last executing test programs: 16.367642629s ago: executing program 4 (id=179): openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) close(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) setresgid(0xee00, 0xee01, 0x0) fchmod(r3, 0x8) 15.749709105s ago: executing program 2 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000000), 0x4) dup3(r3, r4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, &(0x7f00000190c0)=""/41, 0x0, &(0x7f00000006c0), 0x3, r1}, 0x38) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 15.417916956s ago: executing program 4 (id=182): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 14.675183523s ago: executing program 2 (id=184): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0xe8, 0x29, 0x36, {0x5e, 0x19, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x966, 0x7, 0x1, 0x1]}}, @generic={0x8, 0x72, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x198}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445a0e2b4f79b91acb8cfb6bbbb83081c02ec544d20af0b521d102bedc65eeda06df41d160c2197a51325f28b8a789a6fa17d6eaa40f1e40dab9f427d85943241e191c78e6f552fcbf0050938e7b2511c3ee70e6749e1fe51991654e6aa47561590e8b7acf4f8b5ce9f0c90feb97c0ed1a5a08fdd926b", 0xeb}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x9, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fc", 0xf8a}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12.742868559s ago: executing program 1 (id=185): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x2, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85513, &(0x7f0000002600)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x1, 0x0, 0xca, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8838, 0x8, 0x1, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x86ba, 0x0, 0x3, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 10.849693902s ago: executing program 0 (id=194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) writev(r1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) 10.807326876s ago: executing program 2 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0xf5c5d000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x100000af5, 0x0) close(r3) 10.122859658s ago: executing program 4 (id=196): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000006c0), 0x3}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 10.119299449s ago: executing program 2 (id=197): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="18100000000000001701000002"], 0x1018}, 0x2002d801) 8.749391833s ago: executing program 1 (id=199): syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x100010, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd=r0, 0x0, 0x1fffffff, 0x8020, 0x0, 0x1, {0x2}}) r5 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @broadcast}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, 0x0, 0x1040) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 7.372796769s ago: executing program 4 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 7.167650017s ago: executing program 0 (id=202): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000e23d00090000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x1400037e) 6.681216892s ago: executing program 3 (id=203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={0x0, 0x0, 0x800}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.538471545s ago: executing program 2 (id=204): openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) close(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) setresgid(0xee00, 0xee01, 0x0) fchmod(r3, 0x8) 6.175573168s ago: executing program 0 (id=205): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$usbmon(0x0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0x1c67, 0x100, 0x23, 0x4000032c}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 5.556289324s ago: executing program 2 (id=206): syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x100003}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, @sco, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x3}) syz_emit_ethernet(0x2b, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f00001e9000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00008c4000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000805000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2404c000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x200000c0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000440)}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_tracing={0x1a, 0x21, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0xa, 0x9, 0x0, 0x30, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x7f, &(0x7f0000000d80)=""/127, 0x40f00, 0x28, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x23cf3, 0xffffffffffffffff, 0x4, &(0x7f0000000e40)=[r3, r3, r3, r3], &(0x7f0000000e80)=[{0x2, 0x2, 0xc, 0xa}, {0x3, 0x3, 0xb, 0xb}, {0x0, 0x5, 0x1, 0xc}, {0x5, 0x4, 0x7, 0x9}], 0x10, 0x100}, 0x94) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x201f00) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x146183, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) 5.307977887s ago: executing program 4 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0xf5c5d000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x100000af5, 0x0) close(r3) 4.563550204s ago: executing program 0 (id=208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1, 0xc10}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x4c}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.948557971s ago: executing program 4 (id=209): socket(0xa, 0x802, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setregid(0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) mq_open(0x0, 0x40, 0x100, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) r4 = socket(0x2, 0x80805, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, &(0x7f0000000100)) syz_usb_connect(0x4, 0x3b9, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0) 3.819733782s ago: executing program 3 (id=210): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = getpid() prlimit64(r0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40100, 0x5) getdents64(r4, 0xfffffffffffffffe, 0x29) 2.802778935s ago: executing program 3 (id=211): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0xe8, 0x29, 0x36, {0x5e, 0x19, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x966, 0x7, 0x1, 0x1]}}, @generic={0x8, 0x72, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x198}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445a0e2b4f79b91acb8cfb6bbbb83081c02ec544d20af0b521d102bedc65eeda06df41d160c2197a51325f28b8a789a6fa17d6eaa40f1e40dab9f427d85943241e191c78e6f552fcbf0050938e7b2511c3ee70e6749e1fe51991654e6aa47561590e8b7acf4f8b5ce9f0c90feb97c0ed1a5a08fdd926b", 0xeb}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x9, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8a}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.684211776s ago: executing program 0 (id=212): bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 2.559614597s ago: executing program 1 (id=213): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) msgget$private(0x0, 0x100) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 2.283448882s ago: executing program 0 (id=214): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000340)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 1.180710633s ago: executing program 3 (id=215): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000e23d00090000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1400037e) 