last executing test programs: 11.939384264s ago: executing program 0 (id=1): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="0000000000000000660000000000010018000000000082d700000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0xa30, 0x0, 0x40000, 0x198, 0x8e0, 0x198, 0x998, 0x358, 0x358, 0x998, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @loopback, 0x0, 0x0, 'vcan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x878, 0x8e0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x6, 0x1}, {0x6, 0x2}, {0x200}, {0x4, 0x2}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x2}, {0xffff}, {0x4, 0x1}, {0xff, 0x3}, {0x100}], [{0x5, 0x9}, {0x10001, 0x1}, {0x5, 0x216}, {0x6, 0x8000}, {0x5}, {0x9, 0x9}, {0x7fffffff, 0x3}, {0x80000001, 0x7c}, {0x7, 0xffff}, {0xefd4, 0x5}, {0x0, 0x800008}], 0x8, 0x8}, {[{0x3, 0x1}, {0x7, 0x1}, {0x5}, {0x80000003, 0x2}, {0x5, 0x2}, {0x4, 0x1}, {0x7, 0x3}, {0x800, 0x3}, {0x1000, 0x3}, {0xf6, 0x2}, {0x4}], [{0xfffffff8, 0x5}, {0x8, 0x4}, {0x9, 0x1}, {0x4, 0xfffffffe}, {0x57, 0x100}, {0xd1fc, 0x8}, {0xe51, 0xffff}, {0x81, 0xe4e}, {0x1}, {0x80000001, 0xffffffff}, {0x3, 0x7}], 0x1, 0x6}, {[{0x6}, {0x400, 0xc3a7df4efad16460}, {0x6, 0x3}, {0xd, 0x3}, {0x7, 0x1}, {0x10001, 0x1}, {0xd3, 0x3}, {0x0, 0x2}, {0x6, 0x3}, {0xa}, {0x7fffffff, 0x3}], [{0x7ff, 0xfffffffb}, {0xffff, 0x9}, {0x61b, 0x9}, {0x90000000, 0x8}, {0x5, 0x3}, {0x4, 0x2}, {0x0, 0x2}, {0x212, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x8, 0x1ff0}], 0x1, 0x9}, {[{0x4}, {0x2}, {0x6}, {0xfffff001, 0x2}, {}, {0x0, 0x3}, {0x5cb, 0x1}, {0xa, 0x1}, {0x7a3b38ac, 0x2}, {0x2b1f}, {0x800, 0x2}], [{0x0, 0x9}, {0xadc, 0xffffffff}, {0x5cc}, {0x5a}, {0x8, 0x1}, {0x1, 0x3ff}, {0x100, 0xfffeffff}, {0x7, 0x8}, {0x1, 0x9}, {0xbffffe01, 0xd6f}, {0x5, 0x1}], 0xa, 0x9}, {[{0xfff, 0x2}, {0x3c5}, {0x1000, 0x3}, {}, {0x1, 0x2}, {0x2}, {0xb, 0x2}, {0xffffffff, 0x1}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0x2}], [{0xa, 0x36}, {0x200, 0x4}, {0x9, 0x7}, {0xfffffffc, 0x800}, {0xa, 0x8}, {0x2, 0x8}, {0x9, 0x8}, {0x10}, {0x2, 0x9}, {0x7, 0x5}, {0xfffffffb}], 0x2, 0x3}, {[{0x9, 0x3}, {0x8, 0x3}, {0xfffffff9, 0x2}, {0x9}, {0x700, 0x2}, {0x7fffffff, 0x2}, {0x0, 0x2}, {0x2, 0x3}, {0x401, 0x3}, {0x2}, {0xd}], [{0x7, 0x8}, {0x101, 0x10001}, {0x8, 0x2}, {0x4, 0x8001}, {0x1000, 0x6}, {0x400, 0x8e4}, {0x0, 0x4}, {0x8df1, 0x4}, {0xdcb, 0x9}, {0xff, 0x8}, {0x1, 0xed}], 0x6, 0xa}, {[{0x3, 0x1}, {0xc9, 0x1}, {0x1, 0x2}, {0x6, 0x1}, {0x7f, 0x3}, {0x7, 0x3}, {0x5, 0x2}, {0x6, 0x1}, {0x7}, {0x2, 0x2}, {0x2, 0x3}], [{0x8, 0x40}, {0x0, 0x1}, {0x7, 0x7f}, {0x2, 0x5}, {0x3, 0x975c}, {0x1, 0x3}, {0x8f30, 0x2}, {0x4, 0x5}, {0x8000, 0xffff423b}, {0x6, 0xa3}, {0xffffffff, 0x6}], 0xa, 0xb}, {[{0x1ff, 0x3}, {0x0, 0x2}, {0x7, 0x2}, {0x5a, 0x3}, {0x2}, {0x7fff}, {0x3e}, {0xc52c, 0x1}, {0x9, 0x3}, {0x8, 0x1}, {0x400, 0x2}], [{0x8, 0x40}, {0x8, 0xe}, {0x5, 0x1}, {0x8}, {0xffffffff, 0x6}, {0x5, 0x9}, {0x2, 0x7ff}, {0x9, 0xffffffff}, {0x8, 0xfbd}, {0xfffffffd, 0xffffffc5}, {0x7, 0x4}], 0x4, 0x8}, {[{0x4, 0x3}, {0x4}, {0x1, 0x3}, {0xffffff8c, 0x3}, {0x1000, 0x1}, {0x4, 0x1}, {0xfffffffb, 0x3}, {0x40, 0x3}, {0x0, 0x2}, {0xd}, {0x4, 0x3}], [{0x7, 0x800}, {0x4, 0x101}, {0x4, 0x5}, {0x9, 0x2}, {0x4, 0x4}, {0x1000008, 0xffffffff}, {0x3, 0x8}, {0x3, 0xb}, {0x3, 0x6}, {0x5, 0x2}, {0x523, 0x9}], 0x1}, {[{0x5, 0x2}, {0x3374, 0x3}, {0x4, 0x2}, {0x101}, {0x7, 0x3}, {0x4}, {0x3}, {0x6, 0x2}, {0x9, 0x1}, {0x9, 0x1}, {0x3, 0x3}], [{0x1, 0x9}, {0xa000, 0x1dfa}, {0x5, 0xfffffffb}, {0x2fd, 0x7}, {0x7fff, 0x1}, {0xd, 0x6}, {0x8001, 0xfffffff8}, {0x400, 0x3}, {0x100, 0x7}, {0x5, 0xa}, {0x2, 0x9}], 0xb, 0x4}, {[{0x6, 0x2}, {0xf339, 0x2}, {0x1, 0x3}, {0xc}, {0xd066, 0x1}, {0x6, 0x3}, {0x0, 0x2}, {0x7}, {0x7, 0x2}, {0x10001}, {0xfff, 0x2}], [{0xfffffff6, 0xe}, {0x9, 0xfffff001}, {0x80000001, 0x80}, {0xfffffffb, 0x7}, {0x5, 0x4}, {0x4, 0xfffffff8}, {0x1, 0x4}, {0x1ff, 0x1c2d80dd}, {0x6, 0x4}, {0x10, 0x7240}, {0x2}], 0xa}], 0x1}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0xe0000000, 0x9, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x19}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x401, {0x8001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xad3) 10.939835349s ago: executing program 0 (id=12): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000000009f3, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000140), 0xe9f, 0x100) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f00000001c0)=0x400, 0x4) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000140)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000780)={0x2c, &(0x7f0000000500)={0x40, 0x7, 0x2, {0x2, 0x6}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}, 0x0, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x2, 0x9, 0x7, "ae69b298", "b1f93fd1"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x3, 0x3, 0x8, 0x7f, 0x80}}}, &(0x7f0000000e40)={0x84, &(0x7f00000007c0)={0x20, 0x18, 0xb0, "3f39d24ad40bb80b3bccc8fecbce6b53cb99b630dd29afeea0a2a10e7ebde2206e018f2293c8c016bf6f5812b1be26bd0b6f11ccc2389f9ed972008c123f5a098dab9d04771986beb10391b9b79a0f1be82c6ba394606004ea51249d98234ca3811e70458896a5e9b2cffd01e8741a74bc9c81e3619728b80aed6d8a6317cd996858ee88dccd91c85121c4f1f3016f89f0013315c1940f140344e9cc0cadf93de43ff5d269437e99005a2b2707c317c5"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x9f}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x140, 0x1, [0xf000]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0xe}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000b40)={0x40, 0xb, 0x2, '\f6'}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @random="869ce40bab35"}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "fd39"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x401}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@empty, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 9.352527738s ago: executing program 2 (id=25): r0 = socket$inet_sctp(0x2, 0x5, 0x84) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x8100}, 0x2800884c) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) listen(r0, 0x9) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) syz_genetlink_get_family_id$gtp(0x0, r1) readv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400) 8.222441536s ago: executing program 2 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='Y\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='100', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 6.774377882s ago: executing program 2 (id=45): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0xd0, &(0x7f0000000040), 0xf4, 0x1119, &(0x7f0000003600)="$eJzs2b9qFUEUB+Df7F5NupW1XwJaWEhIuD6AKRRua6uNSEAwVS4Iiq/hG/gWvoKmsg/ptQhYCis3e9f8IaCSG0H4Ptids2dn9uyUMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYmCRfS3K7StoxVyUpSdcdzI6SdGP+1qe6SsmT3dn80f708TxJfdK9PE02TrqUJO32nfV22k7b7fbBw527n+dv3r56vre3u7/8TEmXw+OVzqKMt/psrqy0BgAAAPy3+itr8v71n1S6eU31AQAAgN9Z9X4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN/qm9O4HYMqSUm67mB2lKS7ZNyNf/R/AAAAwNWVVHnWXJYftgFO3c+XpvzKL9rvZRFv5UNzYSAAAABwzsuP5x77tWVw9nz9Rz9YrLvvZTKsy9eHdxuZZHNziJdNvu0kdZKtC7UOj9+9GK/S18na9cwJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfrIDByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAXBQAA//+XOeFM") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000340)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") openat(0xffffffffffffff9c, 0x0, 0x88040, 0x12) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x8000ce1) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') syz_clone(0x81091800, 0x0, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x4edd) 6.634970326s ago: executing program 0 (id=46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x10, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.389503082s ago: executing program 4 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020601080000000000000000010000081400078008001240000000050500150009000000050001000600"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@nodecompose}, {@type={'type', 0x3d, "4f731ea8"}}, {}]}, 0x9, 