last executing test programs: 22.553636828s ago: executing program 1 (id=818): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[], 0x2c}}, 0x44804) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000180), &(0x7f00000008c0)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000040)='./bus\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(0x0) 18.685766349s ago: executing program 1 (id=824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$loop(0x0, 0x7, 0x180862) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0xc2802, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x7, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3f409ff2176ff7be455cd4a5d83cd4a524bd3ffe70c0b2f7b6aa54cc50a1fcad31e831fa79a00", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pwritev(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)="76ffd7", 0x3}], 0x1, 0x9, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 17.061658899s ago: executing program 1 (id=831): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={0x0, 0x108}, 0x1, 0x7}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x1, 0xe, 0x5, 0x2, 0x0, 0x70bd2a, 0x25dfdbfc}, 0x10}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.148116437s ago: executing program 1 (id=834): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[], 0x2c}}, 0x44804) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000180), &(0x7f00000008c0)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000040)='./bus\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(0x0) 11.211915965s ago: executing program 1 (id=840): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1000000, 0x402) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x5, 0x6, 0x0, 0x5, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$caif_stream(0x25, 0x1, 0x1) recvmmsg(r3, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x12163, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x0, 0x3, 0x165}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES64=r4], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x2000c880) recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000480)=""/248, 0xf8}], 0x2, &(0x7f00000005c0)=""/114, 0x72}, 0x35}], 0x1, 0x2020, 0x0) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fchdir(0xffffffffffffffff) inotify_init() 9.974045497s ago: executing program 2 (id=842): socket$packet(0x11, 0x3, 0x300) capset(0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_GET(r0, 0x0, 0x40000) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000240)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xd, 0x0, &(0x7f0000000440)="f8ad48cc02cb29c8007f5b0800", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 7.597668671s ago: executing program 2 (id=845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, 0x0) 7.565211044s ago: executing program 4 (id=846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000088a2bbbbbbbbbbbbffffffffffff88a8300000080603"], 0x36) 7.380991742s ago: executing program 0 (id=847): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 7.261541184s ago: executing program 2 (id=848): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x408600, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(0x0, 0x80000) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) 6.323647637s ago: executing program 2 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 6.244759764s ago: executing program 0 (id=850): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[], 0x2c}}, 0x44804) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000180), &(0x7f00000008c0)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000040)='./bus\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(0x0) 6.096345169s ago: executing program 4 (id=851): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e24}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @offload={0xc, 0x1c, {r3, 0x1}}]}, 0x144}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010001407f0000010000000000bd9cd5612f58"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x4, 0xfffe, 0x7, 0x2}, {0x10000, 0x5097, 0x1, 0x0, 0xc6, 0x0, 0x8000000000000000, 0xfffffffffffffff7}, {0x3, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0xffffffff, 0x1, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0xa, @in=@loopback, 0x40000, 0x5, 0x0, 0xb7}}, 0xe4) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r8, 0x0, r8, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000051}, 0x45) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4891a, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 5.078042579s ago: executing program 2 (id=852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000006c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900ea000000009a0080320000c4e28ddc8dcd000000c182fd3f0000c8b950025700d600d600000400b9a6080000b8000001006623b88a000000d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x6b}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.581588689s ago: executing program 3 (id=853): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a8000000000000000004950400"/32], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() 2.997205324s ago: executing program 0 (id=854): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) sendmmsg(r1, &(0x7f0000003e00)=[{{&(0x7f00000002c0)=@can={0x1d, r2}, 0x80, 0x0}}, {{&(0x7f00000001c0)=@ax25={{0x1d, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80, 0x0}}], 0x2, 0x8084) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a01040000000000f100000a00000109003a04010073797a310000000014000480100006000000001000007468647200000900020073797a3200000000140000001100010000000000000000000100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.946406309s ago: executing program 2 (id=855): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000102505a8a440000102030109021b000101000000091c00ff020701010009"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0xe0}, 0x14) syz_usb_disconnect(r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.829591841s ago: executing program 3 (id=856): socket$packet(0x11, 0x3, 0x300) capset(0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_GET(r0, 0x0, 0x40000) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000240)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xd, 0x0, &(0x7f0000000440)="f8ad48cc02cb29c8007f5b0800", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2.253240948s ago: executing program 4 (id=857): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x2}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000480)={{0x80a0000, 0xf000, 0xc, 0x80, 0x4, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x0, 0x6000, 0xe, 0x8, 0x5f, 0x0, 0x0, 0x9, 0xf, 0x5, 0xee, 0x81}, {0x4000, 0x0, 0x4, 0x81, 0xf0, 0x1, 0x8c, 0x6, 0x7, 0x99, 0x1, 0x1}, {0x100000, 0x5000, 0x8, 0xe, 0xfc, 0x5, 0x0, 0x7, 0x5, 0x2}, {0x10000, 0x8000000, 0xa, 0x0, 0x5, 0x4, 0xf9, 0x6b, 0x5, 0x0, 0xfd, 0x80}, {0xeeee8000, 0xeeef0000, 0x9, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xe, 0x8}, {0xe6ef8000, 0x0, 0xa, 0x3, 0x53, 0x4, 0x0, 0xb9, 0x7, 0x5, 0x6, 0x7}, {0xeeee0000, 0x1332b2000, 0x9, 0x7, 0xfe, 0x0, 0xc, 0x3, 0x0, 0x6, 0xf9, 0x6}, {0x3000, 0x6}, {0x1, 0x3}, 0x2, 0x0, 0x80a0000, 0x2, 0xd, 0x2000, 0x10000, [0xfffffffffffffffc, 0x6, 0x0, 0x7]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 2.057832397s ago: executing program 3 (id=858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 1.983781844s ago: executing program 4 (id=859): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001680)={'ipvlan1\x00', 0x0}) keyctl$describe(0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x5) write$nbd(r0, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r4 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r4, 0x80079a0) readv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.982174554s ago: executing program 0 (id=860): r0 = syz_open_dev$loop(0x0, 0x81, 0x2a82) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffb], 0x1, 0x91703}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x12b89000) 1.765676206s ago: executing program 3 (id=861): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x33, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.669642565s ago: executing program 4 (id=862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r5, r7, 0x0, 0x0, @void}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 1.652060727s ago: executing program 1 (id=863): io_setup(0x5, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') geteuid() mq_open(&(0x7f0000000140)='\x18\x00\x00vD\x17\rf\x90V\xf1X\xb3\x8fv\xa6\xa3UU\xf1P\xa9\xab\xcc.\xdd\xf8\xef\xf1\x92wc\x02\xeb\xb0\x8ba~\x10\xce\xab\xf8\xb93ytz\xf6\xa2<\x9b\x80\x89\xb5l\b\xa3Z^\xd8\x16\x11n\xc8V,\x1d\x18\xc7\x9b\xf2\xdb\x16\xbe\xd2l\\\xfb|\xfaC\xddL\x00\x00\x00\x00\x04\a\x12\xa9v\xa1\x0f\xa3|\x85\xa4\x8a\xb2\xa5j\xfbe\xd4\xc7-\xcff\x15\x10O\xceKRL\x84\xbb\xa0\xd0;\xc0\xf9j]\xecp\x11\xf4\xda(\xd7^\xc6\xfe\xc3\xc5;\xad\x94X\xda\xb5\xa2\xe8\r\x11\xa5m\xf3OC\x82\xed\x03=\xc5+A\xab\xb6y\xf9P8A\xa7\f\xcf6\xba\x9en\x11\nj\x90\xd3mp\x05\\;Z\x86j\xb2\x84\xea\x15\xef\xd8K\x9e\x98\xb8\xb7\x8a\x9e\xf9\x03\"a]\fm\xbe6\xbf\x897G', 0x40, 0x1b4, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}}) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000ec0)={0x6f0, 0x7d, 0x4000, {{0x500, 0x366, 0x0, 0x40, {0x20, 0xffffffff, 0x6}, 0x1310000, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\xcaY_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1H\xea\x97\x8b\xab\xa0\xfe5\xb3e\xdc\x81i\xea\x90\xb2\xcd\xef`\x107\t\xd4\xe0\xd61\x15pL\xba\xc2`\xa7\xe8\x0e\x04i(D\xddZ>n{\x1e\xdc\xc7\xebK\x89F\xa5!\x9d\xb2\x94\xe1\xb6|J\x04P\xe3\x81cX\xb2q]\xba`\xc8\xcc\xf0\xb2\x8di\xf1\x14\xff\xff\xcc\xeb?bF\xe3\xbaDys4\xf5_\xf7u\x82\xa6\xb7\x04\xe7H`\xd0\xca\x05Y-v\xc8\x99m\xd5\x9b\x80\b&.k8\xed\xa7z\xb9\xc6\x00\xb6\n\x9d\xd4\xc7\xe0\x97k\xeb\x90\xbf\x10\xb2=pn\xe9h0\xcd.\xf3r[?Cs+\xc2l\xaa\xde\t\xedWF\x9b\xf2p\x97\x88\x01L%!\xb3\x1c<\xf5\xff\xcd5\x18\xbd#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x81\xc4G\x80\x9d\xb7=9\xab\xe3\xfb\xf1\xac\xfd$\x88:\x1b\x7f\x167Sz\x86\v\x1aj\xcb\x94XNL(\xfeQQ,\x06\xf5L[\x11\x8ej\xaf\x1a\x9c\xde\xd2\xdd{%y\ta\xa6\b\xfc\xdd\f\r\xb9\x13\xd4\x98\xaf#\xfd\x91H\x9b\"@\x7f5|4*tO\xfba\xdb\xd8\xee\x11>\xe0\x99\x7f\\?