last executing test programs: 11.03243058s ago: executing program 2 (id=529): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, r1, 0x1, 0x0, 0xd4}) 8.842707655s ago: executing program 2 (id=532): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.444193625s ago: executing program 2 (id=535): close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000840)="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", 0x1b3) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071119000000000008510000002000000850000008c00000095000000000000009500000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 8.292582599s ago: executing program 0 (id=536): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b7"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3ff, 0xffffffffffffffa1}}]}]}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r6, 0x0, 0x0, 0x80800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) 7.699210215s ago: executing program 1 (id=538): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'c6xdigio\x00', [0x6, 0x2c, 0x1, 0xfffffffc, 0x81, 0x1000, 0x6a58be8c, 0x20000004, 0x6, 0x1000a, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0x54, 0x20000006, 0x10008, 0x40000fe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x3, 0x80, 0x10, 0x83, 0x4000007, 0xff]}) 7.517326289s ago: executing program 1 (id=539): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x23d8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) membarrier(0x10, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='10 1 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='1\x00', 0x2) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x14, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000007c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x8, 0x569e, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000a40)=[0xffffffffffffffff, r6, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0x1, r5, r5, r6], &(0x7f0000000a80)=[{0x3, 0x2, 0x2, 0x8}, {0x5, 0x2, 0xc, 0xc}, {0x1, 0x2, 0xe, 0xa}, {0x4, 0x4, 0xd}, {0x4, 0x4, 0x1}, {0x4, 0x5, 0x1, 0xc}, {0x1, 0x2, 0xb, 0x6}, {0x1, 0x5, 0xe, 0xa}, {0x0, 0x4, 0x0, 0x1}, {0x2, 0x4, 0x8, 0xc}], 0x10, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4}, 0x14) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) 6.546593963s ago: executing program 3 (id=540): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, r1, 0x1, 0x0, 0xd4}) 6.411646457s ago: executing program 0 (id=541): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') symlink(&(0x7f0000000280)='functions/gser.usb0\x00', &(0x7f00000002c0)='./file0\x00') 6.226306722s ago: executing program 1 (id=542): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000480)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x40055}, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 6.219849572s ago: executing program 3 (id=543): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.026487437s ago: executing program 0 (id=544): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x20048064) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x48c1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='\x00\x00', 0x2) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r8, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2000000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r7, r3}, 0xc) 5.931580639s ago: executing program 1 (id=545): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x40, r1, 0x400, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x6048800) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@bridge_getvlan={0x30, 0x72, 0x4, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xf7, 0x80, 0x5, "", [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0xf, 0x67, 0xff}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x41, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0xfe, 0x4}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x4, 0x5, 0x5, 0xff, 0x1}, 0x31, &(0x7f00000000c0)={0x5, 0xf, 0x31, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4, 0x7f, 0x1}, @generic={0x3, 0x10, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4c, 0xf8, 0x2e, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "373a935e676dd6e010b2300aa8fa67e4"}]}, 0x3, [{0xb6, &(0x7f00000003c0)=@string={0xb6, 0x3, "ad2510bf0ff3b92f21199fc4308fdc541c535ca2574d2626b0c9e9f6c0bbf060efbdb05c16d3972c66d2e07caceb896eab2ef3794380fcd9bca147cfa614c20083b3b851a3077a66b9ebe0c4f31abf60fa8edde987caef66c2c2defca48eaf6d1649c2d02500f88a74f12a70f955fbe8dd2dbc704342f7fa9230bef1c7e84a47c1dc4a856a4e68d88b9c1fc745187b1e1fb8a04c6e901976ca19c5f3ebb94bb6637da7d52747d3c0d32c5a89214d696a3f7ec052"}}, {0x39, &(0x7f0000000240)=@string={0x39, 0x3, "354dba739d906eb1dcd44a03648ebb9e5dd258a3a03ec0c2b69cc049ad08a340626d124064df03fd542a06ba8f04c46c6576a4b5fb6c50"}}, {0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/rnbd-client/ctl/map_device\x00', 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r7, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r7, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000000224)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='psmouse\x00', 0x8) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r9, 0xa) 5.777347093s ago: executing program 3 (id=546): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x7fff, 0x2) socket$inet6(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) 5.11076821s ago: executing program 2 (id=547): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000b, 0x1010, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000011c2bbd7000fbdbdf25000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003006e657464657673696d30000000000000180016801400018010000600000000000400000052080000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYBLOB="f7", @ANYRESDEC], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0xb3) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'macsec0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xe, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x800]}}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000fa", @ANYRES16=r7, @ANYBLOB="050029bd70000000000022000000"], 0x14}}, 0x4000000) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ffffffff0000000002000000183700000200000000000000000000008500789692dcc8cbb4c833b575bd1c2300005200000085200000010000009500"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) 4.794119928s ago: executing program 0 (id=548): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000500)="26ef26da06fcc43959ccc53ee926b47804ba3281fcac63bf954c857621deb501478081", 0x23}, {&(0x7f0000001c40)="65e3d6347d4e5a56100bf4c4f9e05214c8f2d4656aea29151d3ca7f936d66855822d51bf7deed302d625ab319825893b4a84e477c08f8f7afbc81b14", 0x3c}], 0x2}}], 0x1, 0xc840) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c9702", 0x5e, 0x5e, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000005000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newchain={0x248, 0x64, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0xc, 0xf}, {0x7d6eae26a5db4a1c, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1e8, 0x2, [@TCA_CGROUP_POLICE={0x90, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe0, 0x5, 0x9, 0x2, 0x0, {0xc, 0x0, 0x4, 0x2, 0xfffe}, {0x7f, 0x3, 0xfffb, 0x1, 0xfff, 0xfffffffa}, 0x80000000, 0x4, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x8000, 0x3, 0x401, {0x6, 0x1, 0x7, 0x1, 0x5, 0x2}, {0x4, 0x2, 0x268, 0x101, 0x5, 0xe29}, 0x5, 0x2, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_CGROUP_EMATCHES={0x154, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6a9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}, @TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7ff, 0x1, 0x7f}, {0x6, 0x8, 0x0, 0x1, 0x6, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xfb}, {0x10, 0x1, 0x0, "e4"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9f, 0x7, 0x2}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xff, 0x1, 0x1ff}, {0x180000, 0x1000002, 0x0, 0x3, 0x4}}}, @TCF_EM_IPT={0xd0, 0x1, 0x0, 0x0, {{0xfff, 0x9, 0x5}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x9a, 