last executing test programs: 16.303671949s ago: executing program 0 (id=97): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)}) syz_open_dev$vim2m(&(0x7f0000000680), 0x2, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0x40002, 0x0) pselect6(0x40, &(0x7f0000000480)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f00000004c0)={0x1ff, 0x1000000000, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) 13.468598919s ago: executing program 0 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket(0x2, 0x80805, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f00000002c0), &(0x7f00000005c0)=0x30) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) fchmodat(r5, &(0x7f0000000340)='./file1\x00', 0x0) unlink(0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x20, 0x0) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f0000000580)={0x0, 0x5, 0x7, '\x00', &(0x7f0000000480)=0x9}) r6 = openat(r5, &(0x7f0000000440)='./file1\x00', 0x365443, 0x2f) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000000000)={0x2, 0x1, 0x6, 0x2, 0x8, 0x200}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x40000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000640)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r6, &(0x7f00000006c0)=[{{&(0x7f0000000700)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000003c0)="977a6c92e880656c17212076e96c5c9a73775d6c07d3d914186e63ded55f6898a9d7", 0x22}], 0x1}}], 0x1, 0x0) 12.390019216s ago: executing program 0 (id=115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000d00)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000d40)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d80)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff004) 12.182150831s ago: executing program 0 (id=117): shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_VERSION(r0, 0xc0046209, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000011c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001200), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000001300), 0x2, 0x141102) writev(r1, &(0x7f0000001340)=[{&(0x7f0000001380)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f00000016c0)='espintcp', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./sys_sec\x00', 0x16e) mount(0x0, &(0x7f0000001400)='./sys_sec\x00', &(0x7f0000001440)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r3, &(0x7f00000014c0)=""/9, 0xfffffd87) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x40c01) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001500), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001540)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r5, &(0x7f0000001600)=[{&(0x7f0000001640)=""/46, 0x2e}], 0x1) close(r5) mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x0, 0x40010, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)='`', 0x1}, {&(0x7f0000000140)="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", 0x1000}], 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc1a81, 0x0) move_pages(0x0, 0x2, &(0x7f0000003740)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f0000003780)=[0xbd, 0x1, 0xc, 0x5, 0x3, 0x1, 0xc, 0x1, 0x4ba, 0x5], &(0x7f00000037c0)=[0x0, 0x0], 0x6) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x1000}) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) 10.17098991s ago: executing program 0 (id=122): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xfdf0, 0x0, &(0x7f00000007c0)="5fd63edbfd8ad8de16e68701009a", 0x0, 0x707, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 9.403788919s ago: executing program 0 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='10', 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.015326197s ago: executing program 1 (id=150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) r2 = socket$kcm(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0xb0, 0x0, 0x9, [{{0x1, 0x2, 0x5, 0xffffffffffffffff, 0x4, 0x7, {0x0, 0x0, 0x3ff, 0xcc, 0xffffffffffffff5a, 0x3, 0x81, 0x5, 0x80, 0x6000, 0x0, 0x0, r5, 0x5, 0x34}}, {0x3, 0x80000000, 0x8, 0x7f7, 'rootmode'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'fo\x00', 0x30, 0x80001, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa012102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd, 0x4}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r10, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0\x00\x00', 0x40) ioctl(r9, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d706174683000") 4.788970432s ago: executing program 2 (id=152): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @call={0x85, 0x0, 0x0, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) 4.717724734s ago: executing program 2 (id=153): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000280)={0x68, 0x0, 0x30, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 4.717487224s ago: executing program 2 (id=154): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000d00)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000d40)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d80)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 4.678418995s ago: executing program 2 (id=155): syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000d0327408ca0768a8d4c4000000010902120001000000000904"], 0x0) 3.060335875s ago: executing program 1 (id=158): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000600)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106309}]}) 1.988845421s ago: executing program 1 (id=161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) close(r4) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000e00)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000001000), 0x56) sendmsg$kcm(r8, &(0x7f0000001040)={&(0x7f0000001080)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001140)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 1.877794024s ago: executing program 3 (id=164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.847545005s ago: executing program 4 (id=165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000003480)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a303a00000028000480080002400000000008000140000000051400030073797a5f74756e0000000000000000000900010073797a31000000004c000000050a01020000000000000000010020020c00024000000000000000010900010073797a3100000000200004"], 0xf0}}, 0x0) 1.846857295s ago: executing program 3 (id=166): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000d00)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000d40)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff004) 1.823825736s ago: executing program 1 (id=167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r8, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r6, 0x0, 0x0) 1.678166009s ago: executing program 4 (id=168): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000028c0)={'macvlan1\x00', 0x10}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x19, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000000}}, [@tail_call, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x227e}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="260000000000000000000000b7cc953673e48f95dd9acf2f7f66652547ad31710cdf72e440dd82e75cc1056a940610afa8dfb297be74d291d9d3d675f37c268be78ad6e07f4cbc64a15e7f46527574a08c0cf5265818d3000000009993e51f00000000000000d8f9361021c77ad6a717c539c8c912448b3531ab3bac99bff6103f718789315ed84dad4005bd5d7317029764d80e6e8061f2c5d541499032edee284246f4466d42ab96c2e0ac92e380", @ANYRES32, @ANYBLOB], 0x20) 1.677711989s ago: executing program 3 (id=169): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0xb, 0x2172, 0xffffffffffffffff, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x8001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r0, &(0x7f0000000900)="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", 0x1a4, 0x12, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000000c0)=0x8e, 0x180000504) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 1.66562666s ago: executing program 3 (id=170): r0 = msgget(0x2, 0x200) msgctl$IPC_RMID(r0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) msgget(0x0, 0x323) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) msgget(0x2, 0x624) msgget(0x1, 0x240) msgget(0x3, 0x606) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x2000000000010}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 1.23877291s ago: executing program 1 (id=171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000600)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106309}]}) 993.147996ms ago: executing program 4 (id=172): r0 = syz_open_dev$sndctrl(&(0x7f0000000980), 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000009c0)={{0x200002, 0x0, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x3e, r1, 0x1, 0x2, 'syz1\x00', &(0x7f0000000b00)=['syz0\x00\x9cB\xd1}\xb7\xe2\xde\xb0\xc0\xab\x18]\xe5\xa1\x1anK\xadL\xe0\x00\xfd\xbc\xf2\x89\x8f\xe5)\xa8\xdeuYD\x14\x84\x01\xd3e?