last executing test programs: 15.444694955s ago: executing program 2 (id=38): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x4, {0x0, 0x0, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14d556a62676ae36e1d165"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xe2bf268aaf6847d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff7, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x0, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0xffffffff, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x0, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.537080195s ago: executing program 2 (id=41): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 14.473830806s ago: executing program 1 (id=43): ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f00000004c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f00008ba000/0x3000)=nil, 0x4000, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x20004001}, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0) 10.385106639s ago: executing program 1 (id=44): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800010, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r1]) chdir(&(0x7f0000000240)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x0, 0x6000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 10.375863549s ago: executing program 3 (id=45): getpid() bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4c4ac000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24008030) 10.227737511s ago: executing program 2 (id=46): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1330, 0x1168, 0x178, 0xc, 0x1168, 0x178, 0x1260, 0x258, 0x258, 0x1260, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'pim6reg0\x00', 'netpci0\x00'}, 0x0, 0x1100, 0x1168, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1390) 9.576946778s ago: executing program 1 (id=49): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x4, {0x0, 0x0, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14d556a62676ae36e1d165"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xe2bf268aaf6847d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff7, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x0, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0xffffffff, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x0, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.493222049s ago: executing program 3 (id=51): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@id={0x2, 0x0, @auto="5eb42f68f3eacbf1658de17e55099f85"}}) 8.493022209s ago: executing program 2 (id=52): ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f00000004c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f00008ba000/0x3000)=nil, 0x4000, 0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x20004001}, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x4161, 0x0) 8.366863491s ago: executing program 3 (id=53): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x81, 0x80, 0x10, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xd, 0xd, 0x2, 0x9}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6f, 0x6, 0x35}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x2, 0x9}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x1, 0x8, 0x7, 0xef, 0xba}, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x458}}, {0x0, 0x0}]}) 7.376862001s ago: executing program 1 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x500000b, 0x204031, 0xffffffffffffffff, 0x47aef000) 7.292684722s ago: executing program 2 (id=55): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)={0x29, 0x4, 0x0, {0x1, 0xc2f, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff80000a4c, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) 6.668039809s ago: executing program 1 (id=57): openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 5.473116761s ago: executing program 0 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) 5.421836902s ago: executing program 3 (id=60): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) 4.017631827s ago: executing program 0 (id=61): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 3.682117751s ago: executing program 1 (id=62): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000340)={[{@data_err_abort}]}, 0x1, 0xbe8, &(0x7f0000001000)="$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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00006005aaaaaaaaaabbaaaaaaaaaabb88a82500"], 0x2e) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="20241600000016"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 3.617134681s ago: executing program 3 (id=63): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) fanotify_init(0x0, 0x101000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000500)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 3.616944371s ago: executing program 2 (id=64): unshare(0x62040200) 1.715652082s ago: executing program 3 (id=65): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 829.802761ms ago: executing program 0 (id=66): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x4, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c002400004000ff8800000066c1532cc10200000003125ce882cbf490d9", 0x29}], 0x1}, 0x4005) 356.174756ms ago: executing program 0 (id=67): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x401, @empty, 0x4}, 0x1c) accept(r0, 0xfffffffffffffffc, 0x0) 195.390638ms ago: executing program 0 (id=68): ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) 0s ago: executing program 0 (id=69): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 82.740516][ T5763] cgroup: Unknown subsys name 'net' [ 82.879490][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.581602][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.729465][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.738884][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.747382][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.750910][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.763824][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.771305][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.779341][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.790720][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.791011][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.801397][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.808441][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.812681][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.826024][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.826646][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.837170][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.856417][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.857301][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.880878][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.889983][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.898140][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.906305][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.932698][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.940518][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.948241][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.604785][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 87.678522][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.701259][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 87.766424][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.904184][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.912050][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.919769][ T5779] bridge_slave_0: entered allmulticast mode [ 87.927441][ T5779] bridge_slave_0: entered promiscuous mode [ 87.947019][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.954543][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.961851][ T5779] bridge_slave_1: entered allmulticast mode [ 87.968881][ T5779] bridge_slave_1: entered promiscuous mode [ 88.023768][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.031024][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.038211][ T5777] bridge_slave_0: entered allmulticast mode [ 88.045816][ T5777] bridge_slave_0: entered promiscuous mode [ 88.054280][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.061891][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.069357][ T5777] bridge_slave_1: entered allmulticast mode [ 88.076856][ T5777] bridge_slave_1: entered promiscuous mode [ 88.094277][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.101705][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.108952][ T5776] bridge_slave_0: entered allmulticast mode [ 88.116297][ T5776] bridge_slave_0: entered promiscuous mode [ 88.125805][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.133541][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.141516][ T5776] bridge_slave_1: entered allmulticast mode [ 88.148568][ T5776] bridge_slave_1: entered promiscuous mode [ 88.199278][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.206640][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.214457][ T5775] bridge_slave_0: entered allmulticast mode [ 88.222107][ T5775] bridge_slave_0: entered promiscuous mode [ 88.244919][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.257486][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.270738][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.292303][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.299486][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.307416][ T5775] bridge_slave_1: entered allmulticast mode [ 88.315371][ T5775] bridge_slave_1: entered promiscuous mode [ 88.324654][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.368768][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.381958][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.428641][ T5776] team0: Port device team_slave_0 added [ 88.449028][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.463640][ T5779] team0: Port device team_slave_0 added [ 88.472955][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.485894][ T5776] team0: Port device team_slave_1 added [ 88.513628][ T5779] team0: Port device team_slave_1 added [ 88.547425][ T5777] team0: Port device team_slave_0 added [ 88.588341][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.595481][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.622680][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.636081][ T5777] team0: Port device team_slave_1 added [ 88.669474][ T5775] team0: Port device team_slave_0 added [ 88.676948][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.684233][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.710594][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.741419][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.748446][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.774618][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.792790][ T5775] team0: Port device team_slave_1 added [ 88.799239][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.811044][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.837572][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.851701][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.858712][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.885119][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.897727][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.904756][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.930917][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.931533][ T5782] Bluetooth: hci0: command tx timeout [ 88.941640][ T5790] Bluetooth: hci2: command tx timeout [ 88.990818][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.997830][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.024017][ T5790] Bluetooth: hci3: command tx timeout [ 89.029625][ T5782] Bluetooth: hci1: command tx timeout [ 89.031454][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.048812][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.055877][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.082274][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.161062][ T5776] hsr_slave_0: entered promiscuous mode [ 89.168039][ T5776] hsr_slave_1: entered promiscuous mode [ 89.205096][ T5777] hsr_slave_0: entered promiscuous mode [ 89.211946][ T5777] hsr_slave_1: entered promiscuous mode [ 89.218230][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.226239][ T5777] Cannot create hsr debugfs directory [ 89.270081][ T5775] hsr_slave_0: entered promiscuous mode [ 89.276555][ T5775] hsr_slave_1: entered promiscuous mode [ 89.283132][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.290926][ T5775] Cannot create hsr debugfs directory [ 89.307639][ T5779] hsr_slave_0: entered promiscuous mode [ 89.315845][ T5779] hsr_slave_1: entered promiscuous mode [ 89.322625][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.330868][ T5779] Cannot create hsr debugfs directory [ 89.785845][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.813639][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.834217][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.847539][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.887553][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.901061][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.914164][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.945135][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.024563][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.045830][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.065606][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.078179][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.153524][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.168465][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.186242][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.197600][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.317777][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.397591][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.443380][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.460922][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.468310][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.492893][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.508541][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.515782][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.577524][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.586797][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.610456][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.629090][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.636338][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.686906][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.708734][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.715948][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.734133][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.741361][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.751674][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.758813][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.773078][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.813377][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.820633][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.844849][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.852096][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.012049][ T5790] Bluetooth: hci2: command tx timeout [ 91.017654][ T5782] Bluetooth: hci0: command tx timeout [ 91.089855][ T5790] Bluetooth: hci1: command tx timeout [ 91.095461][ T5782] Bluetooth: hci3: command tx timeout [ 91.295407][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.454992][ T5777] veth0_vlan: entered promiscuous mode [ 91.519401][ T5777] veth1_vlan: entered promiscuous mode [ 91.565328][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.646938][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.687699][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.707627][ T5777] veth0_macvtap: entered promiscuous mode [ 91.746782][ T5777] veth1_macvtap: entered promiscuous mode [ 91.768287][ T5776] veth0_vlan: entered promiscuous mode [ 91.797373][ T5776] veth1_vlan: entered promiscuous mode [ 91.828059][ T5779] veth0_vlan: entered promiscuous mode [ 91.838694][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.868629][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.892294][ T5779] veth1_vlan: entered promiscuous mode [ 91.925483][ T5775] veth0_vlan: entered promiscuous mode [ 91.936429][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.945974][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.954930][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.965193][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.998284][ T5775] veth1_vlan: entered promiscuous mode [ 92.013233][ T5776] veth0_macvtap: entered promiscuous mode [ 92.029840][ T5776] veth1_macvtap: entered promiscuous mode [ 92.069198][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.082441][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.095773][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.141825][ T9] cfg80211: failed to load regulatory.db [ 92.154900][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.170643][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.186392][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.197304][ T5779] veth0_macvtap: entered promiscuous mode [ 92.210925][ T5779] veth1_macvtap: entered promiscuous mode [ 92.252452][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.261475][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.271308][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.280332][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.318581][ T5775] veth0_macvtap: entered promiscuous mode [ 92.339068][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.360739][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.364400][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.383202][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.393564][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.404109][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.416304][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.452974][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.463628][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.473782][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.486381][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.498469][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.517595][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.526729][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.536395][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.545376][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.557214][ T5775] veth1_macvtap: entered promiscuous mode [ 92.576116][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.585636][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.659175][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.675580][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.686082][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.703844][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.714007][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.724649][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.736916][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.781747][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.804579][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.815119][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.825900][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.839388][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.855634][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.867179][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.879393][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.888473][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.898074][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.907972][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.931206][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.939115][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.041071][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.048974][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.090962][ T5790] Bluetooth: hci2: command tx timeout [ 93.096511][ T5782] Bluetooth: hci0: command tx timeout [ 93.155577][ T5846] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.175951][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.185043][ T5782] Bluetooth: hci3: command tx timeout [ 93.190003][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.190841][ T5782] Bluetooth: hci1: command tx timeout [ 93.220345][ T5847] syz.2.3[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.268058][ T5847] loop2: detected capacity change from 0 to 164 [ 93.295351][ T5847] ======================================================= [ 93.295351][ T5847] WARNING: The mand mount option has been deprecated and [ 93.295351][ T5847] and is ignored by this kernel. Remove the mand [ 93.295351][ T5847] option from the mount to silence this warning. [ 93.295351][ T5847] ======================================================= [ 93.376973][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.399056][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.423440][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.453413][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.499937][ T5847] Unable to read rock-ridge attributes [ 93.564945][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.592499][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.056964][ T5852] Bluetooth: MGMT ver 1.22 [ 95.067033][ T5858] loop2: detected capacity change from 0 to 256 [ 95.180218][ T5782] Bluetooth: hci0: command tx timeout [ 95.180239][ T5787] Bluetooth: hci2: command tx timeout [ 95.474142][ T5787] Bluetooth: hci1: command tx timeout [ 95.479883][ T5787] Bluetooth: hci3: command tx timeout [ 95.768177][ T5865] Bluetooth: hci0: service_discovery: too big uuid_count value 25455 [ 96.359698][ T5790] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 96.532089][ T5843] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 96.725308][ T5871] loop1: detected capacity change from 0 to 512 [ 96.761943][ T5872] loop2: detected capacity change from 0 to 128 [ 96.795175][ T5871] EXT4-fs: Ignoring removed oldalloc option [ 96.921628][ T5872] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.302935][ T5871] EXT4-fs (loop1): 1 truncate cleaned up [ 97.358558][ T5872] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.691595][ T5790] Bluetooth: hci0: command 0x1407 tx timeout [ 97.716053][ T5871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.940520][ T5880] loop0: detected capacity change from 0 to 512 [ 98.012081][ T5880] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 98.046459][ T5880] System zones: 1-12 [ 98.056338][ T5880] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.9: corrupted in-inode xattr: e_value size too large [ 98.080675][ T5880] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.9: couldn't read orphan inode 15 (err -117) [ 98.101884][ T5880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.512006][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.587679][ T5893] dns_resolver: Unsupported server list version (6) [ 99.076532][ T788] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 99.086288][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.383203][ T788] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 99.565846][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.903035][ T788] usb 3-1: config 0 descriptor?? [ 100.057773][ T788] usb 3-1: can't set config #0, error -71 [ 100.115910][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.188501][ T788] usb 3-1: USB disconnect, device number 2 [ 100.574220][ T5908] loop3: detected capacity change from 0 to 512 [ 100.593115][ T5908] EXT4-fs: inline encryption not supported [ 100.618162][ T5908] EXT4-fs: Ignoring removed i_version option [ 100.685220][ T5908] EXT4-fs (loop3): 1 orphan inode deleted [ 100.697240][ T5908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.851322][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.762791][ T5916] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 102.639537][ C0] sched: RT throttling activated [ 102.717382][ T5918] loop3: detected capacity change from 0 to 8192 [ 102.756741][ T5918] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.919419][ T5924] loop2: detected capacity change from 0 to 512 [ 102.985154][ T5924] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.18: corrupted in-inode xattr: invalid ea_ino [ 103.093747][ T5924] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.18: couldn't read orphan inode 15 (err -117) [ 103.337247][ T5924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.670832][ T5929] Zero length message leads to an empty skb [ 103.702048][ T5923] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.18: Invalid inode table block 5 in block_group 0 [ 104.104526][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.821218][ T5945] loop1: detected capacity change from 0 to 8 [ 104.888928][ T5945] SQUASHFS error: zlib decompression failed, data probably corrupt [ 104.941767][ T5945] SQUASHFS error: Failed to read block 0x9b: -5 [ 104.948113][ T5945] SQUASHFS error: Unable to read metadata cache entry [99] [ 104.979805][ T5945] SQUASHFS error: Unable to read inode 0x127 [ 105.243969][ T5945] loop1: detected capacity change from 0 to 1024 [ 105.279821][ T5945] hfsplus: Filesystem is marked locked, mounting read-only. [ 105.390730][ T5949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.116944][ T5951] loop3: detected capacity change from 0 to 128 [ 106.165405][ T5951] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 106.208593][ T5951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.944780][ T5969] warning: `syz.0.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.269606][ T5988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.166696][ T6006] input: syz1 as /devices/virtual/input/input5 [ 116.449743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.837505][ T6018] loop1: detected capacity change from 0 to 2048 [ 116.950534][ T6018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.152968][ T6025] loop0: detected capacity change from 0 to 128 [ 117.197933][ T6025] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.246240][ T6025] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.378995][ T5775] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 117.476059][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.804209][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 117.863589][ T6029] process 'syz.0.48' launched './file1' with NULL argv: empty string added [ 118.372243][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.513175][ T1206] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 119.742772][ T1206] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.770185][ T1206] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt [ 119.789958][ T1206] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x3 is Bulk; changing to Interrupt [ 119.805054][ T1206] usb 4-1: config 1 interface 0 has no altsetting 0 [ 119.820012][ T1206] usb 4-1: string descriptor 0 read error: -22 [ 119.834448][ T1206] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.848603][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.878398][ T6046] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.894324][ T6046] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.916690][ T1206] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 120.129685][ T1206] usb 4-1: USB disconnect, device number 2 [ 120.406301][ T6063] loop0: detected capacity change from 0 to 128 [ 120.451760][ T6063] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.487299][ T6063] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.973359][ T6071] Cannot find del_set index 0 as target [ 121.457168][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.691055][ T6075] loop3: detected capacity change from 0 to 512 [ 121.743494][ T6075] EXT4-fs: Ignoring removed oldalloc option [ 122.079963][ T6075] EXT4-fs (loop3): 1 truncate cleaned up [ 122.088000][ T6075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.321064][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.464058][ T6088] loop0: detected capacity change from 0 to 8192 [ 123.493299][ T6091] loop1: detected capacity change from 0 to 4096 [ 123.506967][ T6091] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 123.525448][ T6088] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.599693][ T1206] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.901847][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.933759][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.985147][ T1206] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.039177][ T1206] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.083820][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.142000][ T1206] usb 2-1: config 0 descriptor?? [ 126.287866][ T6104] syzkaller0: entered promiscuous mode [ 126.300635][ T6104] syzkaller0: entered allmulticast mode [ 126.564094][ T1206] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 126.595446][ T1206] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 126.635272][ T1206] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 126.812472][ T1206] usb 2-1: USB disconnect, device number 2 [ 126.916506][ T6109] netlink: 'syz.3.65': attribute type 3 has an invalid length. [ 126.925965][ T6109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.65'. [ 126.948801][ T6109] ------------[ cut here ]------------ [ 126.954854][ T6109] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 126.979399][ T6109] WARNING: CPU: 1 PID: 6109 at net/sched/cls_u32.c:855 u32_change+0x1c5a/0x24f0 [ 126.988772][ T6109] Modules linked in: [ 126.993145][ T6109] CPU: 1 PID: 6109 Comm: syz.3.65 Not tainted syzkaller #0 [ 