0x5, "f43b8d2dc734be3d64130135a44092e01f23ce6f3f4973054c917bd0f54c9ae1444cf0c1229edff33d6803401a879d8a9a69815b9e730e7176cb65560d97ab0d69f093e71327d6b0a7ff747c6e7257de66d53d93f9a99a1008123ffa21e7c912facd68eea2362489db2bb870cdf791be8068d855942092faf3f11d1c7ef2fd011855dbe1bc9cbaa1664e66e88a4b3c708fcb850a046f"}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4e, 0x7, 0x5d}, {{}, {0x1, 0x0, 0x0, 0x1}}}}]}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x616c}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2, 0xfff3}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x248}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close_range(r3, r6, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 3.695498016s ago: executing program 3 (id=549): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b7"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3ff, 0xffffffffffffffa1}}]}]}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r6, 0x0, 0x0, 0x80800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) 3.467651942s ago: executing program 0 (id=550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x23d8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) membarrier(0x10, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='10 1 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='1\x00', 0x2) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x14, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000007c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x8, 0x569e, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000a40)=[0xffffffffffffffff, r6, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0x1, r5, r5, r6], &(0x7f0000000a80)=[{0x3, 0x2, 0x2, 0x8}, {0x5, 0x2, 0xc, 0xc}, {0x1, 0x2, 0xe, 0xa}, {0x4, 0x4, 0xd}, {0x4, 0x4, 0x1}, {0x4, 0x5, 0x1, 0xc}, {0x1, 0x2, 0xb, 0x6}, {0x1, 0x5, 0xe, 0xa}, {0x0, 0x4, 0x0, 0x1}, {0x2, 0x4, 0x8, 0xc}], 0x10, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4}, 0x14) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) 652.931543ms ago: executing program 3 (id=551): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={r0, r1, 0x1, 0x0, 0xd4}) 614.969684ms ago: executing program 2 (id=552): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(0x0) symlink(&(0x7f0000000280)='functions/gser.usb0\x00', &(0x7f00000002c0)='./file0\x00') 568.250016ms ago: executing program 0 (id=553): r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x423a, &(0x7f0000000680)={0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(0x0, r2, 0x0, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x4, 0x3, 0x0, 0x1}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x800000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x20, 0x0, &(0x7f0000000500)=[@request_death, @decrefs={0x40046307, 0x3}, @decrefs], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000070601080000000000000000000000051d1edab0afdfdc54bd52742786c04d8da9af3899959a5709c8535311a9b3f045ffcf72cb05b2669bf3604befbe54bc9d25a5bd1f37a924c1b00b3e53fd6a71f8bb6b1db2476549eef070427722b5d51a7b38feb74fd257bec35103fe1e50be42544295549f"], 0x14}, 0x1, 0x1000000000000, 0x0, 0x40091}, 0x20000080) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0x13, 0xd, 0x70, 0x0, 0xd, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x4, 0x4}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 475.708868ms ago: executing program 3 (id=554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c8", 0x1}], 0x1) readv(r0, &(0x7f00000006c0)=[{0x0}], 0x1) ppoll(&(0x7f0000000200)=[{r0, 0xc0}], 0x1, 0x0, 0x0, 0x0) 212.778374ms ago: executing program 1 (id=555): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000040)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [{0x8, 0x1}], {0x10, 0x4}, {0x20, 0x6}}, 0x2c, 0x3) 27.418759ms ago: executing program 2 (id=556): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=557): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x7fff, 0x2) socket$inet6(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. [ 83.131783][ T5764] cgroup: Unknown subsys name 'net' [ 83.270943][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.988285][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.120741][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.129414][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.137323][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.145882][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.153758][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.161261][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.193618][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.203758][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.212772][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.213011][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.227006][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.230206][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.242015][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.252492][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.255117][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.267325][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.274876][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.283686][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.350811][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.364315][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.382868][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.404958][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.415820][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.425138][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.931772][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 88.036847][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 88.047733][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 88.157761][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.166072][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.173835][ T5785] bridge_slave_0: entered allmulticast mode [ 88.181051][ T5785] bridge_slave_0: entered promiscuous mode [ 88.221267][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.229951][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.237415][ T5785] bridge_slave_1: entered allmulticast mode [ 88.245114][ T5785] bridge_slave_1: entered promiscuous mode [ 88.328820][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.363845][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.371935][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.379259][ T5776] bridge_slave_0: entered allmulticast mode [ 88.388736][ T5776] bridge_slave_0: entered promiscuous mode [ 88.401429][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.408703][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.416239][ T5776] bridge_slave_1: entered allmulticast mode [ 88.424196][ T5776] bridge_slave_1: entered promiscuous mode [ 88.436229][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.455702][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.462924][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.470098][ T5777] bridge_slave_0: entered allmulticast mode [ 88.477988][ T5777] bridge_slave_0: entered promiscuous mode [ 88.486923][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.494318][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.501626][ T5777] bridge_slave_1: entered allmulticast mode [ 88.508945][ T5777] bridge_slave_1: entered promiscuous mode [ 88.525583][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 88.575505][ T5785] team0: Port device team_slave_0 added [ 88.585644][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.618243][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.629662][ T5785] team0: Port device team_slave_1 added [ 88.658787][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.670127][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.742909][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.749920][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.776335][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.809715][ T5777] team0: Port device team_slave_0 added [ 88.819947][ T5777] team0: Port device team_slave_1 added [ 