\xde/\x80y]\xa6\xb4^\xa66_\xb2RR\r\xc2\xa6\xb2\xa23\x1e\x880$\x87\xcdb\xa1\xf1\x19\x00d\xf1}\"\x9f#\x9a\xd2T\xfc\x84\xce\x8cW[AQ\xc4R\xec\xef7o\x03\x90\x8c\x01O\x89\xb7\r\x90\xd1\xde\xa6`\xbe\x93\xe96\xeei8\x8b~b+\x02\xbfy\x96\xb3\xc2E{=8\b\b\xc5\v\xeac\x98\xd8\x95\xd3\x1f\x03\x00\x9d\x8f\xeb\x16 \xa0u\xad\xc2\xd4UH\x82\xbb\xe5\xd9\x19\xb7P\xfc\xf2\x02{\xba&\x0f/\xb2d\aC\xd0Q\x9e\xb2\x16\xea\xfe\x06\x92`\xdaV\xe3\xb0'], 0xbe}) 942.095087ms ago: executing program 4 (id=173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x3, 0x0, 0xb0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0xb, 0x3, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x38}, @fd}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1040}]}) 876.722549ms ago: executing program 4 (id=174): syz_open_dev$usbmon(&(0x7f0000000000), 0xcef, 0x20200) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x4800) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) socket$inet6(0xa, 0x800000000000002, 0x0) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x240088e0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) capset(0x0, &(0x7f0000000740)={0x200000, 0x200000}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x40040) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000a80)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000ac0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r4, 0x0, 0x0}, 0x10) socket$inet6(0xa, 0x2, 0x0) 849.43611ms ago: executing program 2 (id=175): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @call={0x85, 0x0, 0x0, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) 787.730361ms ago: executing program 2 (id=176): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000014c0)={@multicast2, @loopback, @empty}, 0xc) 103.166628ms ago: executing program 3 (id=177): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x6f}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) listen(r0, 0xfff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000440)=0x201, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20080804}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 74.475199ms ago: executing program 1 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) close(r4) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000e00)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18b09}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x5, 0xffffff00, 0x3}, 0x22}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000001000), 0x56) sendmsg$kcm(r9, &(0x7f0000001040)={&(0x7f0000001080)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001140)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 3.60149ms ago: executing program 3 (id=179): ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='100', 0x3) sendmsg$IPSET_CMD_DEL(r0, 0x0, 0x24008804) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001200), 0x1c3902, 0x0) sendfile(r1, r2, 0x0, 0x2000fb) 0s ago: executing program 4 (id=180): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000d00)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000d40)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts. [ 58.112373][ T4172] cgroup: Unknown subsys name 'net' [ 58.255228][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.445108][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.188608][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.193983][ T4192] rdma_rxe: rxe_register_device failed with error -23 [ 61.196314][ T4185] rdma_rxe: rxe_register_device failed with error -23 [ 61.202766][ T4192] rdma_rxe: failed to add rxe_eth0 [ 61.211971][ T4187] rdma_rxe: rxe_register_device failed with error -23 [ 61.222866][ T4186] rdma_rxe: rxe_register_device failed with error -23 [ 61.229893][ T4186] rdma_rxe: failed to add rxe_eth0 [ 61.241045][ T4185] rdma_rxe: failed to add rxe_eth0 [ 61.262478][ T4187] rdma_rxe: failed to add rxe_eth0 [ 61.272927][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.310717][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.438774][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.438185][ T4189] infiniband rxe0: set active [ 61.452105][ T4189] infiniband rxe0: added rxe_eth0 [ 61.487874][ T4189] RDS/IB: rxe0: added [ 61.499374][ T4189] smc: adding ib device rxe0 with port count 1 [ 61.511289][ T4189] smc: ib device rxe0 port 1 has pnetid [ 61.534481][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 61.555294][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.560971][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.582769][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.746924][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.752011][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 61.798483][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.814045][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.824642][ T4192] device bridge_slave_0 entered promiscuous mode [ 61.845450][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.856829][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.885530][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.896064][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.903895][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.911705][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.919463][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.927219][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.935284][ T4192] device bridge_slave_1 entered promiscuous mode [ 61.944900][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.949313][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 62.009041][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.025287][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.058949][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.082278][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.091760][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.120313][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.127411][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.141052][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.169999][ T4186] team0: Port device team_slave_0 added [ 62.177134][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.190810][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.198947][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.208374][ T4192] team0: Port device team_slave_0 added [ 62.221147][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.228474][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.236389][ T4187] device bridge_slave_0 entered promiscuous mode [ 62.245352][ T4186] team0: Port device team_slave_1 added [ 62.265308][ T4192] team0: Port device team_slave_1 added [ 62.277162][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.284474][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.292601][ T4187] device bridge_slave_1 entered promiscuous mode [ 62.308892][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.316491][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.328513][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.359760][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.391813][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.415552][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.425180][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.432427][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.458636][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.470818][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.477966][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.504470][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.518103][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.525184][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.551338][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.563678][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.580449][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.624170][ T4187] team0: Port device team_slave_0 added [ 62.632285][ T4185] team0: Port device team_slave_0 added [ 62.646565][ T4185] team0: Port device team_slave_1 added [ 62.668238][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.675728][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.685921][ T4187] team0: Port device team_slave_1 added [ 62.739844][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.746996][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.774056][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.788636][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.795883][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.822691][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.834501][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.841753][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.868533][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.884706][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.891719][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.918422][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.931795][ T4192] device hsr_slave_0 entered promiscuous mode [ 62.938727][ T4192] device hsr_slave_1 entered promiscuous mode [ 62.946046][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.953944][ T4192] Cannot create hsr debugfs directory [ 63.024891][ T4187] device hsr_slave_0 entered promiscuous mode [ 63.032632][ T4187] device hsr_slave_1 entered promiscuous mode [ 63.039423][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.047606][ T4187] Cannot create hsr debugfs directory [ 63.100439][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.107438][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.118822][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.126733][ T4185] Cannot create hsr debugfs directory [ 63.175251][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 63.180170][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 63.195273][ T4194] Bluetooth: hci4: command 0x0409 tx timeout [ 63.212072][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 63.233808][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 