384.685196ms ago: executing program 1 (id=216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xb4, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x76, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1, 0xb9}, @void, @void, @val={0x5, 0x1c, {0x1, 0x1b, 0x6, "b6dfa0316bbdde2d135a32243990e15178d061dfce4116d9a2"}}, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x7fffffffffffffff, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x2, 0xc0}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x200}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0xb4}}, 0x0) 206.130032ms ago: executing program 3 (id=217): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 84.992283ms ago: executing program 1 (id=218): r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 44.420796ms ago: executing program 1 (id=219): socket$inet_smc(0x2b, 0x1, 0x0) r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) connect$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) open(0x0, 0x14927e, 0x68) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(&(0x7f00000000c0)={0x20071026, r3}, &(0x7f0000000100)={0x3, 0xcc, 0x8000, 0x6, 0xfffffff5, 0x6}) 0s ago: executing program 3 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0xf5c5d000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x100000af5, 0x0) close(r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 48.275925][ T4172] cgroup: Unknown subsys name 'net' [ 48.465313][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.693166][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.989934][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 51.075752][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.091121][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.120739][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.127958][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.137132][ T4185] device bridge_slave_0 entered promiscuous mode [ 51.165153][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.172524][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.180465][ T4185] device bridge_slave_1 entered promiscuous mode [ 51.236011][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.267278][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.289122][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.296687][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.304674][ T4184] device bridge_slave_0 entered promiscuous mode [ 51.329116][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 51.341195][ T4185] team0: Port device team_slave_0 added [ 51.347298][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.355349][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.363469][ T4184] device bridge_slave_1 entered promiscuous mode [ 51.375281][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.382678][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.391330][ T4190] device bridge_slave_0 entered promiscuous mode [ 51.404691][ T4185] team0: Port device team_slave_1 added [ 51.419259][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 51.434578][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.442092][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.450733][ T4190] device bridge_slave_1 entered promiscuous mode [ 51.488259][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.510227][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.517307][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.544391][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.565326][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.584629][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.591862][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.618050][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.641492][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.672678][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.705454][ T4184] team0: Port device team_slave_0 added [ 51.733662][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.740898][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.748775][ T4195] device bridge_slave_0 entered promiscuous mode [ 51.758627][ T4184] team0: Port device team_slave_1 added [ 51.771626][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.778895][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.787289][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.797581][ T4185] device hsr_slave_0 entered promiscuous mode [ 51.805379][ T4185] device hsr_slave_1 entered promiscuous mode [ 51.812397][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.819785][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.827436][ T4195] device bridge_slave_1 entered promiscuous mode [ 51.848544][ T4190] team0: Port device team_slave_0 added [ 51.854776][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.861882][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.870194][ T4191] device bridge_slave_1 entered promiscuous mode [ 51.887752][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.895368][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.922465][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.935235][ T4190] team0: Port device team_slave_1 added [ 51.958323][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.965510][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.991767][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.020204][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.031661][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.068812][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.087064][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.108748][ T4184] device hsr_slave_0 entered promiscuous mode [ 52.115933][ T4184] device hsr_slave_1 entered promiscuous mode [ 52.122781][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.131108][ T4184] Cannot create hsr debugfs directory [ 52.137038][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.144694][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.171579][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.204378][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.211408][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.237727][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.261339][ T4195] team0: Port device team_slave_0 added [ 52.282803][ T4191] team0: Port device team_slave_0 added [ 52.301094][ T4195] team0: Port device team_slave_1 added [ 52.317727][ T4191] team0: Port device team_slave_1 added [ 52.372210][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.379185][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.405996][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.431422][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.438545][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.445247][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.453384][ T4190] Cannot create hsr debugfs directory [ 52.463636][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.470805][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.497155][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.509186][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.516323][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.542399][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.578917][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.586272][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.613224][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.678781][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.686632][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.693712][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.701581][ T4191] Cannot create hsr debugfs directory [ 52.710224][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 52.717170][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 52.752194][ T4195] device hsr_slave_0 entered promiscuous mode [ 52.759626][ T4195] device hsr_slave_1 entered promiscuous mode [ 52.766461][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.774169][ T4195] Cannot create hsr debugfs directory [ 52.789619][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 52.799824][ T4197] Bluetooth: hci3: command 0x0409 tx timeout [ 52.809604][ T4197] Bluetooth: hci2: command 0x0409 tx timeout [ 52.897458][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.931281][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.950829][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.976962][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.060721][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.072989][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.089321][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.100061][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.123986][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.134344][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.143655][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.158283][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.244146][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.253685][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.264986][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.279315][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.302423][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.322259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.332586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.371497][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.414728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.426030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.436052][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.443419][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.452733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.465517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.474658][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.482328][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.504529][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.516417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.526743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.536947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.546797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.557110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.567276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.580034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.591373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.610410][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.627385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.636772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.651307][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.663660][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.672063][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.692825][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.705351][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.713687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.722208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.730821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.739266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.749701][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.762077][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.773954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.784098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.793353][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.800570][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.828396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.848694][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.876512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.889128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.897386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.910886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.919352][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.926780][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.934865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.945759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.954498][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.961606][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.969307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.982868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.992145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.002437][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.009994][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.021845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.052971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.066821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.088073][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.109756][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.124332][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.133931][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.143525][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.156326][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.187478][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.199255][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.214281][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.223415][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.231781][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.240843][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.250223][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.258588][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.268269][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.277726][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.290596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.298187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.316513][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.325170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.341233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.355948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.365377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.382989][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.404307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.413481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.422347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.431976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.440701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.454673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.462945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.473954][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.483012][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.492308][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