88.827044][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.834795][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.861199][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.889728][ T5776] team0: Port device team_slave_0 added [ 88.899627][ T5776] team0: Port device team_slave_1 added [ 89.006396][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.013775][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.021084][ T5789] bridge_slave_0: entered allmulticast mode [ 89.028708][ T5789] bridge_slave_0: entered promiscuous mode [ 89.037054][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.044359][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.077208][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.094721][ T5785] hsr_slave_0: entered promiscuous mode [ 89.101880][ T5785] hsr_slave_1: entered promiscuous mode [ 89.109643][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.119909][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.149272][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.160752][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.170878][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.178195][ T5789] bridge_slave_1: entered allmulticast mode [ 89.185916][ T5789] bridge_slave_1: entered promiscuous mode [ 89.203385][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.210428][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.237102][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.237482][ T5781] Bluetooth: hci0: command tx timeout [ 89.262182][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.269283][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.295569][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.327748][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.340118][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.383314][ T5781] Bluetooth: hci2: command tx timeout [ 89.389024][ T5781] Bluetooth: hci1: command tx timeout [ 89.431128][ T5777] hsr_slave_0: entered promiscuous mode [ 89.438080][ T5777] hsr_slave_1: entered promiscuous mode [ 89.444848][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.453042][ T5777] Cannot create hsr debugfs directory [ 89.462662][ T5781] Bluetooth: hci3: command tx timeout [ 89.525648][ T5789] team0: Port device team_slave_0 added [ 89.560663][ T5776] hsr_slave_0: entered promiscuous mode [ 89.568261][ T5776] hsr_slave_1: entered promiscuous mode [ 89.575814][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.584202][ T5776] Cannot create hsr debugfs directory [ 89.595700][ T5789] team0: Port device team_slave_1 added [ 89.751708][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.758939][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.785659][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.798725][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.805821][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.831934][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.048987][ T5789] hsr_slave_0: entered promiscuous mode [ 90.055964][ T5789] hsr_slave_1: entered promiscuous mode [ 90.062214][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.069979][ T5789] Cannot create hsr debugfs directory [ 90.134182][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.157532][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.177526][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.188762][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.337767][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.348673][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.378583][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.413523][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.463390][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.479227][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.507750][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.526475][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.634253][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.650917][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.679969][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.693239][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.810556][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.830136][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.890895][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.910944][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.928953][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.936373][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.951864][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.977864][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.985061][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.029072][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.036397][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.055606][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.062834][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.091457][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.101608][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.150686][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.157904][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.196619][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.203846][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.219615][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.241646][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.291807][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.299030][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.309499][ T5781] Bluetooth: hci0: command tx timeout [ 91.354651][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.361833][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.463132][ T5784] Bluetooth: hci2: command tx timeout [ 91.468674][ T5781] Bluetooth: hci1: command tx timeout [ 91.520505][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.543446][ T5781] Bluetooth: hci3: command tx timeout [ 91.830005][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.969484][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.999094][ T5777] veth0_vlan: entered promiscuous mode [ 92.032301][ T5777] veth1_vlan: entered promiscuous mode [ 92.046108][ T8] cfg80211: failed to load regulatory.db [ 92.159310][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.169973][ T5777] veth0_macvtap: entered promiscuous mode [ 92.201236][ T5785] veth0_vlan: entered promiscuous mode [ 92.220753][ T5777] veth1_macvtap: entered promiscuous mode [ 92.244961][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.275261][ T5785] veth1_vlan: entered promiscuous mode [ 92.295416][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.308399][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.335020][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.344666][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.354889][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.364007][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.406879][ T5789] veth0_vlan: entered promiscuous mode [ 92.437126][ T5785] veth0_macvtap: entered promiscuous mode [ 92.462232][ T5789] veth1_vlan: entered promiscuous mode [ 92.496065][ T5785] veth1_macvtap: entered promiscuous mode [ 92.519593][ T5776] veth0_vlan: entered promiscuous mode [ 92.570335][ T5776] veth1_vlan: entered promiscuous mode [ 92.580936][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.593536][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.606139][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.619071][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.630239][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.642049][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.707106][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.717604][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.726988][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.735913][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.760437][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.774227][ T5789] veth0_macvtap: entered promiscuous mode [ 92.789400][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.821184][ T5789] veth1_macvtap: entered promiscuous mode [ 92.871231][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.877316][ T5776] veth0_macvtap: entered promiscuous mode [ 92.888388][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.947648][ T5776] veth1_macvtap: entered promiscuous mode [ 92.987898][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.000244][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.011726][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.026648][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.039420][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.059930][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.071525][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.081601][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.094935][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.109088][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.126526][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.151908][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.209117][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.218425][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.232672][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.241451][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.275616][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.286334][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.297022][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.321659][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.336147][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.348473][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.358660][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.372902][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.383327][ T5781] Bluetooth: hci0: command tx timeout [ 93.396157][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.456314][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.474682][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.488889][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.502219][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.513804][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.526081][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.543263][ T5781] Bluetooth: hci1: command tx timeout [ 93.548729][ T5781] Bluetooth: hci2: command tx timeout [ 93.561260][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.588295][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.601705][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.612175][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.623136][ T5781] Bluetooth: hci3: command tx timeout [ 93.631785][ T5846] Zero length message leads to an empty skb [ 93.640323][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.205531][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.308085][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.783278][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.801222][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.868738][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.877501][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.963739][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.971599][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.197191][ T5862] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4'. [ 95.430139][ T5865] serio: Serial port ttynull [ 95.463025][ T5781] Bluetooth: hci0: command tx timeout [ 95.498356][ T5871] jffs2: notice: (5871) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.551395][ T5871] tipc: Started in network mode [ 95.556624][ T5871] tipc: Node identity ac14140f, cluster identity 4711 [ 95.564910][ T5871] tipc: New replicast peer: 255.255.255.255 [ 95.598083][ T5871] tipc: Enabled bearer , priority 10 [ 95.623175][ T5784] Bluetooth: hci1: command tx timeout [ 95.632655][ T5781] Bluetooth: hci2: command tx timeout [ 95.705419][ T5781] Bluetooth: hci3: command tx timeout [ 96.887377][ T789] tipc: Node number set to 2886997007 [ 97.315748][ T5891] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.338544][ T5891] IPv6: Can't replace route, no match found [ 97.368483][ T5893] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 97.379924][ T5893] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.490707][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.490743][ T28] audit: type=1326 audit(1787851456.020:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31419e0d9 code=0x7ffc0000 [ 97.490798][ T28] audit: type=1326 audit(1787851456.020:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31419e0d9 code=0x7ffc0000 [ 97.570614][ T28] audit: type=1326 audit(1787851456.080:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb31419dd6b code=0x7ffc0000 [ 97.665221][ T28] audit: type=1326 audit(1787851456.080:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb31419dd6b code=0x7ffc0000 [ 97.694445][ T28] audit: type=1326 audit(1787851456.080:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb31419dd6b code=0x7ffc0000 [ 97.735739][ T28] audit: type=1326 audit(1787851456.080:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb31419dd6b code=0x7ffc0000 [ 97.759920][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 97.802710][ T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 97.811176][ T8] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 97.834641][ T28] audit: type=1326 audit(1787851456.080:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb31419dd6b code=0x7ffc0000 [ 97.863779][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.895979][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.907312][ T28] audit: type=1326 audit(1787851456.080:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb31419dd6b code=0x7ffc0000 [ 97.936398][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 97.960304][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.981488][ T28] audit: type=1326 audit(1787851456.080:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb31419dd6b code=0x7ffc0000 [ 98.005854][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.028964][ T5906] jffs2: notice: (5906) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 98.050681][ T28] audit: type=1326 audit(1787851456.080:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.1.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb31419dd6b code=0x7ffc0000 [ 98.087326][ T8] usbtmc 3-1:16.0: bulk endpoints not found [ 98.175164][ T5906] tipc: Started in network mode [ 98.200609][ T5906] tipc: Node identity ac14140f, cluster identity 4711 [ 98.223650][ T5906] tipc: New replicast peer: 255.255.255.255 [ 98.231853][ T5906] tipc: Enabled bearer , priority 10 [ 98.407940][ T5916] ntfs3: nullb0: Primary boot signature is not NTFS. [ 98.417248][ T5916] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 99.353589][ T5842] tipc: Node number set to 2886997007 [ 99.868046][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.072536][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 100.111165][ T8] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 100.135192][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.164917][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.205444][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.239031][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.254218][ T5842] usb 3-1: USB disconnect, device number 2 [ 100.312506][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.321647][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.622600][ T8] usb 2-1: usb_control_msg returned -32 [ 100.628362][ T8] usbtmc 2-1:16.0: can't read capabilities [ 100.786391][ T5943] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 101.050291][ T5947] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 101.258975][ T789] usb 2-1: USB disconnect, device number 2 [ 101.642810][ T5955] netlink: 'syz.3.32': attribute type 1 has an invalid length. [ 101.695448][ T5957] jffs2: notice: (5957) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.781163][ T5957] tipc: Enabling