63.252382][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.449103][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.456442][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.464327][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.485152][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.504042][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.511950][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.519725][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.532648][ T3850] infiniband rxe0: set active [ 63.555094][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.567082][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.576899][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.597624][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.609172][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.618310][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.679784][ T4189] team0: Port device team_slave_0 added [ 63.698143][ T4189] team0: Port device team_slave_1 added [ 63.729007][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.736260][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.762818][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.776227][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.788369][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.797573][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.805059][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.832432][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.855023][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.870872][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.901883][ T4189] device hsr_slave_0 entered promiscuous mode [ 63.908582][ T4189] device hsr_slave_1 entered promiscuous mode [ 63.915960][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.924006][ T4189] Cannot create hsr debugfs directory [ 63.985257][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.021492][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.031411][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.063933][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.087165][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.135123][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.152686][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.173055][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.181727][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.191698][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.201344][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.216249][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.226941][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.240037][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.249148][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.259197][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.267126][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.276407][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.306940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.317168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.325665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.335141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.344063][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.351287][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.361855][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.381382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.391888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.411529][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.421940][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.441985][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.451634][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.459989][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.467097][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.475691][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.485780][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.495480][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.502588][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.511296][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.519833][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.528588][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.537560][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.546178][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.554567][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.562738][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.574028][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.595797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.608705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.617761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.627214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.636317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.665620][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.673313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.682956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.692201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.701799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.730050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.738535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.748164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.756739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.769034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.777857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.788241][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.804088][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.823648][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.834020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.842166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.863439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.872858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.884064][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.891194][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.908933][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.962095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.970864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.979578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.993620][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.000769][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.012461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.021531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.037484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.048056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.061500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.075410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.083480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.121463][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.132437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.145942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.155567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.165331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.174595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.182399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.189848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.198826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.207676][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.214831][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.223575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.236139][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.245056][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.250695][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 65.258431][ T4263] Bluetooth: hci3: command 0x041b tx timeout [ 65.258514][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 65.272100][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 65.276238][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.288969][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 65.298548][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.308833][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.317977][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.326631][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.333726][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.342516][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.351596][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.360614][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.369059][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.386359][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.409744][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.425436][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.436336][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.448117][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.488017][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.498480][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.507709][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.517110][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.530357][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.538738][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.545812][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.554322][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.563150][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.572110][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.579273][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.587176][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.596205][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.605140][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.614034][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.622678][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.631842][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.641363][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.649663][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.659259][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.677408][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.689597][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.707648][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.718052][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.736353][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.747131][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.757543][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.767739][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.778290][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.795391][ T4192] device veth0_vlan entered promiscuous mode [ 65.816579][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.825503][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.834766][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.845181][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.854316][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.886165][ T4192] device veth1_vlan entered promiscuous mode [ 65.898741][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.908146][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.917708][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.927165][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.936534][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.944158][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.952879][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.973631][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.004626][ T4187] device veth0_vlan entered promiscuous mode [ 66.022136][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.037440][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.047723][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.058166][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.074832][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.086726][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.104633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.114328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.128066][ T4187] device veth1_vlan entered promiscuous mode [ 66.153313][ T4192] device veth0_macvtap entered promiscuous mode [ 66.170704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.179700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.195943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.204199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.227515][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.243153][ T4192] device veth1_macvtap entered promiscuous mode [ 66.265629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.276022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.285858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.296400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.307057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.315616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.340819][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.348550][ T4187] device veth0_macvtap entered promiscuous mode [ 66.363188][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.375877][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.386567][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.409368][ T4186] device veth0_vlan entered promiscuous mode [ 66.426949][ T4187] device veth1_macvtap entered promiscuous mode [ 66.441517][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.449283][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.461217][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.476994][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.485887][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.495638][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.504624][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.513803][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.526807][ T4186] device veth1_vlan entered promiscuous mode [ 66.537488][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.556219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.565907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.575338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.593252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.605036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.622114][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.632824][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.644344][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.653472][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.687577][ T4189] device veth0_vlan entered promiscuous mode [ 66.695737][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.706084][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.715789][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.724882][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.732691][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.744436][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.756439][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.768405][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.785574][ T4189] device veth1_vlan entered promiscuous mode [ 66.797897][ T4186] device veth0_macvtap entered promiscuous mode [ 66.805559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.814185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.823806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.832476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.846095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.856348][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.865832][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.875543][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.886520][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.899287][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.912274][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.921045][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.929720][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.939277][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.952290][ T4186] device veth1_macvtap entered promiscuous mode [ 66.963788][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.972779][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.981539][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.027817][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.038897][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.051071][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.061841][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.074232][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.112857][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.125271][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.134885][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.143590][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.152132][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.159869][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.177359][ T4189] device veth0_macvtap entered promiscuous mode [ 67.189996][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.205654][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.215871][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.226863][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.237719][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.245632][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.255269][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.263868][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.272821][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.282444][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.294133][ T4185] device veth0_vlan entered promiscuous mode [ 67.319085][ T4189] device veth1_macvtap entered promiscuous mode [ 67.329421][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.330608][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 67.340283][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.349220][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 67.355664][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.359048][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 67.367953][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.378844][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 67.408461][ T4185] device veth1_vlan entered promiscuous mode [ 67.415097][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 67.450853][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.459232][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.465835][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.481913][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.492932][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.503500][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.513468][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.524366][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.536582][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.550944][ T407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.558907][ T407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.575628][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.589034][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.597872][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.606173][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.614274][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.623123][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.631918][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.648473][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.659885][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.670692][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.681407][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.691716][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.702445][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.714971][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.726394][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.736711][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.746511][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.755772][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.783965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.793764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.803001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.815751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.827815][ T4185] device veth0_macvtap entered promiscuous mode [ 67.857363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.866861][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.880782][ T4185] device veth1_macvtap entered promiscuous mode [ 67.899284][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.926894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.941127][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.944788][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.964577][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.972227][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.972247][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.972256][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.972268][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.972276][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.972288][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.972307][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.972318][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.973676][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.066024][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.082253][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.094752][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.103114][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.112328][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.123461][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.136494][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.146412][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.157455][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.167435][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.178743][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.188888][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.199366][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.212058][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.253655][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.267421][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.291704][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.302439][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.311220][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.319909][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.356670][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.373079][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.678898][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.679094][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.688368][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.706626][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.758102][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.766161][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.802707][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.902055][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.931179][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.951429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.987586][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.004901][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.016326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.223457][ T4326] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 69.415274][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 69.435299][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 69.562336][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 69.681079][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 70.517133][ T4310] FAULT_INJECTION: forcing a failure. [ 70.517133][ T4310] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.520109][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 70.530459][ T4310] CPU: 1 PID: 4310 Comm: syz.3.6 Not tainted syzkaller #0 [ 70.540111][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 70.546430][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 70.560102][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 70.565401][ T4310] Call Trace: [ 70.577584][ T4310] [ 70.580116][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 70.580592][ T4310] dump_stack_lvl+0x188/0x250 [ 70.590110][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 70.594880][ T4310] ? show_regs_print_info+0x20/0x20 [ 70.608972][ T4310] ? load_image+0x410/0x410 [ 70.610108][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 70.613466][ T4310] ? __lock_acquire+0x7d40/0x7d40 [ 70.627606][ T4310] should_fail+0x383/0x4b0 [ 70.632054][ T4310] _copy_to_user+0x2e/0x130 [ 70.636588][ T4310] msr_read+0x122/0x1b0 [ 70.640147][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 70.640869][ T4310] ? msr_device_destroy+0x20/0x20 [ 70.650141][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 70.654916][ T4310] ? common_file_perm+0x171/0x1c0 [ 70.663867][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 70.668844][ T4310] ? fsnotify_perm+0x3a7/0x560 [ 70.677898][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 70.682610][ T4310] ? msr_device_destroy+0x20/0x20 [ 70.696688][ T4310] vfs_read+0x2ff/0xd50 [ 70.700862][ T4310] ? __lock_acquire+0x7d40/0x7d40 [ 70.705875][ T4310] ? kernel_read+0x1e0/0x1e0 [ 70.710485][ T4310] ? __fget_files+0x402/0x470 [ 70.715151][ T4310] ? __fdget_pos+0x1e2/0x370 [ 70.719742][ T4310] ? ksys_read+0x70/0x260 [ 70.724063][ T4310] ksys_read+0x153/0x260 [ 70.728292][ T4310] ? vfs_write+0xd70/0xd70 [ 70.732713][ T4310] ? lockdep_hardirqs_on+0x94/0x140 [ 70.737912][ T4310] do_syscall_64+0x4c/0xa0 [ 70.742350][ T4310] ? clear_bhb_loop+0x30/0x80 [ 70.747031][ T4310] ? clear_bhb_loop+0x30/0x80 [ 70.751709][ T4310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.757617][ T4310] RIP: 0033:0x7efde1eba559 [ 70.762024][ T4310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.781715][ T4310] RSP: 002b:00007efde0112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.790335][ T4310] RAX: ffffffffffffffda RBX: 00007efde2141fa0 RCX: 00007efde1eba559 [ 70.798296][ T4310] RDX: 0000000000018ff8 RSI: 0000200000000280 RDI: 0000000000000004 [ 70.806463][ T4310] RBP: 00007efde1f518b0 R08: 0000000000000000 R09: 0000000000000000 [ 70.814556][ T4310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.822541][ T4310] R13: 00007efde2142038 R14: 00007efde2141fa0 R15: 00007ffdffa364b8 [ 70.830530][ T4310] [ 71.828066][ T4345] binder: 4341:4345 unknown command 0 [ 71.833932][ T4345] binder: 4341:4345 ioctl c0306201 200000000c00 returned -22 [ 72.311113][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.317670][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.560351][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.601876][ T4267] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.740281][ T4348] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.820325][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 72.840427][ T4267] usb 2-1: Using ep0 maxpacket: 8 [ 72.914495][ T4340] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.956003][ T4352] kAFS: unable to lookup cell '/,c¾ûL' [ 73.011101][ T21] usb 5-1: unable to read config index 0 descriptor/all [ 73.018990][ T21] usb 5-1: can't read configurations, error -71 [ 73.140330][ T4348] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 74.481260][ T4263] Bluetooth: hci0: command 0x0401 tx timeout [ 74.630273][ T4348] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 74.647198][ T4348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.655371][ T4348] usb 3-1: Product: syz [ 74.659533][ T4348] usb 3-1: Manufacturer: syz [ 74.662156][ T4267] usb 2-1: unable to get BOS descriptor or descriptor too short [ 74.664168][ T4348] usb 3-1: SerialNumber: syz [ 74.763137][ T4267] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 75.839367][ T4267] usb 2-1: can't read configurations, error -71 [ 75.891076][ T4348] snd-usb-6fire 3-1:1.0: unable to receive device firmware state. [ 75.909787][ T4348] snd-usb-6fire: probe of 3-1:1.0 failed with error -110 [ 76.139140][ T4348] usb 3-1: USB disconnect, device number 2 [ 76.830863][ T4404] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.044702][ T4417] binder: BINDER_SET_CONTEXT_MGR