.499365][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.514300][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.525177][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.536599][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.551121][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.560738][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.569996][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.578331][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.585497][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.593796][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.636366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.645237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.655379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.665122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.674167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.682856][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.690508][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.699167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.707932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.717347][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.724535][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.732345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.741258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.756507][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.767415][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.776727][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.799848][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 54.806657][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.817924][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.818320][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 54.836437][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.856720][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.870810][ T2238] Bluetooth: hci3: command 0x041b tx timeout [ 54.870987][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 54.876875][ T2238] Bluetooth: hci4: command 0x041b tx timeout [ 54.902083][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.912055][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.921247][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.930038][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.938581][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.947528][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.956325][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.966533][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.019780][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.042229][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.061151][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.072710][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.081780][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.091379][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.100191][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.108685][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.116361][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.127192][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.135497][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.143362][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.156863][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.170399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.178998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.205880][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.229059][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.239307][ T4185] device veth0_vlan entered promiscuous mode [ 55.261164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.270717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.285973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.295573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.318062][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.337601][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.353531][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.376502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.386185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.406054][ T4185] device veth1_vlan entered promiscuous mode [ 55.431720][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.443879][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.462761][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.472887][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.486462][ T4184] device veth0_vlan entered promiscuous mode [ 55.513421][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.523156][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.533202][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.541500][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.548955][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.558703][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.569222][ T4190] device veth0_vlan entered promiscuous mode [ 55.583317][ T4190] device veth1_vlan entered promiscuous mode [ 55.599621][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.607935][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.617010][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.627087][ T4184] device veth1_vlan entered promiscuous mode [ 55.652676][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.662564][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.673087][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.681585][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.689721][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.698830][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.708673][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.716997][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.753299][ T4195] device veth0_vlan entered promiscuous mode [ 55.768877][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.778215][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.795824][ T4185] device veth0_macvtap entered promiscuous mode [ 55.809008][ T4185] device veth1_macvtap entered promiscuous mode [ 55.826463][ T4184] device veth0_macvtap entered promiscuous mode [ 55.834814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.844006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.853567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.862037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.870937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.879326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.888340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.898220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.907475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.917457][ T4190] device veth0_macvtap entered promiscuous mode [ 55.932629][ T4184] device veth1_macvtap entered promiscuous mode [ 55.947669][ T4190] device veth1_macvtap entered promiscuous mode [ 55.960991][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.972020][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.980992][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.989187][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.998339][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.009329][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.017623][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.029225][ T4195] device veth1_vlan entered promiscuous mode [ 56.037302][ T4191] device veth0_vlan entered promiscuous mode [ 56.054963][ T4191] device veth1_vlan entered promiscuous mode [ 56.064823][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.087560][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.100658][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.112781][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.121894][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.132473][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.143737][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.154866][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.166506][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.175524][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.184615][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.193252][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.201940][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.211031][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.223098][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.232295][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.246919][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.255988][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.282712][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.294221][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.307143][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.320276][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.337793][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.348673][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.357797][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.367139][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.379982][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.391402][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.402283][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.413120][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.424301][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.433836][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.454551][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.463712][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.473529][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.488577][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.498653][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.508004][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.517417][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.535612][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.546920][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.556747][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.565626][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.577521][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.587554][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.596616][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.605728][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.629953][ T4195] device veth0_macvtap entered promiscuous mode [ 56.645735][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.654030][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.664007][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.691311][ T4195] device veth1_macvtap entered promiscuous mode [ 56.713960][ T4191] device veth0_macvtap entered promiscuous mode [ 56.763882][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.781173][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.791627][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.802834][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.814098][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.824853][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.836280][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.853067][ T4191] device veth1_macvtap entered promiscuous mode [ 56.876682][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.884635][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 56.887837][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.896843][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 56.900724][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.913070][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.922301][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.933644][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.944589][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.955391][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 56.960208][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.961891][ T4252] Bluetooth: hci2: command 0x040f tx timeout [ 56.972632][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.983703][ T4252] Bluetooth: hci3: command 0x040f tx timeout [ 56.988402][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.005755][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.016904][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.038699][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.050363][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.060413][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.071060][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.081501][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.092139][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.102060][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.113935][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.126059][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.149923][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.158559][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.168351][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.177244][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.189062][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.198986][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.208608][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.217398][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.244978][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.246716][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.253204][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.270473][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.280952][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.291674][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.301521][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.312180][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.322680][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.333239][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.345955][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.368525][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.376435][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.385472][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.402062][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.408794][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.411064][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.425387][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.437326][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.446099][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.474113][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.484329][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.492944][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.542732][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.571117][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.579102][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.596916][ T446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.612366][ T446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.627029][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.635170][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.662068][ T488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.693028][ T488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.723623][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.762157][ T446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.773286][ T488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.811512][ T446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.829516][ T488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.863375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.893832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.911976][ T4293] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.056538][ T4298] capability: warning: `syz.3.4' uses 32-bit capabilities (legacy support in use) [ 58.142270][ T4298] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.628599][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.651332][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.670831][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.696789][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.720686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.756777][ T4272] Bluetooth: hci5: Frame reassembly failed (-84) [ 58.773893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.950629][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 58.957805][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 59.031222][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 59.649506][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 59.657415][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 59.829984][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.839302][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.848890][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 59.857853][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 60.133187][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 60.235424][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 60.390330][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.542655][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 60.789998][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 60.796411][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 60.849954][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 60.952675][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 61.331580][ T4344] loop2: detected capacity change from 0 to 7 [ 63.080049][ T1109] Bluetooth: hci5: command 0x1001 tx timeout [ 63.126007][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 63.179133][ T4305] Dev loop2: unable to read RDB block 7 [ 63.235395][ T4305] loop2: AHDI p1 p2 p3 [ 63.273499][ T4305] loop2: partition table partially beyond EOD, truncated [ 63.297343][ T4305] loop2: p1 start 1818582900 is beyond EOD, truncated [ 63.304329][ T4305] loop2: p3 start 335544320 is beyond EOD, truncated [ 63.326033][ T4344] Dev loop2: unable to read RDB block 7 [ 63.338209][ T4344] loop2: AHDI p1 p2 p3 [ 63.803803][ T4352] process 'syz.2.15' launched './file0' with NULL argv: empty string added [ 64.609573][ T4344] loop2: partition table partially beyond EOD, truncated [ 64.663685][ T4344] loop2: p1 start 1818582900 is beyond EOD, truncated [ 64.703041][ T4344] loop2: p3 start 335544320 is beyond EOD, truncated [ 65.189619][ T1109] Bluetooth: hci5: command 0x1009 tx timeout [ 66.899316][ T4385] netlink: 'syz.3.24': attribute type 4 has an invalid length. [ 67.226297][ T4396] Zero length message leads to an empty skb [ 67.999582][ T1109] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.249844][ T1109] usb 4-1: Using ep0 maxpacket: 16 [ 69.073353][ T1109] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 69.094941][ T1109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.124337][ T1109] usb 4-1: Product: syz [ 69.165563][ T1109] usb 4-1: Manufacturer: syz [ 69.205246][ T1109] usb 4-1: SerialNumber: syz [ 69.245906][ T1109] r8152-cfgselector 4-1: config 0 descriptor?? [ 69.890780][ T4393] ======================================================= [ 69.890780][ T4393] WARNING: The mand mount option has been deprecated and [ 69.890780][ T4393] and is ignored by this kernel. Remove the mand [ 69.890780][ T4393] option from the mount to silence this warning. [ 69.890780][ T4393] ======================================================= [ 69.926539][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.026002][ T4393] kAFS: No cell specified [ 70.039592][ T1109] r8152-cfgselector 4-1: Unknown version 0x0000 [ 70.047045][ T1109] r8152-cfgselector 4-1: bad CDC descriptors [ 70.069700][ T1109] r8152-cfgselector 4-1: Unknown version 0x0000 [ 70.093721][ T1109] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 70.181986][ T4427] netlink: 'syz.4.40': attribute type 4 has an invalid length. [ 71.524922][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.532207][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.975502][ T4480] netlink: 'syz.3.54': attribute type 4 has an invalid length. [ 73.275299][ T4497] fuse: Bad value for 'group_id' [ 76.674702][ T1325] cfg80211: failed to load regulatory.db [ 77.730241][ T4537] vxfs: WRONG superblock magic 00000000 at 1 [ 77.737402][ T4537] vxfs: WRONG superblock magic 00000000 at 8 [ 77.743842][ T4537] vxfs: can't find superblock. [ 77.754428][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.059637][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 78.200473][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.246518][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 78.255974][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.270007][ T21] usb 5-1: config 0 descriptor?? [ 78.761478][ T21] hid (null): usage index exceeded [ 78.786565][ T21] logitech-djreceiver 0003:046D:C52B.0001: ignoring exceeding usage max [ 78.804023][ T21] logitech-djreceiver 0003:046D:C52B.0001: ignoring exceeding usage max [ 78.827020][ T21] logitech-djreceiver 0003:046D:C52B.0001: usage index exceeded [ 78.845274][ T21] logitech-djreceiver 0003:046D:C52B.0001: item 0 0 2 2 parsing failed [ 78.874247][ T21] logitech-djreceiver 0003:046D:C52B.0001: logi_dj_probe: parse failed [ 78.895003][ T4527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 78.898436][ T21] logitech-djreceiver: probe of 0003:046D:C52B.0001 failed with error -22 [ 78.931713][ T4527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.68'. [ 78.976621][ T21] usb 5-1: USB disconnect, device number 2 [ 83.998252][ T4600] vxfs: WRONG superblock magic 00000000 at 1 [ 84.006440][ T4600] vxfs: WRONG superblock magic 00000000 at 8 [ 84.012832][ T4600] vxfs: can't find superblock. [ 85.919631][ T4231] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.445093][ T4640] syz.1.101 uses obsolete (PF_INET,SOCK_PACKET) [ 86.812439][ T4231] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.878370][ T4231] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.104504][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.199788][ T4231] usb 3-1: Product: syz [ 