last executing test programs: 15.733225546s ago: executing program 1 (id=185): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, 0x0, 0x0) 14.476142144s ago: executing program 1 (id=187): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1403"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13.116713943s ago: executing program 1 (id=192): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) 11.721710124s ago: executing program 0 (id=194): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2003}, 0xfffffffffffffd14) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r3, &(0x7f00000000c0)='.\x00', 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @remote}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x1, 0x73}, 0x9c) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r4, 0x711, 0x70bd25, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11.498049029s ago: executing program 2 (id=196): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) msgsnd(0x0, 0x0, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) r4 = msgget$private(0x0, 0x20) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000380)=""/45) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 10.356485914s ago: executing program 2 (id=199): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x9520388457b6d5a6}, 0x28) open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x41102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x7c9) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x16) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 10.183335167s ago: executing program 0 (id=200): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xfffffffffffffff2]}, 0x8, 0x80800) pipe2$watch_queue(&(0x7f0000000540), 0x80) 9.255254767s ago: executing program 0 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) madvise(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1210080, &(0x7f00000002c0)={[{@umask={'umask', 0x3d, 0xf}}, {@codepage={'codepage', 0x3d, 'macceltic'}}, {@umask={'umask', 0x3d, 0x9}}, {@part={'part', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@gid}, {@uid}]}, 0x1, 0x32e, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x3, 0x0, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_TIMERSLACK(0x1d, 0xc) 9.224342648s ago: executing program 1 (id=202): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401000000000000000000090072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001"], 0x1a4}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8.944411914s ago: executing program 3 (id=204): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x20004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x88) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) 7.446344977s ago: executing program 2 (id=205): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=cp949,utf8=1,nonumtail=0,dos1xfloppy,shortname=mixed,iocharset=cp437,uni_xlate=0,utf8=0,,codepage=932,utf8=0,rodir,utf8=1,rodir,utf8=0,rodir,\x00'], 0x1, 0x2a6, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x20000000000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) 7.444456137s ago: executing program 0 (id=215): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0xa, 0x0, 0x0, 0x11, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f]}}, 0x0, 0x37}, 0x28) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4049}, 0x10) shutdown(r1, 0x1) syz_open_dev$vbi(0x0, 0x1, 0x2) setns(0xc9, 0x0) r3 = socket(0x2a, 0x2, 0x9) bind$inet(r3, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) recvmsg(r3, &(0x7f0000000800)={0x0, 0x700, 0x0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) gettid() unshare(0x20000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.943261448s ago: executing program 4 (id=206): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) 6.39553227s ago: executing program 3 (id=207): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, 0x0, &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x10800, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_open_dev$video(&(0x7f0000000240), 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r3, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) 6.3922577s ago: executing program 4 (id=208): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x4, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x121000) r5 = fcntl$dupfd(r3, 0x406, r3) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 5.203377306s ago: executing program 1 (id=209): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0) getdents(r3, 0x0, 0x0) 4.323780535s ago: executing program 1 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x3, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r5, &(0x7f0000000080)=[{0x0}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 4.323068925s ago: executing program 2 (id=211): recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 4.11538046s ago: executing program 3 (id=212): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 3.726968478s ago: executing program 4 (id=213): inotify_init1(0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000180), &(0x7f00000002c0)}, 0x20) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 3.709929508s ago: executing program 0 (id=214): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c851, 0x0, 0x1, 0x0, &(0x7f00000001c0)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) mknod(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c, 0xa7ed) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x115d038, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x309ca00, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f00000004c0)) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000024c0)='./binderfs\x00', 0x1ff) 2.695088181s ago: executing program 4 (id=216): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008f}, 0x0) getpriority(0x1, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x801, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) 2.498907015s ago: executing program 2 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) openat(r0, 0x0, 0x311000, 0x104) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, 0x0, 0xb) splice(r6, 0x0, r5, 0x0, 0xf3a, 0x8) splice(r4, 0x0, r7, 0x0, 0x80, 0x8) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r5, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d0, 0x4048920, 0x6, 0x200f, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) 2.497214235s ago: executing program 3 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000000, 0xcb7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r3, &(0x7f00000002c0)=""/10, 0x5b) io_setup(0x4, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x80040, 0x0) read(r4, &(0x7f0000000240)=""/93, 0x24) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) 1.569534715s ago: executing program 4 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r3, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) r4 = socket$inet6(0xa, 0x802, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r5, &(0x7f0000000080)=[{0x0}], 0x1) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) 1.412680149s ago: executing program 2 (id=220): socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4", 0x3, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.207310723s ago: executing program 3 (id=221): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x48, @remote, 0x400}}, [0x1, 0xfff, 0x7fffffffffffffff, 0xfffffffffffffff9, 0x9, 0xd3, 0x5, 0x3, 0x5, 0x3, 0x71, 0x8, 0x7, 0x1, 0x3]}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x25, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r5) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) connect$llc(0xffffffffffffffff, 0x0, 0x0) 53.982339ms ago: executing program 3 (id=222): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0xa58, 0x0, '\x00', {0x0, @bt={0x7, 0x80000000, 0x1, 0x2, 0x2, 0x4, 0x1ff, 0x1, 0x4, 0x2, 0xf, 0x0, 0x6, 0x5, 0x1b, 0x23, {0x6, 0xfffffff1}, 0x2, 0xc0}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x73b22000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572"], 0xc8}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x90) socket$netlink(0x10, 0x3, 0xc) kexec_load(0x8, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) 53.407169ms ago: executing program 4 (id=223): socket$netlink(0x10, 0x3, 0xa) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$rds(r1, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0xa9}, 0x0, 0x0, 0x8000, 0x6, 0x84e, 0x2f5, 0x10, 0x10000000000712}}], 0x58}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) 0s ago: executing program 0 (id=224): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = creat(0x0, 0x30) connect$unix(r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES8, @ANYRESDEC, @ANYRESDEC], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, 