last executing test programs: 1m30.917893382s ago: executing program 1 (id=11): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x40, 0x9, 0x4, "37d86476"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0xe8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m29.527467027s ago: executing program 0 (id=20): timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) tkill(r2, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) 1m28.548587021s ago: executing program 0 (id=26): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x407f, 0x5, 0x3, 0x99fe, 0x5}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) lsetxattr(0x0, &(0x7f0000000200)=@random={'trusted.', 'ext4\x00'}, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0x202) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1m27.38162805s ago: executing program 0 (id=34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x4, 0x10000000, 0x4e, 0xef49}, 0x4, 0x2c}, [{0xe962, 0x401, 0xfffffffb, 0x8f4f, 0x3, 0x4}, {0x10, 0x9, 0xfffffffa, 0x2, 0x6, 0x3}, {0x6, 0x1, 0x4, 0x0, 0x2091, 0x1}, {0x1, 0x5, 0x8, 0x8, 0x2, 0x438}, {0x64, 0xf, 0x2ff, 0x0, 0xc0000000, 0x7fff}, {0x9, 0x2, 0x4, 0x1, 0x401, 0xd}, {0x4, 0x3, 0x80, 0x2, 0x52, 0xa}, {0xffffd102, 0x8, 0xe80, 0x7f, 0x7, 0x800}, {0xffff4c86, 0xbfd, 0x48, 0x9, 0x52, 0xfffff800}, {0x0, 0x4, 0x4, 0x800000, 0x5, 0x934}, {0x7ff, 0xfd, 0x3, 0x400, 0x1, 0x9}, {0x0, 0x40, 0xd, 0x80000000, 0x2, 0xffffffff}, {0x7, 0x91f, 0x3, 0x2, 0xfffffffd, 0x1}, {0xffffff31, 0x22a, 0xffffffa1, 0x800, 0x12000000, 0xed}, {0xfffffff8, 0x10, 0x101, 0x6, 0x7, 0x80000001}, {0x9, 0x8, 0x2d6b, 0x9, 0x40000000}, {0x7, 0x7, 0x5, 0x55, 0x3, 0x2}, {0x9, 0x1, 0xed3, 0x3, 0xffff5242, 0x4}, {0x81, 0x6, 0x7, 0x80, 0x3, 0x9b64}, {0x1, 0x100, 0x4, 0x5e5, 0x79, 0xfffffffc}, {0x0, 0x4f269712, 0x400, 0x101, 0x5c, 0x7}, {0x2a, 0x3, 0x8a6, 0x10, 0x3, 0x3}, {0x3, 0x8, 0x21f, 0x2, 0x4fd, 0x1}, {0x9, 0xf, 0x5, 0x4, 0xfffffd9e, 0x1}, {0x2, 0x81, 0x1, 0x1000, 0x9, 0x2}, {0x8, 0x9, 0x4, 0x9, 0x6, 0x7ff}, {0x8, 0xd4, 0x0, 0x82ca19b, 0x47e2, 0x60a}, {0x5, 0x800, 0x8, 0x9a, 0x752f, 0x5}, {0x6, 0x6, 0x8001, 0x7, 0x3, 0x7}, {0x5, 0xfffffffb, 0x5, 0x7, 0x5, 0x5}, {0x3, 0x80, 0x6, 0x81, 0x1, 0x5}, {0x3d7d, 0x1, 0xffffffff, 0x4, 0x7, 0x100}, {0x8000, 0x3, 0xd, 0x5, 0x3, 0x100}, {0x80, 0x1, 0x9, 0x7, 0xffff, 0x80000001}, {0xffffffff, 0x8, 0x8, 0xfffffff9, 0xb3, 0xfffffffe}, {0x101, 0xe, 0x5, 0x4, 0x0, 0x8}, {0x4, 0x10000, 0x9, 0x7, 0x4, 0x51}, {0xc2, 0x5, 0x3, 0x101, 0x9f1, 0xffffffff}, {0x6, 0x5, 0x7f9, 0x4, 0xffffffa7, 0x5}, {0x0, 0x6, 0xcb, 0x9, 0xffff, 0x5}, {0x588, 0x2a, 0x1ee, 0x8c, 0x8, 0x6}, {0x4, 0x800, 0x50b, 0x9, 0x7, 0x3}, {0x8, 0xfffffffb, 0x3a, 0x1ff, 0x8, 0x1ff}, {0x4, 0x6, 0x1, 0x5, 0xffffffff, 0x7}, {0x7f, 0x6, 0x0, 0x6, 0x2, 0x9}, {0x5, 0x3, 0xbb, 0xd, 0xfffffffa, 0x9}, {0x10000, 0x57779791, 0x400, 0x2, 0x4, 0xfffffffd}, {0x231, 0x8, 0x2, 0x4, 0x0, 0xfff}, {0x4, 0x101, 0xec59, 0x1, 0x9, 0x4}, {0x7ff, 0x3, 0x81, 0x3, 0x2, 0x5}, {0xfffffff8, 0xffffffff, 0x2a49, 0xfffffffe, 0x81, 0x6}, {0x6, 0x9, 0x9, 0xffffffff, 0xff, 0x5}, {0x9, 0xffff1ced, 0x4, 0xea, 0x9, 0x3}, {0x5, 0xa8bd, 0xb, 0xa6d, 0x0, 0x9}, {0x23, 0x4, 0x0, 0x7, 0x8a, 0xb86}, {0x6, 0x1, 0x8, 0x2, 0x9, 0x401}, {0x4, 0x7fffffff, 0x0, 0x1, 0x3, 0x3235}, {0x4, 0x7ff, 0x7, 0x7, 0x4, 0x3}, {0x7ff, 0x9, 0x5, 0xa5d1, 0x1fcb, 0x200}, {0x6, 0x2, 0x401, 0x2, 0x7, 0x8}, {0xfffffff6, 0x7ff, 0x2, 0xb2, 0x2, 0x4}, {0x8, 0x1, 0xb, 0x81, 0x100, 0x1}, {0x80000000, 0x3ff, 0x9, 0x800, 0xffffffff, 0xffffffff}, {0x400, 0x81, 0x3, 0xfe, 0x5, 0xb}, {0x5, 0x40, 0x7, 0xa, 0x5, 0x5}, {0xf0fe, 0x4, 0x7, 0x7ff, 0x3, 0x5cf0656a}, {0x9, 0xd17c, 0xffffffff, 0x3, 0x14e, 0x80000001}, {0xfffff10b, 0x1000, 0x8000, 0x401, 0x400, 0xd}, {0xb6, 0x3, 0x9, 0xbbe, 0x8001, 0x5}, {0x5, 0xd, 0x0, 0xffff, 0x23, 0x82}, {0x9f50, 0xc36, 0x3, 0x23bdba1d, 0x6, 0x4}, {0x7f, 0x1, 0x4, 0x1000, 0x1, 0xc92c}, {0xffffffa2, 0x7fff, 0x7, 0x2, 0x49d, 0x4}, {0x3ff, 0xb9, 0x2a2, 0x0, 0x0, 0x1}, {0x5, 0x9, 0x9, 0xd08, 0x1de, 0x3}, {0x7fff, 0x3, 0x100, 0x5, 0xe95d, 0x240}, {0x0, 0x2, 0x6, 0xb, 0x6, 0x15fd}, {0x7, 0x0, 0x7f, 0x81, 0xdc, 0x4}, {0x9, 0x5, 0x4, 0x1, 0x0, 0x5}, {0x8, 0xfffffffb, 0x8, 0x8000, 0x9}, {0x7f, 0x9, 0x1ff, 0x10001, 0x4, 0x7}, {0x6, 0x0, 0x7fff, 0xf83, 0x7ff, 0x62}, {0x2271, 0x200, 0xa, 0x80000000, 0x6, 0x1}, {0x6, 0x5, 0x2539, 0xc, 0x2, 0x78}, {0x5, 0x6, 0x5a36, 0x7, 0x9, 0xc}, {0x7fff, 0xfffffffd, 0x2, 0x9, 0x8, 0xc0000}, {0x0, 0x21d5, 0x9, 0x9, 0x8, 0x6}, {0x79f7, 0x1, 0x81, 0x3, 0x0, 0x4}, {0x1, 0xa4, 0x8, 0xc, 0x5, 0x2}, {0x2, 0x1, 0x4, 0x80000001, 0x3, 0x74}, {0x3, 0xfffffff9, 0x8, 0xffffff27, 0x2}, {0x1, 0x80, 0x7, 0xfffffffd, 0xe8, 0x400}, {0x1, 0x8001, 0x5, 0x6, 0x7, 0x1}, {0x1, 0x7ff, 0x5, 0xfff, 0xffffff89, 0xa8d2}, {0x9, 0xd, 0x0, 0x9, 0xe, 0x7}, {0x2, 0x1000, 0x7, 0x1, 0xf1e, 0xffffffff}, {0x1, 0x9, 0x6, 0x1fe7, 0x1, 0xffff}, {0x980a, 0x1, 0x8, 0x1, 0x1, 0x8}, {0x3, 0x3, 0x9, 0xbf1c, 0x7}, {0x4, 0x30, 0x5c6, 0x0, 0xbcf, 0xa5e}, {0x0, 0x2, 0x1, 0xef85, 0x7, 0x3}, {0x2, 0x80, 0xd, 0xe, 0xfffffffd, 0x76}, {0x10001, 0x3, 0xdd, 0x0, 0x5, 0x7fff}, {0x7fffffff, 0x5, 0x1, 0x3d4, 0x3d, 0x9}, {0x3, 0x0, 0xffffffff, 0x9a, 0xa27, 0x80000001}, {0x2, 0x2cb0, 0x2, 0x5, 0x3, 0x5}, {0x3, 0x1616ab89, 0xb, 0x80000001, 0x6, 0x1d8}, {0x3, 0x7fffffff, 0x1, 0x7a1, 0x6, 0x4}, {0x4, 0xad24, 0x9, 0x6ece, 0x100, 0x7b}, {0x1000, 0x3, 0xff, 0x9, 0x7, 0x8001}, {0x8, 0xd5, 0x6, 0x4, 0x3, 0xe01b}, {0x1, 0x10, 0xafc, 0x1000, 0x4, 0x4}, {0x7, 0x110, 0x2, 0x2}, {0x200, 0x9e, 0xfffffe00, 0xfffff737, 0x0, 0x2}, {0x5, 0x7, 0x1, 0x1, 0x3b, 0x3f}, {0x9, 0x4, 0x0, 0x3cd2, 0x7}, {0x7, 0xec40, 0x4, 0xc7, 0xe4b, 0xffffffff}, {0x3, 0x5, 0x2, 0x3f2, 0x6a, 0x9}, {0x3, 0xfffffffa, 0xda, 0x4, 0x101, 0x9}, {0x9546, 0x4, 0x1ff, 0xf, 0x4a, 0x80}, {0x80, 0xfc, 0x8001, 0x0, 0x80000001, 0x4}, {0x1ff, 0xffffffff, 0x9, 0x33000000, 0x7}, {0x9, 0x4, 0x2, 0x4, 0x5, 0x5}, {0x0, 0x42, 0x8, 0xfc5, 0xfffffc00, 0x7}, {0x18000, 0x8000, 0x2, 0x6, 0x683a, 0x5}, {0x6, 0x7, 0x6, 0x118, 0x5, 0x5}, {0x4b6f, 0x2, 0x10001, 0x0, 0x8, 0x8}, {0x4, 0x7, 0xfffffff7, 0x90, 0x80, 0x1}], [{0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x4}, {}, {}, {0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0xc}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5}, {0x4}, {0x3}, {0x0, 0x101d8b874b1cdc7f}, {0x5, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0xf8f5e87913030bae, 0xf945e9ea599ab65a}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {0x0, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x5}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x2}, {0x2}, {}, {0x4, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5adb7ab80c04591e}, {0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x5}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m27.141555656s ago: executing program 0 (id=36): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xaa00, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) 1m26.647373968s ago: executing program 0 (id=40): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x4, 0x1a, 0x2, 0x40, 0xfb, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x2}, {0xffff1000, 0x2, 0xd, 0xb, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x3, 0xcc}, {0xeeee0000, 0xdddd1000, 0x4, 0x8, 0x2, 0x7, 0x4, 0x1, 0x8c, 0x9, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x46, 0x3, 0xfc, 0x1}, {0x100000, 0x58000, 0x3, 0x3f, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6f, 0x1, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x8080000, 0x2000, 0xc, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x1, 0x7, 0x0, 0x6}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0x7000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x7, 0x0, 0x9000, [0x4, 0x402, 0x8, 0x1]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x49323de44ee88a26, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0xb2, 0x2}, {0xf000, 0xdddd0000, 0x4, 0x5, 0xbb, 0x5, 0x38, 0x8, 0x7, 0xfd, 0xd9, 0x2}, {0xeeef0000, 0x26000, 0xd, 0xe4, 0x3, 0xd, 0x6, 0x9, 0x2, 0x5, 0x42, 0xa}, {0x0, 0x8000000, 0xc, 0x9, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x1, 0x5}, {0xffff1000, 0xa000, 0xb, 0x7, 0xe, 0x2, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x6}, {0x80a0001, 0x26000, 0xb, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x6, 0x4}, {0x7002, 0xeeee0000, 0x1b, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x1}, {0x8000000, 0x2000, 0xe, 0x3, 0x4, 0x6, 0x9, 0xfa, 0x7, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0xc000, 0x8}, 0x14, 0x0, 0xeeee8000, 0x20, 0xfffffffffffffffd, 0x4801, 0x33339800, [0x9, 0x1ff, 0x86d, 0x8001]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x0, 0x0, @ioapic={0x3000, 0xfffffffb, 0xe, 0x6, 0x0, [{0x5, 0x7d, 0x7, '\x00', 0x2}, {0x4, 0x4, 0x0, '\x00', 0x1}, {0xa, 0x0, 0x2, '\x00', 0x4}, {0x8, 0x8, 0xff, '\x00', 0xfd}, {0x4, 0x7, 0x4, '\x00', 0x7}, {0x8, 0x7, 0x7, '\x00', 0x6}, {0xc2, 0x1, 0x7, '\x00', 0x9}, {0x6, 0x3, 0x81, '\x00', 0x8}, {0x80, 0x5, 0x8, '\x00', 0x1}, {0xff, 0xbe, 0xe0, '\x00', 0xc}, {0x80, 0x6, 0x7, '\x00', 0x8}, {0x6, 0x80, 0xfb, '\x00', 0xf}, {0x10, 0x3, 0x8}, {0x0, 0xc3, 0x5}, {0x0, 0x1, 0x40, '\x00', 0x6}, {0x61, 0x5, 0xff, '\x00', 0x9}, {0x2, 0xd, 0xc, '\x00', 0xb}, {0x6, 0x1, 0x2}, {0x58, 0x9, 0x1, '\x00', 0x1}, {0x8, 0x80, 0x1, '\x00', 0xc5}, {0xb2, 0xb3, 0x5, '\x00', 0x5}, {0x0, 0x0, 0x9}, {0x1, 0x6, 0xf, '\x00', 0x9}, {0x1, 0x4, 0x3, '\x00', 0x7}]}}) 1m26.554822151s ago: executing program 1 (id=41): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x2, 0x204, 0x5, 0x4, 0x3, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xfffffffffffffce8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) 1m26.144254161s ago: executing program 1 (id=44): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) 1m24.607563119s ago: executing program 1 (id=51): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) 1m24.352533715s ago: executing program 1 (id=53): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) pipe(&(0x7f0000000500)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x44040000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mincore(&(0x7f00005bc000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/29) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m24.081220262s ago: executing program 0 (id=54): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000071116e0000000000851000000200000085000000a000000095000000000000009500a505000000008d13c3862de9f8bdec3769e61377feb0cb268b7213223c8c5c72bfd2d60c2debfc4450b80db780d63926d0a7b38ad748a80be959857a148ce8a85e113feda73e7a9184b3270d0418bd312a0a3df7a362ab92c8057c973db2cc7bb7b6cfa4b636ff4b34052f99"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r2, r2, 0x9) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_clone3(&(0x7f0000000680)={0x200000000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1], 0x1, {r3}}, 0x58) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file4\x00', 0x80c406, &(0x7f0000002d40)=ANY=[], 0xfb, 0x2b1, &(0x7f0000000100)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 1m24.064436252s ago: executing program 1 (id=55): r0 = io_uring_setup(0x1781, &(0x7f0000000140)={0x0, 0x5dda, 0x40, 0x0, 0x268}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m23.858513528s ago: executing program 32 (id=54): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000071116e0000000000851000000200000085000000a000000095000000000000009500a505000000008d13c3862de9f8bdec3769e61377feb0cb268b7213223c8c5c72bfd2d60c2debfc4450b80db780d63926d0a7b38ad748a80be959857a148ce8a85e113feda73e7a9184b3270d0418bd312a0a3df7a362ab92c8057c973db2cc7bb7b6cfa4b636ff4b34052f99"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r2, r2, 0x9) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_clone3(&(0x7f0000000680)={0x200000000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1], 0x1, {r3}}, 0x58) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file4\x00', 0x80c406, &(0x7f0000002d40)=ANY=[], 0xfb, 0x2b1, &(0x7f0000000100)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 1m23.847652887s ago: executing program 33 (id=55): r0 = io_uring_setup(0x1781, &(0x7f0000000140)={0x0, 0x5dda, 0x40, 0x0, 0x268}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 16.956481768s ago: executing program 4 (id=230): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000f00)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000001100)="0200"/120, 0x78) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000001300)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) 16.716348004s ago: executing program 4 (id=232): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) capset(0x0, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0xffffffffffff1810, 0xa482) 15.992619952s ago: executing program 4 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 15.026086607s ago: executing program 4 (id=237): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852", 0x4b, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6c", 0x51}, {&(0x7f0000000ac0)="3fe4c8", 0x3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x5, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14.385776332s ago: executing program 2 (id=239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 13.305405529s ago: executing program 2 (id=240): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) symlink(0x0, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 13.000479047s ago: executing program 2 (id=242): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'fo\x00', 0x11, 0x6, 0x3d}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 13.000200907s ago: executing program 4 (id=243): r0 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x41, 0xfffffffc, {0xa, 0x40, 0x9, 0xfd, r4}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0xbe2e5b1053dc3ea0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = syz_open_dev$vcsa(0x0, 