of bearer rejected, already enabled [ 101.818212][ T5958] netlink: 'syz.3.32': attribute type 10 has an invalid length. [ 101.836511][ T5958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.32'. [ 101.872911][ T5958] dummy0: entered promiscuous mode [ 102.083981][ T5967] syzkaller0: entered promiscuous mode [ 102.092771][ T5967] syzkaller0: entered allmulticast mode [ 102.281715][ T5856] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.462486][ T5856] usb 3-1: Using ep0 maxpacket: 8 [ 103.039663][ T5856] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 103.048135][ T5856] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 103.058481][ T5856] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.068752][ T5856] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.078632][ T5856] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 103.092204][ T5856] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.101417][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.123400][ T5856] usbtmc 3-1:16.0: bulk endpoints not found [ 105.388301][ T8] usb 3-1: USB disconnect, device number 3 [ 106.238164][ T5988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.44'. [ 106.394350][ T5999] warning: `syz.2.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.411504][ T5999] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 106.440037][ T5999] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.110459][ T6009] syz.1.49 uses obsolete (PF_INET,SOCK_PACKET) [ 110.292007][ T6035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.57'. [ 111.792811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.935609][ T6043] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 111.948158][ T5781] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 112.779347][ T6073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.67'. [ 112.814629][ T5781] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 112.989658][ T6081] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 116.663603][ T6099] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 117.643708][ T6119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.82'. [ 119.882577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 121.107939][ T6143] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.118208][ T6143] IPv6: Can't replace route, no match found [ 121.200454][ T5781] Bluetooth: hci3: ISO packet too small [ 121.936571][ T6159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.93'. [ 122.790453][ T6181] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 123.605240][ T6177] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 124.097901][ T6196] ntfs3: nullb0: Primary boot signature is not NTFS. [ 124.196868][ T6196] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 127.143886][ T6252] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 129.097692][ T6264] ntfs3: nullb0: Primary boot signature is not NTFS. [ 129.210187][ T6264] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 129.420643][ T6266] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 130.508417][ T6290] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 131.607668][ T6300] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 132.371994][ T6307] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 132.681785][ T6307] (null): rxe_set_mtu: Set mtu to 1024 [ 132.700202][ T6307] wg2 speed is unknown, defaulting to 1000 [ 132.717166][ T6307] wg2 speed is unknown, defaulting to 1000 [ 132.742761][ T6307] wg2 speed is unknown, defaulting to 1000 [ 133.023441][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.033215][ T6329] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 133.047090][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.242471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.872197][ T6307] infiniband syz2: set active [ 136.878615][ T5856] wg2 speed is unknown, defaulting to 1000 [ 136.926406][ T6307] infiniband syz2: added wg2 [ 136.958428][ T6307] syz2: rxe_create_cq: returned err = -12 [ 136.967910][ T6307] infiniband syz2: Couldn't create ib_mad CQ [ 137.003875][ T6307] infiniband syz2: Couldn't open port 1 [ 137.198876][ T6307] RDS/IB: syz2: added [ 137.204353][ T6307] smc: adding ib device syz2 with port count 1 [ 137.210854][ T6307] smc: ib device syz2 port 1 has pnetid [ 137.467501][ T6346] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 137.520003][ T55] wg2 speed is unknown, defaulting to 1000 [ 137.544689][ T6307] wg2 speed is unknown, defaulting to 1000 [ 137.859216][ T6355] CIFS: Attempting to mount //127.0.0.1/share [ 137.887528][ T6355] CIFS: VFS: Error connecting to socket. Aborting operation. [ 137.902887][ T6355] CIFS: VFS: cifs_mount failed w/return code = -111 [ 137.917116][ T6357] jffs2: notice: (6357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 138.052986][ T6357] tipc: Enabling of bearer rejected, already enabled [ 138.155094][ T6364] ntfs3: nullb0: Primary boot signature is not NTFS. [ 138.162045][ T6364] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 138.178964][ T6361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.192893][ T6362] misc userio: Invalid payload size [ 138.200894][ T6362] misc userio: Invalid payload size [ 138.344556][ T6307] wg2 speed is unknown, defaulting to 1000 [ 138.486789][ T6361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.663856][ T6361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.759536][ T6368] syzkaller0: entered promiscuous mode [ 138.772480][ T6368] syzkaller0: entered allmulticast mode [ 138.788280][ T6307] wg2 speed is unknown, defaulting to 1000 [ 140.612436][ T6361] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.800253][ T6307] wg2 speed is unknown, defaulting to 1000 [ 140.975450][ T6375] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.113064][ T6361] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.197352][ T6361] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.273135][ T6381] IPv6: Can't replace route, no match found [ 141.311799][ T6361] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.387558][ T6361] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.767787][ T6390] CIFS: Attempting to mount //127.0.0.1/share [ 142.016903][ T6396] jffs2: notice: (6396) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.115622][ T6396] tipc: Started in network mode [ 142.204296][ T6396] tipc: Node identity ac14140f, cluster identity 4711 [ 142.251333][ T6396] tipc: New replicast peer: 255.255.255.255 [ 142.291422][ T6396] tipc: Enabled bearer , priority 10 [ 142.580764][ T5781] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 142.596872][ T6390] CIFS: VFS: cifs_mount failed w/return code = -112 [ 142.906859][ T6412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 143.402651][ T5856] tipc: Node number set to 2886997007 [ 143.549576][ T6426] syzkaller0: entered promiscuous mode [ 143.572860][ T6426] syzkaller0: entered allmulticast mode [ 143.675044][ T6431] jffs2: notice: (6431) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 143.778599][ T6431] tipc: Enabling of bearer rejected, already enabled [ 144.104730][ T6437] CIFS: Attempting to mount //127.0.0.1/share [ 144.236875][ T5781] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 144.958946][ T6437] CIFS: VFS: cifs_mount failed w/return code = -512 [ 145.707206][ T6460] jffs2: notice: (6460) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 145.763875][ T6460] tipc: Enabling of bearer rejected, already enabled [ 150.373476][ T6489] CIFS: Attempting to mount //127.0.0.1/share [ 152.752628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 152.850854][ T6489] CIFS: VFS: cifs_mount failed w/return code = -112 [ 153.229345][ T6502] jffs2: notice: (6502) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 153.282025][ T6502] tipc: Enabling of bearer rejected, already enabled [ 153.734558][ T6510] syzkaller0: entered promiscuous mode [ 153.741624][ T6510] syzkaller0: entered allmulticast mode [ 154.366402][ T6518] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 155.721524][ T6526] serio: Serial port ttynull [ 158.351933][ T6526] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 