#\x15\x9aB\x03\xa2\xc8\xd0\xe8\xb9<\xaf\x95F\xd4\xdc}\a\xcc\xd9\x9a\xe6\xa8', 0xffffffffffffffff, 0xee01}}, 0x6f0) 1.557392606s ago: executing program 0 (id=864): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000022) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r7], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.357683856s ago: executing program 3 (id=865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80001) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r3, 0x4, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x80007, 0x3, r3}) 128.329667ms ago: executing program 0 (id=866): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a8000000000000000004950400"/32], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() 95.75715ms ago: executing program 3 (id=867): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="91", 0x1}], 0x2}, 0x48800) 0s ago: executing program 4 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts. [ 65.715076][ T4173] cgroup: Unknown subsys name 'net' [ 65.853329][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.350507][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.828816][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 69.029119][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.056710][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.064790][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.073540][ T4184] device bridge_slave_0 entered promiscuous mode [ 69.090227][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 69.104427][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 69.114423][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.122564][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.131402][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.194700][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 69.238976][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.247383][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.256228][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.267314][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.292456][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.300849][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.309846][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.318428][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.408345][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.416298][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.424497][ T4194] device bridge_slave_0 entered promiscuous mode [ 69.434234][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.447134][ T4184] team0: Port device team_slave_0 added [ 69.454824][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.464046][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.471941][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.480024][ T4183] device bridge_slave_0 entered promiscuous mode [ 69.499350][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.506859][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.515170][ T4194] device bridge_slave_1 entered promiscuous mode [ 69.532676][ T4184] team0: Port device team_slave_1 added [ 69.539209][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.547377][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.555694][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.603988][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.611985][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.621543][ T4191] device bridge_slave_0 entered promiscuous mode [ 69.639825][ T4186] team0: Port device team_slave_0 added [ 69.663153][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.670703][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.679339][ T4191] device bridge_slave_1 entered promiscuous mode [ 69.697433][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.708510][ T4186] team0: Port device team_slave_1 added [ 69.716374][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.726757][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.733933][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.762103][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.776467][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.788843][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.821520][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.829111][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.857424][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.878020][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.921678][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.931933][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.939504][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.966551][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.980753][ T4194] team0: Port device team_slave_0 added [ 69.989301][ T4194] team0: Port device team_slave_1 added [ 69.999036][ T4183] team0: Port device team_slave_0 added [ 70.014471][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.022272][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.049238][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.078738][ T4183] team0: Port device team_slave_1 added [ 70.085032][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.093016][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.119847][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.146603][ T4191] team0: Port device team_slave_0 added [ 70.169219][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.176788][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.203912][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.218452][ T4191] team0: Port device team_slave_1 added [ 70.278500][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.285871][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.293469][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.301003][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.328409][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.358771][ T4194] device hsr_slave_0 entered promiscuous mode [ 70.367066][ T4194] device hsr_slave_1 entered promiscuous mode [ 70.374618][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.383211][ T4194] Cannot create hsr debugfs directory [ 70.399531][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.406864][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.434045][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.445979][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.453279][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.480680][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.495329][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.503178][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.510428][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.518482][ T4186] Cannot create hsr debugfs directory [ 70.532331][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.539893][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.572330][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 70.575842][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 70.579829][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 70.591950][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.603064][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 70.615103][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 70.707138][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.714263][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.721587][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.730458][ T4183] Cannot create hsr debugfs directory [ 70.754663][ T4191] device hsr_slave_0 entered promiscuous mode [ 70.762185][ T4191] device hsr_slave_1 entered promiscuous mode [ 70.769302][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.778014][ T4191] Cannot create hsr debugfs directory [ 71.071161][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.084178][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.093977][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.109575][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.174286][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.184556][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.207921][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.232869][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.277846][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.302185][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.320476][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.333714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.344204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.368989][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.377395][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.388337][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.398937][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.422660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.432019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.441806][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.449551][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.461627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.471316][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.496328][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.505313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.520048][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.527376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.527552][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.543700][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.551301][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.582282][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.607241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.634109][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.644904][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.661862][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.674561][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.702150][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.711460][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.723254][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.735858][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.744976][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.755240][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.764483][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.774445][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.783173][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.792537][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.803775][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.826288][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.834914][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.882578][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.933310][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.951859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.963887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.012645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.023348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.034923][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.042664][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.063478][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.089072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.098857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.109227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.118461][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.125965][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.140418][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.149603][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.179502][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.205752][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.214572][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.226218][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.234726][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.243825][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.260690][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.271827][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.287535][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.295299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.303207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.311308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.322475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.332729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.341224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.350132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.359746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.369407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.387087][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.410343][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.419720][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.428948][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.436370][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.446756][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.456077][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.465136][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.472558][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.481321][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.490661][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.500451][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.507748][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.517294][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.526714][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.535223][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.542855][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.551735][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.561453][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.570170][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.581432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.590672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.600929][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.608571][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.624740][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.635615][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 