last executing test programs: 1m56.61162644s ago: executing program 3 (id=57): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000001c0)=@keyring) 1m55.8821397s ago: executing program 3 (id=60): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x100, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x400}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x20000000) 1m54.755922637s ago: executing program 3 (id=63): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000800)={{0x84, @empty, 0x4e21, 0x3, 'dh\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x8, 0x12d5c, 0x12d5c}}, 0x44) 1m53.846246033s ago: executing program 3 (id=67): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) r4 = dup2(r2, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x21, 0x5, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0xf2, '\x00', 0x0, r4, 0x0, 0x2000001, 0x0, 0x200000000000000}, 0x50) 1m53.587211047s ago: executing program 3 (id=68): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x5}, &(0x7f0000000080)=0x8) 1m51.592862806s ago: executing program 3 (id=71): gettid() r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) r2 = dup(r1) r3 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x24, 0x0, 0x0, 0x0) 1m50.488310711s ago: executing program 32 (id=71): gettid() r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) r2 = dup(r1) r3 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x24, 0x0, 0x0, 0x0) 6.403365311s ago: executing program 4 (id=493): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, 0x0, 0x0, 0x4004040) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x98) write(r0, &(0x7f0000000280), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x10000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SET_GS(0x1e, r3, 0x0, 0x1001) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f00000003c0)) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a0000000000000000800075"], 0x26}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 4.846936339s ago: executing program 4 (id=498): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000003440)=[{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @local, 0x2}, 0x1c, &(0x7f0000003580)=[{&(0x7f0000000340)="c5", 0x1}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x40) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0xf, 0x4) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000) 4.650337188s ago: executing program 1 (id=501): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x39fab) 4.358131775s ago: executing program 2 (id=502): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x2cb1, 0x1c080, 0xd, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 4.086202441s ago: executing program 0 (id=503): r0 = socket(0x11, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0), &(0x7f0000000280)=0x13) 3.88332699s ago: executing program 0 (id=504): r0 = socket(0x2, 0x3, 0xff) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10b643, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x40014) 3.844679914s ago: executing program 4 (id=505): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@remote, @loopback}, 0x8) 3.57434485s ago: executing program 4 (id=506): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x7}, 0x8) 3.517187355s ago: executing program 1 (id=507): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, 0x0, 0x0, 0x4004040) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x98) write(r0, &(0x7f0000000280), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x10000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SET_GS(0x1e, r3, 0x0, 0x1001) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a0000000000000000800075"], 0x26}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 3.478626069s ago: executing program 0 (id=508): setrlimit(0x8443cd9b7e2c677d, &(0x7f0000001e40)={0x4, 0xd381}) 3.350355841s ago: executing program 4 (id=509): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000040)="06000000010006000300000000000000", 0x10) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000000040)="060000000300060000071a800100613f", 0x10) dup3(r1, r0, 0x80000) 3.265126109s ago: executing program 0 (id=510): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) clock_nanosleep(0x2, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x1000000201005) 2.237108657s ago: executing program 4 (id=511): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_clone3(&(0x7f0000000280)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) pidfd_getfd(r0, r0, 0x0) 1.99588175s ago: executing program 0 (id=512): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00f}]}, 0x10) 1.817306977s ago: executing program 1 (id=513): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) execve(0x0, 0x0, 0x0) 1.629192545s ago: executing program 0 (id=514): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) 1.498311698s ago: executing program 1 (id=515): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000980)=""/232, 0xe8}, {&(0x7f0000001bc0)=""/4107, 0x100b}, {&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f00000007c0)=""/136, 0x88}, {&(0x7f0000000540)=""/72, 0x48}, {&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000080)=""/109, 0x6d}, {&(0x7f0000000600)=""/218, 0xda}], 0x9}, 0x10001}], 0x1, 0x40010100, 0x0) 1.416920795s ago: executing program 2 (id=516): r0 = socket(0x2, 0x3, 0xff) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10b643, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmmsg$inet(r1, 0x0, 0x0, 0x40014) 1.187127717s ago: executing program 1 (id=517): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x2) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="85820528c32ef8bdfcaf925ed8b87c82d543b54a8dfd870b12d8e35da72ca1b0054905cabfe96f752e0bccc2078abbd6d9c9309834cceba35fac931bf01ef0991e0e0ea292937dbfa714c9e599064d1c25e4", 0xffffffe4}], 0x31, 0x1400, 0x0, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x5, 0x1) io_submit(0x0, 0x0, 0x0) lseek(r0, 0x80000000000006, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 990.296576ms ago: executing program 2 (id=518): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) 811.613143ms ago: executing program 2 (id=519): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22102, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0xe6, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0x1, 0x3, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x6, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x8000, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x8, 0x100000000, 0x2, 0xa50, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x4, 0x6aa, 0x100, 0x1, 0x83, 0x538a, 0x9, 0xda, 0x4, 0x0, 0x4, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x14, 0x20005bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x4000007ff, 0xe000000000000, 0xe4, 0xe, 0x0, 0x9, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x8, 0x9, 0x100000001, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x400000000000006, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x200000003, 0x4, 0x7, 0x402, 0x3, 0x8, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x4e39, 0x7721, 0x16, 0x0, 0x0) 495.236653ms ago: executing program 2 (id=520): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x6a, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 178.153373ms ago: executing program 2 (id=521): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, 0x0, 0x0, 0x4004040) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x98) write(r0, &(0x7f0000000280), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x10000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SET_GS(0x1e, r3, 0x0, 0x1001) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a0000000000000000800075"], 0x26}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 0s ago: executing program 1 (id=522): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/locks\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) flock(r1, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. [ 81.168517][ T5754] cgroup: Unknown subsys name 'net' [ 81.332122][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.029432][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.944368][ T5765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.953258][ T5765] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.961270][ T5765] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.969732][ T5765] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.977950][ T5765] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.985536][ T5765] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.021227][ T5769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.030970][ T5769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.039301][ T5769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.060915][ T5082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.069583][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.078545][ T5082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.085760][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.091557][ T5082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.100014][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.103876][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.116647][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.120096][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.126036][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.138607][ T5082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.146371][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.146778][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.161509][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.168874][ T5769] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.689820][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 85.781371][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 85.802301][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 85.862747][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 85.920107][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.928891][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.937086][ T5773] bridge_slave_0: entered allmulticast mode [ 85.944555][ T5773] bridge_slave_0: entered promiscuous mode [ 85.977373][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.984784][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.992015][ T5773] bridge_slave_1: entered allmulticast mode [ 85.999347][ T5773] bridge_slave_1: entered promiscuous mode [ 86.090122][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.104620][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.131080][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.138878][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.146716][ T5764] bridge_slave_0: entered allmulticast mode [ 86.154774][ T5764] bridge_slave_0: entered promiscuous mode [ 86.190908][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.199003][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.206767][ T5764] bridge_slave_1: entered allmulticast mode [ 86.214020][ T5764] bridge_slave_1: entered promiscuous mode [ 86.249588][ T5773] team0: Port device team_slave_0 added [ 86.260914][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.268801][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.276135][ T5772] bridge_slave_0: entered allmulticast mode [ 86.284387][ T5772] bridge_slave_0: entered promiscuous mode [ 86.297204][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.305290][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.312869][ T5772] bridge_slave_1: entered allmulticast mode [ 86.321362][ T5772] bridge_slave_1: entered promiscuous mode [ 86.341978][ T5773] team0: Port device team_slave_1 added [ 86.400764][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.422680][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.430010][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.437362][ T5768] bridge_slave_0: entered allmulticast mode [ 86.444757][ T5768] bridge_slave_0: entered promiscuous mode [ 86.465570][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.488594][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.495879][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.522035][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.536849][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.544193][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.570571][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.582208][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.589959][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.597316][ T5768] bridge_slave_1: entered allmulticast mode [ 86.604836][ T5768] bridge_slave_1: entered promiscuous mode [ 86.614281][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.626412][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.686008][ T5764] team0: Port device team_slave_0 added [ 86.695338][ T5764] team0: Port device team_slave_1 added [ 86.731152][ T5772] team0: Port device team_slave_0 added [ 86.754871][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.768510][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.780033][ T5772] team0: Port device team_slave_1 added [ 86.867224][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.875214][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.901207][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.938034][ T5773] hsr_slave_0: entered promiscuous mode [ 86.947714][ T5773] hsr_slave_1: entered promiscuous mode [ 86.956434][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.963687][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.992595][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.005764][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.012758][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.039732][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.065351][ T5768] team0: Port device team_slave_0 added [ 87.071726][ T5769] Bluetooth: hci0: command tx timeout [ 87.079130][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.087945][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.114440][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.159408][ T5768] team0: Port device team_slave_1 added [ 87.223649][ T5769] Bluetooth: hci3: command tx timeout [ 87.229396][ T5769] Bluetooth: hci2: command tx timeout [ 87.237101][ T51] Bluetooth: hci1: command tx timeout [ 87.277036][ T5772] hsr_slave_0: entered promiscuous mode [ 87.284535][ T5772] hsr_slave_1: entered promiscuous mode [ 87.298322][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.306974][ T5772] Cannot create hsr debugfs directory [ 87.348181][ T5764] hsr_slave_0: entered promiscuous mode [ 87.355628][ T5764] hsr_slave_1: entered promiscuous mode [ 87.362036][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.370055][ T5764] Cannot create hsr debugfs directory [ 87.410377][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.418160][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.444476][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.536085][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.543094][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.570924][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.714233][ T5768] hsr_slave_0: entered promiscuous mode [ 87.721247][ T5768] hsr_slave_1: entered promiscuous mode [ 87.729098][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.737004][ T5768] Cannot create hsr debugfs directory [ 