0x624, &(0x7f00000012c0)="$eJzs3U1rXNcZB/D/HUljjQuOkthJ6hYiUigmJrZeTNpCoWoxRYtgAt1kK2o5Fh47QRoXJYuiFn+QdKGusuimBEoXoXjdRb6AoMtCoUuRzZS5c2c0ehtrUksaJ78fPnPPmXPvc859fOdIczUwAb6zlj/I1FaKLF9/b7PT3tlebO5sLz7s1ZNcSFIr/2WyU/1XMvEkmU235PtJiipccdw4Xyx8fvWrO5vXuq1aVcr9J4Yd1zc5rHOrKlmq9lwaIQXPivf0/45X9M+wE/R2L/g4aD/bf09x+IlTjM0IimP+L2aSi0mmq3Wgd+HWznZ2z9/YvAABAADgFL20m91s5tJ5zwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeJNX3/xdVqfXqsyl63/9fr55LVX+hfXneEwAAAAAAAACA5+DN3exmM5d67XZR/s3/rbJxuXz8Xh5nI6tZz41sZiWttLKe+SQz3WPKDwPUN1darfX5Exy5sHdk9o5cOLtzBgAAAAAAAIBvhel9rT9mee/v/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA6KZKK7KcvlXn0mtckk00nqncet5O9l/QX35XlPAAAAAM7AS7vZzWYu9drtonzP/1r5vn86j/MorayllWZWc7e8F9B911/b2V5s7mwvPuyUw3F/+Z+RplFGTPfew9Ejz5V7XOkfsZxf5ze5ntm8325nLb/LSlpZzWxul7WVFJmp7l7M9OZ59HyX9rXef9Zc3yhn0si9rJVzu5Hf5qM0cze18hzKfYaP+IdOdopfVE6Yo7vVtkiKH1RnNh5myoxM9TMyV+W+k42Xh2di/3VSG3Wk+dT696AuHx5p8PbUcTmfGjbexWrbyfn0+OV8Kv1MLAxcfa8Nz3nyTuuvb95vPnpw/97G9fE5pW/o4DWxOJCJ14dn4ut2u/0tykS9ykZ3FT1mtcz6kavlW+Wxl7KWO/kod7Oan+TdLJRlsdwO5vXKCda32mjr24+uVZVXkqLR3Y6JTl5fHsjr4Eo3U/YNPrOXpVee/0+ByatVZSIpJvtzGgcHMzE/kIlXh2fiT+3O40bz0YP1+ysfn3C8H1fbztp8YawyUa+u3smytf/q6PS9emTffNl3ud9XO9R3pd/3rFdqvfod7nCkhbLv9SP7use9MdB31G85AIy9i29frDf+3fhn47PGk8b9xnvTv7rw0ws/rGfq6eTfJv5S+3Pt58Xb+Sy/33v/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHMbn3z6YKXZXF3vVp5k/cAzI1Ymkwzdp354UJURK4+7X9OTga7qmZz66BfGJQkqp1s5uFJMn/HKxFm42Xr48c2NTz59Z+3hyoerH64+ujW3MP/urfmf3bp5b625Otd9PO9Zclr2XvTnPRMAAAAAAAAAAABGcRYfJz3vcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODFsfxBprZSZH7uxlynvbO92OyUXn1vz1qSyc7262TiSTKbbsnMQLjiuHG+WPj86ld3Nq/txar19p9I8o+TzLV2bM9WVbJUTXLp4B6NkcLvi/f0qHgjKfqZ6QS93QsO5+1/AQAA//8wwRmc") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc6000000) 5.774312457s ago: executing program 2 (id=49): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008732b0a0040000102030109024e00030109200c080b0001010130080904000000010130000a2401010a000010000009040100000102300009040101010102300009050109b0020905f80a252502"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/warn_count', 0x204203, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x1, 0x3, 0x0, "f067c51ac931286a106a241012c9bd17b30a3e5c6817c45fb9ff6b7176716429"}) socket$igmp6(0xa, 0x3, 0x2) close(0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) membarrier(0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x19800, 0x3, 0x3, 0x0, 0x0, 0x1}, 0x30, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x20, 0xfffff034}, {0x4}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) landlock_restrict_self(r2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) mq_open(&(0x7f0000000100)='batadv_\xbdl\xff\x06\x00\x00\x00\x00\x00\x00\x19L\x84\xedXa3\xe4\xb6\xa72\xc9$\xc0\xc1\xd1o\x90\vU\xcf\xd59k\xfa\xe3\x8fX\x0e\xfb\n\xa0\xa2rKD\xd7\x926\xc6\xa2\xb1', 0x2, 0x30, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x14000, 0x8, 0x3, 0x600, 0x6, 0x2}, 0x30, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000202907800000000e0000802110090"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 5.692207779s ago: executing program 0 (id=50): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRES16=r0], 0x1, 0x392, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r2, 0x16, 0x0, @void}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) 4.594846496s ago: executing program 4 (id=53): socket(0x10, 0x803, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x77d140, 0x0, 0x18}, 0x18) 4.47095597s ago: executing program 0 (id=54): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x4}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0x4, 0x0, 0x3ff, [{0x3, 0x3, 0x1500}]}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x35, 0x0, 0x1}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x802, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) r4 = openat$comedi(0xffffff9c, &(0x7f0000001140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r4, 0xb6ae1000) 3.747501238s ago: executing program 4 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) r1 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x400) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) sendmsg$unix(0xffffffffffffffff, 0x0, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x4, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d77, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0xb71, 0x3c57, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x1, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x5, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2c2, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x100, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x7, 0x40, 0x6, 0x47, 0xe4, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000555, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x8038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x5, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0xfff, 0x42, 0xf, 0xb9, 0xce4, 0x1ff, 0x2, 0x6, 0x2, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x13, 0x1, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x6d19, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000806, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x1fd, 0xb, 0xfff]}, 0x45c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) 2.741559683s ago: executing program 3 (id=61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x10, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.478310399s ago: executing program 2 (id=62): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0xfc, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff, 0x0, 0x4e22, 0xfffd, 0x0, 0xa0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in=@multicast1, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60002, 0x0, 0x7}, {0x8f4d, 0x200000, 0x7, 0x1}, {0x40000, 0x0, 0x80}, 0x70bd25, 0x1, 0xa, 0x2, 0x0, 0x30}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x5}}]}, 0xfc}}, 0x0) 2.360823292s ago: executing program 2 (id=63): socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='100000', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000001080)={0x200000, 0x200000, 0x4000000, 0x0, 0x2}) socket$netlink(0x10, 0x3, 0x3) semget(0x3, 0x4, 0x69c) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) 2.200187176s ago: executing program 3 (id=64): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000440)=0x6) close(r0) 2.097466748s ago: executing program 4 (id=65): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRES16=r0], 0x1, 0x392, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r2, 0x16, 0x0, @void}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) 1.979238681s ago: executing program 1 (id=66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x7f) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0xd2bd, 0x1, 0xe8e8, 0x7}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000005c0)=0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.909687393s ago: executing program 3 (id=67): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, 0x0, 0x0, 0xc03, 0x0) gettid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r4 = socket(0x10, 0x80003, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x42872, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000822000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00008b5000/0x1000)=nil) openat$audio(0xffffffffffffff9c, 0x0, 0xe8c00, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r5 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0xb, @sliced={0x1, [0x4d6, 0x7d, 0xc45, 0x2, 0x7, 0xfff5, 0x3ff, 0x2, 0x1, 0x7d4, 0x5, 0x2aa, 0x7, 0x9, 0x3ff, 0x4, 0x200a, 0x7, 0x200, 0x0, 0xc29, 0x1, 0xe7, 0xfff9, 0x40, 0x8, 0x80, 0x6, 0x8, 0xfff5, 0x5022, 0x9, 0x2, 0x3, 0x81, 0x6f4, 0x1, 0x1000, 0x2, 0x2, 0x40, 0x5, 0xf52, 0x4, 0xaae, 0x8, 0x85, 0x4], 0x9}}) 1.65258267s ago: executing program 1 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x2, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='Y\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000240)='10000\x00', 0x5) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='5\x00', 0x1) close(r3) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='1\x00', 0x1) close(r4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 950.215457ms ago: executing program 3 (id=69): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800356a00000000000000000a800000ff030006000000"], 0x30}}, 0x0) 844.172469ms ago: executing program 0 (id=70): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0xfc, 0x10, 0x401, 0x70bd26, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0xcc, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xbc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0x7}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0xce10}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x283, 0x13}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4bf4, 0x200}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0xffff7fff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0xfc}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) close(r5) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x238, 0x12, 0x60d, 0x0, 0x202, 0x350, 0x2e8, 0x2e8, 0x350, 0x2c0, 0x4, 0x0, {[{{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x1b}, [0xff, 0x0, 0xff], [0x0, 0xff000000], 'veth1_to_bond\x00', 'geneve1\x00', {}, {0xff}, 0x3c, 0x2}, 0x0, 0x1d0, 0x238, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x5, 0x2}}, @common=@inet=@iprange={{0x68}, {@ipv6=@mcast2, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@private=0xa010102, 0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0xffff, 0x400, 'netbios-ns\x00', 'syz1\x00', {0x1000}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, 