160.432637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 160.632541][ T1088] rtrs_client L1782: : Resolving route failed, err: -19 [ 160.902844][ T6526] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 161.103675][ T6547] IPv6: Can't replace route, no match found [ 161.479122][ T6558] jffs2: notice: (6558) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 162.108839][ T6570] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 165.217103][ T6577] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 167.858865][ T6589] serio: Serial port ttynull [ 167.986798][ T6591] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 168.070567][ T3519] rtrs_client L1782: : Resolving route failed, err: -19 [ 168.138634][ T6591] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 168.723919][ T6614] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 169.292430][ T6613] CIFS: Attempting to mount //127.0.0.1/share [ 169.513490][ T6613] CIFS: VFS: cifs_mount failed w/return code = -512 [ 173.350717][ T6642] serio: Serial port ttynull [ 175.984457][ T6652] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 176.088538][ T6653] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 178.268312][ T6658] CIFS: Attempting to mount //127.0.0.1/share [ 178.279381][ T49] rtrs_client L1782: : Resolving route failed, err: -19 [ 178.439384][ T6653] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 179.243988][ T6658] CIFS: VFS: cifs_mount failed w/return code = -112 [ 181.221890][ T6692] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 184.684769][ T6702] serio: Serial port ttynull [ 184.809900][ T6707] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 185.707343][ T6706] CIFS: Attempting to mount //127.0.0.1/share [ 187.064784][ T63] rtrs_client L1782: : Resolving route failed, err: -19 [ 187.153529][ T6706] CIFS: VFS: cifs_mount failed w/return code = -112 [ 187.271939][ T6707] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 190.379844][ T6737] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 191.019354][ T6745] CIFS: Attempting to mount //127.0.0.1/share [ 193.618894][ T6745] CIFS: VFS: cifs_mount failed w/return code = -112 [ 193.675662][ T6757] jffs2: notice: (6757) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 193.723110][ T6757] tipc: Enabling of bearer rejected, already enabled [ 193.816227][ T6755] serio: Serial port ttynull [ 193.910607][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.249'. [ 194.066071][ T6760] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 195.511283][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.522864][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.409286][ T1088] rtrs_client L1782: : Resolving route failed, err: -19 [ 196.602548][ T6760] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 196.954268][ T6778] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 198.144238][ T6791] CIFS: Attempting to mount //127.0.0.1/share [ 198.418795][ T6805] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.458569][ T6805] IPv6: Can't replace route, no match found [ 198.473685][ T5781] Bluetooth: hci2: ISO packet too small [ 198.495003][ T6808] netlink: 756 bytes leftover after parsing attributes in process `syz.3.259'. [ 198.574002][ T6807] serio: Serial port ttynull [ 198.814365][ T6807] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 198.927469][ T6791] CIFS: VFS: cifs_mount failed w/return code = -112 [ 199.047054][ T63] rtrs_client L1782: : Resolving route failed, err: -19 [ 200.669384][ T6803] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 201.175710][ T6807] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 201.589515][ T6820] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 202.633915][ T6829] jffs2: notice: (6829) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 202.753279][ T6829] tipc: Enabling of bearer rejected, already enabled [ 203.310860][ T6839] IPv6: Can't replace route, no match found [ 203.336633][ T5781] Bluetooth: hci2: ISO packet too small [ 203.355972][ T6841] CIFS: Attempting to mount //127.0.0.1/share [ 205.691287][ T6841] CIFS: VFS: cifs_mount failed w/return code = -112 [ 208.706472][ T6859] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 210.119306][ T6880] CIFS: Attempting to mount //127.0.0.1/share [ 210.129416][ T6879] IPv6: Can't replace route, no match found [ 210.138264][ T5786] Bluetooth: hci2: ISO packet too small [ 211.099994][ T6880] CIFS: VFS: cifs_mount failed w/return code = -512 [ 213.007958][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 213.014284][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 213.020451][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 216.365990][ T6903] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 217.120157][ T6911] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.137760][ T6911] IPv6: Can't replace route, no match found [ 217.150780][ T5784] Bluetooth: hci1: ISO packet too small [ 217.379439][ T6917] CIFS: Attempting to mount //127.0.0.1/share [ 218.552292][ T6931] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 218.989628][ T6917] CIFS: VFS: cifs_mount failed w/return code = -112 [ 219.606426][ T6943] fuse: Unknown parameter 'grou00000000000000000000' [ 219.816506][ T5784] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 220.671764][ T6964] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 221.655036][ T6970] serio: Serial port ttynull [ 222.630529][ T5784] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 222.757544][ T6975] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 222.988285][ T6984] fuse: Unknown parameter 'grou00000000000000000000' [ 224.007585][ T1088] rtrs_client L1782: : Resolving route failed, err: -19 [ 224.197267][ T6975] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 224.432650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 225.659735][ T7016] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 226.482671][ T5784] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 227.587669][ T7030] serio: Serial port ttynull [ 227.603513][ T7022] syzkaller0: entered promiscuous mode [ 227.609131][ T7022] syzkaller0: entered allmulticast mode [ 227.876245][ T7035] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 228.026301][ T1082] rtrs_client L1782: : Resolving route failed, err: -19 [ 228.123995][ T7035] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 229.973384][ T7039] fuse: Unknown parameter 'grou00000000000000000000' [ 231.204790][ T7056] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 231.272871][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.333'. [ 231.489422][ T7064] comedi comedi0: pcl724: I/O port conflict (0x9,4) [ 231.711190][ T7066] syzkaller0: entered promiscuous mode [ 231.718227][ T7066] syzkaller0: entered allmulticast mode [ 232.159945][ T7082] fuse: Unknown parameter 'group_i00000000000000000000' [ 236.008797][ T7101] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 236.684130][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.347'. [ 236.974446][ T7114] jffs2: notice: (7114) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 237.167914][ T7114] tipc: Started in network mode [ 237.204317][ T7114] tipc: Node identity ac14140f, cluster identity 4711 [ 237.295671][ T7114] tipc: New replicast peer: 255.255.255.255 [ 237.903160][ T7114] tipc: Enabled bearer , priority 10 [ 238.198126][ T7126] syzkaller0: entered promiscuous mode [ 238.236587][ T7126] syzkaller0: entered allmulticast mode [ 238.458978][ T7132] serio: Serial port ttynull [ 238.711465][ T7139] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 239.408971][ T63] rtrs_client L1782: : Resolving route failed, err: -19 [ 239.478625][ T7139] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 241.047801][ T5842] tipc: Node number set to 2886997007 [ 241.741727][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'. [ 245.729678][ T7178] serio: Serial port ttynull [ 245.902845][ T7187] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 246.740526][ T7178] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 248.922485][ T49] rtrs_client L1782: : Resolving route failed, err: -19 [ 249.290853][ T7178] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 249.747556][ T7204] jffs2: notice: (7204) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 249.807555][ T7204] tipc: Enabling of bearer rejected, already enabled [ 253.491703][ T7231] serio: Serial port ttynull [ 253.655998][ T7237] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 255.865915][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.872943][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.984548][ T1114] rtrs_client L1782: : Resolving route failed, err: -19 [ 256.221869][ T7237] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 256.301921][ T7245] jffs2: notice: (7245) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 256.424357][ T7245] tipc: Enabling of bearer rejected, already enabled [ 256.670341][ T7259] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 257.141449][ T5784] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 257.767756][ T7274] fuse: Bad value for 'user_id' [ 258.427223][ T7282] serio: Serial port ttynull [ 258.508483][ T7286] jffs2: notice: (7286) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 258.697855][ T7284] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 259.243720][ T7286] tipc: Enabling of bearer rejected, already enabled [ 259.282029][ T49] rtrs_client L1782: : Resolving route failed, err: -19 [ 259.336506][ T7284] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 259.588531][ T5784] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 259.997588][ T7305] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 261.156757][ T7314] fuse: Bad value for 'fd' [ 261.446089][ T7320] serio: Serial port ttynull [ 261.471816][ T7323] jffs2: notice: (7323) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 261.521210][ T7323] tipc: Enabling of bearer rejected, already enabled [ 261.621088][ T7330] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 263.858357][ T12] rtrs_client L1782: : Resolving route failed, err: -19 [ 264.234580][ T7342] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 265.067638][ T7330] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 266.383667][ T7350] fuse: Bad value for 'fd' [ 266.434924][ T7352] nbd2: detected capacity change from 0 to 8 [ 266.508280][ T7355] block nbd2: shutting down sockets [ 266.518132][ T5851] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.529769][ T5851] Buffer I/O error on dev nbd2, logical block 0, async page read [ 266.551255][ T5851] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.560615][ T5851] Buffer I/O error on dev nbd2, logical block 0, async page read [ 266.569816][ T5780] udevd: attempt to access beyond end of device [ 266.569816][ T5780] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 266.623927][ T5780] Buffer I/O error on dev nbd2, logical block 0, async page read [ 266.624055][ T7352] binder: 7351:7352 ioctl 4018620d 0 returned -22 [ 266.631783][ T5780] ldm_validate_partition_table(): Disk read failed. [ 266.631836][ T5780] Dev nbd2: unable to read RDB block 0 [ 266.631865][ T5780] nbd2: unable to read partition table [ 266.642953][ T5780] nbd2: partition table beyond EOD, truncated [ 267.069316][ T5784] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 267.082015][ T7372] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 267.117446][ T7372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.398535][ T7381] jffs2: notice: (7381) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 267.439956][ T7372] block device autoloading is deprecated and will be removed. [ 267.488400][ T7381] tipc: Enabling of bearer rejected, already enabled [ 267.516307][ T7379] random: crng reseeded on system resumption [ 267.926324][ T7387] serio: Serial port ttynull [ 268.139780][ T7394] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 268.779083][ T11] rtrs_client L1782: : Resolving route failed, err: -19 [ 269.060871][ T7394] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 269.399229][ T7402] fuse: Bad value for 'fd' [ 271.733334][ T5784] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 272.229894][ T7424] serio: Serial port ttynull [ 272.540487][ T7436] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 273.035558][ T1082] rtrs_client L1782: : Resolving route failed, err: -19 [ 273.536587][ T7436] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 273.839579][ T7443] fuse: Bad value for 'fd' [ 273.943852][ T5784] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 274.621236][ T7466] serio: Serial port ttynull [ 277.208240][ T7466] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 277.346399][ T5784] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 277.416643][ T2978] rtrs_client L1782: : Resolving route failed, err: -19 [ 277.509370][ T7466] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 277.635065][ T7488] fuse: Bad value for 'fd' [ 279.872794][ T5784] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 281.236949][ T7522] fuse: Bad value for 'fd' [ 281.239177][ T7517] serio: Serial port ttynull [ 281.467977][ T7517] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 281.861555][ T1082] rtrs_client L1782: : Resolving route failed, err: -19 [ 281.963076][ T7517] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 282.517148][ T5784] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 284.239180][ T7567] fuse: Invalid rootmode [ 285.105151][ T7574] serio: Serial port ttynull [ 285.336308][ T7590] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 286.012148][ T63] rtrs_client L1782: : Resolving route failed, err: -19 [ 286.146907][ T7590] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 286.297310][ T5784] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 286.312814][ T5821] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 286.520078][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 286.536175][ T5821] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 286.545663][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.554367][ T5821] usb 4-1: Product: syz [ 286.559119][ T5821] usb 4-1: Manufacturer: syz [ 286.564225][ T5821] usb 4-1: SerialNumber: syz [ 286.571992][ T5821] usb 4-1: config 0 descriptor?? [ 286.579206][ T7597] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 286.591651][ T5821] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 286.764048][ T7613] fuse: Invalid rootmode [ 287.303735][ T5842] usb 4-1: USB disconnect, device number 2 [ 289.705605][ T7627] serio: Serial port ttynull [ 289.719684][ T5784] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 289.950635][ T7645] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 290.470554][ T11] rtrs_client L1782: : Resolving route failed, err: -19 [ 290.744516][ T7645] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 290.767512][ T7654] fuse: Invalid rootmode [ 292.553477][ T55] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 292.811105][ T55] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 292.836212][ T55] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 292.852356][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.896687][ T55] usb 3-1: Product: syz [ 292.900989][ T55] usb 3-1: Manufacturer: syz [ 292.946891][ T55] usb 3-1: SerialNumber: syz [ 292.990911][ T55] usb 3-1: config 0 descriptor?? [ 293.022772][ T7662] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 293.041979][ T55] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 293.203968][ T7684] serio: Serial port ttynull [ 293.238679][ T7690] fuse: Bad value for 'rootmode' [ 293.455864][ T5842] usb 3-1: USB disconnect, device number 4 [ 293.551707][ T7693] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 293.814737][ T1088] rtrs_client L1782: : Resolving route failed, err: -19 [ 293.985323][ T7693] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 294.004171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 295.927654][ T7733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.522'. [ 296.087926][ T7734] serio: Serial port ttynull [ 297.069596][ T7748] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 297.333125][ T7748] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 298.243491][ T5842] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 298.591717][ T5842] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 298.794447][ T5842] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 298.946257][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.095112][ T5842] usb 2-1: Product: syz [ 299.170544][ T5842] usb 2-1: Manufacturer: syz [ 299.243114][ T5842] usb 2-1: SerialNumber: syz [ 299.446387][ T5842] usb 2-1: config 0 descriptor?? [ 299.538953][ T7761] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.746950][ T5842] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 300.374418][ T5821] usb 2-1: USB disconnect, device number 3 [ 300.811251][ T7799] jffs2: notice: (7799) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 301.546569][ T7819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.537'. [ 301.686282][ T7823] comedi comedi3: c6xdigio: I/O port conflict (0x6,3) [ 302.810535][ T7812] syz.2.535 (7812) used greatest stack depth: 17896 bytes left [ 303.534600][ T7853] misc userio: Invalid payload size [ 303.550334][ T7853] misc userio: Invalid payload size [ 303.571238][ T7850] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.822497][ T55] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 304.025280][ T55] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 304.049275][ T55] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 304.070046][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.092378][ T55] usb 4-1: Product: syz [ 304.096673][ T55] usb 4-1: Manufacturer: syz [ 304.131955][ T55] usb 4-1: SerialNumber: syz [ 304.144732][ T55] usb 4-1: config 0 descriptor?? [ 304.150755][ T7855] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 304.201004][ T55] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 304.393536][ T7866] netlink: 44 bytes leftover after parsing attributes in process `syz.2.547'. [ 304.471409][ T5821] usb 4-1: USB disconnect, device number 3 [ 304.580950][ T7850] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.655613][ T7873] netlink: 36 bytes leftover after parsing attributes in process `syz.0.548'. [ 304.712471][ T789] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 305.552950][ T7850] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.574537][ T789] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.587081][ T789] usb 3-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 305.598618][ T789] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.607763][ T789] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.623497][ T789] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.632987][ T789] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.641090][ T789] usb 3-1: Product: syz [ 305.652327][ T789] usb 3-1: Manufacturer: syz [ 305.677673][ T789] cdc_wdm 3-1:1.0: skipping garbage [ 305.685062][ T789] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 305.828082][ T7850] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.605250][ T7850] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.700479][ T7850] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.832728][ T7850] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.883854][ T8] usb 3-1: USB disconnect, device number 5 [ 308.886481][ T7850] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.904998][ T7903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.553'. [ 309.146622][ T7913] jffs2: notice: (7913) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 309.237574][ T5777] ------------[ cut here ]------------ [ 309.243595][ T5777] kernel BUG at fs/jffs2/nodelist.c:462! [ 309.279484][ T5777] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 309.285662][ T5777] CPU: 0 PID: 5777 Comm: syz-executor Not tainted syzkaller #0 [ 309.293258][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.303384][ T5777] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 309.309363][ T5777] Code: 07 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 72 fc 07 ff e9 42 fe ff ff e8 b8 7e af fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 309.329015][ T5777] RSP: 0000:ffffc9000454fa98 EFLAGS: 00010293 [ 309.335154][ T5777] RAX: ffffffff82d7f3b8 RBX: ffff88805f991180 RCX: ffff88807aabbc00 [ 309.343153][ T5777] RDX: 0000000000000000 RSI: ffff88805f991180 RDI: ffff88805e0d0000 [ 309.351151][ T5777] RBP: 0000000000000006 R08: ffff88805e0d036b R09: 1ffff1100bc1a06d [ 309.359172][ T5777] R10: dffffc0000000000 R11: ffffed100bc1a06e R12: ffff88805f991180 [ 309.367166][ T5777] R13: dffffc0000000000 R14: ffff88805f9911a0 R15: ffff88805e0d0000 [ 309.375161][ T5777] FS: 000055555f3bc500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 309.384118][ T5777] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.390731][ T5777] CR2: 00007f00388cd080 CR3: 0000000061c02000 CR4: 00000000003506f0 [ 309.398735][ T5777] Call Trace: [ 309.402037][ T5777] [ 309.404999][ T5777] ? jffs2_do_clear_inode+0x314/0x390 [ 309.410400][ T5777] jffs2_do_clear_inode+0x31f/0x390 [ 309.415636][ T5777] ? jffs2_statfs+0x370/0x370 [ 309.420340][ T5777] evict+0x4b7/0x8a0 [ 309.424269][ T5777] ? xa_load+0x64/0x2e0 [ 309.428453][ T5777] ? proc_nr_inodes+0x230/0x230 [ 309.433333][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 309.438566][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 309.443789][ T5777] evict_inodes+0x64a/0x6e0 [ 309.448320][ T5777] ? clear_inode+0x150/0x150 [ 309.452941][ T5777] ? jffs2_sync_fs+0x97/0xa0 [ 309.457555][ T5777] generic_shutdown_super+0x97/0x2b0 [ 309.462886][ T5777] kill_mtd_super+0x23/0x70 [ 309.467416][ T5777] jffs2_kill_sb+0x96/0xb0 [ 309.471859][ T5777] deactivate_locked_super+0x97/0x100 [ 309.477253][ T5777] cleanup_mnt+0x3d7/0x460 [ 309.481698][ T5777] task_work_run+0x1d4/0x260 [ 309.486322][ T5777] ? task_work_cancel+0x220/0x220 [ 309.491378][ T5777] ? exit_to_user_mode_loop+0x3b/0x110 [ 309.496873][ T5777] exit_to_user_mode_loop+0xe6/0x110 [ 309.502190][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 309.507787][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 309.513286][ T5777] do_syscall_64+0x61/0xb0 [ 309.517736][ T5777] ? clear_bhb_loop+0x40/0x90 [ 309.522448][ T5777] ? clear_bhb_loop+0x40/0x90 [ 309.527156][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.533079][ T5777] RIP: 0033:0x7fb31419f317 [ 309.537537][ T5777] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 309.557165][ T5777] RSP: 002b:00007fff24657c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 309.565650][ T5777] RAX: 0000000000000000 RBX: 00007fb314234474 RCX: 00007fb31419f317 [ 309.573651][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff24657d10 [ 309.581657][ T5777] RBP: 00007fff24657d10 R08: 00007fff24658d10 R09: 00000000ffffffff [ 309.589676][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff24658da0 [ 309.597675][ T5777] R13: 00007fb314234474 R14: 000000000004b799 R15: 00007fff24658de0 [ 309.605677][ T5777] [ 309.608726][ T5777] Modules linked in: [ 309.621680][ T5777] ---[ end trace 0000000000000000 ]--- [ 309.644424][ T5777] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 309.658705][ T5777] Code: 07 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 72 fc 07 ff e9 42 fe ff ff e8 b8 7e af fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 309.723627][ T5777] RSP: 0000:ffffc9000454fa98 EFLAGS: 00010293 [ 309.729792][ T5777] RAX: ffffffff82d7f3b8 RBX: ffff88805f991180 RCX: ffff88807aabbc00 [ 309.739261][ T5777] RDX: 0000000000000000 RSI: ffff88805f991180 RDI: ffff88805e0d0000 [ 309.748730][ T5777] RBP: 0000000000000006 R08: ffff88805e0d036b R09: 1ffff1100bc1a06d [ 309.759375][ T5777] R10: dffffc0000000000 R11: ffffed100bc1a06e R12: ffff88805f991180 [ 309.767576][ T5777] R13: dffffc0000000000 R14: ffff88805f9911a0 R15: ffff88805e0d0000 [ 309.782843][ T5777] FS: 000055555f3bc500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 309.791870][ T5777] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.805376][ T5777] CR2: 00007f0038b46368 CR3: 0000000061c02000 CR4: 00000000003526e0 [ 309.823831][ T5777] Kernel panic - not syncing: Fatal exception [ 309.830590][ T5777] Kernel Offset: disabled [ 309.834935][ T5777] Rebooting in 86400 seconds..