127.001377][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.011778][ T6109] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 127.017175][ T6109] Code: f8 eb 59 e8 48 93 d8 f8 c6 05 51 30 c7 05 01 b9 10 00 00 00 48 c7 c7 00 6b c7 8b 4c 89 f6 48 c7 c2 80 6b c7 8b e8 a6 49 a2 f8 <0f> 0b e9 86 f0 ff ff e8 1a 93 d8 f8 eb 24 e8 13 93 d8 f8 c6 05 eb [ 127.036953][ T6109] RSP: 0018:ffffc9000b89ed40 EFLAGS: 00010246 [ 127.043214][ T6109] RAX: bf5a05447d94ef00 RBX: ffff88805d5a2000 RCX: 0000000000080000 [ 127.051334][ T6109] RDX: ffffc9000ca4a000 RSI: 0000000000007384 RDI: 0000000000007385 [ 127.059451][ T6109] RBP: ffffc9000b89eef8 R08: ffffc9000b89e947 R09: 1ffff92001713d28 [ 127.067556][ T6109] R10: dffffc0000000000 R11: fffff52001713d29 R12: ffff88805d56d400 [ 127.075796][ T6109] R13: ffff88805d56d4e8 R14: 0000000000000020 R15: ffff88802f720000 [ 127.083914][ T6109] FS: 00007ff48fff66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 127.093008][ T6109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.100493][ T6109] CR2: 000055718d95e000 CR3: 00000000233c3000 CR4: 00000000003506e0 [ 127.108541][ T6109] Call Trace: [ 127.112110][ T6109] [ 127.115099][ T6109] ? tc_new_tfilter+0x8f7/0x17c0 [ 127.120212][ T6109] ? u32_get+0x370/0x370 [ 127.124552][ T6109] ? u32_get+0x370/0x370 [ 127.128861][ T6109] tc_new_tfilter+0x11f9/0x17c0 [ 127.133868][ T6109] ? tcf_proto_signal_destroying+0x240/0x240 [ 127.140028][ T6109] ? rcu_read_unlock+0x8c/0xa0 [ 127.144895][ T6109] ? tcf_proto_signal_destroying+0x240/0x240 [ 127.151025][ T6109] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 127.156205][ T6109] ? tcf_proto_signal_destroying+0x240/0x240 [ 127.162359][ T6109] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 127.167399][ T6109] ? lockdep_hardirqs_on+0x98/0x150 [ 127.172707][ T6109] ? rtnetlink_bind+0x80/0x80 [ 127.177457][ T6109] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 127.183570][ T6109] ? lock_chain_count+0x20/0x20 [ 127.188496][ T6109] ? __local_bh_enable_ip+0x13a/0x1c0 [ 127.194000][ T6109] ? lockdep_hardirqs_on+0x98/0x150 [ 127.199261][ T6109] ? __local_bh_enable_ip+0x13a/0x1c0 [ 127.205631][ T6109] ? _local_bh_enable+0xa0/0xa0 [ 127.210730][ T6109] ? __dev_queue_xmit+0x265/0x3660 [ 127.215914][ T6109] ? __dev_queue_xmit+0x265/0x3660 [ 127.221172][ T6109] ? __dev_queue_xmit+0x1b2c/0x3660 [ 127.226445][ T6109] ? __dev_queue_xmit+0x265/0x3660 [ 127.231712][ T6109] ? ref_tracker_free+0x690/0x840 [ 127.236813][ T6109] netlink_rcv_skb+0x241/0x4d0 [ 127.241782][ T6109] ? rtnetlink_bind+0x80/0x80 [ 127.246564][ T6109] ? netlink_ack+0x1180/0x1180 [ 127.251494][ T6109] ? __lock_acquire+0x7d40/0x7d40 [ 127.256593][ T6109] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.261940][ T6109] netlink_unicast+0x751/0x8d0 [ 127.266805][ T6109] netlink_sendmsg+0x8d0/0xbf0 [ 127.271714][ T6109] ? netlink_getsockopt+0x590/0x590 [ 127.276987][ T6109] ? aa_sock_msg_perm+0x94/0x150 [ 127.282044][ T6109] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 127.287388][ T6109] ? security_socket_sendmsg+0x80/0xa0 [ 127.293046][ T6109] ? netlink_getsockopt+0x590/0x590 [ 127.298364][ T6109] ____sys_sendmsg+0x5ba/0x960 [ 127.303997][ T6109] ? __asan_memset+0x22/0x40 [ 127.308669][ T6109] ? __sys_sendmsg_sock+0x30/0x30 [ 127.313944][ T6109] ? __import_iovec+0x5f2/0x850 [ 127.318884][ T6109] ? import_iovec+0x73/0xa0 [ 127.323547][ T6109] ___sys_sendmsg+0x2a6/0x360 [ 127.328297][ T6109] ? __sys_sendmsg+0x2a0/0x2a0 [ 127.332899][ T6113] loop0: detected capacity change from 0 to 512 [ 127.337103][ T6109] __sys_sendmmsg+0x2ca/0x510 [ 127.344407][ T6109] ? __ia32_sys_sendmsg+0x90/0x90 [ 127.349558][ T6109] ? __ia32_sys_get_robust_list+0x110/0x110 [ 127.355639][ T6109] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 127.361766][ T6109] ? lock_chain_count+0x20/0x20 [ 127.366702][ T6109] __x64_sys_sendmmsg+0xa0/0xb0 [ 127.371692][ T6109] do_syscall_64+0x55/0xa0 [ 127.376169][ T6109] ? clear_bhb_loop+0x40/0x90 [ 127.380972][ T6109] ? clear_bhb_loop+0x40/0x90 [ 127.385707][ T6109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.391710][ T6109] RIP: 0033:0x7ff491d9cdd9 [ 127.396200][ T6109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.416784][ T6109] RSP: 002b:00007ff48fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 127.425469][ T6109] RAX: ffffffffffffffda RBX: 00007ff492015fa0 RCX: 00007ff491d9cdd9 [ 127.433573][ T6109] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 127.441744][ T6109] RBP: 00007ff491e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 127.449923][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.457993][ T6109] R13: 00007ff492016038 R14: 00007ff492015fa0 R15: 00007ffe9a212b78 [ 127.466110][ T6109] [ 127.469240][ T6109] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.476581][ T6109] CPU: 1 PID: 6109 Comm: syz.3.65 Not tainted syzkaller #0 [ 127.483834][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.493938][ T6109] Call Trace: [ 127.497260][ T6109] [ 127.500225][ T6109] dump_stack_lvl+0x18c/0x250 [ 