72.637416][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 72.642829][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.655593][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 72.665268][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 72.671775][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 72.700043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.710046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.723591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.733720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.743722][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.751056][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.759853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.769300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.778016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.788293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.797440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.807053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.817197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.826782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.836166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.845013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.854435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.864152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.873356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.881574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.923229][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.934321][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.946368][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.957765][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.968105][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.978287][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.987895][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.999374][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.008217][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.017670][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.027134][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.037478][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.046768][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.055882][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.067579][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.077145][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.085833][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.094537][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.110006][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.142194][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.157075][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.170825][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.192137][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.201433][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.210513][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.219646][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.229790][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.239483][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.249332][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.259246][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.269125][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.292062][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.310931][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.336466][ T4184] device veth0_vlan entered promiscuous mode [ 73.356770][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.364300][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.409164][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.441623][ T4184] device veth1_vlan entered promiscuous mode [ 73.501082][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.536144][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.556469][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.576323][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.618598][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.630412][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.643956][ T4184] device veth0_macvtap entered promiscuous mode [ 73.659684][ T4186] device veth0_vlan entered promiscuous mode [ 73.681381][ T4184] device veth1_macvtap entered promiscuous mode [ 73.689432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.698339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.709146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.717919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.726927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.736856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.747069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.757306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.775049][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.786383][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.795283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.809641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.843429][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.854235][ T4186] device veth1_vlan entered promiscuous mode [ 73.876691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.885045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.897310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.907199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.915079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.933334][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.966637][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.974899][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.992050][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.003347][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.019545][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.032222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.042182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.052504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.062185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.071922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.091558][ T4194] device veth0_vlan entered promiscuous mode [ 74.110520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.120665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.131678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.141960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.154919][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.176889][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.200583][ T4194] device veth1_vlan entered promiscuous mode [ 74.224523][ T4186] device veth0_macvtap entered promiscuous mode [ 74.234595][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.245645][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.254902][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.300792][ T4186] device veth1_macvtap entered promiscuous mode [ 74.309652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.321763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.331264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.359478][ T4183] device veth0_vlan entered promiscuous mode [ 74.384430][ T4194] device veth0_macvtap entered promiscuous mode [ 74.402523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.412430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.421997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.430754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.440643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.449603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.458687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.469366][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.481077][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.494223][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.504719][ T4194] device veth1_macvtap entered promiscuous mode [ 74.526643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.535930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.544970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.554257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.563676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.572728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.581383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.590395][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.602239][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.614203][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.627521][ T4191] device veth0_vlan entered promiscuous mode [ 74.641221][ T4183] device veth1_vlan entered promiscuous mode [ 74.659303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.668639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.678364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.690209][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.700668][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.710104][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.720093][ T4252] Bluetooth: hci1: command 0x040f tx timeout [ 74.725760][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 74.726517][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 74.737479][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.738869][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 74.771429][ T4252] Bluetooth: hci2: command 0x040f tx timeout [ 74.775971][ T4191] device veth1_vlan entered promiscuous mode [ 74.798581][ T3071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.798919][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.817817][ T3071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.829383][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.839639][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.850871][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.863347][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.892669][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.904338][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.913498][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.922968][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.931921][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.940930][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.952782][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.967081][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.977697][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.989817][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.001513][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.042399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.053528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.063027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.072687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.092079][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.102194][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.111514][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.122680][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.133893][ T4191] device veth0_macvtap entered promiscuous mode [ 75.150106][ T4183] device veth0_macvtap entered promiscuous mode [ 75.157819][ T3071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.161978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.166791][ T3071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.180043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.191585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.201580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.216696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.240290][ T4191] device veth1_macvtap entered promiscuous mode [ 75.288748][ T4183] device veth1_macvtap entered promiscuous mode [ 75.318022][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.328335][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.344798][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.374739][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.392191][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.403735][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.414303][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.426853][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.439298][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.448843][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.457413][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.468258][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.497227][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.511803][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.521167][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.542330][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.554554][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.571951][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.584464][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.598830][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.622000][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.651505][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.662236][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.676858][ T3017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.708735][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.721076][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.730627][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.743793][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.765092][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.778628][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.796966][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.809093][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.821418][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.832535][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.843555][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.856392][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.881453][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.909082][ T4301] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 75.975311][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.992226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.003293][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.019182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.037757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.053136][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.064973][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.080856][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.092173][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.110986][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.122509][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.139009][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.150756][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.170684][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.183479][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.200841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.212820][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.216053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.260093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.288523][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.321110][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.334304][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.348360][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.557057][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.582052][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.795907][ T2288] Bluetooth: hci3: command 0x0419 tx timeout [ 76.796470][ T4185] Bluetooth: hci2: command 0x0419 tx timeout [ 77.015530][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #242!!! [ 77.126719][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.195670][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.205410][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 77.215394][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 77.225379][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.235379][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.245447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.255265][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.264727][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.332786][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.350307][ T4185] Bluetooth: hci4: command 0x0419 tx timeout [ 77.350979][ T4306] binder: BINDER_SET_CONTEXT_MGR already set [ 77.365615][ T4306] binder: 4304:4306 ioctl 4018620d 2000000002c0 returned -16 [ 77.385511][ T4185] Bluetooth: hci0: command 0x0419 tx timeout [ 77.393422][ T4185] Bluetooth: hci1: command 0x0419 tx timeout [ 77.483174][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.501731][ T3071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.525584][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.534513][ T3071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.548097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.563676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.647946][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.665154][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.694872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.929411][ T4313] lo speed is unknown, defaulting to 1000 [ 77.937631][ T4313] lo speed is unknown, defaulting to 1000 [ 77.949632][ T4313] lo speed is unknown, defaulting to 1000 [ 77.970345][ T4313] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.007462][ T4313] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 78.077314][ T4313] lo speed is unknown, defaulting to 1000 [ 78.089210][ T4313] lo speed is unknown, defaulting to 1000 [ 78.102585][ T4313] lo speed is unknown, defaulting to 1000 [ 78.114037][ T4313] lo speed is unknown, defaulting to 1000 [ 78.125076][ T4313] lo speed is unknown, defaulting to 1000 [ 78.844205][ T4319] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 79.936036][ T4320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 80.062362][ T4327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7'. [ 81.081035][ T4331] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.321588][ T4332] binder: 4318:4332 ioctl 0 200000000040 returned -22 [ 81.423377][ T4336] fuse: Unknown parameter 'group_id00000000000000000000' [ 83.735747][ T4349] tmpfs: Unknown parameter 'grpquota' [ 84.404353][ T4346] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 84.433053][ T4346] CIFS mount error: No usable UNC path provided in device string! [ 84.433053][ T4346] [ 84.443988][ T4346] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 86.127497][ T4360] mkiss: ax0: crc mode is auto. [ 86.882692][ T1107] cfg80211: failed to load regulatory.db [ 88.239218][ T4373] block nbd2: shutting down sockets [ 88.323244][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.393350][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.409978][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.434487][ T4371] device bridge_slave_0 left promiscuous mode [ 88.506833][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.702050][ T4371] device bridge_slave_1 left promiscuous mode [ 88.736883][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.990112][ T4371] bond0: (slave bond_slave_0): Releasing backup interface [ 89.257436][ T4371] bond0: (slave bond_slave_1): Releasing backup interface [ 90.218646][ T4371] team0: Port device team_slave_0 removed [ 90.709123][ T4371] team0: Port device team_slave_1 removed [ 90.736511][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.654869][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.686156][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.693875][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.057427][ T4435] process 'syz.4.30' launched './file0' with NULL argv: empty string added [ 98.526672][ T4450] sched: RT throttling activated [ 98.785227][ T4235] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.785665][ T4450] 9pnet: Insufficient options for proto=fd [ 98.953323][ T4451] Process accounting resumed [ 99.112102][ T4458] 9pnet: Insufficient options for proto=fd [ 99.145670][ T4235] usb 5-1: Using ep0 maxpacket: 8 [ 99.435950][ T4464] xt_hashlimit: max too large, truncated to 1048576 [ 99.544458][ T4235] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.583344][ T4235] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 99.638088][ T4235] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 99.704105][ T4235] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 99.768799][ T4235] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 99.832739][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.144443][ T4462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 100.275786][ T4235] usb 5-1: can't set config #1, error -71 [ 100.311302][ T4235] usb 5-1: USB disconnect, device number 2 [ 100.327226][ T4473] overlayfs: missing 'workdir' [ 100.876568][ T4484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 101.382711][ T4201] block nbd0: Receive control failed (result -107) [ 103.072656][ T26] audit: type=1107 