already set [ 77.056733][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 77.072029][ T4417] binder: 4415:4417 ioctl 4018620d 200000004a80 returned -16 [ 77.122534][ T4414] device syzkaller0 entered promiscuous mode [ 77.238829][ T4422] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.374309][ T4348] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.539640][ T4432] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.547791][ T4432] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.620847][ T4432] device bridge_slave_1 left promiscuous mode [ 77.628800][ T4432] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.656712][ T4432] device bridge_slave_0 left promiscuous mode [ 77.673870][ T4432] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.890868][ T4348] Bluetooth: hci0: command 0x0401 tx timeout [ 79.197911][ T4374] bond0: (slave bond_slave_0): interface is now down [ 79.219442][ T4374] bond0: (slave bond_slave_1): interface is now down [ 79.249105][ T4374] bond0: now running without any active interface! [ 79.471606][ T4470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 79.498884][ T4348] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.538024][ T4474] binder: BINDER_SET_CONTEXT_MGR already set [ 79.545918][ T4474] binder: 4473:4474 ioctl 4018620d 200000004a80 returned -16 [ 80.583264][ T4348] usb 5-1: Using ep0 maxpacket: 8 [ 81.698241][ T1107] cfg80211: failed to load regulatory.db [ 81.907182][ T1107] hid-generic 0003:0001:0001.0001: No inputs registered, leaving [ 81.930498][ T4348] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.941553][ T4348] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 81.951178][ T4348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.993100][ T4348] usb 5-1: config 0 descriptor?? [ 82.018463][ T1107] hid-generic 0003:0001:0001.0001: hidraw0: USB HID v0.01 Mouse [syz1] on syz0 [ 82.029929][ T4507] nvme_fabrics: missing parameter 'nqn=%s' [ 82.048129][ T4348] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 82.100403][ T4348] gspca_vc032x: reg_r err -71 [ 82.117637][ T4348] vc032x: probe of 5-1:0.0 failed with error -71 [ 82.147644][ T4348] usb 5-1: USB disconnect, device number 4 [ 82.213221][ T4512] fido_id[4512]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.199079][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'. [ 83.269994][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'. [ 83.392407][ T4542] binder: 4531:4542 ioctl c0306201 200000000680 returned -11 [ 85.230093][ C0] sched: RT throttling activated [ 85.475815][ T4557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 86.682356][ T4569] device-mapper: space map common: metadata block out of bounds [ 86.697054][ T4571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.67'. [ 87.290252][ T4569] device-mapper: space map common: dm_tm_shadow_block() failed [ 87.307108][ T4569] device-mapper: space map metadata: dm_sm_metadata_create: apply_bops failed [ 87.319327][ T4569] device-mapper: transaction manager: couldn't create metadata space map [ 87.480304][ T4569] device-mapper: thin metadata: tm_create_with_sm failed [ 87.684002][ T4569] device-mapper: table: 248:1: thin-pool: Error creating metadata object [ 87.750793][ T4569] device-mapper: ioctl: error adding target to table [ 88.809813][ T4348] Bluetooth: hci4: command 0x0409 tx timeout [ 89.711934][ T4595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.60'. [ 90.845444][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 91.171933][ T4617] jffs2: notice: (4617) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.229005][ T4615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.80'. [ 91.522343][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.622903][ T4621] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.510663][ T13] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 94.020329][ T13] usb 3-1: string descriptor 0 read error: -71 [ 94.030484][ T13] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 94.068552][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.360327][ T13] usb 3-1: can't set config #1, error -71 [ 97.576293][ T4664] device-mapper: space map common: metadata block out of bounds [ 97.593238][ T13] usb 3-1: USB disconnect, device number 3 [ 97.616787][ T4664] device-mapper: space map common: dm_tm_shadow_block() failed [ 97.678575][ T4664] device-mapper: space map metadata: dm_sm_metadata_create: apply_bops failed [ 97.680797][ T4660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.98'. [ 97.701107][ T4664] device-mapper: transaction manager: couldn't create metadata space map [ 97.733525][ T4664] device-mapper: thin metadata: tm_create_with_sm failed [ 97.796990][ T4664] device-mapper: table: 248:1: thin-pool: Error creating metadata object [ 97.813899][ T4664] device-mapper: ioctl: error adding target to table [ 97.944914][ T4673] device-mapper: table: 248:0: zero-length target [ 97.990374][ T4673] device-mapper: ioctl: error adding target to table [ 99.228907][ T4201] Bluetooth: hci0: SCO packet for unknown connection handle 266 [ 99.570278][ T1107] Bluetooth: hci0: command 0x0401 tx timeout [ 99.630392][ T1324] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.820440][ T4348] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.042446][ T1324] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 100.110287][ T4348] usb 4-1: Using ep0 maxpacket: 8 [ 100.250572][ T1324] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 100.257546][ T4712] netlink: 52 bytes leftover after parsing attributes in process `syz.4.111'. [ 100.259957][ T4348] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 100.278267][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.287194][ T4348] usb 4-1: config 179 has no interface number 0 [ 100.294252][ T1324] usb 2-1: Product: syz [ 100.298596][ T1324] usb 2-1: Manufacturer: syz [ 100.303812][ T4348] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 100.316307][ T1324] usb 2-1: SerialNumber: syz [ 100.339001][ T4348] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 100.351331][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.359037][ T4348] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.371525][ T4348] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 100.383599][ T4348] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 100.398133][ T4348] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 100.408669][ T4348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.460572][ T4695] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 101.300662][ T4682] udc-core: couldn't find an available UDC or it's busy [ 101.307652][ T4682] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 101.418904][ T4264] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6 [ 101.485521][ T4723] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.490330][ T13] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 101.515939][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.534674][ T13] usb 3-1: config 0 descriptor?? [ 101.559596][ T4174] usb 4-1: USB disconnect, device number 2 [ 101.570894][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 101.585369][ T4174] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 101.585608][ T1324] usb 2-1: BOGUS urb xfer, pipe 1 != type 3 [ 101.654312][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 101.659454][ T4728] binder: 4726:4728 ioctl c0046209 0 returned -22 [ 102.130400][ T13] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 102.139182][ T13] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 102.157508][ T1107] usb 2-1: USB disconnect, device number 4 [ 102.160129][ C0] usb 2-1: comm data receiver aborted. [ 102.241956][ T4740] device-mapper: table: 248:0: zero-length target [ 102.289738][ T4740] device-mapper: ioctl: error adding target to table [ 102.480305][ T13] [drm:udl_init] *ERROR* Selecting channel failed [ 102.501842][ T13] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 102.509851][ T13] [drm] Initialized udl on minor 2 [ 102.540475][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 102.552051][ T4736] udevd[4736]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.559345][ T13] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 102.590032][ T13] usb 3-1: USB disconnect, device number 4 [ 102.600413][ T4348] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 104.321307][ T1107] Bluetooth: hci0: command 0x0401 tx timeout [ 104.398705][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.456302][ T4759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.480044][ T4776] netlink: 'syz.0.126': attribute type 10 has an invalid length. [ 104.558421][ T4776] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 104.616252][ T4766] device syzkaller0 entered promiscuous mode [ 104.767707][ T4784] process 'syz.2.130' launched './file2' with NULL argv: empty string added [ 104.850467][ T4784] FAULT_INJECTION: forcing a failure. [ 104.850467][ T4784] name fail_futex, interval 1, probability 0, space 0, times 1 [ 104.864422][ T4784] CPU: 1 PID: 4784 Comm: syz.2.130 Not tainted syzkaller #0 [ 104.871758][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.881909][ T4784] Call Trace: [ 104.885211][ T4784] [ 104.888143][ T4784] dump_stack_lvl+0x188/0x250 [ 104.892818][ T4784] ? show_regs_print_info+0x20/0x20 [ 104.898013][ T4784] ? load_image+0x410/0x410 [ 104.902516][ T4784] ? __lock_acquire+0x12df/0x7d40 [ 104.907578][ T4784] should_fail+0x383/0x4b0 [ 104.912070][ T4784] get_futex_key+0x1a1/0x12d0 [ 104.916862][ T4784] ? __lock_acquire+0x13b3/0x7d40 [ 104.921899][ T4784] ? futex_wait_restart+0x250/0x250 [ 104.927251][ T4784] futex_wake+0x101/0x540 [ 104.931578][ T4784] ? futex_wait+0x680/0x680 [ 104.936462][ T4784] ? verify_lock_unused+0x140/0x140 [ 104.941690][ T4784] ? verify_lock_unused+0x140/0x140 [ 104.946913][ T4784] do_futex+0xd83/0x12b0 [ 104.951169][ T4784] ? rcu_lock_release+0x5/0x20 [ 104.956020][ T4784] ? __lock_acquire+0x7d40/0x7d40 [ 104.961061][ T4784] ? futex_exit_release+0x1c0/0x1c0 [ 104.966261][ T4784] ? __context_tracking_exit+0x4c/0x80 [ 104.971725][ T4784] __se_sys_futex+0x389/0x420 [ 104.976432][ T4784] ? __x64_sys_futex+0xf0/0xf0 [ 104.981234][ T4784] ? __x64_sys_futex+0x1d/0xf0 [ 104.986021][ T4784] do_syscall_64+0x4c/0xa0 [ 104.990443][ T4784] ? clear_bhb_loop+0x30/0x80 [ 104.995146][ T4784] ? clear_bhb_loop+0x30/0x80 [ 104.999834][ T4784] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.005776][ T4784] RIP: 0033:0x7f7dbef45559 [ 105.010230][ T4784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.030426][ T4784] RSP: 002b:00007f7dbd19d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.039286][ T4784] RAX: ffffffffffffffda RBX: 00007f7dbf1ccfa8 RCX: 00007f7dbef45559 [ 105.043125][ T4792] device-mapper: table: 248:0: zero-length target [ 105.047389][ T4784] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7dbf1ccfac [ 105.054138][ T4792] device-mapper: ioctl: error adding target to table [ 105.061905][ T4784] RBP: 00007f7dbf1ccfa0 R08: 002f7ed64820d190 R09: 0000000000000000 [ 105.061925][ T4784] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 105.061941][ T4784] R13: 00007f7dbf1cd038 R14: 00007fffd63024a0 R15: 00007fffd6302588 [ 105.061963][ T4784] [ 105.062072][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.101723][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.146261][ T4794] device syzkaller0 entered promiscuous mode [ 106.354820][ T4814] binder: 4813:4814 ioctl c0306201 0 returned -14 [ 106.372430][ T4174] Bluetooth: hci0: command 0x0401 tx timeout [ 108.607467][ T4836] binder: BINDER_SET_CONTEXT_MGR already set [ 108.630403][ T4836] binder: 4834:4836 ioctl 4018620d 200000000180 returned -16 [ 108.883570][ T4845] device syzkaller0 entered promiscuous mode [ 109.059899][ T4853] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.420486][ T1324] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.706567][ T21] Bluetooth: hci0: command 0x0401 tx timeout [ 110.788929][ T4863] binder: 4862:4863 ioctl c0306201 0 returned -14 [ 110.940213][ T1324] usb 3-1: Using ep0 maxpacket: 8 [ 111.010363][ T21] Bluetooth: hci4: command 0x0411 tx timeout [ 111.767694][ T1324] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 111.776828][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.808214][ T1324] usb 3-1: config 0 descriptor?? [ 111.838155][ T4871] device syzkaller0 entered promiscuous mode [ 111.873760][ T1324] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 112.027177][ T4887] device syzkaller0 entered promiscuous mode [ 112.154121][ T1324] cxusb: set interface failed [ 112.159413][ T1324] dvb-usb: bulk message failed: -22 (1/0) [ 112.180353][ T1324] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.211201][ T1324] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 112.220038][ T1324] usb 3-1: media controller created [ 112.233770][ T1324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.644482][ T1324] DVB: Unable to find symbol lgdt330x_attach() [ 112.657212][ T1324] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 112.673931][ T4898] binder: 4897:4898 ioctl c0306201 0 returned -14 [ 112.700399][ T1324] dvb-usb: bulk message failed: -22 (1/0) [ 112.712876][ T1324] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 112.749401][ T1324] usb 3-1: USB disconnect, device number 5 [ 112.829671][ T1324] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 112.867013][ T4903] binder: 4902:4903 ioctl c0306201 200000000080 returned -14 [ 112.877920][ T4903] binder: 4902:4903 ioctl c0306201 2000000003c0 returned -14 [ 113.725092][ T4770] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.828609][ T4915] device syzkaller0 entered promiscuous mode [ 113.842105][ T4917] FAULT_INJECTION: forcing a failure. [ 113.842105][ T4917] name failslab, interval 1, probability 0, space 0, times 1 [ 113.842308][ T4917] [ 113.842312][ T4917] ====================================================== [ 113.842317][ T4917] WARNING: possible circular locking dependency detected [ 113.842329][ T4917] syzkaller #0 Not tainted [ 113.842337][ T4917] ------------------------------------------------------ [ 113.842341][ T4917] syz.3.179/4917 is trying to acquire lock: [ 113.842348][ T4917] ffffffff8d113a00 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 113.842391][ T4917] [ 113.842391][ T4917] but task is already holding lock: [ 113.842394][ T4917] ffff8880603c9158 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x39/0x380 [ 113.842433][ T4917] [ 113.842433][ T4917] which lock already depends on the new lock. [ 113.842433][ T4917] [ 113.842437][ T4917] [ 113.842437][ T4917] the existing dependency chain (in reverse order) is: [ 113.842449][ T4917] [ 113.842449][ T4917] -> #2 (&port->lock){-.-.}-{2:2}: [ 113.842474][ T4917] _raw_spin_lock_irqsave+0xb0/0x100 [ 113.842493][ T4917] tty_port_default_wakeup+0x1f/0xf0 [ 113.842508][ T4917] serial8250_tx_chars+0x615/0x800 [ 113.842525][ T4917] serial8250_handle_irq+0x648/0x780 [ 113.842540][ T4917] serial8250_default_handle_irq+0xb4/0x1a0 [ 113.842557][ T4917] serial8250_interrupt+0x9b/0x1c0 [ 113.842572][ T4917] __handle_irq_event_percpu+0x299/0x9d0 [ 113.842589][ T4917] handle_irq_event+0xa5/0x220 [ 113.842603][ T4917] handle_edge_irq+0x242/0xb20 [ 113.842619][ T4917] __common_interrupt+0xd7/0x1e0 [ 113.842633][ T4917] common_interrupt+0xb0/0xd0 [ 113.842649][ T4917] asm_common_interrupt+0x22/0x40 [ 113.842665][ T4917] _raw_spin_unlock_irqrestore+0xbc/0x120 [ 113.842680][ T4917] uart_write+0x62f/0x880 [ 113.842693][ T4917] n_tty_write+0xd19/0x1220 [ 113.842709][ T4917] file_tty_write+0x50c/0x8a0 [ 113.842724][ T4917] vfs_write+0x748/0xd70 [ 113.842737][ T4917] ksys_write+0x153/0x260 [ 113.842750][ T4917] do_syscall_64+0x4c/0xa0 [ 113.842764][ T4917] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.842781][ T4917] [ 113.842781][ T4917] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 113.842800][ T4917] _raw_spin_lock_irqsave+0xb0/0x100 [ 113.842816][ T4917] serial8250_console_write+0x16c/0xf50 [ 113.842831][ T4917] console_unlock+0xb47/0x10f0 [ 113.842844][ T4917] vprintk_emit+0xc0/0x150 [ 113.842856][ T4917] _printk+0xda/0x130 [ 113.842869][ T4917] register_console+0x693/0x970 [ 113.842883][ T4917] univ8250_console_init+0x41/0x50 [ 113.842899][ T4917] console_init+0x177/0x5d0 [ 113.842912][ T4917] start_kernel+0x2fc/0x540 [ 113.842925][ T4917] secondary_startup_64_no_verify+0xb1/0xbb [ 113.842942][ T4917] [ 113.842942][ T4917] -> #0 (console_owner){-.-.}-{0:0}: [ 113.842960][ T4917] __lock_acquire+0x38f7/0x7d40 [ 113.842976][ T4917] lock_acquire+0x19f/0x400 [ 113.842992][ T4917] console_lock_spinning_enable+0x51/0x60 [ 113.843006][ T4917] console_unlock+0x8b5/0x10f0 [ 113.843018][ T4917] vprintk_emit+0xc0/0x150 [ 113.843031][ T4917] _printk+0xda/0x130 [ 113.843043][ T4917] should_fail+0x364/0x4b0 [ 113.843058][ T4917] should_failslab+0x5/0x20 [ 113.843071][ T4917] slab_pre_alloc_hook+0x51/0xc0 [ 113.843085][ T4917] __kmalloc+0x6b/0x340 [ 113.843098][ T4917] __tty_buffer_request_room+0x1db/0x500 [ 113.843112][ T4917] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 113.843128][ T4917] n_tty_write+0x5dc/0x1220 [ 113.843143][ T4917] file_tty_write+0x50c/0x8a0 [ 113.843158][ T4917] do_iter_readv_writev+0x47d/0x5f0 [ 113.843173][ T4917] do_iter_write+0x1f8/0x7a0 [ 113.843187][ T4917] iter_file_splice_write+0x6be/0xcf0 [ 113.843201][ T4917] direct_splice_actor+0xe1/0x130 [ 113.843215][ T4917] splice_direct_to_actor+0x4e8/0xc00 [ 113.843229][ T4917] do_splice_direct+0x1d4/0x2f0 [ 113.843243][ T4917] do_sendfile+0x524/0xe30 [ 113.843257][ T4917] __se_sys_sendfile64+0x141/0x1a0 [ 113.843271][ T4917] do_syscall_64+0x4c/0xa0 [ 113.843285][ T4917] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.843302][ T4917] [ 113.843302][ T4917] other info that might help us debug this: [ 113.843302][ T4917] [ 113.843306][ T4917] Chain exists of: [ 113.843306][ T4917] console_owner --> &port_lock_key --> &port->lock [ 113.843306][ T4917] [ 113.843328][ T4917] Possible unsafe locking scenario: [ 113.843328][ T4917] [ 113.843331][ T4917] CPU0 CPU1 [ 113.843335][ T4917] ---- ---- [ 113.843338][ T4917] lock(&port->lock); [ 113.843347][ T4917] lock(&port_lock_key); [ 113.843356][ T4917] lock(&port->lock); [ 113.843366][ T4917] lock(console_owner); [ 113.843374][ T4917] [ 113.843374][ T4917] *** DEADLOCK *** [ 113.843374][ T4917] [ 113.843378][ T4917] 6 locks held by syz.3.179/4917: [ 113.843386][ T4917] #0: ffff888060941098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 113.843429][ T4917] #1: ffff888060941130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write+0x23c/0x8a0 [ 113.843470][ T4917] #2: ffff8880609412e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x1ec/0x1220 [ 113.843503][ T4917] #3: ffffc9000115d378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x592/0x1220 [ 113.843535][ T4917] #4: ffff8880603c9158 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x39/0x380 [ 113.843568][ T4917] #5: ffffffff8d113ae0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 113.843601][ T4917] [ 113.843601][ T4917] stack backtrace: [ 113.843605][ T4917] CPU: 0 PID: 4917 Comm: syz.3.179 Not tainted syzkaller #0 [ 