0x0, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000800)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000a00)={0x38, r11, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004801}, 0x4004084) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000400)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0xff01, 0xc}}], 0x48}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r13, 0xc028583e, &(0x7f0000000100)={{[0x4, 0x5, 0x95d3, 0x4]}, 0x0, 0x2, 0x6, 0x0, &(0x7f0000000040)=[{{@_ha_fsid={[0x5, 0x6]}, {0x446f, 0x4, 0xe46, 0x4}}, 0x7fff, 0x0, '%\x00'}, {{@_ha_fsid={[0x4, 0xe7]}, {0x4, 0xf, 0x4, 0x8}}, 0x3e, 0x0, '\'\x00'}, {{@_ha_fsid={[0x9, 0xb]}, {0x9a17, 0x10, 0xc, 0xfc8}}, 0xc, 0x0, '\x00'}, {{@_ha_fsid={[0x3, 0x3]}, {0xddde, 0x2, 0xc, 0x7}}, 0x38, 0x0, 'netem\x00'}]}) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 823.07467ms ago: executing program 4 (id=71): unshare(0x22020600) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x28000000, 0x100) ioctl$I2C_RDWR(r0, 0x707, 0x0) 805.41751ms ago: executing program 1 (id=72): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x9, 0x1000, 0x34565348, 0x1, 0xfffffffe, 0x0, 0x9, 0x40, 0x1, 0x3, 0x0, 0x5}}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x4001af84, 0x0) 719.548972ms ago: executing program 3 (id=73): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x1, 0x756e6547, 0x6c65746e, 0x49656e69}, {0x40000000, 0x0, 0x0, 0x40000005}, {0x40000001, 0x0, 0x0, 0x31237648}]}) 690.848573ms ago: executing program 1 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$usbfs(0x0, 0xf, 0x240000) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@nodecompose}, {@type={'type', 0x3d, "4f731ea8"}}, {}]}, 0x9, 0x624, &(0x7f00000012c0)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc6000000) 618.600955ms ago: executing program 4 (id=75): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a1b0400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd66c94c99003238315fff502000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4008001}, 0x20008040) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x9, 0x20, {0x20, 0x31, "33596a6e30d2e3291e9b715fd326429bc13a8303715c54abe074f474faaa"}}, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x40, 0xc, 0x1a, "fd710a1077c96efc8ce90829b15dc305d195c7e84f90d50936e6"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x71}, &(0x7f00000001c0)={0x20, 0x81, 0x3, "102043"}, &(0x7f0000000200)={0x20, 0x82, 0x3, '(Di'}, &(0x7f0000000240)={0x20, 0x83, 0x2, "9c35"}, &(0x7f0000000280)={0x20, 0x84, 0x1, "ac"}, &(0x7f00000002c0)={0x20, 0x85, 0x3, "6da8fc"}}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 191.589286ms ago: executing program 1 (id=76): ftruncate(0xffffffffffffffff, 0x200c17a) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}}) 92.784558ms ago: executing program 3 (id=77): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xa) close(r0) 0s ago: executing program 1 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x7f) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0xd2bd, 0x1, 0xe8e8, 0x7}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. syzkaller login: [ 45.879200][ T4173] cgroup: Unknown subsys name 'net' [ 45.977659][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 47.179601][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.160348][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 49.174283][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 49.217285][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 49.227609][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 49.293295][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 49.355925][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.363188][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.372033][ T4185] device bridge_slave_0 entered promiscuous mode [ 49.386611][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.393824][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.401773][ T4185] device bridge_slave_1 entered promiscuous mode [ 49.436441][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.443702][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.451521][ T4192] device bridge_slave_0 entered promiscuous mode [ 49.458707][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.465785][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.473502][ T4186] device bridge_slave_0 entered promiscuous mode [ 49.487788][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.495008][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.503343][ T4186] device bridge_slave_1 entered promiscuous mode [ 49.518680][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.526018][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.533712][ T4192] device bridge_slave_1 entered promiscuous mode [ 49.541106][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.548154][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.556085][ T4193] device bridge_slave_0 entered promiscuous mode [ 49.569118][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.576276][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.584341][ T4193] device bridge_slave_1 entered promiscuous mode [ 49.598327][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.623065][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.643291][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.665584][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.687084][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.694428][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.702690][ T4196] device bridge_slave_0 entered promiscuous mode [ 49.716278][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.723444][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.731386][ T4196] device bridge_slave_1 entered promiscuous mode [ 49.740094][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.757373][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.776280][ T4185] team0: Port device team_slave_0 added [ 49.788106][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.799766][ T4186] team0: Port device team_slave_0 added [ 49.813699][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.824050][ T4185] team0: Port device team_slave_1 added [ 49.831812][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.842013][ T4186] team0: Port device team_slave_1 added [ 49.863935][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.885553][ T4192] team0: Port device team_slave_0 added [ 49.899184][ T4192] team0: Port device team_slave_1 added [ 49.911754][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.918710][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.944881][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.971077][ T4193] team0: Port device team_slave_0 added [ 49.977278][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.984678][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.010700][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.028942][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.036003][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.062198][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.075303][ T4196] team0: Port device team_slave_0 added [ 50.083209][ T4196] team0: Port device team_slave_1 added [ 50.090701][ T4193] team0: Port device team_slave_1 added [ 50.096779][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.104033][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.129944][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.175032][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.182585][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.208832][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.239131][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.246341][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.272660][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.290629][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.297587][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.324006][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.335725][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.348098][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.374888][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.397620][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.404610][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.430975][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.454539][ T4186] device hsr_slave_0 entered promiscuous mode [ 50.461425][ T4186] device hsr_slave_1 entered promiscuous mode [ 50.469892][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.476844][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.502877][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.516651][ T4185] device hsr_slave_0 entered promiscuous mode [ 50.523471][ T4185] device