88.053903][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.069913][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.080991][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.093926][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.148157][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.166973][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.181702][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.207675][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.282829][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.300957][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.331539][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.366143][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.440459][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.451106][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.463205][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.474590][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.570212][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.598796][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.650801][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.668412][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.688694][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.696119][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.707527][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.714708][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.744545][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.751765][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.768191][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.775400][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.831066][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.887897][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.916259][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.963042][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.976464][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.983685][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.010526][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.017693][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.042571][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.049867][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.129603][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.136862][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.156150][ T5769] Bluetooth: hci0: command tx timeout [ 89.252513][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.303514][ T5769] Bluetooth: hci3: command tx timeout [ 89.319072][ T5769] Bluetooth: hci2: command tx timeout [ 89.324643][ T51] Bluetooth: hci1: command tx timeout [ 89.332265][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.470395][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.615446][ T5773] veth0_vlan: entered promiscuous mode [ 89.642105][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.681659][ T5773] veth1_vlan: entered promiscuous mode [ 89.795443][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.819372][ T5773] veth0_macvtap: entered promiscuous mode [ 89.830775][ T5773] veth1_macvtap: entered promiscuous mode [ 89.871098][ T5764] veth0_vlan: entered promiscuous mode [ 89.900918][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.913441][ T5764] veth1_vlan: entered promiscuous mode [ 89.932007][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.982496][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.990628][ T5768] veth0_vlan: entered promiscuous mode [ 90.011015][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.020405][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.031150][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.040713][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.063069][ T5764] veth0_macvtap: entered promiscuous mode [ 90.093927][ T5768] veth1_vlan: entered promiscuous mode [ 90.111057][ T5764] veth1_macvtap: entered promiscuous mode [ 90.153072][ T5772] veth0_vlan: entered promiscuous mode [ 90.178580][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.203538][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.216335][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.227960][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.238765][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.250903][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.263090][ T5764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.273100][ T5764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.282831][ T5764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.291961][ T5764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.375949][ T5772] veth1_vlan: entered promiscuous mode [ 90.424712][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.432850][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.466625][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.478943][ T5768] veth0_macvtap: entered promiscuous mode [ 90.485060][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.499137][ T5768] veth1_macvtap: entered promiscuous mode [ 90.548255][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.562423][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.589241][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.612096][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.623626][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.634135][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.649684][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.679221][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.694225][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.704531][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.717537][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.727868][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.738564][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.750876][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.773560][ T5772] veth0_macvtap: entered promiscuous mode [ 90.788096][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.807826][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.822987][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.843628][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.873134][ T5772] veth1_macvtap: entered promiscuous mode [ 91.028770][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.103497][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.121545][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.296521][ T5769] Bluetooth: hci0: command tx timeout [ 91.302098][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.418668][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.434322][ T5769] Bluetooth: hci2: command tx timeout [ 91.435121][ T5774] Bluetooth: hci1: command tx timeout [ 91.445720][ T51] Bluetooth: hci3: command tx timeout [ 91.493588][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.644617][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.657585][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.701707][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.715784][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.739523][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.234391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.234524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.242781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.340383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.541581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.644336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.644464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.652650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.053571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.804238][ T5774] Bluetooth: hci0: command tx timeout [ 93.809730][ T5774] Bluetooth: hci1: command tx timeout [ 93.815226][ T51] Bluetooth: hci2: command tx timeout [ 93.819743][ T5769] Bluetooth: hci3: command tx timeout [ 93.840300][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.850966][ T788] cfg80211: failed to load regulatory.db [ 93.862849][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.875563][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.947484][ T5857] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 93.982064][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.011704][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.025349][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.053431][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.111880][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.157147][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.199485][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.224369][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.338512][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.374953][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.489673][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.533783][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.223913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.745830][ T5870] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.992243][ T5870] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.025105][ T5870] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 99.048049][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.070849][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 99.105898][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 99.137852][ T5870] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.155686][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.177864][ T5870] usb 1-1: Product: syz [ 99.192369][ T5870] usb 1-1: Manufacturer: syz [ 99.252771][ T5870] cdc_wdm 1-1:1.0: skipping garbage [ 99.266738][ T5870] cdc_wdm 1-1:1.0: skipping garbage [ 99.316616][ T5870] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 99.348329][ T5870] cdc_wdm 1-1:1.0: Unknown control protocol [ 99.461864][ T5907] syz.3.8[5907]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.570581][ T5904] Zero length message leads to an empty skb [ 100.017919][ T5909] process 'syz.3.8' launched '/dev/fd/9' with NULL argv: empty string added [ 100.381804][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 100.388766][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 100.395327][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 100.401982][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 100.409834][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 100.416489][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 100.423501][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 100.430154][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 100.444550][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 100.451220][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 100.458550][ T788] usb 1-1: USB disconnect, device number 2 [ 100.464734][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 100.464760][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 100.464777][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 102.883394][ C0] sched: RT throttling activated [ 104.538762][ T5930] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.483568][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.577784][ T5967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.715685][ T27] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.740012][ T27] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 106.775595][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.800294][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 106.824169][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 106.856854][ T27] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.884398][ T27] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.908815][ T27] usb 3-1: Product: syz [ 106.923680][ T27] usb 3-1: Manufacturer: syz [ 106.938122][ T27] cdc_wdm 3-1:1.0: skipping garbage [ 106.953482][ T27] cdc_wdm 3-1:1.0: skipping garbage [ 106.981084][ T27] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 107.019807][ T27] cdc_wdm 3-1:1.0: Unknown control protocol [ 107.108139][ T5983] binder: 5982:5983 ioctl c0306201 0 returned -14 [ 107.247263][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 107.253954][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 107.260431][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 107.267077][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 107.273826][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 107.280488][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 107.288119][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 107.294777][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 107.303591][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 107.310249][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 107.316592][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 107.323265][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 107.329617][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 107.336255][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 107.342369][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 107.351201][ T5775] usb 3-1: USB disconnect, device number 2 [ 111.293575][ T788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.608353][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 111.619001][ T788] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 111.643552][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.661364][ T788] usb 2-1: config 0 has no interface number 0 [ 111.676519][ T788] usb 2-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 111.711591][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.731668][ T788] usb 2-1: Product: syz [ 111.741499][ T788] usb 2-1: Manufacturer: syz [ 111.750958][ T788] usb 2-1: SerialNumber: syz [ 111.775335][ T788] usb 2-1: config 0 descriptor?? [ 111.953500][ T5756] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.246245][ T788] usb 2-1: bad CDC descriptors [ 112.267742][ T5756] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 112.394766][ T788] usb 2-1: bad CDC descriptors [ 112.437892][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.492919][ T788] usb 2-1: USB disconnect, device number 2 [ 112.517226][ T5756] usb 4-1: Product: syz [ 112.521468][ T5756] usb 4-1: Manufacturer: syz [ 112.562264][ T5756] usb 4-1: SerialNumber: syz [ 112.602157][ T5756] usb 4-1: config 0 descriptor?? [ 112.632740][ T5756] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 112.695208][ T5756] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.729839][ T5756] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 112.768671][ T5756] usb 4-1: media controller created [ 112.822318][ T5756] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.846289][ T6015] dvb-usb: bulk message failed: -22 (7/0) [ 112.945835][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 112.957863][ T6033] netlink: 52 bytes leftover after parsing attributes in process `syz.2.54'. [ 113.146838][ T5756] DVB: Unable to find symbol mt352_attach() [ 114.018159][ T5775] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.132735][ T6041] hub 1-0:1.0: USB hub found [ 114.139894][ T6041] hub 1-0:1.0: 1 port detected [ 114.308010][ T5775] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.400447][ T5775] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 114.403826][ T5756] DVB: Unable to find symbol nxt6000_attach() [ 114.424944][ T5756] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 114.444880][ T5756] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 114.470788][ T5756] dvb-usb: schedule remote query interval to 1000 msecs. [ 114.478007][ T5756] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 114.488709][ T5756] dvb-usb: bulk message failed: -22 (7/0) [ 114.495301][ T5756] dvb-usb: bulk message failed: -22 (7/0) [ 114.511572][ T5756] usb 4-1: USB disconnect, device number 2 [ 114.514428][ T5775] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.763462][ T5775] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 114.794148][ T5775] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 115.525767][ T5775] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.543509][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.551569][ T5775] usb 2-1: Product: syz [ 115.593599][ T5775] usb 2-1: Manufacturer: syz [ 115.626402][ T5756] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 115.713848][ T5775] cdc_wdm 2-1:1.0: skipping garbage [ 115.719126][ T5775] cdc_wdm 2-1:1.0: skipping garbage [ 115.802600][ T5775] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 115.835263][ T5775] cdc_wdm 2-1:1.0: Unknown control protocol [ 116.006798][ T6062] ======================================================= [ 116.006798][ T6062] WARNING: The mand mount option has been deprecated and [ 116.006798][ T6062] and is ignored by this kernel. Remove the mand [ 116.006798][ T6062] option from the mount to silence this warning. [ 116.006798][ T6062] ======================================================= [ 116.097072][ T6062] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 116.560043][ T5756] usb 2-1: USB disconnect, device number 3 [ 116.740998][ T9] IPVS: starting estimator thread 0... [ 116.839149][ T6069] IPVS: using max 19 ests per chain, 45600 per kthread [ 117.275921][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.284756][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.955599][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.026664][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.565686][ T6064] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.579443][ T6064] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.589263][ T6064] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.606137][ T6064] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.281370][ T6100] "syz.2.74" (6100) uses obsolete ecb(arc4) skcipher [ 121.388134][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.396096][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.621566][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.636798][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.648453][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.657748][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.666421][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 121.674221][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.703838][ T5769] Bluetooth: hci3: command tx timeout [ 123.737475][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.823106][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.218520][ T6089] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.227620][ T6089] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.237663][ T6089] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.246928][ T6089] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.495165][ T1092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.673607][ T1092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.783818][ T5769] Bluetooth: hci3: command tx timeout [ 126.076079][ T1092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.600491][ T1092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.932736][ T6112] chnl_net:caif_netlink_parms(): no params data found [ 127.307309][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.315305][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.322552][ T6112] bridge_slave_0: entered allmulticast mode [ 127.349036][ T6112] bridge_slave_0: entered promiscuous mode [ 127.452657][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.473647][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.491586][ T6112] bridge_slave_1: entered allmulticast mode [ 127.499989][ T6112] bridge_slave_1: entered promiscuous mode [ 127.608439][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.621716][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.740208][ T6112] team0: Port device team_slave_0 added [ 127.785177][ T6112] team0: Port device team_slave_1 added [ 127.854601][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.866552][ T5769] Bluetooth: hci3: command tx timeout [ 128.001884][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.039201][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.059919][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 128.106427][ T27] usb 2-1: config 32 has an invalid interface number: 85 but max is 0 [ 128.123290][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.133698][ T27] usb 2-1: config 32 has no interface number 0 [ 128.204874][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.227964][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.359623][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.373595][ T27] usb 2-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.386080][ T27] usb 2-1: config 32 interface 85 has no altsetting 0 [ 128.398038][ T27] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 128.420411][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.439681][ T27] usb 2-1: Product: syz [ 128.453745][ T27] usb 2-1: Manufacturer: syz [ 128.458425][ T27] usb 2-1: SerialNumber: syz [ 129.900686][ T6112] hsr_slave_0: entered promiscuous mode [ 129.943546][ T5769] Bluetooth: hci3: command tx timeout [ 129.950929][ T6112] hsr_slave_1: entered promiscuous mode [ 129.964164][ T6112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.983216][ T6112] Cannot create hsr debugfs directory [ 130.535956][ T27] appletouch 2-1:32.85: Failed to read mode from device. [ 130.610059][ T27] appletouch: probe of 2-1:32.85 failed with error -5 [ 130.649966][ T27] usb 2-1: USB disconnect, device number 4 [ 130.898246][ T1092] hsr_slave_0: left promiscuous mode [ 130.943900][ T1092] hsr_slave_1: left promiscuous mode [ 130.984116][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.991660][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.020374][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.052716][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.076909][ T1092] bridge_slave_1: left allmulticast mode [ 131.098527][ T1092] bridge_slave_1: left promiscuous mode [ 131.124948][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.157569][ T1092] bridge_slave_0: left allmulticast mode [ 131.181386][ T1092] bridge_slave_0: left promiscuous mode [ 131.218749][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.359517][ T1092] veth1_macvtap: left promiscuous mode [ 131.376080][ T1092] veth0_macvtap: left promiscuous mode [ 131.396192][ T1092] veth1_vlan: left promiscuous mode [ 131.401829][ T1092] veth0_vlan: left promiscuous mode [ 132.774743][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 132.834494][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 132.875819][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.919326][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.999661][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.007885][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.351513][ T1092] bond0 (unregistering): Released all slaves [ 134.015207][ T6112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.065010][ T6112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.137731][ T6112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.526051][ T6112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.765157][ T6275] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.115' sets config #0 [ 134.920709][ T1092] IPVS: stop unused estimator thread 0... [ 135.048849][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.113474][ T5859] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 135.128841][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.160802][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.168112][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.229053][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.236319][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.313487][ T5859] usb 2-1: Using ep0 maxpacket: 16 [ 135.327265][ T5859] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.347620][ T5859] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.387449][ T5859] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.411622][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.439021][ T5859] usb 2-1: Product: syz [ 135.465596][ T5859] usb 2-1: Manufacturer: syz [ 135.470277][ T5859] usb 2-1: SerialNumber: syz [ 135.785251][ T6275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'. [ 136.129653][ T5859] usb 2-1: 0:2 : does not exist [ 136.147078][ T5859] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 136.209400][ T5859] usb 2-1: USB disconnect, device number 5 [ 136.263088][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.287719][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.720456][ T6310] ksmbd: Unknown IPC event: 11, ignore. [ 136.747665][ T6311] netlink: 'syz.1.121': attribute type 12 has an invalid length. [ 136.765488][ T6311] netlink: 132 bytes leftover after parsing attributes in process `syz.1.121'. [ 137.166327][ T6112] veth0_vlan: entered promiscuous mode [ 137.213237][ T6112] veth1_vlan: entered promiscuous mode [ 137.305196][ T6112] veth0_macvtap: entered promiscuous mode [ 137.337025][ T6112] veth1_macvtap: entered promiscuous mode [ 