0xffffffff, 0x10800) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x2, 0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_ro(r5, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) 12.797385232s ago: executing program 6 (id=244): mkdirat(0xffffffffffffff9c, 0x0, 0xb81a170fbc3a0f5e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x8000000000000001}}]}, 0x4, 0x527, &(0x7f00000005c0)="$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") sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 12.680365354s ago: executing program 2 (id=246): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}], 0x1, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.704115629s ago: executing program 6 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = eventfd2(0x4, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 10.637688885s ago: executing program 6 (id=248): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 10.412336121s ago: executing program 2 (id=250): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000280)={0x30, 0x2, 0x3, "d5470000002f1a0e0000000700", 0x51424752}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180), 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x48043) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 8.125288078s ago: executing program 5 (id=253): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(0x0, 0x3, 0x2) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp1251'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x9}, 0x8) 8.124913638s ago: executing program 3 (id=254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000300)=r6) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r2, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d800", 0x2}], 0x1}, 0x20000885) 7.949500322s ago: executing program 5 (id=255): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0xa0, &(0x7f0000000540)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc14, &(0x7f0000002a80)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='mountproto\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)='retrans\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r1, &(0x7f0000000640)=""/194, 0xc2) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 7.543737682s ago: executing program 3 (id=256): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x101, 0x48000028, r2, 0x0) fanotify_mark(r3, 0x102, 0x40001043, r2, 0x0) 6.641333415s ago: executing program 3 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x2830092d) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r4, &(0x7f0000000040)=0x800000000001e8, 0x12) r5 = socket$inet(0x2, 0x2, 0x1) capset(&(0x7f0000000040)={0x20071026, r0}, &(0x7f0000000080)={0x6, 0x7f, 0x2, 0x800087, 0xffffffff, 0x40}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) sendmsg$inet(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x24008004) ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0) socket(0x10, 0x3, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af83, &(0x7f00000000c0)) 6.41660718s ago: executing program 5 (id=259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xfe, 0x0, 0x7fff7ffc}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.158930372s ago: executing program 5 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="120000000600000004000000"], 0x50) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 4.40128523s ago: executing program 5 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r4, 0x0) 4.339321162s ago: executing program 6 (id=262): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) 3.335099257s ago: executing program 4 (id=263): syz_open_dev$vim2m(&(0x7f0000000340), 0x400202, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) syz_emit_ethernet(0x9e, &(0x7f0000000580)=ANY=[], 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) 3.300768458s ago: executing program 6 (id=264): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) getpid() r4 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r4, 0x0) ftruncate(r4, 0x0) 2.613193135s ago: executing program 3 (id=265): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) 1.677285708s ago: executing program 5 (id=266): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0xe, 0xfffffffffffffffe, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.646798108s ago: executing program 6 (id=267): r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') syz_open_procfs$namespace(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001200)="80006466", 0x4, 0x400c0d4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f00000002c0), 0x4001) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) gettid() pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 238.374044ms ago: executing program 3 (id=268): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 785.509µs ago: executing program 3 (id=269): getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x98, r2, 0x5, 0x70bd26, 0x80, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @broadcast, @device_a, @random="3a6b7c13e95a"}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x8, 0x8, 0x6, 0x1}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x20000014) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000300)={'\x00', 0x1, 0x7, 0x801, 0x6, 0x800100000000}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) setresgid(r0, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) semget$private(0x0, 0x6, 0x3b1) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000000)=""/164) 0s ago: executing program 2 (id=279): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 61.316824][ T4175] cgroup: Unknown subsys name 'net' [ 61.441094][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.983765][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.438169][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 64.529863][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 64.582921][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 64.637190][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.644306][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.652998][ T4188] device bridge_slave_0 entered promiscuous mode [ 64.662431][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 64.696612][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.703720][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.711951][ T4188] device bridge_slave_1 entered promiscuous mode [ 64.724150][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 64.774389][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.781719][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.790295][ T4187] device bridge_slave_0 entered promiscuous mode [ 64.812896][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.837748][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.847167][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.855614][ T4187] device bridge_slave_1 entered promiscuous mode [ 64.877110][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.897767][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.905091][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.913076][ T4193] device bridge_slave_0 entered promiscuous mode [ 64.926203][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.933301][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.941523][ T4193] device bridge_slave_1 entered promiscuous mode [ 64.982828][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.008960][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.016339][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.024252][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.034958][ T4188] team0: Port device team_slave_0 added [ 65.042780][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.061731][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.071709][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.079217][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.087690][ T4189] device bridge_slave_1 entered promiscuous mode [ 65.108836][ T4188] team0: Port device team_slave_1 added [ 65.128989][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.149565][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.156945][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.165294][ T4199] device bridge_slave_0 entered promiscuous mode [ 65.186546][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.193533][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.219807][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.234514][ T4187] team0: Port device team_slave_0 added [ 65.243592][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.255428][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.264576][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.272032][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.280552][ T4199] device bridge_slave_1 entered promiscuous mode [ 65.301166][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.309133][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.335558][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.348904][ T4187] team0: Port device team_slave_1 added [ 65.369912][ T4193] team0: Port device team_slave_0 added [ 65.378061][ T4193] team0: Port device team_slave_1 added [ 65.410470][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.435177][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.442165][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.468596][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.482801][ T4189] team0: Port device team_slave_0 added [ 65.500224][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.518451][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.525519][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.551976][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.563915][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.571311][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.597878][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.616111][ T4189] team0: Port device team_slave_1 added [ 65.636482][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.643594][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.670127][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.711591][ T4188] device hsr_slave_0 entered promiscuous mode [ 65.718671][ T4188] device hsr_slave_1 entered promiscuous mode [ 65.761100][ T4199] team0: Port device team_slave_0 added [ 65.775028][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.782017][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.808321][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.830480][ T4187] device hsr_slave_0 entered promiscuous mode [ 65.837543][ T4187] device hsr_slave_1 entered promiscuous mode [ 65.844560][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.852965][ T4187] Cannot create hsr debugfs directory [ 65.859833][ T4199] team0: Port device team_slave_1 added [ 65.876914][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.883935][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.910047][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.925662][ T4193] device hsr_slave_0 entered promiscuous mode [ 65.932950][ T4193] device hsr_slave_1 entered promiscuous mode [ 65.940402][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.948078][ T4193] Cannot create hsr debugfs directory [ 66.000587][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.007999][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.034352][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.047079][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.054058][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.080258][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.131830][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.137885][ T2309] Bluetooth: hci1: command 0x0409 tx timeout [ 66.145485][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.152271][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.160397][ T4189] Cannot create hsr debugfs directory [ 66.205920][ T4199] device hsr_slave_0 entered promiscuous mode [ 66.212903][ T4199] device hsr_slave_1 entered promiscuous mode [ 66.215792][ T2309] Bluetooth: hci4: command 0x0409 tx timeout [ 66.226579][ T2309] Bluetooth: hci2: command 0x0409 tx timeout [ 66.232690][ T2309] Bluetooth: hci0: command 0x0409 tx timeout [ 66.235325][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.239177][ T2309] Bluetooth: hci3: command 0x0409 tx timeout [ 66.252683][ T4199] Cannot create hsr debugfs directory [ 66.516617][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.528583][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.541693][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.557572][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.595161][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.612297][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.621842][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.638706][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.698291][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.717871][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.736532][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.768084][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.828030][ T4199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.851953][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.862673][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.869874][ T4199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.892583][ T4199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.906681][ T4199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.920887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.930403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.959101][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.968837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.977989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.989095][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.011608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.020644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.031695][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.039300][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.049311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.068957][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.079818][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.090431][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.102571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.112076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.121431][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.129280][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.138643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.148614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.157691][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.164820][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.172754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.183657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.192216][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.199471][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.208471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.217566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.238978][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.250517][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.259605][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.273611][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.297865][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.307419][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.316449][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.326405][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.335959][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.344367][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.354426][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.369195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.379051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.393723][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.407541][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.435445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.451451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.462066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.477464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.489795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.504337][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.544500][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.554008][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.563372][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.573672][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.619404][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.650852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.668511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.708364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.719161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.728263][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.735391][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.744522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.752598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.760659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.771789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.781466][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.788614][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.802130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.841543][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.860788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.878099][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.896247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.907429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.915861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.934109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.944490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.958742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.967806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.981709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.992571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.004180][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.016462][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.031143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.039723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.048901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.062226][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.077396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.086804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.096892][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.103982][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.113315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.133155][ T4188] device veth0_vlan entered promiscuous mode [ 68.159291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.168451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.177530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.187245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.196087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.204506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.213267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.222249][ T4241] Bluetooth: hci1: command 0x041b tx timeout [ 68.224582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.237576][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.244844][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.252750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.261570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.270318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.279365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.287439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.295036][ T4241] Bluetooth: hci3: command 0x041b tx timeout [ 68.301826][ T4241] Bluetooth: hci0: command 0x041b tx timeout [ 68.310631][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.325120][ T4241] Bluetooth: hci2: command 0x041b tx timeout [ 68.331259][ T4241] Bluetooth: hci4: command 0x041b tx timeout [ 68.338279][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.346578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.358113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.367402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.378564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.388190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.402515][ T4188] device veth1_vlan entered promiscuous mode [ 68.452181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.464099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.479870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.493572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.502659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.511754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.521221][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.528394][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.537962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.546911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.555454][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.562507][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.571150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.580961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.591573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.600655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.609432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.618224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.653211][ T4199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.663862][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.684179][ T4193] device veth0_vlan entered promiscuous mode [ 68.691938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.709099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.721128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.733802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.743117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.751980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.761373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.770955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.782807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.823710][ T4193] device veth1_vlan entered promiscuous mode [ 68.853705][ T4188] device veth0_macvtap entered promiscuous mode [ 68.862303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.878879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.892069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.907765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.916686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.925241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.933591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.945140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.953760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.977796][ T4188] device veth1_macvtap entered promiscuous mode [ 68.988626][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.019403][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.037560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.047707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.057035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.066692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.074208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.096649][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.108144][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.125583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.134289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.152366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.163152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.182660][ T4193] device veth0_macvtap entered promiscuous mode [ 69.198606][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.210606][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.239885][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.251478][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.282423][ T4193] device veth1_macvtap entered promiscuous mode [ 69.296484][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.311463][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.320242][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.328477][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.387302][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.412459][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.427746][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.449733][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.470751][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.492200][ T506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.504225][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.521458][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.533229][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.551789][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.571455][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.594589][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.603983][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.619238][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.629466][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.706525][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.720403][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.743406][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.752937][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.761195][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.769075][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.778672][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.819264][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.839952][ T4199] device veth0_vlan entered promiscuous mode [ 69.847489][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.856584][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.866096][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.874340][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.883381][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.892348][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.912525][ T4187] device veth0_vlan entered promiscuous mode [ 69.936980][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.945772][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.976285][ T506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.984183][ T506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.996875][ T4187] device veth1_vlan entered promiscuous mode [ 70.004305][ T4199] device veth1_vlan entered promiscuous mode [ 70.018824][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.027520][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.035971][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.043767][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.052452][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.061413][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.070460][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.127497][ T506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.133446][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.148551][ T506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.158868][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.171332][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.183841][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.199498][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.210126][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.219352][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.231597][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.240099][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.251010][ T4189] device veth0_vlan entered promiscuous mode [ 70.271206][ T4189] device veth1_vlan entered promiscuous mode [ 70.290039][ T4187] device veth0_macvtap entered promiscuous mode [ 70.298141][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 70.317047][ T4199] device veth0_macvtap entered promiscuous mode [ 70.331762][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.358118][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.368587][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.378787][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.388134][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 70.390394][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.401841][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 70.408057][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 70.415143][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 70.437986][ T4187] device veth1_macvtap entered promiscuous mode [ 70.457256][ T4199] device veth1_macvtap entered promiscuous mode [ 70.494713][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.502586][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.533598][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.552607][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.563191][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.574261][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.586382][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.603935][ T4189] device veth0_macvtap entered promiscuous mode [ 70.617432][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.631023][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.642236][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.650839][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.659939][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.669719][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.679396][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.688554][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.698147][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.717691][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.729124][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.741004][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.751576][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.763862][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.774205][ T4189] device veth1_macvtap entered promiscuous mode [ 70.789948][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.807457][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.824066][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.841068][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.851244][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.862275][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.874131][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.882231][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.891123][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.901062][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.910054][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.922247][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.936404][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.974276][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.985178][ T4260] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.985286][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.014032][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.027560][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.041080][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.053113][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.063527][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.075240][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.087241][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.098545][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.114005][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.137405][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.156773][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.174128][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.191427][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.202143][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.218913][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.232304][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.244862][ T4260] usb 2-1: Using ep0 maxpacket: 16 [ 71.250212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.265790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.285576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.297889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.315735][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.327233][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.343963][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.355859][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.362444][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.379405][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.396066][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.411875][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.417925][ T4260] usb 2-1: unable to get BOS descriptor or descriptor too short [ 71.427730][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.446415][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.462248][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.482691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.492305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.508542][ T4199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.518119][ T4260] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 71.529800][ T4199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.539501][ T4199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.548703][ T4199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.576571][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.591600][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.602370][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.611590][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.695179][ T4260] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 71.715692][ T4260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.723836][ T4260] usb 2-1: Product: syz [ 71.734151][ T4260] usb 2-1: Manufacturer: syz [ 71.739365][ T4260] usb 2-1: SerialNumber: syz [ 71.791139][ T506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.810333][ T506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.856358][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.861559][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.882721][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.898076][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.916763][ T506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.936249][ T506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.964595][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.002394][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.016743][ T506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.024624][ T506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.045887][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.069865][ T4260] usb 2-1: cannot find UAC_HEADER [ 72.089124][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.108954][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.160409][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.175147][ T4260] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 72.186320][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.232462][ T4260] usb 2-1: USB disconnect, device number 2 [ 72.242891][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.274570][ T4279] loop4: detected capacity change from 0 to 1024 [ 72.376153][ T4227] Bluetooth: hci1: command 0x0419 tx timeout [ 72.435339][ T4279] EXT4-fs (loop4): Ignoring removed orlov option [ 72.457038][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 72.483853][ T4227] Bluetooth: hci0: command 0x0419 tx timeout [ 72.533469][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 72.541703][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.563200][ T4227] Bluetooth: hci4: command 0x0419 tx timeout [ 72.571452][ T4279] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 72.592998][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.669003][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 72.679849][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.688393][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.720484][ T4291] device bridge_slave_0 left promiscuous mode [ 72.757055][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.896267][ T4291] device bridge_slave_1 left promiscuous mode [ 72.902721][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.048581][ T4291] bond0: (slave bond_slave_0): Releasing backup interface [ 73.095474][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.150325][ T4291] bond0: (slave bond_slave_1): Releasing backup interface [ 73.250736][ T4291] team0: Port device team_slave_0 removed [ 73.354810][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 73.366353][ T4291] team0: Port device team_slave_1 removed [ 73.393807][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.408373][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.416490][ T4320] cgroup: No subsys list or none specified [ 73.432363][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.441412][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.513113][ T4313] device syzkaller0 entered promiscuous mode [ 73.664150][ T4296] loop2: detected capacity change from 0 to 32768 [ 73.665762][ T23] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 73.697410][ T4296] ======================================================= [ 73.697410][ T4296] WARNING: The mand mount option has been deprecated and [ 73.697410][ T4296] and is ignored by this kernel. Remove the mand [ 73.697410][ T4296] option from the mount to silence this warning. [ 73.697410][ T4296] ======================================================= [ 73.705881][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.732330][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.836238][ T23] usb 2-1: Product: syz [ 73.840471][ T23] usb 2-1: Manufacturer: syz [ 73.861339][ T23] usb 2-1: SerialNumber: syz [ 73.869365][ T23] usb 2-1: config 0 descriptor?? [ 73.915828][ T4296] XFS (loop2): Mounting V5 Filesystem [ 73.928344][ T23] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 73.974164][ T4337] overlayfs: conflicting lowerdir path [ 73.997666][ T4296] XFS (loop2): Ending clean mount [ 74.022464][ T4296] XFS (loop2): Quotacheck needed: Please wait. [ 74.061563][ T4345] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.158141][ T4296] XFS (loop2): Quotacheck: Done. [ 74.342305][ T4193] XFS (loop2): Unmounting Filesystem [ 74.393346][ T4352] 0: reclassify loop, rule prio 0, protocol 03 [ 74.763591][ T4359] Zero length message leads to an empty skb [ 74.821367][ T4361] loop3: detected capacity change from 0 to 256 [ 74.888518][ T4361] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 74.921538][ T4361] attempt to access beyond end of device [ 74.921538][ T4361] loop3: rw=524288, want=34359738496, limit=256 [ 74.933984][ T4361] attempt to access beyond end of device [ 74.933984][ T4361] loop3: rw=0, want=34359738496, limit=256 [ 74.947942][ T26] audit: type=1800 audit(1786662986.306:2): pid=4361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.24" name="file1" dev="loop3" ino=1048590 res=0 errno=0 [ 74.976185][ T4361] exFAT-fs (loop3): hint_cluster is invalid (1) [ 74.987840][ T4361] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 74.996964][ T4361] exFAT-fs (loop3): Filesystem has been set read-only [ 75.004116][ T4361] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e2587e0 iblock : 9, err : -5) [ 75.015469][ T4361] attempt to access beyond end of device [ 75.015469][ T4361] loop3: rw=2049, want=34359738496, limit=256 [ 75.218473][ T4361] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 75.227729][ T4361] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e2587e0 iblock : 16, err : -5) [ 75.237899][ T4361] attempt to access beyond end of device [ 75.237899][ T4361] loop3: rw=2049, want=34359738496, limit=256 [ 75.249950][ T4361] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 75.259869][ T4361] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e2587e0 iblock : 16, err : -5) [ 75.302866][ T4367] loop2: detected capacity change from 0 to 512 [ 75.423372][ T4367] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 75.536640][ T4367] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,acl,,errors=continue. Quota mode: writeback. [ 75.576836][ T4367] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.706389][ T4367] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.27: corrupted xattr block 33 [ 75.749802][ T4375] IPVS: fo: FWM 3 0x00000003 - no destination available [ 75.770564][ T4367] fscrypt (loop2, inode 15): Error -117 getting encryption context [ 75.963827][ T4378] zram0: detected capacity change from 0 to 8 [ 76.110147][ T4383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 76.211645][ T4386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 76.524857][ T23] gspca_sonixj: reg_w err -71 [ 76.529870][ T23] sonixj: probe of 2-1:0.0 failed with error -71 [ 76.561949][ T23] usb 2-1: USB disconnect, device number 3 [ 76.633021][ T4406] loop0: detected capacity change from 0 to 1024 [ 76.687754][ T4406] EXT4-fs (loop0): Ignoring removed bh option [ 76.727839][ T4406] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 76.827009][ T4406] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.36: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 76.888652][ T4406] EXT4-fs (loop0): Remounting filesystem read-only [ 77.051521][ T4189] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /9/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 77.170734][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 77.196301][ T4189] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /9/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 77.283054][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 77.302598][ T4189] EXT4-fs error (device loop0): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 77.377619][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 77.411034][ T4189] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 77.474597][ T4189] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /9/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 77.582525][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 77.609702][ T4189] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /9/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 77.711321][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 77.721338][ T4189] EXT4-fs error (device loop0): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 77.821607][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 77.829340][ T1110] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.869391][ T4189] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 77.922294][ T4189] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /9/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 78.020674][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 78.033837][ T4189] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /9/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 78.104748][ T1110] usb 5-1: Using ep0 maxpacket: 8 [ 78.126648][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 78.142755][ T4189] EXT4-fs error (device loop0): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 78.201025][ T4451] loop3: detected capacity change from 0 to 1024 [ 78.212697][ T4189] EXT4-fs (loop0): Remounting filesystem read-only [ 78.228619][ T4189] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 78.257008][ T1110] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 78.269005][ T1110] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.291522][ T4189] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 78.308169][ T1110] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.332418][ T1110] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.344702][ T4189] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 78.373779][ T4451] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.403656][ T1110] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.437436][ T4189] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 78.482955][ T4189] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 78.509456][ T1110] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 78.540666][ T4189] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 78.573990][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.643352][ T4189] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 78.679134][ T4189] EXT4-fs warning (device loop0): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.115111][ T1110] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.487767][ T506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.522891][ T1110] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 79.540438][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.551922][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.562857][ T1110] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 79.674948][ T1110] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 79.684057][ T1110] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 79.712916][ T1110] usb 3-1: Manufacturer: syz [ 79.743330][ T1110] usb 3-1: config 0 descriptor?? [ 79.750237][ T506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.774420][ T4229] usb 5-1: USB disconnect, device number 2 [ 79.858854][ T506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.958820][ T506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.222243][ T1110] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 80.248121][ T1110] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 80.358841][ T1110] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 80.971334][ T4475] chnl_net:caif_netlink_parms(): no params data found [ 81.043771][ T4474] chnl_net:caif_netlink_parms(): no params data found [ 81.227075][ T4503] smpboot: CPU 1 is now offline [ 81.512061][ T4475] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.549727][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.615470][ T4475] device bridge_slave_0 entered promiscuous mode [ 81.680790][ T4518] loop4: detected capacity change from 0 to 128 [ 81.719320][ T4475] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.747648][ T4515] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 81.762703][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.796053][ T4518] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.825875][ T4475] device bridge_slave_1 entered promiscuous mode [ 81.840054][ T4515] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 81.859610][ T4518] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.919944][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.976806][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.021521][ T4518] EXT4-fs (loop4): shut down requested (2) [ 82.033516][ T4474] device bridge_slave_0 entered promiscuous mode [ 82.055053][ T4262] Bluetooth: hci1: command 0x0409 tx timeout [ 82.070994][ T4522] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 82.139685][ T4229] Bluetooth: hci2: command 0x0409 tx timeout [ 82.148402][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.187973][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.249611][ T4474] device bridge_slave_1 entered promiscuous mode [ 82.314619][ T4475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.388379][ T13] usb 3-1: USB disconnect, device number 2 [ 82.413466][ T4475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.427348][ T4525] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 82.495410][ T4262] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.523795][ T4525] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 82.548595][ T4474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.629570][ T4474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.698248][ T4475] team0: Port device team_slave_0 added [ 82.879969][ T4475] team0: Port device team_slave_1 added [ 82.974855][ T4474] team0: Port device team_slave_0 added [ 83.037678][ T4474] team0: Port device team_slave_1 added [ 83.089544][ T4262] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 83.125956][ T4475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.159456][ T4262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.175912][ T4475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.226399][ T4262] usb 4-1: Product: syz [ 83.230598][ T4262] usb 4-1: Manufacturer: syz [ 83.266259][ T4262] usb 4-1: SerialNumber: syz [ 83.340696][ T4475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.430925][ T4548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 83.530755][ T4475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.568122][ T4475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.654975][ T4548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 83.715217][ T4475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.782650][ T4474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.798726][ T4533] loop4: detected capacity change from 0 to 40427 [ 83.816050][ T4474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.842912][ T4262] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 83.882705][ T4533] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 83.924816][ T4262] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 83.946108][ T4548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 83.960582][ T4533] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 83.985051][ T4262] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 84.011078][ T4474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.025494][ T4533] F2FS-fs (loop4): invalid crc value [ 84.042028][ T4262] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 84.066770][ T4533] F2FS-fs (loop4): Found nat_bits in checkpoint [ 84.084311][ T4262] lan78xx: probe of 4-1:1.0 failed with error -71 [ 84.124034][ T4262] usb 4-1: USB disconnect, device number 2 [ 84.162768][ T1110] Bluetooth: hci1: command 0x041b tx timeout [ 84.221456][ T4474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.264410][ T1110] Bluetooth: hci2: command 0x041b tx timeout [ 84.270902][ T4474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.330042][ T4533] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 84.350844][ T4533] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 84.451854][ T4474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.623360][ T4475] device hsr_slave_0 entered promiscuous mode [ 84.671910][ T4475] device hsr_slave_1 entered promiscuous mode [ 84.691963][ T4187] attempt to access beyond end of device [ 84.691963][ T4187] loop4: rw=2049, want=45104, limit=40427 [ 84.708305][ T4568] jffs2: notice: (4568) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.733235][ T4475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.750199][ T4475] Cannot create hsr debugfs directory [ 84.821184][ T506] device hsr_slave_0 left promiscuous mode [ 84.849064][ T506] device hsr_slave_1 left promiscuous mode [ 84.881055][ T506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.937840][ T506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.975134][ T506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.020238][ T506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.059932][ T506] device bridge_slave_1 left promiscuous mode [ 85.100912][ T506] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.168773][ T506] device bridge_slave_0 left promiscuous mode [ 85.208957][ T506] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.336494][ T506] device veth1_macvtap left promiscuous mode [ 85.369706][ T506] device veth0_macvtap left promiscuous mode [ 85.394807][ T506] device veth1_vlan left promiscuous mode [ 85.421055][ T506] device veth0_vlan left promiscuous mode [ 85.868886][ T4576] loop3: detected capacity change from 0 to 32768 [ 85.928856][ T4576] XFS (loop3): Mounting V5 Filesystem [ 85.980498][ T1108] cfg80211: failed to load regulatory.db [ 86.024638][ T4576] XFS (loop3): Ending clean mount [ 86.192872][ T506] team0 (unregistering): Port device team_slave_1 removed [ 86.221022][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 86.246118][ T4199] XFS (loop3): Unmounting Filesystem [ 86.252535][ T506] team0 (unregistering): Port device team_slave_0 removed [ 86.307942][ T506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.364269][ T506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.380952][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 86.580488][ T506] bond0 (unregistering): Released all slaves [ 87.117852][ T4474] device hsr_slave_0 entered promiscuous mode [ 87.168490][ T4474] device hsr_slave_1 entered promiscuous mode [ 87.183218][ T4595] loop2: detected capacity change from 0 to 2048 [ 87.275254][ T4474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.297534][ T4474] Cannot create hsr debugfs directory [ 87.389789][ T4595] loop2: detected capacity change from 0 to 256 [ 87.796591][ T4475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 87.887144][ T4475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 88.493166][ T4608] loop2: detected capacity change from 0 to 131072 [ 88.527896][ T4608] F2FS-fs (loop2): invalid crc value [ 88.574894][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 88.602270][ T4608] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.635913][ T4608] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 88.646802][ T4608] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 88.668565][ T1110] Bluetooth: hci2: command 0x0419 tx timeout [ 88.783417][ T4475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 88.819498][ T4608] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 89.039736][ T4475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 89.156281][ T4474] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.433586][ T4474] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.572640][ T4474] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.651931][ T4474] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.774792][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.876171][ T4475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.045031][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 90.051065][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.095136][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.184835][ T13] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 90.207038][ T4475] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.261570][ T13] usb 5-1: config 0 has no interface number 0 [ 90.308116][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.321467][ T13] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.373813][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.404871][ T13] usb 5-1: config 0 interface 85 has no altsetting 0 [ 90.444313][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.451437][ T1474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.635288][ T13] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 90.681799][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.702297][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.738681][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.780880][ T13] usb 5-1: Product: syz [ 90.815328][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.823572][ T13] usb 5-1: Manufacturer: syz [ 90.867644][ T13] usb 5-1: SerialNumber: syz [ 90.898776][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.905976][ T1474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.925450][ T13] usb 5-1: config 0 descriptor?? [ 91.005073][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.070466][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.135611][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.223864][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.325795][ T4474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.343407][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.382984][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.556119][ T1474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.584927][ T13] appletouch 5-1:0.85: Geyser mode initialized. [ 91.601659][ T13] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input6 [ 91.641312][ T4475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.733597][ T4475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.831772][ T1335] usb 5-1: USB disconnect, device number 3 [ 91.852505][ T4474] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.963225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.975842][ T1335] appletouch 5-1:0.85: input: appletouch disconnected [ 92.331708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.387068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.430142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.496098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.540965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.642913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.718968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.876472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.960973][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.968103][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.087556][ T4694] kvm: pic: level sensitive irq not supported [ 93.087903][ T4694] kvm: pic: single mode not supported [ 93.094232][ T4694] kvm: pic: level sensitive irq not supported [ 93.192644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.325783][ T4694] kvm: pic: single mode not supported [ 93.325992][ T4694] kvm: pic: non byte read [ 93.392834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.420168][ T4698] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.474512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.529686][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.536853][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.637704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.708649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.785476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.864022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.966538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.054132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.123686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.195219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.243841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.298665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.368331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.453142][ T4475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.526605][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.596075][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.603654][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.788466][ T4717] block device autoloading is deprecated and will be removed. [ 95.294957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.378833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.457338][ T4474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.516106][ T4735] Core dump to core aborted: cannot preserve file permissions [ 95.597165][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.630829][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.782674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.827908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.891046][ T4475] device veth0_vlan entered promiscuous mode [ 95.940619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.985774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.090000][ T4475] device veth1_vlan entered promiscuous mode [ 96.176565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.265896][ T4750] loop3: detected capacity change from 0 to 8 [ 96.305966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.366966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.465887][ T4750] SQUASHFS error: zlib decompression failed, data probably corrupt [ 96.482904][ T4475] device veth0_macvtap entered promiscuous mode [ 96.525746][ T4750] SQUASHFS error: Failed to read block 0x9b: -5 [ 96.557396][ T4475] device veth1_macvtap entered promiscuous mode [ 96.600709][ T4750] SQUASHFS error: Unable to read metadata cache entry [99] [ 96.679542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.694120][ T4750] SQUASHFS error: Unable to read inode 0x127 [ 96.730048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.816055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.921750][ T4750] loop3: detected capacity change from 0 to 1024 [ 96.928910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.054300][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.185747][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.284766][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.368982][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.444789][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.506816][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.579630][ T4475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.662197][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.864091][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.534901][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.583947][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.630860][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.687051][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.746842][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.760191][ T4760] loop4: detected capacity change from 0 to 32768 [ 99.813730][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.844249][ T4760] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.103 (4760) [ 99.910491][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.970931][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.012305][ T4760] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 100.031456][ T4475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.069307][ T4474] device veth0_vlan entered promiscuous mode [ 100.076005][ T4760] BTRFS info (device loop4): using free space tree [ 100.223980][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.252293][ T4760] BTRFS info (device loop4): has skinny extents [ 100.275891][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.338611][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.409315][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.629482][ T4760] BTRFS error (device loop4): open_ctree failed: -12 [ 100.665134][ T4475] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.699566][ T4475] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.711627][ T4475] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.722247][ T4475] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.763851][ T506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.798773][ T4474] device veth1_vlan entered promiscuous mode [ 100.894326][ T506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.030496][ T506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.061167][ T4825] loop3: detected capacity change from 0 to 1024 [ 101.143791][ T4825] EXT4-fs (loop3): Ignoring removed orlov option [ 101.161349][ T506] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.213235][ T4825] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 101.259870][ T4474] device veth0_macvtap entered promiscuous mode [ 101.306732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.341455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.383686][ T26] audit: type=1800 audit(1786663012.736:3): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.111" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 101.431251][ T4474] device veth1_macvtap entered promiscuous mode [ 101.453154][ T4825] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.111: Invalid inode table block 12611061397380414977 in block_group 0 [ 101.481126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.537404][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.584998][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.596907][ T4825] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.111: Invalid inode table block 12611061397380414977 in block_group 0 [ 101.662348][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.681048][ T4825] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 101.693972][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.709886][ T4825] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz.3.111: mark_inode_dirty error [ 101.722218][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.738962][ T4825] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.111: Invalid inode table block 12611061397380414977 in block_group 0 [ 101.754465][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.769695][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.780841][ T4825] EXT4-fs error (device loop3): ext4_get_max_inline_size:115: inode #15: comm syz.3.111: can't get inode location 15 [ 101.803462][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.826077][ T4825] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.111: Invalid inode table block 12611061397380414977 in block_group 0 [ 101.851389][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.872198][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.893291][ T4474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.918016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.939262][ T9] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm kworker/u4:0: Invalid inode table block 12611061397380414977 in block_group 0 [ 101.961728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.993075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.087741][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.149566][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.178415][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.192616][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.204418][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.221780][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.232598][ T4474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.250148][ T4474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.262670][ T4474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.312781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.338180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.368996][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.383546][ T4474] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.409435][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.428558][ T4474] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.469499][ T4474] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.498538][ T4474] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.554328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.958872][ T4851] loop6: detected capacity change from 0 to 512 [ 103.013765][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.061543][ T4851] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.087215][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.153634][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.172992][ T4851] EXT4-fs (loop6): orphan cleanup on readonly fs [ 103.245109][ T4851] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.57: bad orphan inode 16 [ 103.277341][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.309148][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.366115][ T4851] ext4_test_bit(bit=15, block=18) = 1 [ 103.392810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.409199][ T4851] is_bad_inode(inode)=0 [ 103.441726][ T4851] NEXT_ORPHAN(inode)=83886080 [ 103.496404][ T4851] max_ino=32 [ 103.525092][ T4851] i_nlink=0 [ 103.764863][ T4851] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.883098][ T4867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 104.244471][ T4870] device syzkaller1 entered promiscuous mode [ 104.336607][ T4881] loop3: detected capacity change from 0 to 256 [ 104.386503][ T506] device hsr_slave_0 left promiscuous mode [ 104.422985][ T506] device hsr_slave_1 left promiscuous mode [ 104.454872][ T1110] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 104.493402][ T506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.533876][ T506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.596257][ T506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.650440][ T506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.687802][ T506] device bridge_slave_1 left promiscuous mode [ 104.724964][ T1110] usb 6-1: Using ep0 maxpacket: 16 [ 104.754830][ T506] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.806391][ T506] device bridge_slave_0 left promiscuous mode [ 104.827339][ T506] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.846517][ T1110] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.869168][ T1110] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.903994][ T1110] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 104.948342][ T1110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.997832][ T1110] usb 6-1: config 0 descriptor?? [ 105.055053][ T506] device veth1_macvtap left promiscuous mode [ 105.061247][ T506] device veth0_macvtap left promiscuous mode [ 105.082941][ T506] device veth1_vlan left promiscuous mode [ 105.131870][ T506] device veth0_vlan left promiscuous mode [ 105.471439][ T1110] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 105.591091][ T506] team0 (unregistering): Port device team_slave_1 removed [ 105.613609][ T506] team0 (unregistering): Port device team_slave_0 removed [ 105.634462][ T506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.661476][ T506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.672284][ T4877] udc-core: couldn't find an available UDC or it's busy [ 105.682176][ T1110] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -32). [ 105.694148][ T4877] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.923711][ T506] bond0 (unregistering): Released all slaves [ 106.013314][ T4877] udc-core: couldn't find an available UDC or it's busy [ 106.034873][ T4877] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 106.068276][ T4888] netlink: 24 bytes leftover after parsing attributes in process `syz.6.123'. [ 106.081971][ T4228] usb 6-1: USB disconnect, device number 2 [ 106.133971][ T4894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.123'. [ 106.149305][ T4899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.126'. [ 106.175578][ T4900] netlink: 68 bytes leftover after parsing attributes in process `syz.3.126'. [ 106.232273][ T4901] netlink: 68 bytes leftover after parsing attributes in process `syz.3.126'. [ 106.536954][ T4914] syz.3.129 uses obsolete (PF_INET,SOCK_PACKET) [ 108.875305][ T4937] binder: BINDER_SET_CONTEXT_MGR already set [ 108.964587][ T4937] binder: 4934:4937 ioctl 4018620d 200000004a80 returned -16 [ 109.315309][ T4942] loop2: detected capacity change from 0 to 4096 [ 109.531095][ T4942] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 109.579974][ T1110] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.874912][ T1110] usb 4-1: Using ep0 maxpacket: 8 [ 110.015364][ T1110] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.043409][ T1110] usb 4-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 110.115661][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.180449][ T1110] usb 4-1: config 0 descriptor?? [ 110.300707][ T4193] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 110.734993][ T4949] udc-core: couldn't find an available UDC or it's busy [ 110.742102][ T4949] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 110.886279][ T1110] ntrig 0003:1B96:0005.0003: unknown main item tag 0x2 [ 110.893284][ T1110] ntrig 0003:1B96:0005.0003: ignoring exceeding usage max [ 111.036853][ T1110] ntrig 0003:1B96:0005.0003: hidraw0: USB HID v0.81 Device [HID 1b96:0005] on usb-dummy_hcd.3-1/input0 [ 111.102025][ T4949] udc-core: couldn't find an available UDC or it's busy [ 111.139046][ T4949] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 111.360652][ T4981] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 111.441131][ T1110] usb 4-1: USB disconnect, device number 3 [ 111.514146][ T4981] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 111.616337][ T4981] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 111.664053][ T4993] fido_id[4993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 112.105165][ T4976] loop6: detected capacity change from 0 to 32768 [ 112.289378][ T4976] [ 112.289378][ T4976] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.289378][ T4976] [ 112.429962][ T5006] loop5: detected capacity change from 0 to 128 [ 112.625083][ T5006] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.639671][ T4976] ERROR: (device loop6): diWrite: ixpxd invalid [ 112.639671][ T4976] [ 112.677226][ T5012] netlink: 'syz.4.147': attribute type 10 has an invalid length. [ 112.726129][ T5006] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.766609][ T4976] ERROR: (device loop6): txCommit: [ 112.766609][ T4976] [ 112.802269][ T5012] device syz_tun entered promiscuous mode [ 112.898234][ T5012] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 112.997691][ T144] bond0: (slave bond_slave_0): interface is now down [ 113.030205][ T5016] ERROR: (device loop6): diWrite: ixpxd invalid [ 113.030205][ T5016] [ 113.057916][ T144] bond0: (slave bond_slave_1): interface is now down [ 113.115130][ T5016] ERROR: (device loop6): txCommit: [ 113.115130][ T5016] [ 113.127649][ T144] bond0: (slave syz_tun): interface is now down [ 113.199061][ T144] bond0: now running without any active interface! [ 113.352659][ T4475] [ 113.352659][ T4475] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.352659][ T4475] [ 113.477865][ T4475] [ 113.477865][ T4475] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.477865][ T4475] [ 113.530231][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 113.550759][ T5032] loop4: detected capacity change from 0 to 128 [ 115.108164][ T5062] jffs2: notice: (5062) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 115.374408][ T5069] loop6: detected capacity change from 0 to 2048 [ 115.513239][ T5066] event trace: Could not enable event p [ 115.580657][ T5069] NILFS (loop6): invalid segment: Magic number mismatch [ 115.668572][ T5069] NILFS (loop6): trying rollback from an earlier position [ 115.691399][ T5082] loop5: detected capacity change from 0 to 16 [ 115.797339][ T5082] erofs: (device loop5): mounted with root inode @ nid 36. [ 115.850517][ T5069] NILFS (loop6): recovery complete [ 115.884850][ T4228] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.976628][ T5090] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.164816][ T4228] usb 5-1: Using ep0 maxpacket: 32 [ 116.226330][ T5082] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 116.307315][ T5082] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 116.374828][ T4228] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 116.474800][ T4228] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 116.724981][ T4228] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 116.753880][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.798451][ T5106] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.829795][ T4228] usb 5-1: Product: syz [ 116.834026][ T4228] usb 5-1: Manufacturer: syz [ 116.875916][ T4228] usb 5-1: SerialNumber: syz [ 116.925167][ T5078] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.030519][ T5111] loop2: detected capacity change from 0 to 512 [ 117.203099][ T5111] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.168: inode has both inline data and extents flags [ 117.349570][ T5111] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.168: couldn't read orphan inode 15 (err -117) [ 117.479861][ T5111] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 117.534903][ T4228] usb 5-1: MIDIStreaming interface descriptor not found [ 117.553605][ T5124] loop6: detected capacity change from 0 to 2048 [ 117.633560][ T5129] jffs2: notice: (5129) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 117.692972][ T5124] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.724759][ T4228] usb 5-1: USB disconnect, device number 4 [ 117.831259][ T5124] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.145922][ T5135] udevd[5135]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.949980][ T5161] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.610702][ T5169] loop2: detected capacity change from 0 to 2048 [ 120.721102][ T5169] NILFS (loop2): invalid segment: Magic number mismatch [ 120.738920][ T5179] loop6: detected capacity change from 0 to 512 [ 120.804823][ T5169] NILFS (loop2): trying rollback from an earlier position [ 120.868206][ T5179] EXT4-fs (loop6): Ignoring removed nobh option [ 120.910026][ T5169] NILFS (loop2): recovery complete [ 120.915406][ T5179] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 120.959529][ T5183] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.097573][ T5179] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.203546][ T5149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.259435][ T5179] EXT4-fs (loop6): 1 truncate cleaned up [ 121.352566][ T5179] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 121.516184][ T5192] jffs2: notice: (5192) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.644051][ T26] audit: type=1800 audit(1786663032.996:4): pid=5179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.180" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 121.884055][ T26] audit: type=1800 audit(1786663033.206:5): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.180" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 121.998069][ T5206] loop2: detected capacity change from 0 to 512 [ 123.696028][ T5206] EXT4-fs (loop2): Test dummy encryption mode enabled [ 124.154220][ T5236] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.190239][ T5206] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.315619][ T5206] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.184: bad orphan inode 131083 [ 124.924789][ T5244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 125.044787][ T5244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 125.053908][ T5244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 125.063395][ T5244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 125.072379][ T5244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 125.247094][ T5244] loop3: detected capacity change from 0 to 256 [ 125.469264][ T5241] sched: RT throttling activated [ 126.035179][ T5206] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none. [ 126.073760][ T5244] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 131.635148][ T5270] crypto_alloc_aead failed rc=-4 [ 132.446182][ T5324] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 132.538773][ T5324] kvm: pic: non byte read [ 132.582565][ T5324] kvm: pic: level sensitive irq not supported [ 132.584069][ T5324] kvm: pic: non byte read [ 132.710880][ T5324] kvm: pic: level sensitive irq not supported [ 132.710940][ T5324] kvm: pic: non byte read [ 132.780297][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.786906][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.854151][ T5324] kvm: pic: level sensitive irq not supported [ 132.859704][ T5324] kvm: pic: non byte read [ 135.078778][ T5344] loop2: detected capacity change from 0 to 512 [ 142.100251][ T5389] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 142.205098][ T7] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 142.251321][ T5392] kvm: pic: non byte read [ 142.299374][ T5392] kvm: pic: level sensitive irq not supported [ 142.300277][ T5392] kvm: pic: non byte read [ 142.416320][ T5392] kvm: pic: level sensitive irq not supported [ 142.416381][ T5392] kvm: pic: non byte read [ 142.636483][ T5392] kvm: pic: level sensitive irq not supported [ 142.636547][ T5392] kvm: pic: non byte read [ 142.723682][ T5392] kvm: pic: level sensitive irq not supported [ 142.723743][ T5392] kvm: pic: non byte read [ 142.742809][ T5406] i2c i2c-0: delete_device: Can't find device in list [ 142.894975][ T7] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 142.939229][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.009627][ T7] usb 4-1: Product: syz [ 143.040431][ T7] usb 4-1: Manufacturer: syz [ 143.083828][ T7] usb 4-1: SerialNumber: syz [ 143.128516][ T7] usb 4-1: config 0 descriptor?? [ 143.174968][ T7] usb 4-1: can't set config #0, error -71 [ 143.235440][ T7] usb 4-1: USB disconnect, device number 4 [ 145.467939][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bd5b400: rx timeout, send abort [ 145.477804][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bd59400: rx timeout, send abort [ 146.077367][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bd5b400: abort rx timeout. Force session deactivation [ 146.089086][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bd59400: abort rx timeout. Force session deactivation [ 146.725119][ T5438] IPVS: fo: FWM 3 0x00000003 - no destination available [ 146.790251][ T26] audit: type=1800 audit(1786663058.146:6): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.230" name="local" dev="configfs" ino=39384 res=0 errno=0 [ 146.958767][ T26] audit: type=1800 audit(1786663058.186:7): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.230" name="scan_secs" dev="configfs" ino=39386 res=0 errno=0 [ 147.300060][ T5457] loop2: detected capacity change from 0 to 128 [ 147.777679][ T5458] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 148.341322][ T5470] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.456378][ T5458] kvm: pic: level sensitive irq not supported [ 148.456461][ T5458] kvm: pic: non byte read [ 148.646797][ T5458] kvm: pic: level sensitive irq not supported [ 148.646933][ T5458] kvm: pic: non byte read [ 148.785257][ T5458] kvm: pic: level sensitive irq not supported [ 148.785315][ T5458] kvm: pic: non byte read [ 148.840133][ T5472] loop5: detected capacity change from 0 to 4096 [ 149.015719][ T5472] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 150.435684][ T4474] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 150.995641][ T5510] loop6: detected capacity change from 0 to 512 [ 151.054751][ T5512] loop0: detected capacity change from 0 to 32768 [ 151.106041][ T5510] EXT4-fs (loop6): Mount option "nodioread_nolock" incompatible with ext2 [ 151.799691][ T5512] device-mapper: table: 248:0: thi: unknown target type [ 151.936564][ T5512] device-mapper: ioctl: error adding target to table [ 154.264894][ T5549] process 'syz.5.251' launched './file2' with NULL argv: empty string added [ 160.592630][ T5608] block device autoloading is deprecated and will be removed. [ 160.603746][ T5608] capability: warning: `syz.3.257' uses deprecated v2 capabilities in a way that may be insecure [ 270.494595][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 270.501263][ C0] rcu: 0-...!: (10500 ticks this GP) idle=e5d/1/0x4000000000000000 softirq=15164/15164 fqs=0 [ 270.512615][ C0] (t=10500 jiffies g=20229 q=17) [ 270.517653][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g20229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 270.529970][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=9462 [ 270.537774][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g20229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 270.549132][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 270.559092][ C0] rcu: RCU grace-period kthread stack dump: [ 270.564976][ C0] task:rcu_preempt state:I stack:28112 pid: 15 ppid: 2 flags:0x00004000 [ 270.574189][ C0] Call Trace: [ 270.577475][ C0] [ 270.580408][ C0] __schedule+0x11c3/0x4350 [ 270.584934][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 270.590170][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 270.596088][ C0] ? _raw_spin_unlock+0x40/0x40 [ 270.600952][ C0] ? rcu_is_watching+0x11/0xa0 [ 270.605746][ C0] ? release_firmware_map_entry+0x190/0x190 [ 270.611654][ C0] schedule+0x11b/0x1e0 [ 270.615814][ C0] schedule_timeout+0x184/0x2d0 [ 270.620665][ C0] ? console_conditional_schedule+0x40/0x40 [ 270.626578][ C0] ? update_process_times+0x200/0x200 [ 270.631962][ C0] ? prepare_to_swait_event+0x33d/0x360 [ 270.637517][ C0] rcu_gp_fqs_loop+0x2be/0x11f0 [ 270.642390][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 270.647708][ C0] ? rcu_gp_init+0xd72/0x10f0 [ 270.652417][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 270.657188][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 270.662392][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 270.667596][ C0] rcu_gp_kthread+0x9a/0x370 [ 270.672188][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 270.677300][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 270.683190][ C0] ? __kthread_parkme+0x14e/0x1b0 [ 270.688213][ C0] kthread+0x42e/0x520 [ 270.692278][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 270.697402][ C0] ? kthread_blkcg+0xd0/0xd0 [ 270.702004][ C0] ret_from_fork+0x1f/0x30 [ 270.706442][ C0] [ 270.709468][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 270.715847][ C0] NMI backtrace for cpu 0 [ 270.720194][ C0] CPU: 0 PID: 5635 Comm: syz.2.279 Not tainted syzkaller #0 [ 270.727499][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.737668][ C0] Call Trace: [ 270.740950][ C0] [ 270.743796][ C0] dump_stack_lvl+0x188/0x250 [ 270.748481][ C0] ? show_regs_print_info+0x20/0x20 [ 270.753680][ C0] ? load_image+0x410/0x410 [ 270.758191][ C0] ? irq_work_queue+0xbf/0x140 [ 270.762976][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 270.767998][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 270.774169][ C0] ? _printk+0xda/0x130 [ 270.778328][ C0] ? cpu_online+0x1d/0x30 [ 270.782657][ C0] ? load_image+0x410/0x410 [ 270.787162][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 270.793334][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 270.799414][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 270.805598][ C0] print_cpu_stall+0x31a/0x5f0 [ 270.810371][ C0] rcu_sched_clock_irq+0x6ec/0x1120 [ 270.815600][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 270.820464][ C0] ? hrtimer_run_queues+0x162/0x400 [ 270.825753][ C0] ? account_process_tick+0x22a/0x3a0 [ 270.831130][ C0] update_process_times+0x193/0x200 [ 270.836333][ C0] tick_sched_timer+0x37d/0x560 [ 270.841186][ C0] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 270.846732][ C0] __hrtimer_run_queues+0x4b0/0xb60 [ 270.851931][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 270.857919][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 270.863050][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 270.869125][ C0] hrtimer_interrupt+0x397/0x8b0 [ 270.874075][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 270.880168][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 270.885821][ C0] [ 270.888753][ C0] [ 270.891707][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 270.897795][ C0] RIP: 0010:read_tsc+0x3/0x10 [ 270.902528][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c d8 fe ff ff 4c 89 ff e8 92 88 92 00 e9 cb fe ff ff e8 a8 7d 94 08 0f 1f 84 00 00 00 00 00 0f 01 f9 <66> 90 48 c1 e2 20 48 09 d0 c3 0f 1f 00 48 c7 c0 4c e3 8a 8d 48 c1 [ 270.922310][ C0] RSP: 0018:ffffc9000322f558 EFLAGS: 00000246 [ 270.928384][ C0] RAX: 0000000011bcf4ea RBX: ffffffff8c15e900 RCX: 0000000000000000 [ 270.936357][ C0] RDX: 000000000000008e RSI: 000000000007ffff RDI: ffffffff8c15e900 [ 270.944346][ C0] RBP: 000000000000ce68 R08: ffffffff901ee16f R09: 1ffffffff203dc2d [ 270.952317][ C0] R10: dffffc0000000000 R11: fffffbfff203dc2e R12: 000000000000ce68 [ 270.960300][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 270.968317][ C0] ktime_get+0xe4/0x270 [ 270.972486][ C0] get_cpu_iowait_time_us+0x83/0x2c0 [ 270.977778][ C0] show_stat+0x491/0x1970 [ 270.982125][ C0] ? __lock_acquire+0x1305/0x7b50 [ 270.987181][ C0] ? __mutex_lock_common+0x435/0x2400 [ 270.992566][ C0] ? stat_open+0xc0/0xc0 [ 270.996830][ C0] ? memset+0x1e/0x40 [ 271.000837][ C0] ? traverse+0x9b/0x590 [ 271.005082][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 271.010124][ C0] seq_read_iter+0x460/0xc50 [ 271.014725][ C0] generic_file_splice_read+0x3ed/0x5f0 [ 271.020289][ C0] ? splice_shrink_spd+0xc0/0xc0 [ 271.025247][ C0] ? common_file_perm+0x171/0x1c0 [ 271.030270][ C0] ? fsnotify_perm+0x254/0x560 [ 271.035052][ C0] splice_direct_to_actor+0x41f/0xc00 [ 271.040432][ C0] ? direct_file_splice_eof+0xa0/0xa0 [ 271.045821][ C0] ? pipe_to_sendpage+0x320/0x320 [ 271.050854][ C0] ? common_file_perm+0x171/0x1c0 [ 271.055875][ C0] ? fsnotify_perm+0x5d/0x560 [ 271.060556][ C0] ? security_file_permission+0x75/0xa0 [ 271.066110][ C0] do_splice_direct+0x1d4/0x2f0 [ 271.070976][ C0] ? verify_lock_unused+0x140/0x140 [ 271.076178][ C0] ? splice_direct_to_actor+0xc00/0xc00 [ 271.081825][ C0] ? do_splice_direct+0x2f0/0x2f0 [ 271.086860][ C0] ? common_file_perm+0x171/0x1c0 [ 271.091881][ C0] ? fsnotify_perm+0x5d/0x560 [ 271.096560][ C0] ? security_file_permission+0x75/0xa0 [ 271.102124][ C0] do_sendfile+0x524/0xe30 [ 271.106671][ C0] ? do_pwritev+0x3a0/0x3a0 [ 271.111185][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 271.116219][ C0] __se_sys_sendfile64+0x141/0x1a0 [ 271.121332][ C0] ? lock_chain_count+0x20/0x20 [ 271.126188][ C0] ? __x64_sys_sendfile64+0xa0/0xa0 [ 271.131387][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 271.136591][ C0] do_syscall_64+0x4c/0xa0 [ 271.141005][ C0] ? clear_bhb_loop+0x30/0x80 [ 271.145681][ C0] ? clear_bhb_loop+0x30/0x80 [ 271.150530][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.156435][ C0] RIP: 0033:0x7fc089def0d9 [ 271.160874][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.180582][ C0] RSP: 002b:00007fc088026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 271.189106][ C0] RAX: ffffffffffffffda RBX: 00007fc08a077090 RCX: 00007fc089def0d9 [ 271.197513][ C0] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 271.205486][ C0] RBP: 00007fc089e86024 R08: 0000000000000000 R09: 0000000000000000 [ 271.213481][ C0] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000000 [ 271.221642][ C0] R13: 00007fc08a077128 R14: 00007fc08a077090 R15: 00007fff99a2db58 [ 271.229803][ C0] [ 271.232861][ C0] NMI backtrace for cpu 0 [ 271.237269][ C0] CPU: 0 PID: 5635 Comm: syz.2.279 Not tainted syzkaller #0 [ 271.244553][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.254695][ C0] Call Trace: [ 271.257992][ C0] [ 271.260854][ C0] dump_stack_lvl+0x188/0x250 [ 271.265537][ C0] ? show_regs_print_info+0x20/0x20 [ 271.270736][ C0] ? load_image+0x410/0x410 [ 271.275249][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 271.280204][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 271.286364][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 271.291836][ C0] ? _raw_spin_lock+0x40/0x40 [ 271.296691][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 271.302760][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 271.308741][ C0] rcu_dump_cpu_stacks+0x22d/0x380 [ 271.313876][ C0] print_cpu_stall+0x31f/0x5f0 [ 271.318658][ C0] rcu_sched_clock_irq+0x6ec/0x1120 [ 271.323894][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 271.328743][ C0] ? hrtimer_run_queues+0x162/0x400 [ 271.333942][ C0] ? account_process_tick+0x22a/0x3a0 [ 271.339333][ C0] update_process_times+0x193/0x200 [ 271.344635][ C0] tick_sched_timer+0x37d/0x560 [ 271.349487][ C0] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 271.355047][ C0] __hrtimer_run_queues+0x4b0/0xb60 [ 271.360251][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 271.366243][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 271.371447][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 271.377518][ C0] hrtimer_interrupt+0x397/0x8b0 [ 271.382470][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 271.388451][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 271.394087][ C0] [ 271.397017][ C0] [ 271.399965][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 271.406051][ C0] RIP: 0010:read_tsc+0x3/0x10 [ 271.410726][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c d8 fe ff ff 4c 89 ff e8 92 88 92 00 e9 cb fe ff ff e8 a8 7d 94 08 0f 1f 84 00 00 00 00 00 0f 01 f9 <66> 90 48 c1 e2 20 48 09 d0 c3 0f 1f 00 48 c7 c0 4c e3 8a 8d 48 c1 [ 271.430346][ C0] RSP: 0018:ffffc9000322f558 EFLAGS: 00000246 [ 271.436426][ C0] RAX: 0000000011bcf4ea RBX: ffffffff8c15e900 RCX: 0000000000000000 [ 271.444395][ C0] RDX: 000000000000008e RSI: 000000000007ffff RDI: ffffffff8c15e900 [ 271.452373][ C0] RBP: 000000000000ce68 R08: ffffffff901ee16f R09: 1ffffffff203dc2d [ 271.460347][ C0] R10: dffffc0000000000 R11: fffffbfff203dc2e R12: 000000000000ce68 [ 271.468338][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 271.476324][ C0] ktime_get+0xe4/0x270 [ 271.480569][ C0] get_cpu_iowait_time_us+0x83/0x2c0 [ 271.485857][ C0] show_stat+0x491/0x1970 [ 271.490194][ C0] ? __lock_acquire+0x1305/0x7b50 [ 271.495224][ C0] ? __mutex_lock_common+0x435/0x2400 [ 271.500601][ C0] ? stat_open+0xc0/0xc0 [ 271.504856][ C0] ? memset+0x1e/0x40 [ 271.508926][ C0] ? traverse+0x9b/0x590 [ 271.513168][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 271.518216][ C0] seq_read_iter+0x460/0xc50 [ 271.522817][ C0] generic_file_splice_read+0x3ed/0x5f0 [ 271.528373][ C0] ? splice_shrink_spd+0xc0/0xc0 [ 271.533314][ C0] ? common_file_perm+0x171/0x1c0 [ 271.538337][ C0] ? fsnotify_perm+0x254/0x560 [ 271.543102][ C0] splice_direct_to_actor+0x41f/0xc00 [ 271.548488][ C0] ? direct_file_splice_eof+0xa0/0xa0 [ 271.553881][ C0] ? pipe_to_sendpage+0x320/0x320 [ 271.558925][ C0] ? common_file_perm+0x171/0x1c0 [ 271.564180][ C0] ? fsnotify_perm+0x5d/0x560 [ 271.568852][ C0] ? security_file_permission+0x75/0xa0 [ 271.574428][ C0] do_splice_direct+0x1d4/0x2f0 [ 271.579299][ C0] ? verify_lock_unused+0x140/0x140 [ 271.584519][ C0] ? splice_direct_to_actor+0xc00/0xc00 [ 271.590067][ C0] ? do_splice_direct+0x2f0/0x2f0 [ 271.595092][ C0] ? common_file_perm+0x171/0x1c0 [ 271.600122][ C0] ? fsnotify_perm+0x5d/0x560 [ 271.604828][ C0] ? security_file_permission+0x75/0xa0 [ 271.610462][ C0] do_sendfile+0x524/0xe30 [ 271.614905][ C0] ? do_pwritev+0x3a0/0x3a0 [ 271.619545][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 271.624578][ C0] __se_sys_sendfile64+0x141/0x1a0 [ 271.629712][ C0] ? lock_chain_count+0x20/0x20 [ 271.634563][ C0] ? __x64_sys_sendfile64+0xa0/0xa0 [ 271.639767][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 271.644972][ C0] do_syscall_64+0x4c/0xa0 [ 271.649386][ C0] ? clear_bhb_loop+0x30/0x80 [ 271.654062][ C0] ? clear_bhb_loop+0x30/0x80 [ 271.658739][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.664658][ C0] RIP: 0033:0x7fc089def0d9 [ 271.669075][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.688681][ C0] RSP: 002b:00007fc088026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 271.697091][ C0] RAX: ffffffffffffffda RBX: 00007fc08a077090 RCX: 00007fc089def0d9 [ 271.705062][ C0] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 271.713228][ C0] RBP: 00007fc089e86024 R08: 0000000000000000 R09: 0000000000000000 [ 271.721198][ C0] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000000 [ 271.729192][ C0] R13: 00007fc08a077128 R14: 00007fc08a077090 R15: 00007fff99a2db58 [ 271.737172][ C0] [ 271.740275][ C0] vkms_vblank_simulate: vblank timer overrun