hsr_slave_1 entered promiscuous mode [ 50.530486][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.538173][ T4185] Cannot create hsr debugfs directory [ 50.582094][ T4196] device hsr_slave_0 entered promiscuous mode [ 50.588979][ T4196] device hsr_slave_1 entered promiscuous mode [ 50.595748][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.603522][ T4196] Cannot create hsr debugfs directory [ 50.627823][ T4192] device hsr_slave_0 entered promiscuous mode [ 50.634498][ T4192] device hsr_slave_1 entered promiscuous mode [ 50.641324][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.648882][ T4192] Cannot create hsr debugfs directory [ 50.711776][ T4193] device hsr_slave_0 entered promiscuous mode [ 50.718936][ T4193] device hsr_slave_1 entered promiscuous mode [ 50.725826][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.733564][ T4193] Cannot create hsr debugfs directory [ 50.900109][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 50.909849][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 50.915888][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 50.927869][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 50.934231][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 51.013124][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.023699][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.034846][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.046663][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.077320][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.088121][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.096837][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.119113][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.156295][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.177546][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.192386][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.202307][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.258091][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.281348][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.295546][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.316259][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.358342][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.380779][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.396248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.405661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.416600][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.426195][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.434079][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.454898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.464049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.474012][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.481294][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.491204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.500745][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.514700][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.534147][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.543307][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.552245][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.570496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.579117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.588073][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.595178][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.604519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.613532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.622816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.631346][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.638377][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.647455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.656150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.664565][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.671666][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.685157][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.710132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.718215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.731150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.742666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.751986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.777608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.786113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.794756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.803507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.813054][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.831237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.840661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.856874][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.868123][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.905718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.913763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.922890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.931956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.940570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.949246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.960379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.968514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.977411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.986145][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.993235][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.002297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.011325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.019687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.028198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.036900][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.044000][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.052138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.060991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.069179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.077741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.086098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.115714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.123751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.142253][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.158164][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.168168][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.186455][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.195989][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.212464][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.228653][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.241433][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.277104][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.294290][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.307323][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.323263][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.332368][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.341664][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.350739][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.358939][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.367469][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.375710][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.383899][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.419280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.450860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.461262][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.468339][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.478446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.488107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.504023][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.511135][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.520335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.527798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.536011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.544611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.553827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.564060][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.586891][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.597979][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.607433][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.617034][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.636748][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.653534][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.664198][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.675649][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.684496][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.693609][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.702140][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.710454][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.723564][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.732620][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.745950][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.758410][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.771327][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.786271][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.794976][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.815670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.825080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.834847][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.841972][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.850445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.858760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.887582][ T4186] device veth0_vlan entered promiscuous mode [ 52.897797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.913921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.926026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.934263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.944481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.952247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.961230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.969584][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.976634][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.987706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.990055][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 53.004012][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.005281][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 53.014904][ T4186] device veth1_vlan entered promiscuous mode [ 53.023667][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 53.053052][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 53.065359][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.075337][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.085485][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 53.095081][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.102867][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.110440][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.118869][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.127582][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.136046][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.145326][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.153593][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.162459][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.170795][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.179018][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.187346][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.201266][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.217241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.227876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.246480][ T4186] device veth0_macvtap entered promiscuous mode [ 53.257275][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.280626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.291238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.300686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.318855][ T4185] device veth0_vlan entered promiscuous mode [ 53.343313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.358651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.382973][ T4186] device veth1_macvtap entered promiscuous mode [ 53.406109][ T4185] device veth1_vlan entered promiscuous mode [ 53.425734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.434493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.443363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.452906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.462669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.486917][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.513443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.523681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.539057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.553575][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.573866][ T4192] device veth0_vlan entered promiscuous mode [ 53.583130][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.592213][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.601110][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.609224][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.624515][ T4185] device veth0_macvtap entered promiscuous mode [ 53.634388][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.643762][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.652584][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.662023][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.677957][ T4192] device veth1_vlan entered promiscuous mode [ 53.686496][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.694344][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.703699][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.712463][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.721285][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.730027][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.743008][ T4185] device veth1_macvtap entered promiscuous mode [ 53.753119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.761471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.771843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.795966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.804605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.812817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.856916][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.870416][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.884107][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.897684][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.918414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.929926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.938575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.947632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.955981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.964495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.974963][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.985768][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.997206][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.012231][ T4196] device veth0_vlan entered promiscuous mode [ 54.020912][ T4192] device veth0_macvtap entered promiscuous mode [ 54.039195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.047691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.056132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.064335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.073452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.086023][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.094854][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.105332][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.114369][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.131632][ T4196] device veth1_vlan entered promiscuous mode [ 54.138903][ T4192] device veth1_macvtap entered promiscuous mode [ 54.161778][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.170486][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.178344][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.188699][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.209179][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.220054][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.231687][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.242165][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.254817][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.293069][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.293536][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.308652][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.317189][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.326305][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.335053][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.357316][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.368265][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.378472][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.389191][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.401742][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.418336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.428537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.437161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.446345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.455372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.464898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.473676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.484647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.494995][ T4193] device veth0_vlan entered promiscuous mode [ 54.513015][ T4196] device veth0_macvtap entered promiscuous mode [ 54.529194][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.538107][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.547174][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.556171][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.575574][ T4193] device veth1_vlan entered promiscuous mode [ 54.586285][ T4196] device veth1_macvtap entered promiscuous mode [ 54.611562][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.619406][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.624944][ T569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.650719][ T569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.682060][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.692810][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.703045][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.715283][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.725824][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.736498][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.747946][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.755598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.764078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.772379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.781612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.789513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.797358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.805925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.815017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.852095][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.860961][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.880148][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.881677][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.901793][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.912783][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.924380][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.935051][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.948407][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.961177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.970040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.978526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.999142][ T4193] device veth0_macvtap entered promiscuous mode [ 55.030007][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.038756][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.049223][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.205259][ T4267] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 55.230445][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.256904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.272565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.286066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.019549][ C1] sched: RT throttling activated [ 56.027504][ T4188] Bluetooth: hci3: command 0x040f tx timeout [ 56.038053][ T4193] device veth1_macvtap entered promiscuous mode [ 56.038895][ T4188] Bluetooth: hci1: command 0x040f tx timeout [ 56.051161][ T4188] Bluetooth: hci2: command 0x040f tx timeout [ 56.076657][ T4188] Bluetooth: hci0: command 0x040f tx timeout [ 56.082835][ T4188] Bluetooth: hci4: command 0x040f tx timeout [ 56.119946][ T4274] loop1: detected capacity change from 0 to 512 [ 56.136986][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.145256][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.161797][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.178618][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.189911][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.224184][ T4274] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 56.239973][ T4274] FAT-fs (loop1): Filesystem has been set read-only [ 56.250619][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.292973][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.333778][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.345160][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.358148][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.387238][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.397327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.405913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.416397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.486622][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.513430][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.524538][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.535965][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.546938][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.558539][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.589142][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.614466][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.645653][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.723070][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.760548][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.827630][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.839825][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.848819][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.861356][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.919528][ T569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.955390][ T569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.990476][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.099212][ T569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.118181][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.126534][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.128275][ T569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.156640][ T4278] capability: warning: `syz.3.7' uses 32-bit capabilities (legacy support in use) [ 57.158698][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.174423][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.185064][ T4278] socket: no more sockets [ 57.356784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.376673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.388706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.487644][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.517847][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.557983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.911626][ T4304] loop4: detected capacity change from 0 to 1024 [ 58.102680][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 58.108897][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 58.120606][ T4292] socket: no more sockets [ 58.166013][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 58.199945][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 58.219163][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 58.385006][ T25] audit: type=1326 audit(1791407921.639:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4314 comm="syz.1.13" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facde6c6199 code=0x0 [ 58.502025][ T1111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.582474][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 58.859961][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 59.140182][ T1111] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 59.149874][ T13] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0 [ 59.158926][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.171166][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.185128][ T1111] usb 1-1: Product: syz [ 59.189307][ T1111] usb 1-1: Manufacturer: syz [ 59.194497][ T13] usb 4-1: Product: syz [ 59.198844][ T13] usb 4-1: Manufacturer: syz [ 59.203923][ T13] usb 4-1: SerialNumber: syz [ 59.208694][ T1111] usb 1-1: SerialNumber: syz [ 59.285672][ T4339] user requested TSC rate below hardware speed [ 59.296414][ T4339] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 59.319524][ T4339] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 59.571021][ T4349] x_tables: duplicate underflow at hook 4 [ 59.606715][ T4351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22'. [ 59.710000][ T1111] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 59.832723][ T13] ems_usb 4-1:91.