89.229835][ T4231] usb 3-1: can't set config #1, error -71 [ 89.246497][ T4231] usb 3-1: USB disconnect, device number 2 [ 90.414710][ T4674] vxfs: WRONG superblock magic 00000000 at 1 [ 90.611600][ T4674] vxfs: WRONG superblock magic 00000000 at 8 [ 90.617630][ T4674] vxfs: can't find superblock. [ 92.319701][ T1325] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.898024][ T1325] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.049611][ T1325] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 94.117948][ T1325] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.188659][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.421811][ T4739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 94.431050][ T4739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.123'. [ 94.526493][ T4705] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.809408][ C0] sched: RT throttling activated [ 95.809537][ T1325] usb 2-1: can't set config #27, error -71 [ 96.147639][ T1325] usb 2-1: USB disconnect, device number 2 [ 99.177397][ T4197] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.084826][ T4197] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.154638][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 100.163731][ T4803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.140'. [ 101.473940][ T4197] usb 4-1: config 0 has no interface number 0 [ 101.531465][ T4197] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.663097][ T4197] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.095173][ T4197] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 102.106251][ T4197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.136594][ T4197] usb 4-1: config 0 descriptor?? [ 102.254144][ T4197] usb 4-1: can't set config #0, error -71 [ 102.312785][ T4197] usb 4-1: USB disconnect, device number 3 [ 102.783836][ T4825] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 102.965067][ T4197] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.329572][ T4197] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 103.339196][ T4197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.358677][ T4197] usb 4-1: config 0 descriptor?? [ 103.404576][ T4197] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 103.710844][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 103.789550][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.159895][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 104.409817][ T23] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 104.469767][ T23] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.665935][ T23] usb 5-1: config 1 interface 0 has no altsetting 0 [ 104.706806][ T4197] gspca_sunplus: reg_w_riv err -71 [ 104.712190][ T4197] sunplus: probe of 4-1:0.0 failed with error -71 [ 104.729596][ T4197] usb 4-1: USB disconnect, device number 4 [ 105.957314][ T23] usb 5-1: New USB device found, idVendor=05c6, idProduct=920d, bcdDevice=e5.23 [ 106.046248][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.712109][ T23] usb 5-1: Product: syz [ 106.739215][ T23] usb 5-1: Manufacturer: syz [ 106.752227][ T23] usb 5-1: SerialNumber: syz [ 106.779861][ T23] usb 5-1: can't set config #1, error -71 [ 106.789552][ T23] usb 5-1: USB disconnect, device number 3 [ 106.896473][ T4875] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.952446][ T4879] capability: warning: `syz.4.166' uses deprecated v2 capabilities in a way that may be insecure [ 123.219948][ T5034] overlayfs: missing 'lowerdir' [ 124.838762][ T5056] vxfs: WRONG superblock magic 00000000 at 1 [ 124.846599][ T5056] vxfs: WRONG superblock magic 00000000 at 8 [ 124.853177][ T5056] vxfs: can't find superblock. [ 126.771249][ C1] ------------[ cut here ]------------ [ 126.776921][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 126.787606][ C1] WARNING: CPU: 1 PID: 5068 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 126.797626][ C1] Modules linked in: [ 126.801579][ C1] CPU: 1 PID: 5068 Comm: syz.1.219 Not tainted syzkaller #0 [ 126.809107][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.819283][ C1] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 126.825551][ C1] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 20 6b 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 d0 ce 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 126.846450][ C1] RSP: 0018:ffffc90000dd0788 EFLAGS: 00010246 [ 126.853142][ C1] RAX: 62e6d45bebc9f100 RBX: 000000000000000c RCX: ffff88801e38d940 [ 126.861143][ C1] RDX: 0000000000000100 RSI: 0000000080000101 RDI: 0000000000000000 [ 126.869203][ C1] RBP: 0000000000000084 R08: ffffc90000dd02a7 R09: 1ffff920001ba054 [ 126.877323][ C1] R10: dffffc0000000000 R11: fffff520001ba055 R12: ffff888022e76668 [ 126.885424][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 126.893506][ C1] FS: 00007f7ab99806c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 126.902649][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.909249][ C1] CR2: 0000001b32623ffc CR3: 00000000604ee000 CR4: 00000000003506e0 [ 126.917246][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.925242][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.933432][ C1] Call Trace: [ 126.936708][ C1] [ 126.939753][ C1] rate_control_send_low+0x194/0x790 [ 126.945495][ C1] rate_control_get_rate+0x207/0x5c0 [ 126.950804][ C1] __ieee80211_beacon_get+0x155e/0x2000 [ 126.956364][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 126.962391][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 126.967852][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 126.973345][ C1] __iterate_interfaces+0x243/0x500 [ 126.978537][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 126.984896][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 126.991468][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 126.998698][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 127.004008][ C1] ? hw_scan_work+0xed0/0xed0 [ 127.008681][ C1] __hrtimer_run_queues+0x4eb/0xb70 [ 127.014023][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 127.019231][ C1] hrtimer_run_softirq+0x176/0x240 [ 127.024483][ C1] handle_softirqs+0x339/0x830 [ 127.029351][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 127.034261][ C1] ? do_softirq+0x210/0x210 [ 127.038930][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 127.044244][ C1] __irq_exit_rcu+0x13b/0x230 [ 127.048915][ C1] ? irq_exit_rcu+0x20/0x20 [ 127.053434][ C1] irq_exit_rcu+0x5/0x20 [ 127.057707][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 127.063906][ C1] [ 127.066832][ C1] [ 127.069774][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 127.075744][ C1] RIP: 0010:next_uptodate_page+0x39b/0x8b0 [ 127.081557][ C1] Code: 00 74 08 48 89 df e8 64 8c 1e 00 4c 8b 3b be 00 00 04 00 4c 21 fe 31 ff e8 52 84 d9 ff b8 00 00 04 00 49 21 c7 4c 8b 64 24 28 <0f> 85 88 00 00 00 41 80 3c 2e 00 74 08 4c 89 ef e8 30 8c 1e 00 4d [ 127.101355][ C1] RSP: 0018:ffffc900048af6f8 EFLAGS: 00000246 [ 127.107414][ C1] RAX: 0000000000040000 RBX: ffffea00015d8400 RCX: ffff88801e38d940 [ 127.115393][ C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.123579][ C1] RBP: dffffc0000000000 R08: ffffea00015d8407 R09: 1ffffd40002bb080 [ 127.131666][ C1] R10: dffffc0000000000 R11: fffff940002bb081 R12: ffffc900048af828 [ 127.139846][ C1] R13: ffffea00015d8408 R14: 1ffffd40002bb081 R15: 0000000000000000 [ 127.147835][ C1] ? next_uptodate_page+0x38e/0x8b0 [ 127.153378][ C1] filemap_map_pages+0xee0/0x13b0 [ 