137.422983][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.016256][ T6329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 139.052464][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.120165][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.190546][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.243287][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.257284][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.332407][ T6112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.346901][ T6112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.363921][ T5864] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 139.371283][ T6112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.371457][ T6112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.601024][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.661320][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.763754][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 139.779760][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.796670][ T5864] usb 3-1: no configurations [ 139.820993][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.853918][ T5864] usb 3-1: can't read configurations, error -22 [ 140.063625][ T5864] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.381680][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 140.394433][ T5864] usb 3-1: device descriptor read/all, error -71 [ 140.404681][ T5864] usb usb3-port1: attempt power cycle [ 142.813867][ T6382] tmpfs: Bad value for 'mpol' [ 146.736275][ T6458] hub 9-0:1.0: USB hub found [ 146.741631][ T6458] hub 9-0:1.0: 1 port detected [ 147.381738][ T6476] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.993761][ T5775] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 148.199019][ T5775] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.251961][ T5775] usb 2-1: config 0 has no interfaces? [ 148.286876][ T5775] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.342774][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.538134][ T5775] usb 2-1: config 0 descriptor?? [ 150.792539][ T5837] usb 2-1: USB disconnect, device number 6 [ 151.078643][ T5864] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 151.285585][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.354902][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.412286][ T5864] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 151.458839][ T5864] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 151.498596][ T5864] usb 3-1: Manufacturer: syz [ 151.525967][ T5864] usb 3-1: config 0 descriptor?? [ 152.379931][ T5864] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71 [ 152.423743][ T5864] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 152.443839][ T5864] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71 [ 152.452033][ T5864] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 152.503046][ T5864] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 152.527605][ T5864] usb 3-1: USB disconnect, device number 6 [ 159.816242][ T6610] Bluetooth: MGMT ver 1.22 [ 159.942983][ T6618] syz_tun: entered allmulticast mode [ 159.962679][ T6618] syz_tun: left allmulticast mode [ 161.564690][ T5859] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.786414][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.823577][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.853601][ T5859] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 161.862800][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.064355][ T5859] usb 3-1: config 0 descriptor?? [ 162.532347][ T5859] usbhid 3-1:0.0: can't add hid device: -71 [ 162.556585][ T5859] usbhid: probe of 3-1:0.0 failed with error -71 [ 162.577257][ T5859] usb 3-1: USB disconnect, device number 7 [ 163.203646][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.393482][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 163.403097][ T8] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 163.415468][ T8] usb 2-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.429745][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.436978][ T8] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 163.446934][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.459791][ T8] usb 2-1: config 0 descriptor?? [ 163.602658][ T8] qmi_wwan 2-1:0.0: bogus CDC Union: master=255, slave=255 [ 163.614646][ T8] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 163.863758][ T5864] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.453095][ T5855] usb 2-1: USB disconnect, device number 7 [ 164.577631][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 164.687741][ T5864] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 164.701251][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.716174][ T5864] usb 3-1: Product: syz [ 164.720462][ T5864] usb 3-1: Manufacturer: syz [ 164.743177][ T5864] usb 3-1: SerialNumber: syz [ 164.763225][ T5864] r8152-cfgselector 3-1: config 0 descriptor?? [ 165.199582][ T6708] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 167.544323][ T5855] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 167.753577][ T5855] usb 5-1: Using ep0 maxpacket: 8 [ 167.769684][ T5855] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.782774][ T5855] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 167.792334][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.804353][ T5855] usb 5-1: config 0 descriptor?? [ 167.860897][ T5855] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 168.690584][ T5864] r8152-cfgselector 3-1: Unknown version 0x0000 [ 168.727840][ T5864] r8152-cfgselector 3-1: bad CDC descriptors [ 168.760201][ T5864] r8152-cfgselector 3-1: Unknown version 0x0000 [ 168.785193][ T5864] r8152-cfgselector 3-1: USB disconnect, device number 8 [ 169.047585][ T5855] gspca_vc032x: reg_w err -71 [ 169.073174][ T5855] vc032x: probe of 5-1:0.0 failed with error -71 [ 169.100912][ T5855] usb 5-1: USB disconnect, device number 2 [ 174.562213][ T6849] ip6gretap0: entered promiscuous mode [ 174.589776][ T6849] vlan2: entered promiscuous mode [ 177.863735][ T5769] Bluetooth: hci0: command 0x0406 tx timeout [ 190.655983][ T7114] netlink: 'syz.2.313': attribute type 9 has an invalid length. [ 191.372441][ T28] audit: type=1326 audit(1766414399.800:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a258f749 code=0x7ffc0000 [ 191.454724][ T28] audit: type=1326 audit(1766414399.840:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a258f749 code=0x7ffc0000 [ 191.581266][ T28] audit: type=1326 audit(1766414399.840:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a258f749 code=0x7ffc0000 [ 191.620188][ T28] audit: type=1326 audit(1766414399.840:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a258f749 code=0x7ffc0000 [ 191.655815][ T28] audit: type=1326 audit(1766414399.840:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7ff8a258f749 code=0x7ffc0000 [ 191.870588][ T28] audit: type=1326 audit(1766414399.840:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a258f749 code=0x7ffc0000 [ 191.938964][ T28] audit: type=1326 audit(1766414399.840:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff8a258f749 code=0x7ffc0000 [ 191.965273][ T28] audit: type=1326 audit(1766414399.840:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff8a258f749 code=0x7ffc0000 [ 193.663681][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.4.321'. [ 194.431917][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.440938][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.518477][ T28] audit: type=1326 audit(1766414404.950:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b50b8f749 code=0x7ffc0000 [ 196.573717][ T28] audit: type=1326 audit(1766414404.950:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b50b8f749 code=0x7ffc0000 [ 196.634369][ T28] audit: type=1326 audit(1766414404.950:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b50b8f749 code=0x7ffc0000 [ 196.693423][ T28] audit: type=1326 audit(1766414404.950:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b50b8f749 code=0x7ffc0000 [ 196.747715][ T28] audit: type=1326 audit(1766414404.970:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b50b8f749 code=0x7ffc0000 [ 196.803116][ T28] audit: type=1326 audit(1766414404.970:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b50b8f749 code=0x7ffc0000 [ 196.863415][ T28] audit: type=1326 audit(1766414404.970:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b50b8f749 code=0x7ffc0000 [ 196.911052][ T28] audit: type=1326 audit(1766414404.980:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b50b8f749 code=0x7ffc0000 [ 196.963420][ T28] audit: type=1326 audit(1766414404.980:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b50b8f749 code=0x7ffc0000 [ 197.030731][ T28] audit: type=1326 audit(1766414404.980:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9b50b8f749 code=0x7ffc0000 [ 203.302262][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'. [ 203.312436][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'. [ 205.489520][ T7372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.408'. [ 206.849159][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 206.849186][ T28] audit: type=1326 audit(1766414415.280:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.1.419" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b50b8f749 code=0x0 [ 207.081930][ T7400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.420'. [ 208.526618][ T7427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.430'. [ 210.666052][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.440'. [ 211.533799][ T28] audit: type=1326 audit(1766414419.960:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 211.629987][ T28] audit: type=1326 audit(1766414419.960:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 211.723431][ T28] audit: type=1326 audit(1766414419.960:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 211.794766][ T28] audit: type=1326 audit(1766414419.960:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 211.874018][ T28] audit: type=1326 audit(1766414419.960:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 211.957261][ T28] audit: type=1326 audit(1766414419.960:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 212.779821][ T5769] Bluetooth: hci0: command 0x0406 tx timeout [ 212.786944][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 212.793206][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 212.797058][ T28] audit: type=1326 audit(1766414419.960:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 212.825715][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.450'. [ 213.434441][ T28] audit: type=1326 audit(1766414419.960:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 213.684428][ T28] audit: type=1326 audit(1766414419.970:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 213.723443][ T28] audit: type=1326 audit(1766414419.990:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 213.986205][ T28] audit: type=1326 audit(1766414419.990:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 214.438232][ T28] audit: type=1326 audit(1766414419.990:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 214.552015][ T28] audit: type=1326 audit(1766414419.990:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 214.574590][ T28] audit: type=1326 audit(1766414419.990:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 216.166865][ T7506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.460'. [ 219.765597][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.471'. [ 222.933428][ T7573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.484'. [ 228.455720][ T28] audit: type=1326 audit(1766414436.890:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 228.542974][ T28] audit: type=1326 audit(1766414436.890:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 228.627193][ T28] audit: type=1326 audit(1766414436.890:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 228.695313][ T28] audit: type=1326 audit(1766414436.890:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 228.843455][ T28] audit: type=1326 audit(1766414436.890:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 228.893580][ T28] audit: type=1326 audit(1766414436.900:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 228.956751][ T28] audit: type=1326 audit(1766414436.900:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 229.041205][ T28] audit: type=1326 audit(1766414436.900:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 229.115340][ T28] audit: type=1326 audit(1766414436.900:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 229.198155][ T28] audit: type=1326 audit(1766414436.900:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7febcd78f749 code=0x7ffc0000 [ 231.804494][ T7677] [ 231.806999][ T7677] ====================================================== [ 231.814054][ T7677] WARNING: possible circular locking dependency detected [ 231.821149][ T7677] syzkaller #0 Not tainted [ 231.825619][ T7677] ------------------------------------------------------ [ 231.832670][ T7677] syz.1.522/7677 is trying to acquire lock: [ 231.838597][ T7677] ffff888066d22b08 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb1/0xd50 [ 231.847035][ T7677] [ 231.847035][ T7677] but task is already holding lock: [ 231.854434][ T7677] ffff88807d753c68 (&pipe->mutex/1){+.+.}-{3:3}, at: splice_file_to_pipe+0x2a/0x110 [ 231.863914][ T7677] [ 231.863914][ T7677] which lock already depends on the new lock. [ 231.863914][ T7677] [ 231.874353][ T7677] [ 231.874353][ T7677] the existing dependency chain (in reverse order) is: [ 231.883400][ T7677] [ 231.883400][ T7677] -> #3 (&pipe->mutex/1){+.+.}-{3:3}: [ 231.891016][ T7677] __mutex_lock+0x129/0xcc0 [ 231.896099][ T7677] pipe_write+0x1c7/0x1af0 [ 231.901090][ T7677] __kernel_write_iter+0x274/0x670 [ 231.906769][ T7677] __kernel_write+0xf0/0x140 [ 231.911930][ T7677] autofs_notify_daemon+0x6ff/0xdc0 [ 231.917695][ T7677] autofs_wait+0x1021/0x1a40 [ 231.922844][ T7677] autofs_mount_wait+0x16b/0x320 [ 231.928339][ T7677] autofs_d_automount+0x392/0x710 [ 231.933927][ T7677] __traverse_mounts+0x323/0x5e0 [ 231.939422][ T7677] step_into+0x526/0xf10 [ 231.944224][ T7677] path_lookupat+0x169/0x440 [ 231.949380][ T7677] filename_lookup+0x1f4/0x510 [ 231.954720][ T7677] kern_path+0x35/0x50 [ 231.959361][ T7677] lookup_bdev+0xc1/0x280 [ 231.964252][ T7677] resume_store+0x16a/0x450 [ 231.969303][ T7677] kernfs_fop_write_iter+0x3b6/0x520 [ 231.975154][ T7677] vfs_write+0x43b/0x940 [ 231.979959][ T7677] ksys_write+0x147/0x250 [ 231.984850][ T7677] do_syscall_64+0x55/0xb0 [ 231.989820][ T7677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.996274][ T7677] [ 231.996274][ T7677] -> #2 (&sbi->pipe_mutex){+.+.}-{3:3}: [ 232.004079][ T7677] __mutex_lock+0x129/0xcc0 [ 232.009144][ T7677] autofs_notify_daemon+0x6ec/0xdc0 [ 232.014908][ T7677] autofs_wait+0x1021/0x1a40 [ 232.020063][ T7677] autofs_mount_wait+0x16b/0x320 [ 232.025560][ T7677] autofs_d_automount+0x392/0x710 [ 232.031140][ T7677] __traverse_mounts+0x323/0x5e0 [ 232.036630][ T7677] step_into+0x526/0xf10 [ 232.041429][ T7677] path_lookupat+0x169/0x440 [ 232.046598][ T7677] filename_lookup+0x1f4/0x510 [ 232.051923][ T7677] kern_path+0x35/0x50 [ 232.056560][ T7677] lookup_bdev+0xc1/0x280 [ 232.061450][ T7677] resume_store+0x16a/0x450 [ 232.066508][ T7677] kernfs_fop_write_iter+0x3b6/0x520 [ 232.072363][ T7677] vfs_write+0x43b/0x940 [ 232.077165][ T7677] ksys_write+0x147/0x250 [ 232.082057][ T7677] do_syscall_64+0x55/0xb0 [ 232.087022][ T7677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.093489][ T7677] [ 232.093489][ T7677] -> #1 (&of->mutex){+.+.}-{3:3}: [ 232.100750][ T7677] __mutex_lock+0x129/0xcc0 [ 232.105804][ T7677] kernfs_seq_start+0x5c/0x410 [ 232.111136][ T7677] seq_read_iter+0x3c8/0xd50 [ 232.116288][ T7677] vfs_read+0x431/0x920 [ 232.121002][ T7677] ksys_read+0x147/0x250 [ 232.125806][ T7677] do_syscall_64+0x55/0xb0 [ 232.130784][ T7677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.137240][ T7677] [ 232.137240][ T7677] -> #0 (&p->lock){+.+.