0x0, 0x0) 0s ago: executing program 4 (id=225): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}, {0x0, 0x2}]}, @fwd={0x7}, @restrict={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x30, 0x61, 0x2e]}}, 0x0, 0x5d}, 0x28) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r4], 0x3c}}, 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. [ 50.303370][ T4172] cgroup: Unknown subsys name 'net' [ 50.445940][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.675628][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.040375][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 53.087021][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 53.101617][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 53.161800][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 53.172027][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 53.262552][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.269637][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.278087][ T4185] device bridge_slave_0 entered promiscuous mode [ 53.296967][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.304275][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.312268][ T4186] device bridge_slave_0 entered promiscuous mode [ 53.319551][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.327078][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.334781][ T4188] device bridge_slave_0 entered promiscuous mode [ 53.349369][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.356494][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.364506][ T4185] device bridge_slave_1 entered promiscuous mode [ 53.374821][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.382008][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.389618][ T4186] device bridge_slave_1 entered promiscuous mode [ 53.396808][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.404201][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.412002][ T4188] device bridge_slave_1 entered promiscuous mode [ 53.457311][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.464496][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.472696][ T4194] device bridge_slave_0 entered promiscuous mode [ 53.505218][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.515748][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.522942][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.530668][ T4194] device bridge_slave_1 entered promiscuous mode [ 53.539691][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.548974][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.556513][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.564346][ T4187] device bridge_slave_0 entered promiscuous mode [ 53.573244][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.583882][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.613815][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.623150][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.630190][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.638422][ T4187] device bridge_slave_1 entered promiscuous mode [ 53.647257][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.665811][ T4188] team0: Port device team_slave_0 added [ 53.680112][ T4188] team0: Port device team_slave_1 added [ 53.710733][ T4186] team0: Port device team_slave_0 added [ 53.718413][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.730516][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.752018][ T4186] team0: Port device team_slave_1 added [ 53.759963][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.782326][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.789274][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.815961][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.829390][ T4185] team0: Port device team_slave_0 added [ 53.841759][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.864223][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.871316][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.897289][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.909706][ T4185] team0: Port device team_slave_1 added [ 53.922277][ T4194] team0: Port device team_slave_0 added [ 53.928471][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.935982][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.962078][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.979396][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.986380][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.012367][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.034850][ T4194] team0: Port device team_slave_1 added [ 54.048986][ T4187] team0: Port device team_slave_0 added [ 54.078554][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.085581][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.112191][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.124387][ T4187] team0: Port device team_slave_1 added [ 54.130482][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.137656][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.163655][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.186258][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.198477][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.224655][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.255822][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.262870][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.288902][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.304507][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.311587][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.337566][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.361919][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.368884][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.394949][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.411335][ T4186] device hsr_slave_0 entered promiscuous mode [ 54.418047][ T4186] device hsr_slave_1 entered promiscuous mode [ 54.431867][ T4188] device hsr_slave_0 entered promiscuous mode [ 54.438754][ T4188] device hsr_slave_1 entered promiscuous mode [ 54.446301][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.454098][ T4188] Cannot create hsr debugfs directory [ 54.483921][ T4185] device hsr_slave_0 entered promiscuous mode [ 54.492270][ T4185] device hsr_slave_1 entered promiscuous mode [ 54.498743][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.506410][ T4185] Cannot create hsr debugfs directory [ 54.594242][ T4187] device hsr_slave_0 entered promiscuous mode [ 54.600965][ T4187] device hsr_slave_1 entered promiscuous mode [ 54.607471][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.615121][ T4187] Cannot create hsr debugfs directory [ 54.623839][ T4194] device hsr_slave_0 entered promiscuous mode [ 54.631161][ T4194] device hsr_slave_1 entered promiscuous mode [ 54.637624][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.645189][ T4194] Cannot create hsr debugfs directory [ 54.756539][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 54.763359][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 54.771072][ T4190] Bluetooth: hci2: command 0x0409 tx timeout [ 54.773338][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 54.777176][ T4190] Bluetooth: hci0: command 0x0409 tx timeout [ 54.904578][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.918140][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.927131][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.940739][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.992140][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.000703][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.015163][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.025516][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.065492][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.087833][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.096514][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.106098][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.184020][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.194125][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.205929][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.230048][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.265428][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.278798][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.295937][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.307079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.317683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.331565][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.341729][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.352421][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.360345][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