113.843620][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.843629][ T4917] Call Trace: [ 113.843634][ T4917] [ 113.843640][ T4917] dump_stack_lvl+0x188/0x250 [ 113.843656][ T4917] ? load_image+0x410/0x410 [ 113.843686][ T4917] ? show_regs_print_info+0x20/0x20 [ 113.843705][ T4917] ? print_circular_bug+0x12b/0x1a0 [ 113.843722][ T4917] check_noncircular+0x2f8/0x400 [ 113.843740][ T4917] ? print_deadlock_bug+0x5d0/0x5d0 [ 113.843755][ T4917] ? lockdep_lock+0xf1/0x1f0 [ 113.843772][ T4917] ? lockdep_unlock+0x143/0x2e0 [ 113.843793][ T4917] __lock_acquire+0x38f7/0x7d40 [ 113.843811][ T4917] ? put_dec_trunc8+0x1fd/0x340 [ 113.843835][ T4917] ? format_decode+0x19b/0x1330 [ 113.843853][ T4917] ? verify_lock_unused+0x140/0x140 [ 113.843876][ T4917] ? sprintf+0xe4/0x140 [ 113.843894][ T4917] lock_acquire+0x19f/0x400 [ 113.843908][ T4917] ? console_lock_spinning_enable+0x2c/0x60 [ 113.843922][ T4917] ? prb_read_valid+0x60/0x60 [ 113.843938][ T4917] ? read_lock_is_recursive+0x10/0x10 [ 113.843954][ T4917] ? do_raw_spin_lock+0x128/0x2f0 [ 113.843968][ T4917] ? __rwlock_init+0x140/0x140 [ 113.843982][ T4917] ? do_raw_spin_unlock+0x11d/0x230 [ 113.843998][ T4917] console_lock_spinning_enable+0x51/0x60 [ 113.844011][ T4917] ? console_lock_spinning_enable+0x2c/0x60 [ 113.844026][ T4917] console_unlock+0x8b5/0x10f0 [ 113.844040][ T4917] ? read_lock_is_recursive+0x10/0x10 [ 113.844060][ T4917] ? console_trylock_spinning+0x370/0x370 [ 113.844076][ T4917] ? __down_trylock_console_sem+0x19f/0x1f0 [ 113.844091][ T4917] ? vprintk_emit+0xa7/0x150 [ 113.844105][ T4917] ? printk_parse_prefix+0x310/0x310 [ 113.844119][ T4917] ? vprintk_emit+0xa7/0x150 [ 113.844133][ T4917] ? console_trylock+0x70/0x70 [ 113.844153][ T4917] ? vprintk_emit+0x150/0x150 [ 113.844170][ T4917] ? verify_lock_unused+0x140/0x140 [ 113.844190][ T4917] vprintk_emit+0xc0/0x150 [ 113.844206][ T4917] _printk+0xda/0x130 [ 113.844223][ T4917] ? load_image+0x410/0x410 [ 113.844243][ T4917] should_fail+0x364/0x4b0 [ 113.844261][ T4917] should_failslab+0x5/0x20 [ 113.844276][ T4917] slab_pre_alloc_hook+0x51/0xc0 [ 113.844292][ T4917] __kmalloc+0x6b/0x340 [ 113.844305][ T4917] ? __tty_buffer_request_room+0x1db/0x500 [ 113.844323][ T4917] __tty_buffer_request_room+0x1db/0x500 [ 113.844342][ T4917] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 113.844363][ T4917] n_tty_write+0x5dc/0x1220 [ 113.844381][ T4917] ? _copy_from_iter+0x7fe/0x1160 [ 113.844397][ T4917] ? memcpy+0x3c/0x60 [ 113.844416][ T4917] ? n_tty_read+0x1a50/0x1a50 [ 113.844433][ T4917] ? wait_woken+0x1b0/0x1b0 [ 113.844459][ T4917] ? __virt_addr_valid+0x3c6/0x470 [ 113.844475][ T4917] ? __phys_addr_symbol+0x2b/0x70 [ 113.844490][ T4917] ? __check_object_size+0x30c/0x410 [ 113.844509][ T4917] file_tty_write+0x50c/0x8a0 [ 113.844528][ T4917] ? n_tty_read+0x1a50/0x1a50 [ 113.844547][ T4917] do_iter_readv_writev+0x47d/0x5f0 [ 113.844565][ T4917] ? aa_path_link+0x8a0/0x8a0 [ 113.844582][ T4917] ? generic_file_rw_checks+0x280/0x280 [ 113.844601][ T4917] ? common_file_perm+0x171/0x1c0 [ 113.844616][ T4917] ? fsnotify_perm+0x5d/0x560 [ 113.844631][ T4917] ? security_file_permission+0x75/0xa0 [ 113.844649][ T4917] do_iter_write+0x1f8/0x7a0 [ 113.844665][ T4917] ? memset+0x1e/0x40 [ 113.844679][ T4917] ? iov_iter_bvec+0xb4/0x170 [ 113.844695][ T4917] iter_file_splice_write+0x6be/0xcf0 [ 113.844718][ T4917] ? splice_from_pipe+0x180/0x180 [ 113.844733][ T4917] ? generic_file_splice_read+0x483/0x5f0 [ 113.844768][ T4917] ? splice_shrink_spd+0xc0/0xc0 [ 113.844785][ T4917] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 113.844807][ T4917] ? splice_from_pipe+0x180/0x180 [ 113.844842][ T4917] direct_splice_actor+0xe1/0x130 [ 113.844859][ T4917] splice_direct_to_actor+0x4e8/0xc00 [ 113.844879][ T4917] ? direct_file_splice_eof+0xa0/0xa0 [ 113.844898][ T4917] ? pipe_to_sendpage+0x320/0x320 [ 113.844914][ T4917] ? common_file_perm+0x171/0x1c0 [ 113.844930][ T4917] ? fsnotify_perm+0x5d/0x560 [ 113.844945][ T4917] ? security_file_permission+0x75/0xa0 [ 113.844962][ T4917] do_splice_direct+0x1d4/0x2f0 [ 113.844990][ T4917] ? splice_direct_to_actor+0xc00/0xc00 [ 113.845007][ T4917] ? do_splice_direct+0x2f0/0x2f0 [ 113.845023][ T4917] ? common_file_perm+0x171/0x1c0 [ 113.845040][ T4917] ? fsnotify_perm+0x5d/0x560 [ 113.845055][ T4917] ? security_file_permission+0x75/0xa0 [ 113.845073][ T4917] do_sendfile+0x524/0xe30 [ 113.845094][ T4917] ? do_pwritev+0x3a0/0x3a0 [ 113.845110][ T4917] ? __lock_acquire+0x7d40/0x7d40 [ 113.845131][ T4917] __se_sys_sendfile64+0x141/0x1a0 [ 113.845147][ T4917] ? lock_chain_count+0x20/0x20 [ 113.845164][ T4917] ? __x64_sys_sendfile64+0xa0/0xa0 [ 113.845181][ T4917] ? lockdep_hardirqs_on+0x94/0x140 [ 113.845200][ T4917] do_syscall_64+0x4c/0xa0 [ 113.845215][ T4917] ? clear_bhb_loop+0x30/0x80 [ 113.845232][ T4917] ? clear_bhb_loop+0x30/0x80 [ 113.845249][ T4917] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.845267][ T4917] RIP: 0033:0x7efde1eba559 [ 113.845282][ T4917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.845294][ T4917] RSP: 002b:00007efde0112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 113.845311][ T4917] RAX: ffffffffffffffda RBX: 00007efde2141fa0 RCX: 00007efde1eba559 [ 113.845323][ T4917] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 113.845333][ T4917] RBP: 00007efde1f518b0 R08: 0000000000000000 R09: 0000000000000000 [ 113.845343][ T4917] R10: 00000000002000fb R11: 0000000000000246 R12: 0000000000000000 [ 113.845353][ T4917] R13: 00007efde2142038 R14: 00007efde2141fa0 R15: 00007ffdffa364b8 [ 113.845370][ T4917] [ 114.954165][ T4917] CPU: 0 PID: 4917 Comm: syz.3.179 Not tainted syzkaller #0 [ 114.961439][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.971567][ T4917] Call Trace: [ 114.974882][ T4917] [ 114.977810][ T4917] dump_stack_lvl+0x188/0x250 [ 114.982563][ T4917] ? show_regs_print_info+0x20/0x20 [ 114.987758][ T4917] ? load_image+0x410/0x410 [ 114.992246][ T4917] should_fail+0x383/0x4b0 [ 114.996668][ T4917] should_failslab+0x5/0x20 [ 115.001154][ T4917] slab_pre_alloc_hook+0x51/0xc0 [ 115.006172][ T4917] __kmalloc+0x6b/0x340 [ 115.010310][ T4917] ? __tty_buffer_request_room+0x1db/0x500 [ 115.016103][ T4917] __tty_buffer_request_room+0x1db/0x500 [ 115.021808][ T4917] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 115.028568][ T4917] n_tty_write+0x5dc/0x1220 [ 115.033069][ T4917] ? _copy_from_iter+0x7fe/0x1160 [ 115.038081][ T4917] ? memcpy+0x3c/0x60 [ 115.042667][ T4917] ? n_tty_read+0x1a50/0x1a50 [ 115.047601][ T4917] ? wait_woken+0x1b0/0x1b0 [ 115.052103][ T4917] ? __virt_addr_valid+0x3c6/0x470 [ 115.057202][ T4917] ? __phys_addr_symbol+0x2b/0x70 [ 115.062301][ T4917] ? __check_object_size+0x30c/0x410 [ 115.067664][ T4917] file_tty_write+0x50c/0x8a0 [ 115.072438][ T4917] ? n_tty_read+0x1a50/0x1a50 [ 115.077129][ T4917] do_iter_readv_writev+0x47d/0x5f0 [ 115.082331][ T4917] ? aa_path_link+0x8a0/0x8a0 [ 115.087017][ T4917] ? generic_file_rw_checks+0x280/0x280 [ 115.092644][ T4917] ? common_file_perm+0x171/0x1c0 [ 115.097663][ T4917] ? fsnotify_perm+0x5d/0x560 [ 115.102330][ T4917] ? security_file_permission+0x75/0xa0 [ 115.107868][ T4917] do_iter_write+0x1f8/0x7a0 [ 115.112453][ T4917] ? memset+0x1e/0x40 [ 115.116424][ T4917] ? iov_iter_bvec+0xb4/0x170 [ 115.121089][ T4917] iter_file_splice_write+0x6be/0xcf0 [ 115.126547][ T4917] ? splice_from_pipe+0x180/0x180 [ 115.131551][ T4917] ? generic_file_splice_read+0x483/0x5f0 [ 115.137484][ T4917] ? splice_shrink_spd+0xc0/0xc0 [ 115.142422][ T4917] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 115.149005][ T4917] ? splice_from_pipe+0x180/0x180 [ 115.154027][ T4917] direct_splice_actor+0xe1/0x130 [ 115.159055][ T4917] splice_direct_to_actor+0x4e8/0xc00 [ 115.164589][ T4917] ? direct_file_splice_eof+0xa0/0xa0 [ 115.170132][ T4917] ? pipe_to_sendpage+0x320/0x320 [ 115.175152][ T4917] ? common_file_perm+0x171/0x1c0 [ 115.180163][ T4917] ? fsnotify_perm+0x5d/0x560 [ 115.184820][ T4917] ? security_file_permission+0x75/0xa0 [ 115.190436][ T4917] do_splice_direct+0x1d4/0x2f0 [ 115.195275][ T4917] ? splice_direct_to_actor+0xc00/0xc00 [ 115.200982][ T4917] ? do_splice_direct+0x2f0/0x2f0 [ 115.205990][ T4917] ? common_file_perm+0x171/0x1c0 [ 115.211011][ T4917] ? fsnotify_perm+0x5d/0x560 [ 115.215749][ T4917] ? security_file_permission+0x75/0xa0 [ 115.221296][ T4917] do_sendfile+0x524/0xe30 [ 115.225708][ T4917] ? do_pwritev+0x3a0/0x3a0 [ 115.230200][ T4917] ? __lock_acquire+0x7d40/0x7d40 [ 115.235348][ T4917] __se_sys_sendfile64+0x141/0x1a0 [ 115.240464][ T4917] ? lock_chain_count+0x20/0x20 [ 115.245318][ T4917] ? __x64_sys_sendfile64+0xa0/0xa0 [ 115.250571][ T4917] ? lockdep_hardirqs_on+0x94/0x140 [ 115.255761][ T4917] do_syscall_64+0x4c/0xa0 [ 115.260166][ T4917] ? clear_bhb_loop+0x30/0x80 [ 115.264828][ T4917] ? clear_bhb_loop+0x30/0x80 [ 115.269579][ T4917] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.275460][ T4917] RIP: 0033:0x7efde1eba559 [ 115.279863][ T4917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.299455][ T4917] RSP: 002b:00007efde0112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 115.307959][ T4917] RAX: ffffffffffffffda RBX: 00007efde2141fa0 RCX: 00007efde1eba559 [ 115.315928][ T4917] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 115.323888][ T4917] RBP: 00007efde1f518b0 R08: 0000000000000000 R09: 0000000000000000 [ 115.331842][ T4917] R10: 00000000002000fb R11: 0000000000000246 R12: 0000000000000000 [ 115.339890][ T4917] R13: 00007efde2142038 R14: 00007efde2141fa0 R15: 00007ffdffa364b8 [ 115.347853][ T4917] [ 116.290179][ T4258] Bluetooth: hci0: command 0x0c20 tx timeout