audit(1760086919.263:2): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 103.226671][ T4480] capability: warning: `syz.3.45' uses deprecated v2 capabilities in a way that may be insecure [ 104.558682][ T4524] syz.1.56 uses obsolete (PF_INET,SOCK_PACKET) [ 104.654316][ T4521] mmap: syz.4.55 (4521) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 105.036236][ T4530] overlayfs: missing 'workdir' [ 105.835559][ T4540] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 106.650420][ T4540] loop0: detected capacity change from 0 to 256 [ 107.162539][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 107.192080][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 107.210525][ T4540] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 107.704718][ T4549] mkiss: ax0: crc mode is auto. [ 107.835921][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.125450][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 108.245623][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.285668][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFC, skipping [ 108.312793][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.535755][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 108.560206][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.593644][ T23] usb 1-1: Product: syz [ 108.610273][ T23] usb 1-1: Manufacturer: syz [ 108.625249][ T23] usb 1-1: SerialNumber: syz [ 108.793818][ T23] usb 1-1: config 0 descriptor?? [ 109.286410][ T4235] Bluetooth: hci5: command 0x1001 tx timeout [ 109.301429][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 109.517006][ T13] usb 1-1: USB disconnect, device number 2 [ 110.068021][ T4576] xt_hashlimit: max too large, truncated to 1048576 [ 110.192084][ T4575] overlayfs: missing 'workdir' [ 111.391728][ T4269] Bluetooth: hci5: command 0x1009 tx timeout [ 113.115920][ T4249] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.742273][ T4617] xt_hashlimit: max too large, truncated to 1048576 [ 115.005493][ T4249] usb 1-1: Using ep0 maxpacket: 16 [ 115.138100][ T4249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.165420][ T4249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.185433][ T4249] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.213707][ T4623] overlayfs: missing 'lowerdir' [ 115.227766][ T4249] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.266000][ T4249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.296207][ T4249] usb 1-1: config 0 descriptor?? [ 116.415593][ T4249] usbhid 1-1:0.0: can't add hid device: -71 [ 116.686512][ T4249] usbhid: probe of 1-1:0.0 failed with error -71 [ 116.700816][ T4249] usb 1-1: USB disconnect, device number 3 [ 116.711358][ T4632] device wireguard0 entered promiscuous mode [ 116.954377][ T4647] ax25_connect(): syz.2.96 uses autobind, please contact jreuter@yaina.de [ 116.967156][ T4647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 118.943030][ T4660] xt_hashlimit: max too large, truncated to 1048576 [ 120.242761][ T4679] overlayfs: missing 'lowerdir' [ 121.161611][ T4658] loop2: detected capacity change from 0 to 256 [ 121.439459][ T26] audit: type=1107 audit(1760086938.593:3): pid=4682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 124.830903][ T4708] lo speed is unknown, defaulting to 1000 [ 126.179438][ T4723] overlayfs: missing 'lowerdir' [ 127.588895][ T4740] ax25_connect(): syz.1.122 uses autobind, please contact jreuter@yaina.de [ 127.601172][ T4740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 131.935185][ T4763] loop2: detected capacity change from 0 to 256 [ 134.115571][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.585883][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.720050][ T4763] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 135.172321][ T4771] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 135.182575][ T4771] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 135.443351][ T4772] 9pnet: Insufficient options for proto=fd [ 136.269944][ T4779] fuse: Bad value for 'fd' [ 136.301003][ T4779] 9pnet_virtio: no channels available for device syz [ 136.345545][ T4249] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.606151][ T4249] usb 3-1: Using ep0 maxpacket: 32 [ 136.747213][ T4784] tipc: Started in network mode [ 136.752862][ T4784] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 136.767737][ T4784] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 136.778017][ T4784] tipc: Enabled bearer , priority 10 [ 137.419815][ T4249] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 137.440267][ T4249] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 137.452029][ T4249] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 137.463366][ T4249] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 137.485390][ T4249] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.735645][ T4249] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 137.768895][ T4249] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 137.812188][ T4249] usb 3-1: Product: syz [ 137.832461][ T4249] usb 3-1: Manufacturer: syz [ 137.837294][ T4651] tipc: Node number set to 1 [ 137.894446][ T4249] usb 3-1: SerialNumber: syz [ 137.930533][ T4249] usb 3-1: config 0 descriptor?? [ 138.010663][ T4249] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 138.108584][ T4249] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 138.400009][ T4651] usb 3-1: USB disconnect, device number 2 [ 138.428334][ T4651] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 138.962027][ T4770] Process accounting resumed [ 139.209427][ T4804] loop3: detected capacity change from 0 to 256 [ 139.428688][ T4804] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 140.098757][ T4812] fuse: Bad value for 'fd' [ 140.138097][ T4812] 9pnet_virtio: no channels available for device syz [ 140.326554][ T4817] netlink: 'syz.4.149': attribute type 1 has an invalid length. [ 140.432476][ T4822] siw: device registration error -23 [ 142.207319][ T4838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 142.712351][ T4845] Zero length message leads to an empty skb [ 142.778630][ T4842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.885501][ T4296] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 142.907418][ T4842] bond0: (slave rose0): Enslaving as an active interface with an up link [ 142.926365][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 143.255544][ T4296] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 143.295483][ T4296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.312138][ T4296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.322431][ T4296] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 144.907616][ T4296] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 144.935835][ T4296] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 145.073440][ T4852] 9pnet: Insufficient options for proto=fd [ 145.107397][ T4296] usb 3-1: Manufacturer: syz [ 145.215630][ T4296] usb 3-1: config 0 descriptor?? [ 145.234112][ T4852] Process accounting resumed [ 145.450852][ T26] audit: type=1326 audit(1760086962.613:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21c065ec9 code=0x7ffc0000 [ 145.525686][ T26] audit: type=1326 audit(1760086962.633:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21c065ec9 code=0x7ffc0000 [ 145.674544][ T26] audit: type=1326 audit(1760086962.643:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21c065ec9 code=0x7ffc0000 [ 145.708596][ T4296] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 145.746908][ T4296] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 145.797342][ T26] audit: type=1326 audit(1760086962.643:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fe21c065ec9 code=0x7ffc0000 [ 145.910168][ T4875] ax25_connect(): syz.3.162 uses autobind, please contact jreuter@yaina.de [ 145.921489][ T4875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 146.090468][ T4296] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 146.172702][ T26] audit: type=1326 audit(1760086962.643:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21c065ec9 code=0x7ffc0000 [ 146.538687][ T4296] usb 3-1: USB disconnect, device number 3 [ 146.638249][ T26] audit: type=1326 audit(1760086962.643:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21c065ec9 code=0x7ffc0000 [ 147.125181][ T26] audit: type=1326 audit(1760086962.643:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21c065ec9 code=0x7ffc0000 [ 147.149397][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.735403][ T26] audit: type=1326 audit(1760086962.653:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21c065ec9 code=0x7ffc0000 [ 147.971197][ T26] audit: type=1326 audit(1760086962.653:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21c065ec9 code=0x7ffc0000 [ 148.003027][ T26] audit: type=1326 audit(1760086962.653:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4858 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe21c065ec9 code=0x7ffc0000 [ 148.010139][ T4879] fido_id[4879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 150.828918][ T4886] syz.3.164 (4886) used greatest stack depth: 20776 bytes left [ 153.135124][ T4248] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 153.263840][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 153.263856][ T26] audit: type=1107 audit(1760086970.423:35): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 154.415500][ T4248] usb 4-1: Using ep0 maxpacket: 32 [ 154.447063][ T4954] hub 9-0:1.0: USB hub found [ 154.452918][ T4954] hub 9-0:1.0: 1 port detected [ 155.265703][ T4248] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 155.275018][ T4248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.297305][ T4248] usb 4-1: config 0 descriptor?? [ 155.345441][ T4296] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.354084][ T4248] as10x_usb: device has been detected [ 155.364795][ T4248] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 155.421751][ T4248] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 155.595478][ T4296] usb 3-1: Using ep0 maxpacket: 16 [ 155.636274][ T4296] usb 3-1: no configurations [ 155.641299][ T4296] usb 3-1: can't read configurations, error -22 [ 156.533733][ T4248] as10x_usb: error during firmware upload part1 [ 156.535491][ T4296] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.747750][ T4248] Registered device nBox DVB-T Dongle [ 156.773549][ T4248] usb 4-1: USB disconnect, device number 2 [ 156.815461][ T4296] usb 3-1: Using ep0 maxpacket: 16 [ 156.874638][ T4980] tipc: Enabling of bearer rejected, already enabled [ 157.565477][ T4296] usb 3-1: no configurations [ 157.570433][ T4296] usb 3-1: can't read configurations, error -22 [ 157.589594][ T4296] usb usb3-port1: attempt power cycle [ 157.782438][ T4248] Unregistered device nBox DVB-T Dongle [ 157.811902][ T4982] 9pnet: Insufficient options for proto=fd [ 157.869893][ T4248] as10x_usb: device has been disconnected [ 158.050959][ T4986] ax25_connect(): syz.0.186 uses autobind, please contact jreuter@yaina.de [ 158.827947][ T4986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.186'. [ 159.279313][ T4999] comedi comedi0: Minor 16 could not be opened [ 159.748351][ T26] audit: type=1107 audit(1760086976.913:36): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 160.479202][ T5006] device veth1_to_bridge entered promiscuous mode [ 161.480406][ T5014] device veth1_to_bridge left promiscuous mode [ 162.649074][ T5024] ax25_connect(): syz.0.195 uses autobind, please contact jreuter@yaina.de [ 162.660677][ T5024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'. [ 