.378210][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.407941][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.415413][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.424810][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.432901][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.442209][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.451025][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.458201][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.466582][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.476488][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.487397][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.494578][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.506857][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.514931][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.522968][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.554567][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.569196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.578198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.588054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.597867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.607905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.616606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.624979][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.632068][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.639599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.648964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.657558][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.664646][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.672283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.681279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.689545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.698322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.707129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.717613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.735693][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.747015][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.768527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.785616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.795943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.808896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.818327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.828505][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.835587][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.845565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.854545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.865097][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.872182][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.879851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.888551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.912373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.920323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.932667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.942870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.978872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.988594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.997549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.008208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.029154][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.040660][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.059765][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.069503][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.078863][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.088304][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.097671][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.106243][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.115621][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.124345][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.133389][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.152969][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.162612][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.174684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.183392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.190833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.201840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.209940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.218689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.232391][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.245110][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.264273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.273640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.286783][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.315273][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.336838][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.353225][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.376910][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.385971][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.394896][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.403615][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.412797][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.419930][ T421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.427889][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.436797][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.445592][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.452687][ T421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.461449][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.493841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.507902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.519351][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.526480][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.541387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.550097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.565061][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.572177][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.580513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.589389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.598525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.609115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.618252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.626665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.635142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.648443][ T4186] device veth0_vlan entered promiscuous mode [ 56.658679][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.668291][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.707152][ T4186] device veth1_vlan entered promiscuous mode [ 56.716151][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.728888][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.737059][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.747332][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.758384][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.767790][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.777247][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.784957][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.792781][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.802073][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.810312][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.818081][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.825558][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.833545][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 56.839789][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 56.840698][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.846620][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 56.859682][ T421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.867264][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 56.875966][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.883101][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 