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 59.865811][ T13] ems_usb: probe of 4-1:91.0 failed with error -22 [ 59.937598][ T13] usb 4-1: USB disconnect, device number 2 [ 60.306198][ T4384] user requested TSC rate below hardware speed [ 60.312248][ T4387] device bridge_slave_0 left promiscuous mode [ 60.319276][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.359905][ T4387] device bridge_slave_1 left promiscuous mode [ 60.381581][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.608881][ T4395] x_tables: duplicate underflow at hook 4 [ 60.844579][ T4399] loop1: detected capacity change from 0 to 512 [ 60.851574][ T4401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 60.865520][ T4401] syz.2.39: vmalloc error: size 65024, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 60.888797][ T4401] CPU: 1 PID: 4401 Comm: syz.2.39 Not tainted syzkaller #0 [ 60.896019][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.903284][ T4399] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 60.906096][ T4401] Call Trace: [ 60.916031][ T4399] FAT-fs (loop1): Filesystem has been set read-only [ 60.919239][ T4401] [ 60.928739][ T4401] dump_stack_lvl+0x188/0x250 [ 60.933439][ T4401] ? rcu_lock_release+0x5/0x20 [ 60.938188][ T4401] ? show_regs_print_info+0x20/0x20 [ 60.943373][ T4401] ? load_image+0x410/0x410 [ 60.947863][ T4401] warn_alloc+0x245/0x320 [ 60.952188][ T4401] ? zone_watermark_ok_safe+0x250/0x250 [ 60.957719][ T4401] ? __get_vm_area_node+0x164/0x2d0 [ 60.962904][ T4401] ? kfree+0xef/0x2a0 [ 60.966874][ T4401] __vmalloc_node_range+0x2b1/0x8b0 [ 60.972062][ T4401] ? vidtv_s302m_encoder_init+0x174/0x770 [ 60.977764][ T4401] vzalloc+0x75/0x80 [ 60.981645][ T4401] ? vidtv_s302m_encoder_init+0x174/0x770 [ 60.987382][ T4401] vidtv_s302m_encoder_init+0x174/0x770 [ 60.992943][ T4401] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 60.998517][ T4401] vidtv_channel_s302m_init+0x357/0x830 [ 61.004090][ T4401] vidtv_channels_init+0x41/0x90 [ 61.009037][ T4401] vidtv_mux_init+0x4d0/0x1950 [ 61.013810][ T4401] ? __mutex_lock_common+0x435/0x2400 [ 61.019195][ T4401] vidtv_start_feed+0x368/0x590 [ 61.024060][ T4401] ? vidtv_i2c_func+0x10/0x10 [ 61.028741][ T4401] ? vidtv_stop_feed+0x250/0x250 [ 61.033687][ T4401] ? _raw_spin_unlock_irq+0x1f/0x40 [ 61.038894][ T4401] ? lockdep_hardirqs_on+0x94/0x140 [ 61.044114][ T4401] dmx_ts_feed_start_filtering+0x11c/0x210 [ 61.049928][ T4401] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 61.055826][ T4401] dvb_dmxdev_filter_start+0x422/0x1060 [ 61.061369][ T4401] dvb_demux_do_ioctl+0x48d/0x530 [ 61.066392][ T4401] dvb_usercopy+0x191/0x2b0 [ 61.070894][ T4401] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 61.076427][ T4401] ? dvb_generic_ioctl+0xb0/0xb0 [ 61.081356][ T4401] ? dvb_demux_poll+0x210/0x210 [ 61.086204][ T4401] dvb_demux_ioctl+0x25/0x30 [ 61.090800][ T4401] __se_sys_ioctl+0xfa/0x170 [ 61.095374][ T4401] do_syscall_64+0x4c/0xa0 [ 61.099790][ T4401] ? clear_bhb_loop+0x30/0x80 [ 61.104447][ T4401] ? clear_bhb_loop+0x30/0x80 [ 61.109110][ T4401] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.114997][ T4401] RIP: 0033:0x7f372f75b199 [ 61.119405][ T4401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.138991][ T4401] RSP: 002b:00007f372d9b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.147390][ T4401] RAX: ffffffffffffffda RBX: 00007f372f9e2fa0 RCX: 00007f372f75b199 [ 61.155356][ T4401] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003 [ 61.163329][ T4401] RBP: 00007f372f7f28e0 R08: 0000000000000000 R09: 0000000000000000 [ 61.171313][ T4401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.179270][ T4401] R13: 00007f372f9e3038 R14: 00007f372f9e2fa0 R15: 00007ffd05b88c88 [ 61.187235][ T4401] [ 61.194986][ T4401] Mem-Info: [ 61.352268][ T4401] active_anon:272 inactive_anon:8753 isolated_anon:0 [ 61.352268][ T4401] active_file:4553 inactive_file:46183 isolated_file:0 [ 61.352268][ T4401] unevictable:768 dirty:1813 writeback:0 [ 61.352268][ T4401] slab_reclaimable:20927 slab_unreclaimable:90708 [ 61.352268][ T4401] mapped:32451 shmem:4581 pagetables:650 bounce:0 [ 61.352268][ T4401] kernel_misc_reclaimable:0 [ 61.352268][ T4401] free:1378710 free_pcp:10637 free_cma:0 [ 61.598030][ T4401] Node 0 active_anon:1056kB inactive_anon:34200kB active_file:18108kB inactive_file:184632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129704kB dirty:7028kB writeback:100kB shmem:16144kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10252kB pagetables:2400kB all_unreclaimable? no [ 61.636528][ T4401] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 61.698635][ T4401] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.737417][ T4401] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 61.751682][ T1111] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -71 [ 61.766900][ T4401] Node 0 DMA32 free:1586268kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1112kB inactive_anon:22640kB active_file:18120kB inactive_file:184620kB unevictable:1536kB writepending:7036kB present:3129332kB managed:2606500kB mlocked:0kB bounce:0kB free_pcp:41784kB local_pcp:21520kB free_cma:0kB [ 61.786296][ T4414] tipc: Started in network mode [ 61.799916][ T4415] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 61.816099][ T4414] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 61.819715][ T4401] lowmem_reserve[]: [ 61.823489][ T1111] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 61.823503][ T4401] 0 0 [ 61.828962][ T1111] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 61.843553][ T4401] 0 [ 61.848518][ T4414] tipc: Enabled bearer , priority 0 [ 61.852405][ T1111] lan78xx: probe of 1-1:1.0 failed with error -71 [ 61.867644][ T4401] 0 0 [ 61.876638][ T4401] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.888810][ T1111] usb 1-1: USB disconnect, device number 2 [ 61.908421][ T4401] lowmem_reserve[]: 0 0 0 0 0 [ 61.915457][ T4401] Node 1 Normal free:3913028kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:13164kB local_pcp:4844kB free_cma:0kB [ 61.984565][ T4401] lowmem_reserve[]: 0 0 0 0 0 [ 61.989325][ T4401] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 62.021980][ T4414] netlink: 52 bytes leftover after parsing attributes in process `syz.1.40'. [ 62.029755][ T4415] netdevsim netdevsim3: Direct firmware load for . [ 62.029755][ T4415] failed with error -2 [ 62.043705][ T4401] Node 0 DMA32: 230*4kB (M) 266*8kB (UME) 53*16kB (UME) 103*32kB (ME) 11*64kB (ME) 16*128kB (M) 11*256kB (UME) 9*512kB (ME) 3*1024kB (M) 4*2048kB (UME) 379*4096kB (M) = 1581016kB [ 62.078007][ T4415] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 62.078007][ T4415] [ 62.115345][ T4401] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 62.128419][ T4401] Node 1 Normal: 82*4kB (UME) 28*8kB (UME) 13*16kB (UME) 33*32kB (UME) 25*64kB (UE) 14*128kB (UE) 7*256kB (UM) 3*512kB (U) 1*1024kB (E) 2*2048kB (UM) 952*4096kB (M) = 3913048kB [ 62.146807][ T4401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 62.156728][ T4401] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 62.167153][ T4401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 62.177160][ T4401] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 62.186847][ T4401] 52382 total pagecache pages [ 62.192873][ T4401] 0 pages in swap cache [ 62.197038][ T4401] Swap cache stats: add 68, delete 68, find 24/31 [ 62.203787][ T4401] Free swap = 124472kB [ 62.208051][ T4401] Total swap = 124996kB [ 62.213253][ T4401] 2097051 pages RAM [ 62.217143][ T4401] 0 pages HighMem/MovableOnly [ 62.221890][ T4401] 411503 pages reserved [ 62.226032][ T4401] 0 pages cma reserved [ 62.337996][ T4427] loop1: detected capacity change from 0 to 8192 [ 62.342045][ T4429] loop2: detected capacity change from 0 to 8192 [ 62.391315][ T4429] ======================================================= [ 62.391315][ T4429] WARNING: The mand mount option has been deprecated and [ 62.391315][ T4429] and is ignored by this kernel. Remove the mand [ 62.391315][ T4429] option from the mount to silence this warning. [ 62.391315][ T4429] ======================================================= [ 62.437241][ T4429] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 62.447565][ T4429] REISERFS (device loop2): using ordered data mode [ 62.459257][ T4429] reiserfs: using flush barriers [ 62.469721][ T4429] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.490395][ T4429] REISERFS (device loop2): checking transaction log (loop2) [ 62.522321][ T4427] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 62.543697][ T4427] REISERFS (device loop1): using ordered data mode [ 62.550458][ T4427] reiserfs: using flush barriers [ 62.556412][ T4427] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.563413][ T4429] REISERFS (device loop2): Using r5 hash to sort names [ 62.573475][ T4427] REISERFS (device loop1): checking transaction log (loop1) [ 62.582360][ T4410] [U]  [ 62.608308][ T4427] REISERFS (device loop1): Using r5 hash