163.237980][ T5036] tipc: Started in network mode [ 163.243085][ T5036] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 163.253683][ T5036] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 163.263932][ T5036] tipc: Enabled bearer , priority 10 [ 164.328416][ T2237] tipc: Node number set to 1 [ 164.838276][ T4965] Process accounting resumed [ 164.917093][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f125c00: rx timeout, send abort [ 165.085796][ T26] audit: type=1107 audit(1760086982.103:37): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 165.417158][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f127400: rx timeout, send abort [ 165.427003][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f125c00: abort rx timeout. Force session deactivation [ 165.925662][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f127400: abort rx timeout. Force session deactivation [ 166.124550][ T5068] device veth1_to_bridge entered promiscuous mode [ 166.150377][ T5064] device veth1_to_bridge left promiscuous mode [ 166.632293][ T5079] 9pnet_virtio: no channels available for device syz [ 173.156107][ T5145] netlink: 32 bytes leftover after parsing attributes in process `syz.0.225'. [ 173.170222][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.225'. [ 174.446599][ T26] audit: type=1107 audit(1760086992.005:38): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 175.028135][ T5158] ax25_connect(): syz.0.229 uses autobind, please contact jreuter@yaina.de [ 175.039629][ T5158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'. [ 178.044207][ T5190] siw: device registration error -23 [ 179.321842][ T26] audit: type=1107 audit(1760086997.733:39): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 182.324695][ T5212] netlink: 'syz.0.244': attribute type 4 has an invalid length. [ 182.332772][ T5212] netlink: 152 bytes leftover after parsing attributes in process `syz.0.244'. [ 182.346705][ T5212] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 185.162516][ T26] audit: type=1107 audit(1760087004.323:40): pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 186.068567][ T5259] 9pnet_virtio: no channels available for device syz [ 186.569655][ T5273] tipc: Enabling of bearer rejected, already enabled [ 188.041647][ T5284] device veth1_to_bridge entered promiscuous mode [ 188.177285][ T5283] device veth1_to_bridge left promiscuous mode [ 189.367017][ T5281] block nbd1: shutting down sockets [ 190.211722][ T26] audit: type=1107 audit(1760087009.373:41): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 191.539225][ T5317] loop0: detected capacity change from 0 to 256 [ 192.088845][ T4296] Bluetooth: hci0: command 0x0406 tx timeout [ 192.095187][ T4296] Bluetooth: hci3: command 0x0406 tx timeout [ 192.101483][ T4296] Bluetooth: hci2: command 0x0406 tx timeout [ 192.107872][ T4296] Bluetooth: hci4: command 0x0406 tx timeout [ 192.114630][ T4296] Bluetooth: hci1: command 0x0406 tx timeout [ 192.123141][ T5315] 9pnet_virtio: no channels available for device syz [ 192.187367][ T5317] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 193.630661][ T5342] netlink: 32 bytes leftover after parsing attributes in process `syz.0.269'. [ 193.686480][ T5343] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'. [ 194.402160][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.408768][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.936444][ T5387] 9pnet_virtio: no channels available for device syz [ 197.971619][ T5386] ax25_connect(): syz.3.277 uses autobind, please contact jreuter@yaina.de [ 197.982751][ T5386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 198.609926][ T5392] loop4: detected capacity change from 0 to 256 [ 198.697465][ T5392] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 200.381257][ T5405] netlink: 32 bytes leftover after parsing attributes in process `syz.3.281'. [ 200.446014][ T5406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.281'. [ 202.856541][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 202.883710][ T5440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.290'. [ 203.981088][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.088056][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.114967][ T26] audit: type=1400 audit(1760087023.273:42): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=5456 comm="syz.3.292" [ 204.133939][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.991687][ T5465] siw: device registration error -23 [ 205.273573][ T5471] netlink: 32 bytes leftover after parsing attributes in process `syz.4.294'. [ 206.318584][ T5481] device veth1_to_bridge entered promiscuous mode [ 206.345743][ T5473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.294'. [ 206.370374][ T5480] device veth1_to_bridge left promiscuous mode [ 208.397127][ T5511] tipc: Started in network mode [ 208.402413][ T5511] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 208.414392][ T5511] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 208.424059][ T5511] tipc: Enabled bearer , priority 10 [ 209.527451][ T2237] tipc: Node number set to 1 [ 209.549115][ T5516] siw: device registration error -23 [ 210.810932][ T5522] delete_channel: no stack [ 210.827312][ T5520] device veth1_to_bridge entered promiscuous mode [ 210.914049][ T5527] netlink: 32 bytes leftover after parsing attributes in process `syz.2.309'. [ 211.175750][ T5529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'. [ 212.055571][ T5528] device veth1_to_bridge left promiscuous mode [ 212.397691][ T5555] loop4: detected capacity change from 0 to 256 [ 213.375433][ T5559] ax25_connect(): syz.0.316 uses autobind, please contact jreuter@yaina.de [ 213.388489][ T5559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'. [ 213.628074][ T5555] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 215.852369][ T5580] netlink: 32 bytes leftover after parsing attributes in process `syz.2.323'. [ 215.907905][ T5581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.323'. [ 216.578369][ T26] audit: type=1107 audit(1760087036.536:43): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 216.585175][ T5589] device veth1_to_bridge entered promiscuous mode [ 216.701652][ T5587] device veth1_to_bridge left promiscuous mode [ 218.459103][ T5606] loop2: detected capacity change from 0 to 256 [ 220.364671][ T5614] tipc: Enabling of bearer rejected, already enabled [ 221.028621][ T5606] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 222.562734][ T5624] netlink: 32 bytes leftover after parsing attributes in process `syz.4.335'. [ 222.973336][ T5628] ax25_connect(): syz.2.333 uses autobind, please contact jreuter@yaina.de [ 222.983325][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.333'. [ 223.061194][ T5638] netlink: 32 bytes leftover after parsing attributes in process `syz.3.337'. [ 225.702375][ T5641] 9pnet: Insufficient options for proto=fd [ 226.156835][ T5641] Process accounting resumed [ 227.509005][ T5654] loop3: detected capacity change from 0 to 256 [ 228.311077][ T26] audit: type=1107 audit(1760087046.296:44): pid=5644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 228.376209][ T5654] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 229.690785][ T5660] device syzkaller0 entered promiscuous mode [ 231.981501][ T5692] ax25_connect(): syz.1.353 uses autobind, please contact jreuter@yaina.de [ 231.992225][ T5692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 233.842298][ T5698] netlink: 32 bytes leftover after parsing attributes in process `syz.0.354'. [ 235.367215][ T5707] ax25_connect(): syz.1.355 uses autobind, please contact jreuter@yaina.de [ 235.449536][ T5711] loop3: detected capacity change from 0 to 256 [ 236.101521][ T5711] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 236.765037][ T26] audit: type=1107 audit(1760087056.916:45): pid=5712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 239.345686][ T5735] device syzkaller0 entered promiscuous mode [ 241.434880][ T5740] delete_channel: no stack [ 241.644855][ T5740] device syzkaller0 entered promiscuous mode [ 242.166304][ T5749] tipc: Enabling of bearer rejected, already enabled [ 244.581456][ T26] audit: type=1107 audit(1760087065.735:46): pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 246.589491][ T5789] delete_channel: no stack [ 246.772275][ T5789] device syzkaller0 entered promiscuous mode [ 246.868220][ T5800] tipc: Enabling of bearer rejected, already enabled [ 249.404402][ T26] audit: type=1107 audit(1760087070.555:47): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 249.423178][ T5820] fuse: Bad value for 'fd' [ 253.823523][ T5839] tipc: Started in network mode [ 253.829578][ T5839] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 253.840044][ T5839] tipc: Enabling of bearer rejected, failed to enable media [ 255.840107][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.846835][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.113863][ T5850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.397'. [ 256.203005][ T5847] device syzkaller0 entered promiscuous mode [ 257.388576][ T26] audit: type=1107 audit(1760087077.905:48): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 257.785074][ T5861] siw: device registration error -23 [ 258.123832][ T5868] ax25_connect(): syz.3.402 uses autobind, please contact jreuter@yaina.de [ 258.135113][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.402'. [ 260.030471][ T5892] tipc: Enabling of bearer rejected, already enabled [ 261.425992][ T26] audit: type=1107 audit(1760087082.525:49): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 263.458539][ T5912] device syzkaller0 entered promiscuous mode [ 266.380592][ T5929] ax25_connect(): syz.2.420 uses autobind, please contact jreuter@yaina.de [ 267.921122][ T5951] device veth1_to_bridge entered promiscuous mode [ 267.933277][ T5948] device veth1_to_bridge left promiscuous mode [ 268.092600][ T26] audit: type=1107 audit(1760087089.245:50): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 269.264386][ T5960] netlink: 32 bytes leftover after parsing attributes in process `syz.4.429'. [ 269.324319][ T5961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.429'. [ 270.789019][ T5984] 9pnet_virtio: no channels available for device syz [ 273.439548][ T6007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.444'. [ 273.483794][ T26] audit: type=1107 audit(1760087094.848:51): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 273.503311][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.444'. [ 277.635127][ T6039] block device autoloading is deprecated and will be removed. [ 278.525657][ T26] audit: type=1107 audit(1760087101.384:52): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 279.642255][ T6060] delete_channel: no stack [ 279.840158][ T6065] device syzkaller0 entered promiscuous mode [ 282.557777][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.463'. [ 284.393985][ T6098] ax25_connect(): syz.4.469 uses autobind, please contact jreuter@yaina.de [ 285.556175][ T26] audit: type=1107 audit(1760087108.654:53): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 286.373183][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 286.605639][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.477'. [ 290.465653][ T6150] 9pnet: Insufficient options for proto=fd [ 293.670896][ T6164] delete_channel: no stack [ 294.825638][ T6179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.493'. [ 295.313944][ T26] audit: type=1107 