56.890962][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.908999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.919003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.928741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.937347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.946333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.954981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.963747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.989235][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.013673][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.034375][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.050106][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.059633][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.068922][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.077860][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.087621][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.096968][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.114154][ T4186] device veth0_macvtap entered promiscuous mode [ 57.127732][ T4186] device veth1_macvtap entered promiscuous mode [ 57.158563][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.177670][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.201931][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.212182][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.233498][ T4185] device veth0_vlan entered promiscuous mode [ 57.254145][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.279178][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.293769][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.318889][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.332350][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.349695][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.358933][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.367867][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.382775][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.392778][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.401994][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.410704][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.444092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.451749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.459126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.466898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.475980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.484656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.496920][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.508900][ T4185] device veth1_vlan entered promiscuous mode [ 57.519026][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.586307][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.597070][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.606934][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.615808][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.624782][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.634785][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.643330][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.651487][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.673003][ T4185] device veth0_macvtap entered promiscuous mode [ 57.680095][ T4187] device veth0_vlan entered promiscuous mode [ 57.693243][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.702019][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.710577][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.722521][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.730664][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.739265][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.748248][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.766713][ T4185] device veth1_macvtap entered promiscuous mode [ 57.793756][ T4188] device veth0_vlan entered promiscuous mode [ 57.811267][ T4194] device veth0_vlan entered promiscuous mode [ 57.822966][ T4187] device veth1_vlan entered promiscuous mode [ 57.832125][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.840182][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.849573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.859159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.867314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.878665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.887098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.895711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.903555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.913932][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.924659][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.936683][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.947434][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.959053][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.970557][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.980488][ T4194] device veth1_vlan entered promiscuous mode [ 57.998497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.006670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.014845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.025033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.034177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.043067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.057625][ T4188] device veth1_vlan entered promiscuous mode [ 58.073168][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.088154][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.097662][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.106626][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.116224][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.128678][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.157803][ T4187] device veth0_macvtap entered promiscuous mode [ 58.170338][ T4194] device veth0_macvtap entered promiscuous mode [ 58.178196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.187541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.197102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.205491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.213375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.222177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.230482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.239145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.247658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.255788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.281564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.290053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.306062][ T4187] device veth1_macvtap entered promiscuous mode [ 58.315765][ T4194] device veth1_macvtap entered promiscuous mode [ 58.338631][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.349194][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.360135][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.371732][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.383230][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.395170][ T4188] device veth0_macvtap entered promiscuous mode [ 58.429785][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.447733][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.458217][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.468930][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.480302][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.490516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.498828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.508706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.517702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.528234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.538909][ T4188] device veth1_macvtap entered promiscuous mode [ 58.566932][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.578666][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.599318][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.611446][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.622490][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.633198][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.645157][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.670744][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.709787][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.735101][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.765373][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.810190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.837837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.875456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.918485][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 58.932933][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 58.958335][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 59.021704][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.035368][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 59.063259][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 