 RCX: 00007f87dc39f559 [ 1534.654530][T16516] RDX: 000000000000001e RSI: 0000200000000cc0 RDI: 000000000000000a [ 1534.662556][T16516] RBP: 00007f87dc436b50 R08: 0000000000000000 R09: 0000000000000000 [ 1534.670545][T16516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1534.678587][T16516] R13: 00007f87dc626038 R14: 00007f87dc625fa0 R15: 00007ffc400b34c8 [ 1534.686628][T16516] [ 1534.689679][T16516] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1534.696963][T16516] CPU: 1 PID: 16516 Comm: syz.9.2594 Not tainted syzkaller #0 [ 1534.704430][T16516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1534.714492][T16516] Call Trace: [ 1534.717783][T16516] [ 1534.720723][T16516] dump_stack_lvl+0x188/0x24e [ 1534.725428][T16516] ? memcpy+0x3c/0x60 [ 1534.729427][T16516] ? show_regs_print_info+0x12/0x12 [ 1534.734649][T16516] ? load_image+0x410/0x410 [ 1534.739183][T16516] panic+0x2d3/0x710 [ 1534.743105][T16516] ? bpf_jit_dump+0xd0/0xd0 [ 1534.747642][T16516] __warn+0x2f8/0x4f0 [ 1534.751637][T16516] ? __ioremap_caller+0x4f8/0x620 [ 1534.756686][T16516] ? __ioremap_caller+0x4f8/0x620 [ 1534.761732][T16516] report_bug+0x2ba/0x4f0 [ 1534.766163][T16516] ? __ioremap_caller+0x4f8/0x620 [ 1534.771215][T16516] handle_bug+0x3a/0x70 [ 1534.775387][T16516] exc_invalid_op+0x16/0x40 [ 1534.779907][T16516] asm_exc_invalid_op+0x16/0x20 [ 1534.784778][T16516] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 1534.790419][T16516] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a9 ca 48 00 48 8b 74 24 60 48 c7 c7 a0 b1 a9 8a e8 88 7a f2 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 1534.810020][T16516] RSP: 0018:ffffc900045878e0 EFLAGS: 00010246 [ 1534.816088][T16516] RAX: 0000000000000032 RBX: 1ffff920008b0f00 RCX: c614ade62413fb00 [ 1534.824058][T16516] RDX: ffffc900153ca000 RSI: 00000000000061d3 RDI: 00000000000061d4 [ 1534.832026][T16516] RBP: ffffc900045879f0 R08: ffffc900045875e7 R09: 1ffff920008b0ebc [ 1534.839992][T16516] R10: dffffc0000000000 R11: fffff520008b0ebd R12: 000000000000002e [ 1534.847957][T16516] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 1534.855949][T16516] ? register_device+0x129/0x570 [ 1534.860892][T16516] ? ioremap+0x30/0x30 [ 1534.864968][T16516] register_device+0x129/0x570 [ 1534.869727][T16516] ? kstrtoull+0x12c/0x1c0 [ 1534.874138][T16516] phram_setup+0x78a/0xa30 [ 1534.878547][T16516] ? rcu_is_watching+0x11/0xa0 [ 1534.883314][T16516] ? phram_param_call+0x70/0x70 [ 1534.888169][T16516] ? mutex_lock_nested+0x10/0x10 [ 1534.893104][T16516] ? kernfs_fop_write_iter+0x1d8/0x520 [ 1534.898560][T16516] ? read_lock_is_recursive+0x10/0x10 [ 1534.903931][T16516] param_attr_store+0x20a/0x300 [ 1534.908781][T16516] ? param_attr_show+0x170/0x170 [ 1534.913718][T16516] ? sysfs_kf_read+0x350/0x350 [ 1534.918475][T16516] module_attr_store+0x5b/0x80 [ 1534.923237][T16516] kernfs_fop_write_iter+0x3a0/0x520 [ 1534.928522][T16516] vfs_write+0x482/0x9a0 [ 1534.932764][T16516] ? file_end_write+0x250/0x250 [ 1534.937610][T16516] ? __fget_files+0x3fc/0x460 [ 1534.942296][T16516] ? __fdget_pos+0x2ae/0x360 [ 1534.946881][T16516] ? ksys_write+0x70/0x260 [ 1534.951295][T16516] ksys_write+0x14d/0x260 [ 1534.955618][T16516] ? __ia32_sys_read+0x80/0x80 [ 1534.960376][T16516] ? lockdep_hardirqs_on+0x94/0x140 [ 1534.965580][T16516] do_syscall_64+0x4c/0xa0 [ 1534.969993][T16516] ? clear_bhb_loop+0x60/0xb0 [ 1534.974667][T16516] ? clear_bhb_loop+0x60/0xb0 [ 1534.979345][T16516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1534.985240][T16516] RIP: 0033:0x7f87dc39f559 [ 1534.989650][T16516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.009275][T16516] RSP: 002b:00007f87dd1d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1535.017684][T16516] RAX: ffffffffffffffda RBX: 00007f87dc625fa0 RCX: 00007f87dc39f559 [ 1535.025647][T16516] RDX: 000000000000001e RSI: 0000200000000cc0 RDI: 000000000000000a [ 1535.033611][T16516] RBP: 00007f87dc436b50 R08: 0000000000000000 R09: 0000000000000000 [ 1535.041578][T16516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1535.049539][T16516] R13: 00007f87dc626038 R14: 00007f87dc625fa0 R15: 00007ffc400b34c8 [ 1535.057543][T16516] [ 1535.060815][T16516] Kernel Offset: disabled [ 1535.065223][T16516] Rebooting in 86400 seconds..