audit(1760087119.466:54): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 296.516811][ T6199] loop3: detected capacity change from 0 to 256 [ 296.735809][ T6199] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 299.919348][ T6223] siw: device registration error -23 [ 300.041326][ T26] audit: type=1107 audit(1760087124.186:55): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 301.840603][ T6230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.507'. [ 304.631913][ T6265] fuse: Unknown parameter 'group_i00000000000000000000' [ 304.674144][ T6265] 9pnet_virtio: no channels available for device syz [ 304.885534][ T6270] netlink: 32 bytes leftover after parsing attributes in process `syz.2.520'. [ 304.986575][ T6267] syz.4.519 (6267) used greatest stack depth: 18592 bytes left [ 305.356411][ T6274] serio: Serial port ptm0 [ 305.932458][ T6290] tipc: Enabling of bearer rejected, already enabled [ 309.246916][ T6305] fuse: Unknown parameter 'group_i00000000000000000000' [ 309.256882][ T6305] 9pnet_virtio: no channels available for device syz [ 309.461429][ T6309] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 310.159242][ T6325] tipc: Enabling of bearer rejected, already enabled [ 311.104398][ T6337] fuse: Unknown parameter 'group_id00000000000000000000' [ 311.150193][ T6337] 9pnet_virtio: no channels available for device syz [ 311.254341][ T6340] loop0: detected capacity change from 0 to 256 [ 311.431052][ T6340] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 314.996466][ T6352] fuse: root generation should be zero [ 315.064983][ T6360] device veth1_to_bridge entered promiscuous mode [ 315.436974][ T4201] Bluetooth: hci1: hcon ffff88801a5b6000 sent 1 < count 7 [ 315.445848][ T4201] Bluetooth: hci1: hcon ffff88801a5b6000 sent 0 < count 64 [ 315.557853][ T6373] loop4: detected capacity change from 0 to 256 [ 316.633369][ T6373] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 316.723455][ T6359] device veth1_to_bridge left promiscuous mode [ 316.934496][ T6378] fuse: Unknown parameter 'group_id00000000000000000000' [ 317.004040][ T6378] 9pnet_virtio: no channels available for device syz [ 317.281516][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.290026][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.289498][ T6417] fuse: Unknown parameter 'group_id00000000000000000000' [ 322.301479][ T6417] 9pnet_virtio: no channels available for device syz [ 322.467376][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'. [ 323.579806][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 323.613323][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.569'. [ 323.782140][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'. [ 325.533712][ T6438] crypto_alloc_aead failed rc=-2 [ 325.638909][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.573'. [ 325.650234][ T6459] fuse: Bad value for 'fd' [ 326.021108][ T6467] fuse: Bad value for 'user_id' [ 326.357493][ T6471] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 326.455896][ T26] audit: type=1107 audit(1760087150.456:56): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 326.561923][ T6467] 9pnet_virtio: no channels available for device syz [ 329.996563][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'. [ 332.863400][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.588'. [ 336.928388][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 337.782442][ T6554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.599'. [ 338.633857][ T6551] netlink: 'syz.1.598': attribute type 3 has an invalid length. [ 338.845421][ T6551] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.598'. [ 338.984117][ T6561] tipc: Enabling of bearer rejected, already enabled [ 343.555983][ T6591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.610'. [ 343.730692][ T6595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.610'. [ 344.039250][ T6598] tipc: Enabling of bearer rejected, failed to enable media [ 346.931261][ T6625] 9pnet: Insufficient options for proto=fd [ 348.503607][ T6639] netlink: 32 bytes leftover after parsing attributes in process `syz.4.627'. [ 348.517447][ T6639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.627'. [ 352.959556][ T6684] ax25_connect(): syz.2.640 uses autobind, please contact jreuter@yaina.de [ 352.971364][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'. [ 356.484535][ T6710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.648'. [ 358.947186][ T6728] ax25_connect(): syz.4.654 uses autobind, please contact jreuter@yaina.de [ 358.990456][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.654'. [ 359.133118][ T6740] fuse: Unknown parameter 'oup_id' [ 362.710772][ T6764] netlink: 32 bytes leftover after parsing attributes in process `syz.0.664'. [ 364.305783][ T6788] ax25_connect(): syz.4.669 uses autobind, please contact jreuter@yaina.de [ 364.317015][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.669'. [ 364.415497][ T4185] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 366.092312][ T4185] usb 1-1: Using ep0 maxpacket: 8 [ 366.103051][ T6794] fuse: Bad value for 'fd' [ 367.085390][ T4185] usb 1-1: unable to read config index 0 descriptor/all [ 367.141603][ T6802] siw: device registration error -23 [ 367.875365][ T4185] usb 1-1: can't read configurations, error -71 [ 370.947438][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'. [ 371.007027][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.684'. [ 371.979161][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 372.048372][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 372.071972][ T6846] input: syz1 as /devices/virtual/input/input6 [ 372.103697][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 376.010575][ T6878] binder: 6876:6878 ioctl c0306201 2000000000c0 returned -14 [ 378.718246][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.726284][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.176502][ T6907] overlayfs: failed to clone upperpath [ 379.461843][ T6914] netlink: 104 bytes leftover after parsing attributes in process `syz.1.708'. [ 380.780307][ T6949] overlayfs: failed to clone upperpath [ 381.892278][ T6962] input: syz1 as /devices/virtual/input/input7 [ 382.147458][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'. [ 382.191819][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.726'. [ 382.343371][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.362089][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.393146][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.585344][ T5160] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 383.693979][ T6987] kvm: emulating exchange as write [ 383.840672][ T5160] usb 1-1: Using ep0 maxpacket: 32 [ 383.985448][ T5160] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.862732][ T5160] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.875952][ T5160] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.886992][ T5160] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 384.900920][ T5160] usb 1-1: config 0 interface 0 has no altsetting 0 [ 384.908272][ T5160] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 384.918484][ T5160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.061141][ T7005] overlayfs: failed to clone upperpath [ 385.156980][ T5160] usb 1-1: config 0 descriptor?? [ 385.720943][ T7020] tipc: Enabling of bearer rejected, already enabled [ 386.643847][ T5160] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 386.654333][ T5160] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 386.663438][ T5160] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 386.676106][ T5160] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 386.684359][ T5160] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 386.695734][ T5160] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 386.778616][ T5160] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 386.825357][ C1] hid-thrustmaster 0003:044F:B65D.0002: Unknown packet type 0x0, unable to proceed further with wheel init [ 387.041689][ T5160] usb 1-1: USB disconnect, device number 6 [ 387.252318][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.745'. [ 387.340027][ T7034] fido_id[7034]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 389.467054][ T7044] fuse: Bad value for 'fd' [ 390.586327][ T7057] tipc: Enabling of bearer rejected, already enabled [ 392.215391][ T4185] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 392.595942][ T4185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.662236][ T4185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.779947][ T4185] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.942495][ T4185] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 393.070470][ T4185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.308837][ T4185] usb 1-1: config 0 descriptor?? [ 393.618475][ T7081] lo speed is unknown, defaulting to 1000 [ 393.628502][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.764'. [ 393.665996][ T7087] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 393.674207][ T7087] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 393.908117][ T4185] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 393.929518][ T4185] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 394.032316][ T7095] tipc: Enabling of bearer rejected, failed to enable media [ 394.765376][ T4185] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 394.773128][ T4185] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 394.781055][ T4185] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 394.790216][ T4185] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 394.798024][ T4185] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 394.818313][ T4185] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 394.849002][ T4185] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 394.910151][ T4185] usb 1-1: USB disconnect, device number 7 [ 396.273814][ T7107] fido_id[7107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 396.813375][ T7128] netlink: 'syz.3.778': attribute type 27 has an invalid length. [ 398.140904][ T7128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.631876][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 399.673538][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.791'. [ 399.945895][ T4229] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 400.236962][ T4229] usb 1-1: Using ep0 maxpacket: 16 [ 400.355790][ T4229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.427179][ T4229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.755500][ T4229] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.795589][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.824229][ T4229] usb 1-1: Product: syz [ 400.858463][ T4229] usb 1-1: Manufacturer: syz [ 400.899431][ T4229] usb 1-1: SerialNumber: syz [ 401.506689][ T4229] usb 1-1: 0:2 : does not exist [ 401.810598][ T4229] usb 1-1: USB disconnect, device number 8 [ 402.771779][ T7212] input: syz0 as /devices/virtual/input/input8 [ 402.898214][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.964050][ T7217] netlink: 128 bytes leftover after parsing attributes in process `syz.2.802'. [ 403.037871][ T7220] overlayfs: failed to clone upperpath [ 403.202852][ T7225] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 403.284415][ T7225] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 403.389866][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 403.415114][ T7215] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 403.456510][ T7215] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 