59.070743][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.133361][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.189496][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.236637][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.278039][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.331590][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.381569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.409213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.455440][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.544557][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.565382][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.588086][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.625331][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.637785][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.648554][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.659159][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.669738][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.680268][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.691663][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.699829][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.709669][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.719122][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.727883][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.758617][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.774681][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.785822][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.800435][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.812007][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.827763][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.838407][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.854584][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.867744][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.885046][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.896934][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.913929][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.994283][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.004251][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.017451][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.026474][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.036701][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.054039][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.131237][ T1525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.146677][ T1525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.574743][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.689595][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.698883][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.706861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.840526][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.917521][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.992513][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 61.000202][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 61.018479][ T4255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.018499][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.035977][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.085328][ T4255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.098832][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.125610][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 61.133866][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 61.176548][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.200703][ T26] Bluetooth: hci0: command 0x0419 tx timeout [ 61.241701][ T1525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.722460][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.742198][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.759874][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.768482][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.778832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.022217][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.235135][ T4299] loop1: detected capacity change from 0 to 2048 [ 63.381690][ T4299] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 63.905324][ T4299] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.720898][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 65.730906][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 66.500893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.535107][ T4339] ======================================================= [ 66.535107][ T4339] WARNING: The mand mount option has been deprecated and [ 66.535107][ T4339] and is ignored by this kernel. Remove the mand [ 66.535107][ T4339] option from the mount to silence this warning. [ 66.535107][ T4339] ======================================================= [ 66.800890][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.820876][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.850887][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.860877][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.880874][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.890873][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.900875][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.925415][ T4370] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.983460][ T4387] binder: BINDER_SET_CONTEXT_MGR already set [ 70.990806][ T4387] binder: 4386:4387 ioctl 4018620d 200000000180 returned -16 [ 71.028829][ T4387] ODEBUG: Out of memory. ODEBUG disabled [ 71.167144][ T4391] tc action pedit 'at' offset 5 out of bounds [ 71.173516][ T4391] tc action pedit 'at' offset 5 out of bounds [ 71.179634][ T4391] tc action pedit 'at' offset 5 out of bounds [ 71.185758][ T4391] tc action pedit 'at' offset 5 out of bounds [ 71.191849][ T4391] tc action pedit 'at' offset 5 out of bounds [ 71.197910][ T4391] tc action pedit 'at' offset 5 out of bounds [ 71.204002][ T4391] tc action pedit 'at' offset 5 out of bounds [ 71.210066][ T4391] tc action pedit 'at' offset 5 out of bounds [ 71.216157][ T4391] tc action pedit 'at' offset 5 out of bounds [ 71.222268][ T4391] tc action pedit 'at' offset 5 out of bounds [ 71.228508][ T4391] 0: reclassify loop, rule prio 0, protocol 800 [ 71.866118][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.881993][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.796415][ T4387] syz.2.32 (4387): drop_caches: 2 [ 74.957254][ T4424] loop2: detected capacity change from 0 to 512 [ 74.964557][ T4426] tipc: Started in network mode [ 74.982493][ T4426] tipc: Node identity 4, cluster identity 4711 [ 74.988677][ T4426] tipc: Node number set to 4 [ 76.051253][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.331089][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 76.681116][ T7] usb 5-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 76.695953][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.704343][ T7] usb 5-1: Product: syz [ 76.709288][ T7] usb 5-1: Manufacturer: syz [ 76.719968][ T7] usb 5-1: SerialNumber: syz [ 77.091152][ T7] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 77.111131][ T7] usb 5-1: unit 5 not found! [ 77.131152][ T7] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x600, type = 5 [ 77.140700][ T7] usb 5-1: 6:0: cannot get min/max values for control 2 (id 6) [ 77.160963][ T7] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x200, wIndex = 0x600, type = 5 [ 77.185878][ T7] usb 5-1: USB disconnect, device number 2 [ 77.430002][ T4430] udevd[4430]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.393496][ T1108] cfg80211: failed to load regulatory.db [ 84.156194][ T4480] device syzkaller0 entered promiscuous mode [ 84.339675][ T4468] syz.4.50 (4468): drop_caches: 2 [ 84.386797][ T4481] tipc: Started in network mode [ 84.409194][ T4481] tipc: Node identity 662acd2d652, cluster identity 4711 [ 84.430233][ T4487] loop4: detected capacity change from 0 to 128 [ 84.441109][ T4481] tipc: Enabled bearer , priority 0 [ 84.559238][ T4481] tipc: Resetting bearer [ 84.612756][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.645672][ T4481] tipc: Disabling bearer [ 85.720206][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 85.941046][ T21] usb 4-1: device descriptor read/all, error -71 [ 86.996423][ T4502] device syzkaller0 entered promiscuous mode [ 87.019927][ T4502] 0: reclassify loop, rule prio 0, protocol 800 [ 87.093988][ T4518] loop2: detected capacity change from 0 to 512 [ 87.236101][ T4518] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 87.413679][ T4518] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 88.426010][ T4518] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #13: comm syz.2.65: iget: bad i_size value: 12154757448730 [ 88.549984][ T4518] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.65: couldn't read orphan inode 13 (err -117) [ 88.666558][ T4518] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 88.804764][ T4530] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 91.293547][ T4535] device syzkaller0 entered promiscuous mode [ 91.437525][ T4535] 0: reclassify loop, rule prio 0, protocol 800 [ 91.928176][ T4549] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 92.117504][ T4548] loop2: detected capacity change from 0 to 512 [ 92.344145][ T4548] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 92.629985][ T4548] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 92.955529][ T4548] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.399108][ T4567] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4567] [ 95.688605][ T4574] device syzkaller0 entered promiscuous mode [ 95.903692][ T4574] 0: reclassify loop, rule prio 0, protocol 800 [ 97.067795][ T4587] loop1: detected capacity change from 0 to 164 [ 97.302489][ T4589] loop4: detected capacity change from 0 to 32768 [ 97.373955][ T4589] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 97.382353][ T4589] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 97.453717][ T4589] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 97.464485][ T4190] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 97.492345][ T4190] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 97.516727][ T4587] device syzkaller0 entered promiscuous mode [ 98.234789][ T4190] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 742ms [ 98.251608][ T4190] gfs2: fsid=syz:syz.0: jid=0: Done [ 98.257881][ T4589] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 102.932728][ T4619] device syzkaller0 entered promiscuous mode [ 105.006313][ T4646] device syzkaller0 entered promiscuous mode [ 110.159079][ T4701] loop3: detected capacity change from 0 to 512 [ 110.189997][ T4701] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.920189][ T4701] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 112.164297][ T4701] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 112.600865][ C0] sched: RT throttling activated [ 112.618719][ T4701] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 112.629163][ T4701] System zones: 0-2, 18-18, 34-34 [ 112.706679][ T4701] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.113: bad orphan inode 15 [ 112.751259][ T4701] ext4_test_bit(bit=14, block=18) = 1 [ 112.765470][ T4701] is_bad_inode(inode)=0 [ 112.769766][ T4701] NEXT_ORPHAN(inode)=2264924160 [ 112.778880][ T4701] max_ino=32 [ 112.807037][ T4701] i_nlink=0 [ 112.843728][ T4701] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.113: corrupted inode contents [ 112.875378][ T4701] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #15: comm syz.3.113: mark_inode_dirty error [ 112.888061][ T4690] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.896205][ T4690] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.913840][ T4701] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.113: corrupted inode contents [ 112.952329][ T4701] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2957: inode #15: comm syz.3.113: mark_inode_dirty error [ 113.077910][ T4701] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2960: inode #15: comm syz.3.113: mark inode dirty (error -117) [ 113.172894][ T4701] EXT4-fs warning (device loop3): ext4_evict_inode:304: xattr delete (err -117) [ 113.253790][ T4701] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.595117][ T4718] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 80: padding at end of block bitmap is not set [ 115.321181][ T4732] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 115.321181][ T4732] program syz.2.121 not setting count and/or reply_len properly [ 118.288274][ T4755] loop2: detected capacity change from 0 to 164 [ 118.337530][ T4755] netlink: 168 bytes leftover after parsing attributes in process `syz.2.124'. [ 118.640179][ T4690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.172666][ T4690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.354364][ T4757] usb usb8: usbfs: process 4757 (syz.2.125) did not claim interface 0 before use [ 119.732257][ T4765] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 122.211472][ T4690] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.374614][ T4690] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.395164][ T4690] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.623452][ T4690] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.027810][ T4690] syz.4.110 (4690) used greatest stack depth: 19888 bytes left [ 123.936241][ T150] block nbd4: Attempted send on invalid socket [ 123.942963][ T150] blk_update_request: I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 123.955235][ T150] gfs2: error 10 reading superblock [ 124.939628][ T4812] loop2: detected capacity change from 0 to 32768 [ 125.082650][ T4829] loop4: detected capacity change from 0 to 512 [ 125.107543][ T4829] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.125406][ T4829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.130682][ T4812] XFS (loop2): Mounting V5 Filesystem [ 125.136624][ T4836] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.232039][ T4836] syz.0.143 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 125.243965][ T4836] CPU: 0 PID: 4836 Comm: syz.0.143 Not tainted syzkaller #0 [ 125.251271][ T4836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.261367][ T4836] Call Trace: [ 125.264649][ T4836] [ 125.267583][ T4836] dump_stack_lvl+0x188/0x250 [ 125.272318][ T4836] ? show_regs_print_info+0x20/0x20 [ 125.277524][ T4836] ? load_image+0x410/0x410 [ 125.282049][ T4836] ? __mutex_lock_common+0x435/0x2400 [ 125.287433][ T4836] dump_header+0xd9/0x780 [ 125.291776][ T4836] out_of_memory+0xe27/0x1190 [ 125.296462][ T4836] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 125.302111][ T4836] ? mutex_lock_io_nested+0x60/0x60 [ 125.307329][ T4836] ? unregister_oom_notifier+0x20/0x20 [ 125.312811][ T4836] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 125.318367][ T4836] ? mem_cgroup_oom_trylock+0x210/0x210 [ 125.323938][ T4836] ? do_raw_spin_unlock+0x11d/0x230 [ 125.325483][ T4829] EXT4-fs (loop4): 1 truncate cleaned up [ 125.329146][ T4836] try_charge_memcg+0x1075/0x15b0 [ 125.329207][ T4836] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 125.345610][ T4836] ? rcu_lock_acquire+0x30/0x30 [ 125.350500][ T4836] obj_cgroup_charge_pages+0x87/0x190 [ 125.355883][ T4836] ? __memcg_kmem_charge_page+0x380/0x380 [ 125.361618][ T4836] ? rcu_lock_acquire+0x30/0x30 [ 125.366485][ T4836] obj_cgroup_charge+0x19f/0x320 [ 125.371435][ T4836] ? idr_get_free+0x8a0/0xa10 [ 125.376121][ T4836] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 125.378768][ T4812] XFS (loop2): Ending clean mount [ 125.381249][ T4836] pcpu_alloc+0x21a/0x16d0 [ 125.381295][ T4836] ? do_raw_spin_unlock+0x11d/0x230 [ 125.395903][ T4836] mem_cgroup_css_alloc+0x182/0x1620 [ 125.400178][ T4829] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 125.401199][ T4836] cgroup_apply_control_enable+0x3cc/0xb00 [ 125.401238][ T4836] cgroup_mkdir+0xcbd/0xeb0 [ 125.401264][ T4836] ? css_task_iter_end+0x280/0x280 [ 125.401295][ T4836] ? do_raw_spin_unlock+0x11d/0x230 [ 125.437888][ T4836] ? kernfs_iop_permission+0x22d/0x310 [ 125.443357][ T4836] ? css_task_iter_end+0x280/0x280 [ 125.448517][ T4836] kernfs_iop_mkdir+0x23d/0x3d0 [ 125.453384][ T4836] vfs_mkdir+0x386/0x570 [ 125.457646][ T4836] do_mkdirat+0x1dd/0x5c0 [ 125.461985][ T4836] ? vfs_mkdir+0x570/0x570 [ 125.466416][ T4836] __x64_sys_mkdirat+0x85/0x90 [ 125.471187][ T4836] do_syscall_64+0x4c/0xa0 [ 125.475607][ T4836] ? clear_bhb_loop+0x30/0x80 [ 125.480292][ T4836] ? clear_bhb_loop+0x30/0x80 [ 125.484978][ T4836] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.490884][ T4836] RIP: 0033:0x7f0892ab6159 [ 125.495306][ T4836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.514918][ T4836] RSP: 002b:00007f0890d0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 125.523456][ T4836] RAX: ffffffffffffffda RBX: 00007f0892d3dfa0 RCX: 00007f0892ab6159 [ 125.531445][ T4836] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 125.539429][ T4836] RBP: 00007f0892b4d06b R08: 0000000000000000 R09: 0000000000000000 [ 125.547404][ T4836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.555381][ T4836] R13: 00007f0892d3e038 R14: 00007f0892d3dfa0 R15: 00007ffff41812a8 [ 125.563378][ T4836] [ 125.569515][ T25] audit: type=1800 audit(1791045886.188:2): pid=4812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.138" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 125.612270][ T4836] memory: usage 0kB, limit 0kB, failcnt 19 [ 125.619240][ T4836] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 125.626962][ T4836] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 125.639368][ T4836] Memory cgroup stats for /syz0/test: [ 125.640257][ T4836] anon 0 [ 125.640257][ T4836] file 0 [ 125.640257][ T4836] kernel_stack 0 [ 125.640257][ T4836] pagetables 0 [ 125.640257][ T4836] percpu 0 [ 125.640257][ T4836] sock 0 [ 125.640257][ T4836] shmem 0 [ 125.640257][ T4836] file_mapped 0 [ 125.640257][ T4836] file_dirty 0 [ 125.640257][ T4836] file_writeback 0 [ 125.640257][ T4836] swapcached 0 [ 125.640257][ T4836] anon_thp 0 [ 125.640257][ T4836] file_thp 0 [ 125.640257][ T4836] shmem_thp 0 [ 125.640257][ T4836] inactive_anon 0 [ 125.640257][ T4836] active_anon 0 [ 125.640257][ T4836] inactive_file 0 [ 125.640257][ T4836] active_file 0 [ 125.640257][ T4836] unevictable 0 [ 125.640257][ T4836] slab_reclaimable 0 [ 125.640257][ T4836] slab_unreclaimable 0 [ 125.640257][ T4836] slab 0 [ 125.640257][ T4836] workingset_refault_anon 0 [ 125.640257][ T4836] workingset_refault_file 0 [ 125.640257][ T4836] workingset_activate_anon 0 [ 125.640257][ T4836] workingset_activate_file 0 [ 126.306791][ T4836] Out of memory and no killable processes... [ 126.856414][ T4194] XFS (loop2): Unmounting Filesystem [ 126.934580][ T4861] overlayfs: overlapping lowerdir path [ 127.055928][ T4862] kvm [4859]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 127.070963][ T4761] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.112408][ T4862] kvm [4859]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 127.176657][ T4862] kvm [4859]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8001000004e1 [ 127.217079][ T4862] kvm [4859]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 127.259010][ T4862] kvm [4859]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x800000000f21 [ 127.290246][ T4862] kvm [4859]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 127.318137][ T4862] kvm [4859]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8000000004e1 [ 127.401753][ T4862] kvm [4859]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 127.423705][ T4862] kvm [4859]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x800000000f21 [ 127.484118][ T4862] kvm [4859]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 127.542427][ T4873] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 127.578049][ T4873] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 128.044528][ T4884] Console: switching to colour VGA+ 80x25 [ 130.255323][ T4902] capability: warning: `syz.2.158' uses deprecated v2 capabilities in a way that may be insecure [ 130.320998][ T4761] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.381132][ T4761] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 130.396672][ T4906] loop4: detected capacity change from 0 to 256 [ 131.299043][ T4761] usb 5-1: can't read configurations, error -71 [ 131.352883][ T25] audit: type=1800 audit(1791045891.990:3): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.161" name=02 dev="sda1" ino=2047 res=0 errno=0 [ 132.424640][ T25] audit: type=1800 audit(1791045893.086:4): pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.164" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 132.601551][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.611364][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.328242][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 133.948768][ T4935] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 134.029548][ T4950] netlink: 108 bytes leftover after parsing attributes in process `syz.3.171'. [ 134.045124][ T4945] loop0: detected capacity change from 0 to 2048 [ 134.105699][ T4953] loop2: detected capacity change from 0 to 1024 [ 134.319163][ T4953] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.332937][ T4953] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.344391][ T4963] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.357263][ T4963] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.411717][ T4953] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.428130][ T4953] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.451605][ T4953] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.459766][ T4953] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.500084][ T4671] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 134.511683][ T4953] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.525467][ T4953] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.545971][ T4963] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.559380][ T4963] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.678951][ T4953] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.698484][ T4974] loop3: detected capacity change from 0 to 256 [ 134.722279][ T4953] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.734022][ T4963] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.743382][ T4963] hfsplus: request for non-existent node 33423360 in B*Tree [ 134.786960][ T4671] usb 5-1: Using ep0 maxpacket: 32 [ 135.766610][ T4953] hfsplus: request for non-existent node 33423360 in B*Tree [ 135.795684][ T4953] hfsplus: request for non-existent node 33423360 in B*Tree [ 135.836305][ T4983] loop0: detected capacity change from 0 to 512 [ 135.863496][ T4963] hfsplus: request for non-existent node 33423360 in B*Tree [ 136.002437][ T4963] hfsplus: request for non-existent node 33423360 in B*Tree [ 136.038570][ T4984] hfsplus: request for non-existent node 33423360 in B*Tree [ 136.047328][ T4671] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 136.063873][ T4671] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 136.077109][ T4984] hfsplus: request for non-existent node 33423360 in B*Tree [ 136.193861][ T4983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 136.399825][ T4983] System zones: 1-12 [ 136.410953][ T4983] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.177: missing EA_INODE flag [ 136.427306][ T4671] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 136.464064][ T4671] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 136.493993][ T4671] usb 5-1: config 0 interface 0 has no altsetting 0 [ 136.530816][ T4983] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.177: error while reading EA inode 12 err=-117 [ 136.567972][ T4983] EXT4-fs (loop0): 1 orphan inode deleted [ 136.585341][ T4983] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 136.858406][ T4671] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 137.769437][ T4671] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 137.778483][ T4671] usb 5-1: Product: syz [ 137.783000][ T4671] usb 5-1: Manufacturer: syz [ 137.787667][ T4671] usb 5-1: SerialNumber: syz [ 137.841305][ T5015] Zero length message leads to an empty skb [ 137.875534][ T4671] usb 5-1: config 0 descriptor?? [ 137.895889][ T4671] usb 5-1: can't set config #0, error -71 [ 137.904949][ T4671] usb 5-1: USB disconnect, device number 5 [ 140.008704][ T5049] loop0: detected capacity change from 0 to 256 [ 141.760628][ T13] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 143.471128][ T13] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.584701][ T25] audit: type=1800 audit(1791045903.686:5): pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.197" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 143.632814][ T5097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.422935][ T25] audit: type=1800 audit(1791045904.484:6): pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.197" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 144.992896][ T5107] loop0: detected capacity change from 0 to 64 [ 146.111944][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.120037][ T13] usb 2-1: Product: syz [ 146.124502][ T13] usb 2-1: Manufacturer: syz [ 146.332710][ T5117] o2cb: This node has not been configured. [ 146.338850][ T5117] o2cb: Cluster check failed. Fix errors before retrying. [ 146.346398][ T5117] (syz.3.204,5117,0):user_dlm_register:675 ERROR: status = -22 [ 146.354195][ T5117] (syz.3.204,5117,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 146.688683][ T13] usb 2-1: SerialNumber: syz [ 146.700851][ T5118] loop2: detected capacity change from 0 to 256 [ 146.711300][ T13] usb 2-1: config 0 descriptor?? [ 147.034971][ T4671] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 148.432988][ T13] usb 2-1: can't set config #0, error -71 [ 148.463003][ T13] usb 2-1: USB disconnect, device number 2 [ 149.341381][ T4671] usb 1-1: Using ep0 maxpacket: 8 [ 149.523834][ T4671] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 149.532051][ T4671] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.548120][ T4671] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.564146][ T4671] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.575502][ T4671] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.588811][ T4671] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.597850][ T4671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.858130][ T5149] syz.1.210 