127.158409][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 127.163649][ C1] ? count_memcg_event_mm+0x324/0x370 [ 127.169119][ C1] ? follow_page_pte+0x320/0xc20 [ 127.174271][ C1] handle_mm_fault+0x25bc/0x4410 [ 127.179430][ C1] ? get_page+0xe0/0xe0 [ 127.183964][ C1] ? follow_page_mask+0xa6e/0x12d0 [ 127.189263][ C1] __get_user_pages+0x94b/0x11e0 [ 127.194235][ C1] ? populate_vma_page_range+0x290/0x290 [ 127.199874][ C1] ? read_lock_is_recursive+0x10/0x10 [ 127.205241][ C1] populate_vma_page_range+0x213/0x290 [ 127.210797][ C1] __mm_populate+0x275/0x3b0 [ 127.215380][ C1] ? check_vma_flags+0x480/0x480 [ 127.220353][ C1] ? up_write+0x1bb/0x420 [ 127.224678][ C1] vm_mmap_pgoff+0x212/0x2d0 [ 127.229262][ C1] ? account_locked_vm+0xe0/0xe0 [ 127.234217][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 127.239240][ C1] ksys_mmap_pgoff+0x140/0x790 [ 127.244183][ C1] ? mmap_region+0x1650/0x1650 [ 127.248946][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 127.254161][ C1] do_syscall_64+0x4c/0xa0 [ 127.258563][ C1] ? clear_bhb_loop+0x30/0x80 [ 127.263546][ C1] ? clear_bhb_loop+0x30/0x80 [ 127.268308][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.274214][ C1] RIP: 0033:0x7f7abb726629 [ 127.278616][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.298604][ C1] RSP: 002b:00007f7ab9980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 127.307046][ C1] RAX: ffffffffffffffda RBX: 00007f7abb99ffa0 RCX: 00007f7abb726629 [ 127.315046][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 127.323059][ C1] RBP: 00007f7abb7bcb39 R08: ffffffffffffffff R09: 0000000000000000 [ 127.331046][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 127.339003][ C1] R13: 00007f7abb9a0038 R14: 00007f7abb99ffa0 R15: 00007ffee0289408 [ 127.347001][ C1] [ 127.350039][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.357674][ C1] CPU: 1 PID: 5068 Comm: syz.1.219 Not tainted syzkaller #0 [ 127.364961][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.375141][ C1] Call Trace: [ 127.378462][ C1] [ 127.381389][ C1] dump_stack_lvl+0x188/0x250 [ 127.386075][ C1] ? show_regs_print_info+0x20/0x20 [ 127.391271][ C1] ? load_image+0x400/0x400 [ 127.395771][ C1] panic+0x2e5/0x810 [ 127.399657][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 127.404301][ C1] ? __rate_control_send_low+0x630/0x880 [ 127.409928][ C1] __warn+0x248/0x2b0 [ 127.413904][ C1] ? __rate_control_send_low+0x630/0x880 [ 127.419609][ C1] report_bug+0x1b7/0x2e0 [ 127.423926][ C1] handle_bug+0x3a/0x70 [ 127.428219][ C1] exc_invalid_op+0x16/0x40 [ 127.432723][ C1] asm_exc_invalid_op+0x16/0x20 [ 127.437559][ C1] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 127.443872][ C1] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 20 6b 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 d0 ce 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 127.464050][ C1] RSP: 0018:ffffc90000dd0788 EFLAGS: 00010246 [ 127.470240][ C1] RAX: 62e6d45bebc9f100 RBX: 000000000000000c RCX: ffff88801e38d940 [ 127.478538][ C1] RDX: 0000000000000100 RSI: 0000000080000101 RDI: 0000000000000000 [ 127.486696][ C1] RBP: 0000000000000084 R08: ffffc90000dd02a7 R09: 1ffff920001ba054 [ 127.494791][ C1] R10: dffffc0000000000 R11: fffff520001ba055 R12: ffff888022e76668 [ 127.502771][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 127.510826][ C1] ? __rate_control_send_low+0x630/0x880 [ 127.516471][ C1] rate_control_send_low+0x194/0x790 [ 127.521754][ C1] rate_control_get_rate+0x207/0x5c0 [ 127.527027][ C1] __ieee80211_beacon_get+0x155e/0x2000 [ 127.532923][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 127.538909][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 127.544533][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 127.549984][ C1] __iterate_interfaces+0x243/0x500 [ 127.555346][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 127.561719][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 127.567953][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 127.575002][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 127.580280][ C1] ? hw_scan_work+0xed0/0xed0 [ 127.584949][ C1] __hrtimer_run_queues+0x4eb/0xb70 [ 127.590311][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 127.595596][ C1] hrtimer_run_softirq+0x176/0x240 [ 127.600838][ C1] handle_softirqs+0x339/0x830 [ 127.605864][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 127.610729][ C1] ? do_softirq+0x210/0x210 [ 127.615234][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 127.620436][ C1] __irq_exit_rcu+0x13b/0x230 [ 127.625290][ C1] ? irq_exit_rcu+0x20/0x20 [ 127.629792][ C1] irq_exit_rcu+0x5/0x20 [ 127.634205][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 127.640184][ C1] [ 127.643121][ C1] [ 127.646041][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 127.652552][ C1] RIP: 0010:next_uptodate_page+0x39b/0x8b0 [ 127.658523][ C1] Code: 00 74 08 48 89 df e8 64 8c 1e 00 4c 8b 3b be 00 00 04 00 4c 21 fe 31 ff e8 52 84 d9 ff b8 00 00 04 00 49 21 c7 4c 8b 64 24 28 <0f> 85 88 00 00 00 41 80 3c 2e 00 74 08 4c 89 ef e8 30 8c 1e 00 4d [ 127.678768][ C1] RSP: 0018:ffffc900048af6f8 EFLAGS: 00000246 [ 127.685042][ C1] RAX: 0000000000040000 RBX: ffffea00015d8400 RCX: ffff88801e38d940 [ 127.693295][ C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.701641][ C1] RBP: dffffc0000000000 R08: ffffea00015d8407 R09: 1ffffd40002bb080 [ 127.709798][ C1] R10: dffffc0000000000 R11: fffff940002bb081 R12: ffffc900048af828 [ 127.717761][ C1] R13: ffffea00015d8408 R14: 1ffffd40002bb081 R15: 0000000000000000 [ 127.725997][ C1] ? next_uptodate_page+0x38e/0x8b0 [ 127.731209][ C1] filemap_map_pages+0xee0/0x13b0 [ 127.736302][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 127.741425][ C1] ? count_memcg_event_mm+0x324/0x370 [ 127.746888][ C1] ? follow_page_pte+0x320/0xc20 [ 127.752008][ C1] handle_mm_fault+0x25bc/0x4410 [ 127.757052][ C1] ? get_page+0xe0/0xe0 [ 127.761228][ C1] ? follow_page_mask+0xa6e/0x12d0 [ 127.766416][ C1] __get_user_pages+0x94b/0x11e0 [ 127.771353][ C1] ? populate_vma_page_range+0x290/0x290 [ 127.776975][ C1] ? read_lock_is_recursive+0x10/0x10 [ 127.782422][ C1] populate_vma_page_range+0x213/0x290 [ 127.788002][ C1] __mm_populate+0x275/0x3b0 [ 127.792606][ C1] ? check_vma_flags+0x480/0x480 [ 127.797559][ C1] ? up_write+0x1bb/0x420 [ 127.801876][ C1] vm_mmap_pgoff+0x212/0x2d0 [ 127.806467][ C1] ? account_locked_vm+0xe0/0xe0 [ 127.811387][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 127.816412][ C1] ksys_mmap_pgoff+0x140/0x790 [ 127.821170][ C1] ? mmap_region+0x1650/0x1650 [ 127.825985][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 127.831277][ C1] do_syscall_64+0x4c/0xa0 [ 127.835702][ C1] ? clear_bhb_loop+0x30/0x80 [ 127.840379][ C1] ? clear_bhb_loop+0x30/0x80 [ 127.845147][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.851112][ C1] RIP: 0033:0x7f7abb726629 [ 127.855511][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.875362][ C1] RSP: 002b:00007f7ab9980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 127.883873][ C1] RAX: ffffffffffffffda RBX: 00007f7abb99ffa0 RCX: 00007f7abb726629 [ 127.891959][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 127.900285][ C1] RBP: 00007f7abb7bcb39 R08: ffffffffffffffff R09: 0000000000000000 [ 127.908333][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 127.916288][ C1] R13: 00007f7abb9a0038 R14: 00007f7abb99ffa0 R15: 00007ffee0289408 [ 127.924258][ C1] [ 127.927702][ C1] Kernel Offset: disabled [ 127.937003][ C1] Rebooting in 86400 seconds..