403.462549][ T7238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.810'. [ 403.769699][ T7248] 9pnet: Insufficient options for proto=fd [ 404.805737][ T4229] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 404.881330][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.775954][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.159874][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.187902][ T7265] fuse: Unknown parameter 'user_id00000000000000000000' [ 406.322803][ T7265] 9pnet_virtio: no channels available for device syz [ 407.005607][ T4229] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65449, setting to 8 [ 407.815293][ T4229] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 407.832296][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.923922][ T26] audit: type=1107 audit(1760087234.081:57): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 407.937031][ T4229] usb 3-1: can't set config #32, error -71 [ 407.951127][ T4229] usb 3-1: USB disconnect, device number 7 [ 408.698111][ T7280] capability: warning: `syz.2.822' uses 32-bit capabilities (legacy support in use) [ 408.836145][ T7285] 9pnet: Insufficient options for proto=fd [ 409.393276][ T7294] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 410.253284][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.830'. [ 412.063860][ T7308] lo speed is unknown, defaulting to 1000 [ 412.107320][ T7312] overlayfs: failed to resolve './file1': -2 [ 412.234775][ T26] audit: type=1107 audit(1760087238.391:58): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 413.227901][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 413.365984][ T7327] tipc: Enabling of bearer rejected, already enabled [ 414.699530][ T7320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.835'. [ 414.829548][ T7324] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 414.909174][ T7324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 414.934415][ T7324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 417.594809][ T7357] ax25_connect(): syz.0.843 uses autobind, please contact jreuter@yaina.de [ 417.607118][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 419.876776][ T7365] netlink: 'syz.4.846': attribute type 27 has an invalid length. [ 419.990743][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 420.188936][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 420.203669][ T7365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.309555][ T26] audit: type=1107 audit(1760087246.471:59): pid=7370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 421.224202][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 421.425077][ T7386] tipc: Started in network mode [ 421.430890][ T7386] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 421.441258][ T7386] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 421.450640][ T7386] tipc: Enabled bearer , priority 10 [ 421.567056][ T7382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.851'. [ 422.746641][ T6101] tipc: Node number set to 1 [ 422.910982][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.300602][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 423.468700][ T7382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 424.525195][ T7402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.854'. [ 424.775500][ T4235] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 425.055284][ T4235] usb 3-1: Using ep0 maxpacket: 16 [ 425.175704][ T4235] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 425.405557][ T4235] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 425.429524][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.485476][ T4235] usb 3-1: Product: syz [ 425.506212][ T4235] usb 3-1: Manufacturer: syz [ 425.528843][ T4235] usb 3-1: SerialNumber: syz [ 426.282028][ T7426] tipc: Enabling of bearer rejected, already enabled [ 426.600713][ T2288] usb 3-1: USB disconnect, device number 8 [ 427.367051][ T7436] 9pnet: Insufficient options for proto=fd [ 532.445180][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 532.452196][ C1] (detected by 1, t=10502 jiffies, g=28569, q=29) [ 532.458855][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294990350-4294979847), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 532.472543][ C1] rcu: rcu_preempt kthread starved for 10504 jiffies! g28569 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 532.483895][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 532.493904][ C1] rcu: RCU grace-period kthread stack dump: [ 532.499911][ C1] task:rcu_preempt state:R running task stack:27584 pid: 15 ppid: 2 flags:0x00004000 [ 532.510865][ C1] Call Trace: [ 532.514324][ C1] [ 532.517530][ C1] __schedule+0x11bb/0x4390 [ 532.522083][ C1] ? look_up_lock_class+0x71/0x110 [ 532.527273][ C1] ? mark_lock+0x94/0x320 [ 532.531645][ C1] ? release_firmware_map_entry+0x190/0x190 [ 532.537587][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 532.543008][ C1] preempt_schedule_irq+0xb1/0x150 [ 532.548335][ C1] ? __cond_resched+0xb0/0xb0 [ 532.553269][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 532.559114][ C1] irqentry_exit+0x63/0x70 [ 532.564164][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 532.569868][ C1] RIP: 0010:__free_object+0x90b/0x9d0 [ 532.575574][ C1] Code: fd 48 c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 a0 00 00 00 f6 84 24 a1 00 00 00 02 75 55 f7 44 24 18 00 02 00 00 74 01 fb <48> c7 44 24 60 0e 36 e0 45 48 8b 44 24 38 4a c7 04 28 00 00 00 00 [ 532.596050][ C1] RSP: 0018:ffffc90000d47980 EFLAGS: 00000206 [ 532.602350][ C1] RAX: 671fad119eb7da00 RBX: ffff8880b9137010 RCX: 671fad119eb7da00 [ 532.610548][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1820 RDI: ffffffff8a59a4c0 [ 532.618829][ C1] RBP: ffffc90000d47b60 R08: dffffc0000000000 R09: ffffc90000d47a60 [ 532.626841][ C1] R10: fffff520001a8f5c R11: 1ffff920001a8f4c R12: ffff8880b9137018 [ 532.635108][ C1] R13: dffffc0000000000 R14: 1ffff11017226e02 R15: ffff88802a8d45b8 [ 532.643158][ C1] ? alloc_object+0x650/0x650 [ 532.647976][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 532.654358][ C1] ? lock_chain_count+0x20/0x20 [ 532.659381][ C1] ? __rwlock_init+0x140/0x140 [ 532.664305][ C1] ? _raw_spin_unlock+0x40/0x40 [ 532.669673][ C1] ? timer_delete_sync+0x1cf/0x260 [ 532.675023][ C1] ? try_to_del_timer_sync+0x1b0/0x1b0 [ 532.680742][ C1] debug_object_free+0x2a2/0x3e0 [ 532.685840][ C1] schedule_timeout+0x173/0x280 [ 532.690835][ C1] ? console_conditional_schedule+0x40/0x40 [ 532.696820][ C1] ? update_process_times+0x200/0x200 [ 532.702227][ C1] ? prepare_to_swait_event+0x331/0x350 [ 532.707813][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 532.712798][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 532.718670][ C1] ? rcu_gp_init+0xd58/0x10e0 [ 532.723517][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 532.728441][ C1] ? finish_swait+0xc0/0x1d0 [ 532.733156][ C1] rcu_gp_kthread+0x98/0x350 [ 532.737961][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 532.743109][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 532.749123][ C1] ? __kthread_parkme+0x157/0x1b0 [ 532.754320][ C1] kthread+0x436/0x520 [ 532.758415][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 532.763551][ C1] ? kthread_blkcg+0xd0/0xd0 [ 532.768253][ C1] ret_from_fork+0x1f/0x30 [ 532.772795][ C1] [ 532.775919][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 532.782437][ C1] NMI backtrace for cpu 1 [ 532.786794][ C1] CPU: 1 PID: 7439 Comm: syz.0.866 Not tainted syzkaller #0 [ 532.794101][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 532.804278][ C1] Call Trace: [ 532.807675][ C1] [ 532.810545][ C1] dump_stack_lvl+0x168/0x230 [ 532.815361][ C1] ? show_regs_print_info+0x20/0x20 [ 532.820678][ C1] ? load_image+0x3b0/0x3b0 [ 532.825311][ C1] ? irq_work_queue+0xbf/0x140 [ 532.830209][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 532.835273][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 532.841633][ C1] ? _printk+0xcc/0x110 [ 532.846010][ C1] ? cpu_online+0x1d/0x30 [ 532.850497][ C1] ? load_image+0x3b0/0x3b0 [ 532.855126][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 532.861408][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 532.867647][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 532.874025][ C1] print_other_cpu_stall+0x10c8/0x1220 [ 532.879540][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 532.884529][ C1] ? ktime_get+0x7b/0x270 [ 532.889034][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 532.894101][ C1] rcu_sched_clock_irq+0x831/0x1110 [ 532.899458][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 532.904376][ C1] ? account_process_tick+0x227/0x3a0 [ 532.910286][ C1] update_process_times+0x193/0x200 [ 532.915640][ C1] tick_sched_timer+0x37d/0x560 [ 532.920616][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 532.925959][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 532.931644][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 532.936786][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 532.942957][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 532.947975][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 532.954083][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 532.959752][ C1] [ 532.962807][ C1] [ 532.965886][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 532.971997][ C1] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 532.978024][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 ef b8 c7 02 66 2e 0f 1f 84 00 00 00 00 00 [ 532.998670][ C1] RSP: 0018:ffffc90002fefcb0 EFLAGS: 00000246 [ 533.004991][ C1] RAX: 00000000000000f6 RBX: ffffffff8bbc2a20 RCX: 000000000000083f [ 533.013193][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 533.021200][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10172267af [ 533.029209][ C1] R10: ffffed10172267af R11: 1ffff110172267ae R12: ffff8880b9133b01 [ 533.037347][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000020 [ 533.045462][ C1] arch_irq_work_raise+0x82/0xd0 [ 533.050438][ C1] irq_work_queue+0x95/0x140 [ 533.055150][ C1] bpf_send_signal_common+0x2b2/0x420 [ 533.060639][ C1] ? rcu_lock_release+0x20/0x20 [ 533.065686][ C1] ? __cant_sleep+0x210/0x210 [ 533.070845][ C1] ? __context_tracking_exit+0x4c/0x80 [ 533.076530][ C1] bpf_send_signal+0x15/0x20 [ 533.081422][ C1] bpf_prog_7ba5217f62dcd359+0x38/0xf74 [ 533.087089][ C1] bpf_trace_run2+0x15b/0x2d0 [ 533.091828][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 533.096907][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 533.102944][ C1] ? lock_chain_count+0x20/0x20 [ 533.108104][ C1] __bpf_trace_sys_enter+0x60/0x70 [ 533.113259][ C1] trace_sys_enter+0x65/0x80 [ 533.117985][ C1] syscall_trace_enter+0x115/0x180 [ 533.123299][ C1] do_syscall_64+0x24/0xa0 [ 533.127739][ C1] ? clear_bhb_loop+0x30/0x80 [ 533.132534][ C1] ? clear_bhb_loop+0x30/0x80 [ 533.137330][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 533.143628][ C1] RIP: 0033:0x7fe21c065ec9 [ 533.148073][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.168499][ C1] RSP: 002b:00007fe21a2ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 533.177049][ C1] RAX: ffffffffffffffda RBX: 00007fe21c2bd098 RCX: 00007fe21c065ec9 [ 533.187832][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe21c2bd098 [ 533.196047][ C1] RBP: 00007fe21c2bd090 R08: 0000000000000000 R09: 0000000000000000 [ 533.204312][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.212395][ C1] R13: 00007fe21c2bd128 R14: 00007ffe4d4bf640 R15: 00007ffe4d4bf728 [ 533.220601][ C1]