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 150.851069][ T4671] usb 1-1: can't set config #16, error -71 [ 150.975151][ T5155] loop0: detected capacity change from 0 to 1024 [ 151.023787][ T4273] FS-Cache: Duplicate cookie detected [ 151.029437][ T4273] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 151.036902][ T4273] FS-Cache: O-cookie d=ffffffff8c747da0{AFS.cell} n=ffff88805ba9b800 [ 151.045014][ T4273] FS-Cache: O-key=[4] '73797a30' [ 151.049995][ T4273] FS-Cache: N-cookie c=00000008 [p=00000006 fl=2 nc=0 na=1] [ 151.057324][ T4273] FS-Cache: N-cookie d=ffffffff8c747da0{AFS.cell} n=ffff888061cdd000 [ 151.065518][ T4273] FS-Cache: N-key=[4] '73797a30' [ 151.071512][ T4671] usb 1-1: USB disconnect, device number 2 [ 151.110954][ T5158] loop4: detected capacity change from 0 to 2048 [ 151.223032][ T5158] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.383516][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 151.401371][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.049298][ T5169] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.056864][ T5169] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.072424][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.080076][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.121733][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.132393][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.182327][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.197929][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.218103][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.226026][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.290528][ T5169] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.317037][ T5169] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.376070][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.415293][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.465067][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.473302][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 153.643899][ T5175] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 153.663697][ T5175] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 153.930465][ T5188] [ 153.932830][ T5188] ====================================================== [ 153.939838][ T5188] WARNING: possible circular locking dependency detected [ 153.946855][ T5188] syzkaller #0 Not tainted [ 153.951260][ T5188] ------------------------------------------------------ [ 153.958263][ T5188] syz.4.225/5188 is trying to acquire lock: [ 153.964142][ T5188] ffff888146024150 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14c/0x450 [ 153.975632][ T5188] [ 153.975632][ T5188] but task is already holding lock: [ 153.982989][ T5188] ffffffff8cf20bc8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550 [ 153.992215][ T5188] [ 153.992215][ T5188] which lock already depends on the new lock. [ 153.992215][ T5188] [ 154.002608][ T5188] [ 154.002608][ T5188] the existing dependency chain (in reverse order) is: [ 154.011613][ T5188] [ 154.011613][ T5188] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 154.019531][ T5188] __mutex_lock_common+0x1e5/0x2400 [ 154.025256][ T5188] mutex_lock_nested+0x17/0x20 [ 154.030547][ T5188] usbg_make_tpg+0xf5/0x550 [ 154.035570][ T5188] target_fabric_make_tpg+0xa0/0x6d0 [ 154.041376][ T5188] configfs_mkdir+0x511/0x9e0 [ 154.046577][ T5188] vfs_mkdir+0x386/0x570 [ 154.051431][ T5188] do_mkdirat+0x1dd/0x5c0 [ 154.056286][ T5188] __x64_sys_mkdirat+0x85/0x90 [ 154.061576][ T5188] do_syscall_64+0x4c/0xa0 [ 154.066511][ T5188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.072930][ T5188] [ 154.072930][ T5188] -> #1 (&subsys->su_mutex){+.+.}-{3:3}: [ 154.080748][ T5188] __mutex_lock_common+0x1e5/0x2400 [ 154.086469][ T5188] mutex_lock_nested+0x17/0x20 [ 154.091752][ T5188] configfs_rmdir+0x638/0x980 [ 154.096946][ T5188] vfs_rmdir+0x19d/0x410 [ 154.101707][ T5188] do_rmdir+0x27f/0x710 [ 154.106378][ T5188] __x64_sys_rmdir+0x45/0x50 [ 154.111485][ T5188] do_syscall_64+0x4c/0xa0 [ 154.116424][ T5188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.122834][ T5188] [ 154.122834][ T5188] -> #0 (&sb->s_type->i_mutex_key#21){++++}-{3:3}: [ 154.131523][ T5188] __lock_acquire+0x38f7/0x7d40 [ 154.136893][ T5188] lock_acquire+0x19f/0x400 [ 154.141913][ T5188] down_write+0x38/0x60 [ 154.146586][ T5188] configfs_depend_item_unlocked+0x14c/0x450 [ 154.153090][ T5188] usbg_make_tpg+0x1dd/0x550 [ 154.158200][ T5188] target_fabric_make_tpg+0xa0/0x6d0 [ 154.164009][ T5188] configfs_mkdir+0x511/0x9e0 [ 154.169204][ T5188] vfs_mkdir+0x386/0x570 [ 154.174052][ T5188] do_mkdirat+0x1dd/0x5c0 [ 154.178896][ T5188] __x64_sys_mkdirat+0x85/0x90 [ 154.184180][ T5188] do_syscall_64+0x4c/0xa0 [ 154.189114][ T5188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.195530][ T5188] [ 154.195530][ T5188] other info that might help us debug this: [ 154.195530][ T5188] [ 154.205746][ T5188] Chain exists of: [ 154.205746][ T5188] &sb->s_type->i_mutex_key#21 --> &subsys->su_mutex --> tpg_instances_lock [ 154.205746][ T5188] [ 154.220256][ T5188] Possible unsafe locking scenario: [ 154.220256][ T5188] [ 154.227777][ T5188] CPU0 CPU1 [ 154.233122][ T5188] ---- ---- [ 154.238465][ T5188] lock(tpg_instances_lock); [ 154.243126][ T5188] lock(&subsys->su_mutex); [ 154.250212][ T5188] lock(tpg_instances_lock); [ 154.257501][ T5188] lock(&sb->s_type->i_mutex_key#21); [ 154.262964][ T5188] [ 154.262964][ T5188] *** DEADLOCK *** [ 154.262964][ T5188] [ 154.271088][ T5188] 4 locks held by syz.4.225/5188: [ 154.276093][ T5188] #0: ffff888146a9e460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 154.285311][ T5188] #1: ffff88805e501fb0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 154.296089][ T5188] #2: ffffffff8cc24690 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 154.305819][ T5188] #3: ffffffff8cf20bc8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550 [ 154.315459][ T5188] [ 154.315459][ T5188] stack backtrace: [ 154.321327][ T5188] CPU: 1 PID: 5188 Comm: syz.4.225 Not tainted syzkaller #0 [ 154.328591][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.338626][ T5188] Call Trace: [ 154.341887][ T5188] [ 154.344824][ T5188] dump_stack_lvl+0x188/0x250 [ 154.349486][ T5188] ? load_image+0x410/0x410 [ 154.353972][ T5188] ? show_regs_print_info+0x20/0x20 [ 154.359155][ T5188] ? print_circular_bug+0x12b/0x1a0 [ 154.364335][ T5188] check_noncircular+0x2f8/0x400 [ 154.369256][ T5188] ? look_up_lock_class+0x71/0x110 [ 154.374356][ T5188] ? print_deadlock_bug+0x5d0/0x5d0 [ 154.379546][ T5188] ? lockdep_lock+0xf1/0x1f0 [ 154.384128][ T5188] ? mark_lock+0x94/0x320 [ 154.388461][ T5188] ? _find_first_zero_bit+0xd1/0xf0 [ 154.393653][ T5188] __lock_acquire+0x38f7/0x7d40 [ 154.398513][ T5188] ? verify_lock_unused+0x140/0x140 [ 154.403707][ T5188] ? __mutex_trylock_common+0x15c/0x260 [ 154.409234][ T5188] ? rcu_lock_release+0x20/0x20 [ 154.414071][ T5188] lock_acquire+0x19f/0x400 [ 154.418555][ T5188] ? configfs_depend_item_unlocked+0x14c/0x450 [ 154.424695][ T5188] ? __might_sleep+0xf0/0xf0 [ 154.429269][ T5188] ? __kasan_kmalloc+0xc6/0xe0 [ 154.434016][ T5188] ? read_lock_is_recursive+0x10/0x10 [ 154.439375][ T5188] ? mutex_lock_io_nested+0x60/0x60 [ 154.444562][ T5188] down_write+0x38/0x60 [ 154.448706][ T5188] ? configfs_depend_item_unlocked+0x14c/0x450 [ 154.454842][ T5188] configfs_depend_item_unlocked+0x14c/0x450 [ 154.460805][ T5188] usbg_make_tpg+0x1dd/0x550 [ 154.465383][ T5188] ? mutex_lock_io_nested+0x60/0x60 [ 154.470565][ T5188] ? usbg_drop_tport+0x20/0x20 [ 154.475312][ T5188] ? vscnprintf+0x80/0x80 [ 154.479630][ T5188] target_fabric_make_tpg+0xa0/0x6d0 [ 154.484901][ T5188] ? target_fabric_release_wwn+0xa0/0xa0 [ 154.490517][ T5188] configfs_mkdir+0x511/0x9e0 [ 154.495184][ T5188] vfs_mkdir+0x386/0x570 [ 154.499411][ T5188] do_mkdirat+0x1dd/0x5c0 [ 154.503722][ T5188] ? vfs_mkdir+0x570/0x570 [ 154.508124][ T5188] __x64_sys_mkdirat+0x85/0x90 [ 154.512880][ T5188] do_syscall_64+0x4c/0xa0 [ 154.517294][ T5188] ? clear_bhb_loop+0x30/0x80 [ 154.521959][ T5188] ? clear_bhb_loop+0x30/0x80 [ 154.526630][ T5188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.532507][ T5188] RIP: 0033:0x7fc88e670159 [ 154.536910][ T5188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.556503][ T5188] RSP: 002b:00007fc88c8c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 154.564905][ T5188] RAX: ffffffffffffffda RBX: 00007fc88e8f7fa0 RCX: 00007fc88e670159 [ 154.572862][ T5188] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 154.580821][ T5188] RBP: 00007fc88e70706b R08: 0000000000000000 R09: 0000000000000000 [ 154.588775][ T5188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.596727][ T5188] R13: 00007fc88e8f8038 R14: 00007fc88e8f7fa0 R15: 00007ffe8ab8d208 [ 154.604693][ T5188]