127.504967][ T6109] ? show_regs_print_info+0x20/0x20 [ 127.510227][ T6109] ? load_image+0x420/0x420 [ 127.514903][ T6109] panic+0x2dc/0x730 [ 127.518869][ T6109] ? bpf_jit_dump+0xd0/0xd0 [ 127.523460][ T6109] __warn+0x2e0/0x470 [ 127.527501][ T6109] ? u32_change+0x1c5a/0x24f0 [ 127.532247][ T6109] ? u32_change+0x1c5a/0x24f0 [ 127.536997][ T6109] report_bug+0x2be/0x4f0 [ 127.541383][ T6109] ? u32_change+0x1c5a/0x24f0 [ 127.546127][ T6109] ? u32_change+0x1c5a/0x24f0 [ 127.550865][ T6109] ? u32_change+0x1c5c/0x24f0 [ 127.555611][ T6109] handle_bug+0xcf/0x120 [ 127.559912][ T6109] exc_invalid_op+0x1a/0x50 [ 127.564487][ T6109] asm_exc_invalid_op+0x1a/0x20 [ 127.569394][ T6109] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 127.574828][ T6109] Code: f8 eb 59 e8 48 93 d8 f8 c6 05 51 30 c7 05 01 b9 10 00 00 00 48 c7 c7 00 6b c7 8b 4c 89 f6 48 c7 c2 80 6b c7 8b e8 a6 49 a2 f8 <0f> 0b e9 86 f0 ff ff e8 1a 93 d8 f8 eb 24 e8 13 93 d8 f8 c6 05 eb [ 127.594659][ T6109] RSP: 0018:ffffc9000b89ed40 EFLAGS: 00010246 [ 127.600823][ T6109] RAX: bf5a05447d94ef00 RBX: ffff88805d5a2000 RCX: 0000000000080000 [ 127.608849][ T6109] RDX: ffffc9000ca4a000 RSI: 0000000000007384 RDI: 0000000000007385 [ 127.616882][ T6109] RBP: ffffc9000b89eef8 R08: ffffc9000b89e947 R09: 1ffff92001713d28 [ 127.624919][ T6109] R10: dffffc0000000000 R11: fffff52001713d29 R12: ffff88805d56d400 [ 127.632966][ T6109] R13: ffff88805d56d4e8 R14: 0000000000000020 R15: ffff88802f720000 [ 127.641018][ T6109] ? tc_new_tfilter+0x8f7/0x17c0 [ 127.646077][ T6109] ? u32_get+0x370/0x370 [ 127.650414][ T6109] ? u32_get+0x370/0x370 [ 127.654713][ T6109] tc_new_tfilter+0x11f9/0x17c0 [ 127.659867][ T6109] ? tcf_proto_signal_destroying+0x240/0x240 [ 127.666055][ T6109] ? rcu_read_unlock+0x8c/0xa0 [ 127.670926][ T6109] ? tcf_proto_signal_destroying+0x240/0x240 [ 127.676986][ T6109] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 127.682185][ T6109] ? tcf_proto_signal_destroying+0x240/0x240 [ 127.688245][ T6109] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 127.693258][ T6109] ? lockdep_hardirqs_on+0x98/0x150 [ 127.698516][ T6109] ? rtnetlink_bind+0x80/0x80 [ 127.703264][ T6109] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 127.709307][ T6109] ? lock_chain_count+0x20/0x20 [ 127.714222][ T6109] ? __local_bh_enable_ip+0x13a/0x1c0 [ 127.719651][ T6109] ? lockdep_hardirqs_on+0x98/0x150 [ 127.724917][ T6109] ? __local_bh_enable_ip+0x13a/0x1c0 [ 127.730340][ T6109] ? _local_bh_enable+0xa0/0xa0 [ 127.735242][ T6109] ? __dev_queue_xmit+0x265/0x3660 [ 127.740518][ T6109] ? __dev_queue_xmit+0x265/0x3660 [ 127.745695][ T6109] ? __dev_queue_xmit+0x1b2c/0x3660 [ 127.751007][ T6109] ? __dev_queue_xmit+0x265/0x3660 [ 127.756203][ T6109] ? ref_tracker_free+0x690/0x840 [ 127.761291][ T6109] netlink_rcv_skb+0x241/0x4d0 [ 127.766118][ T6109] ? rtnetlink_bind+0x80/0x80 [ 127.770865][ T6109] ? netlink_ack+0x1180/0x1180 [ 127.775703][ T6109] ? __lock_acquire+0x7d40/0x7d40 [ 127.780801][ T6109] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.786071][ T6109] netlink_unicast+0x751/0x8d0 [ 127.790916][ T6109] netlink_sendmsg+0x8d0/0xbf0 [ 127.795753][ T6109] ? netlink_getsockopt+0x590/0x590 [ 127.801019][ T6109] ? aa_sock_msg_perm+0x94/0x150 [ 127.806051][ T6109] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 127.811396][ T6109] ? security_socket_sendmsg+0x80/0xa0 [ 127.816917][ T6109] ? netlink_getsockopt+0x590/0x590 [ 127.822189][ T6109] ____sys_sendmsg+0x5ba/0x960 [ 127.827085][ T6109] ? __asan_memset+0x22/0x40 [ 127.831864][ T6109] ? __sys_sendmsg_sock+0x30/0x30 [ 127.836938][ T6109] ? __import_iovec+0x5f2/0x850 [ 127.841858][ T6109] ? import_iovec+0x73/0xa0 [ 127.846414][ T6109] ___sys_sendmsg+0x2a6/0x360 [ 127.851173][ T6109] ? __sys_sendmsg+0x2a0/0x2a0 [ 127.856056][ T6109] __sys_sendmmsg+0x2ca/0x510 [ 127.860813][ T6109] ? __ia32_sys_sendmsg+0x90/0x90 [ 127.865909][ T6109] ? __ia32_sys_get_robust_list+0x110/0x110 [ 127.871881][ T6109] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 127.877962][ T6109] ? lock_chain_count+0x20/0x20 [ 127.882883][ T6109] __x64_sys_sendmmsg+0xa0/0xb0 [ 127.887792][ T6109] do_syscall_64+0x55/0xa0 [ 127.892271][ T6109] ? clear_bhb_loop+0x40/0x90 [ 127.897022][ T6109] ? clear_bhb_loop+0x40/0x90 [ 127.901790][ T6109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.907845][ T6109] RIP: 0033:0x7ff491d9cdd9 [ 127.912318][ T6109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.931988][ T6109] RSP: 002b:00007ff48fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 127.940470][ T6109] RAX: ffffffffffffffda RBX: 00007ff492015fa0 RCX: 00007ff491d9cdd9 [ 127.948503][ T6109] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 127.956533][ T6109] RBP: 00007ff491e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 127.964563][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.972588][ T6109] R13: 00007ff492016038 R14: 00007ff492015fa0 R15: 00007ffe9a212b78 [ 127.980629][ T6109] [ 127.984278][ T6109] Kernel Offset: disabled [ 127.988623][ T6109] Rebooting in 86400 seconds..