}-{3:3}: [ 232.144335][ T7677] __lock_acquire+0x2ddb/0x7c80 [ 232.149751][ T7677] lock_acquire+0x197/0x410 [ 232.154810][ T7677] __mutex_lock+0x129/0xcc0 [ 232.159872][ T7677] seq_read_iter+0xb1/0xd50 [ 232.164957][ T7677] proc_reg_read_iter+0x1af/0x280 [ 232.170563][ T7677] copy_splice_read+0x3c8/0x860 [ 232.176002][ T7677] splice_file_to_pipe+0x6e/0x110 [ 232.181600][ T7677] do_sendfile+0x572/0xf70 [ 232.186583][ T7677] __se_sys_sendfile64+0x13f/0x190 [ 232.192265][ T7677] do_syscall_64+0x55/0xb0 [ 232.197329][ T7677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.203783][ T7677] [ 232.203783][ T7677] other info that might help us debug this: [ 232.203783][ T7677] [ 232.214056][ T7677] Chain exists of: [ 232.214056][ T7677] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex/1 [ 232.214056][ T7677] [ 232.226563][ T7677] Possible unsafe locking scenario: [ 232.226563][ T7677] [ 232.234061][ T7677] CPU0 CPU1 [ 232.239485][ T7677] ---- ---- [ 232.244885][ T7677] lock(&pipe->mutex/1); [ 232.249270][ T7677] lock(&sbi->pipe_mutex); [ 232.256337][ T7677] lock(&pipe->mutex/1); [ 232.263233][ T7677] lock(&p->lock); [ 232.267080][ T7677] [ 232.267080][ T7677] *** DEADLOCK *** [ 232.267080][ T7677] [ 232.275262][ T7677] 1 lock held by syz.1.522/7677: [ 232.280236][ T7677] #0: ffff88807d753c68 (&pipe->mutex/1){+.+.}-{3:3}, at: splice_file_to_pipe+0x2a/0x110 [ 232.290157][ T7677] [ 232.290157][ T7677] stack backtrace: [ 232.296109][ T7677] CPU: 0 PID: 7677 Comm: syz.1.522 Not tainted syzkaller #0 [ 232.303429][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.313540][ T7677] Call Trace: [ 232.316846][ T7677] [ 232.319818][ T7677] dump_stack_lvl+0x16c/0x230 [ 232.324588][ T7677] ? load_image+0x3b0/0x3b0 [ 232.329140][ T7677] ? show_regs_print_info+0x20/0x20 [ 232.334389][ T7677] ? print_circular_bug+0x12b/0x1a0 [ 232.339633][ T7677] check_noncircular+0x2bd/0x3c0 [ 232.344615][ T7677] ? look_up_lock_class+0x75/0x140 [ 232.349775][ T7677] ? print_deadlock_bug+0x5d0/0x5d0 [ 232.355014][ T7677] ? lockdep_lock+0xe0/0x220 [ 232.359646][ T7677] ? _find_first_zero_bit+0xd3/0x100 [ 232.364979][ T7677] __lock_acquire+0x2ddb/0x7c80 [ 232.369886][ T7677] ? verify_lock_unused+0x140/0x140 [ 232.375137][ T7677] ? page_ext_put+0x9c/0xb0 [ 232.379691][ T7677] lock_acquire+0x197/0x410 [ 232.384327][ T7677] ? seq_read_iter+0xb1/0xd50 [ 232.389046][ T7677] ? __might_sleep+0xe0/0xe0 [ 232.393695][ T7677] ? read_lock_is_recursive+0x20/0x20 [ 232.399118][ T7677] __mutex_lock+0x129/0xcc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 232.403651][ T7677] ? seq_read_iter+0xb1/0xd50 [ 232.408365][ T7677] ? prepare_alloc_pages+0x366/0x5f0 [ 232.413703][ T7677] ? seq_read_iter+0xb1/0xd50 [ 232.418410][ T7677] ? mutex_lock_nested+0x20/0x20 [ 232.423375][ T7677] ? __alloc_pages+0x271/0x460 [ 232.428199][ T7677] ? zone_statistics+0x170/0x170 [ 232.433203][ T7677] seq_read_iter+0xb1/0xd50 [ 232.437768][ T7677] ? __alloc_pages_bulk+0x4a4/0x950 [ 232.443040][ T7677] proc_reg_read_iter+0x1af/0x280 [ 232.448116][ T7677] copy_splice_read+0x3c8/0x860 [ 232.453114][ T7677] ? splice_shrink_spd+0xc0/0xc0 [ 232.458109][ T7677] ? common_file_perm+0x198/0x1f0 [ 232.463180][ T7677] ? vfs_splice_read+0x244/0x3b0 [ 232.468167][ T7677] ? splice_shrink_spd+0xc0/0xc0 [ 232.473158][ T7677] splice_file_to_pipe+0x6e/0x110 [ 232.478237][ T7677] do_sendfile+0x572/0xf70 [ 232.482712][ T7677] ? do_pwritev+0x340/0x340 [ 232.487269][ T7677] __se_sys_sendfile64+0x13f/0x190 [ 232.492423][ T7677] ? lock_chain_count+0x20/0x20 [ 232.497328][ T7677] ? __x64_sys_sendfile64+0xb0/0xb0 [ 232.502592][ T7677] ? lockdep_hardirqs_on+0x98/0x150 [ 232.507851][ T7677] do_syscall_64+0x55/0xb0 [ 232.512336][ T7677] ? clear_bhb_loop+0x40/0x90 [ 232.517059][ T7677] ? clear_bhb_loop+0x40/0x90 [ 232.521843][ T7677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.527781][ T7677] RIP: 0033:0x7f9b50b8f749 [ 232.532246][ T7677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.551907][ T7677] RSP: 002b:00007f9b51a14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 232.560470][ T7677] RAX: ffffffffffffffda RBX: 00007f9b50de5fa0 RCX: 00007f9b50b8f749 [ 232.568661][ T7677] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 232.576666][ T7677] RBP: 00007f9b50c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 232.584679][ T7677] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 232.592677][ T7677] R13: 00007f9b50de6038 R14: 00007f9b50de5fa0 R15: 00007ffea2a497c8 [ 232.600688][ T7677] [ 233.599238][ T1108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.713692][ T1108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.815054][ T1108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.955029][ T1108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.855294][ T1108] hsr_slave_0: left promiscuous mode [ 234.874377][ T1108] hsr_slave_1: left promiscuous mode [ 234.885546][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.892995][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.914220][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.921697][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.954136][ T1108] bridge_slave_1: left allmulticast mode [ 234.959868][ T1108] bridge_slave_1: left promiscuous mode [ 234.973649][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.994905][ T1108] bridge_slave_0: left allmulticast mode [ 235.000622][ T1108] bridge_slave_0: left promiscuous mode [ 235.013688][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.035492][ T1108] veth1_macvtap: left promiscuous mode [ 235.041092][ T1108] veth0_macvtap: left promiscuous mode [ 235.054469][ T1108] veth1_vlan: left promiscuous mode [ 235.064364][ T1108] veth0_vlan: left promiscuous mode [ 235.439059][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 235.478792][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 235.507452][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.535351][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.621209][ T1108] bond0 (unregistering): Released all slaves [ 236.151754][ T1108] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.230373][ T1108] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.300570][ T1108] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.342134][ T1108] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.725585][ T1108] hsr_slave_0: left promiscuous mode [ 237.731548][ T1108] hsr_slave_1: left promiscuous mode [ 237.737950][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.745510][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.756131][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.764634][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.772538][ T1108] bridge_slave_1: left allmulticast mode [ 237.778756][ T1108] bridge_slave_1: left promiscuous mode [ 237.786708][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.796213][ T1108] bridge_slave_0: left allmulticast mode [ 237.801907][ T1108] bridge_slave_0: left promiscuous mode [ 237.809971][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.824191][ T1108] hsr_slave_0: left promiscuous mode [ 237.830720][ T1108] hsr_slave_1: left promiscuous mode [ 237.837094][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.848462][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.856633][ T1108] bridge_slave_1: left allmulticast mode [ 237.862322][ T1108] bridge_slave_1: left promiscuous mode [ 237.872551][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.882058][ T1108] bridge_slave_0: left allmulticast mode [ 237.889119][ T1108] bridge_slave_0: left promiscuous mode [ 237.896994][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.909298][ T1108] veth1_macvtap: left promiscuous mode [ 237.915730][ T1108] veth0_macvtap: left promiscuous mode [ 237.921333][ T1108] veth1_vlan: left promiscuous mode [ 237.926781][ T1108] veth0_vlan: left promiscuous mode [ 238.130830][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 238.167229][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 238.180174][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.195176][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.274879][ T1108] bond0 (unregistering): Released all slaves [ 238.711213][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 238.748090][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 238.787261][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.826742][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.202055][ T1108] bond0 (unregistering): Released all slaves