to sort names [ 62.630224][ T4427] REISERFS (device loop1): using 3.5.x disk format [ 62.638980][ T4427] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 62.690274][ T4429] REISERFS (device loop2): using 3.5.x disk format [ 62.697227][ T4429] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 62.964952][ T1108] tipc: Node number set to 43690 [ 63.380088][ T4438] loop4: detected capacity change from 0 to 1024 [ 63.655698][ T4449] loop0: detected capacity change from 0 to 512 [ 63.696872][ T4438] hfsplus: invalid length 1280 has been corrected to 255 [ 63.722830][ T4450] user requested TSC rate below hardware speed [ 63.747790][ T4438] hfsplus: invalid length 1280 has been corrected to 255 [ 63.765158][ T4438] hfsplus: invalid length 1280 has been corrected to 255 [ 63.781822][ T4438] hfsplus: invalid length 1280 has been corrected to 255 [ 63.823022][ T4449] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 63.828755][ T4438] hfsplus: invalid length 1280 has been corrected to 255 [ 63.855790][ T4438] hfsplus: invalid length 1280 has been corrected to 255 [ 63.868475][ T4449] FAT-fs (loop0): Filesystem has been set read-only [ 63.874999][ T4444] socket: no more sockets [ 64.039615][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.299696][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 64.569773][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.238231][ T4468] ERROR: Out of memory at tomoyo_realpath_from_path. [ 65.279274][ T13] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 65.459947][ T13] usb 3-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 65.474582][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.501094][ T13] usb 3-1: Product: syz [ 65.505288][ T13] usb 3-1: Manufacturer: syz [ 65.534631][ T13] usb 3-1: SerialNumber: syz [ 65.703332][ T4486] tipc: Started in network mode [ 65.760451][ T4486] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 65.767721][ T4486] tipc: Enabled bearer , priority 0 [ 65.831515][ T25] audit: type=1326 audit(1791407929.089:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.2.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372f75b199 code=0x7ffc0000 [ 65.920236][ T25] audit: type=1326 audit(1791407929.099:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.2.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372f75b199 code=0x7ffc0000 [ 66.066127][ T25] audit: type=1326 audit(1791407929.099:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.2.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372f75b199 code=0x7ffc0000 [ 66.098301][ T4488] netlink: 52 bytes leftover after parsing attributes in process `syz.3.60'. [ 66.173535][ T13] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 66.213939][ T13] usb 3-1: USB disconnect, device number 2 [ 66.235442][ T25] audit: type=1326 audit(1791407929.099:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.2.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f372f75b199 code=0x7ffc0000 [ 66.258378][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.356285][ T25] audit: type=1326 audit(1791407929.099:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.2.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372f75b199 code=0x7ffc0000 [ 66.519648][ T25] audit: type=1326 audit(1791407929.099:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.2.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f372f75b199 code=0x7ffc0000 [ 66.672282][ T25] audit: type=1326 audit(1791407929.099:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.2.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372f75b199 code=0x7ffc0000 [ 66.843215][ T25] audit: type=1326 audit(1791407929.099:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.2.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f372f75b199 code=0x7ffc0000 [ 66.880803][ T13] tipc: Node number set to 43690 [ 66.948598][ T25] audit: type=1326 audit(1791407929.099:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.2.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372f75b199 code=0x7ffc0000 [ 66.988634][ T4502] loop4: detected capacity change from 0 to 512 [ 67.100141][ T25] audit: type=1326 audit(1791407929.099:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4451 comm="syz.2.49" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f372f75b199 code=0x7ffc0000 [ 67.183553][ T4502] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 67.331952][ T4502] FAT-fs (loop4): Filesystem has been set read-only [ 68.128241][ T4519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.69'. [ 68.169845][ T4519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 68.177312][ T4519] IPv6: NLM_F_CREATE should be set when creating new route [ 68.184625][ T4519] IPv6: NLM_F_CREATE should be set when creating new route [ 68.501338][ T4536] loop1: detected capacity change from 0 to 1024 [ 68.839675][ T4237] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.079696][ T4237] usb 5-1: Using ep0 maxpacket: 8 [ 69.109656][ T4546] user requested TSC rate below hardware speed [ 69.126818][ T4546] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 69.143552][ T4546] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 69.177621][ T4546] ------------[ cut here ]------------ [ 69.197017][ T4546] WARNING: CPU: 1 PID: 4546 at arch/x86/kvm/x86.c:10384 kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 69.204799][ T4237] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 69.226747][ T4546] Modules linked in: [ 69.234648][ T4237] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 69.249797][ T4546] CPU: 1 PID: 4546 Comm: syz.1.78 Not tainted syzkaller #0 [ 69.263289][ T4237] usb 5-1: config 0 has no interface number 0 [ 69.275970][ T4546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 69.285952][ T4237] usb 5-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 69.292714][ T4546] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 69.308940][ T4546] Code: e8 b1 31 af 00 e9 a9 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f1 f7 ff ff 4c 89 ff e8 96 31 af 00 e9 e4 f7 ff ff e8 ac ec 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ea f7 ff ff 4c [ 69.342230][ T4546] RSP: 0018:ffffc900041cfca0 EFLAGS: 00010283 [ 69.357741][ T4546] RAX: ffffffff810f36b4 RBX: 1ffff1100bff1862 RCX: 0000000000080000 [ 69.374876][ T4546] RDX: ffffc9000cc11000 RSI: 0000000000000401 RDI: 0000000000000402 [ 69.395199][ T4546] RBP: 0000000000000000 R08: ffffffff8d8b2bef R09: 1ffffffff1b1657d [ 69.399990][ T4237] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 69.416709][ T4546] R10: dffffc0000000000 R11: fffffbfff1b1657e R12: ffff88801eb4b001 [ 69.425552][ T4237] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 69.437132][ T4546] R13: ffff88805ff8c0f0 R14: ffff88805ff8c000 R15: ffff88801eb4b000 [ 69.448284][ T4237] usb 5-1: Product: syz [ 69.452228][ T4546] FS: 00007facdc91e6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 69.471453][ T4237] usb 5-1: config 0 descriptor?? [ 69.483298][ T4546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.491707][ T4546] CR2: 00007f9aac000020 CR3: 000000005685d000 CR4: 00000000003526e0 [ 69.504414][ T4546] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.521213][ T4546] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.541916][ T4546] Call Trace: [ 69.545306][ T4546] [ 69.548326][ T4546] kvm_vcpu_ioctl+0x8f2/0xc10 [ 69.560541][ T4546] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 69.566402][ T4546] ? bpf_lsm_file_ioctl+0x5/0x10 [ 69.574068][ T4546] ? security_file_ioctl+0x7c/0xa0 [ 69.579376][ T4546] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 69.585446][ T4546] __se_sys_ioctl+0xfa/0x170 [ 69.590600][ T4546] do_syscall_64+0x4c/0xa0 [ 69.595125][ T4546] ? clear_bhb_loop+0x30/0x80 [ 69.600170][ T4546] ? clear_bhb_loop+0x30/0x80 [ 69.605033][ T4546] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.611349][ T4546] RIP: 0033:0x7facde6c6199 [ 69.615946][ T4546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.636173][ T4546] RSP: 002b:00007facdc91e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.644977][ T4546] RAX: ffffffffffffffda RBX: 00007facde94dfa0 RCX: 00007facde6c6199 [ 69.653405][ T4546] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 69.662676][ T4546] RBP: 00007facde75d8e0 R08: 0000000000000000 R09: 0000000000000000 [ 69.671048][ T4546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.679112][ T4546] R13: 00007facde94e038 R14: 00007facde94dfa0 R15: 00007ffd67306af8 [ 69.689586][ T4546] [ 69.692708][ T4546] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 69.699985][ T4546] CPU: 1 PID: 4546 Comm: syz.1.78 Not tainted syzkaller #0 [ 69.707187][ T4546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 69.717247][ T4546] Call Trace: [ 69.720531][ T4546] [ 69.723464][ T4546] dump_stack_lvl+0x188/0x250 [ 69.728147][ T4546] ? show_regs_print_info+0x20/0x20 [ 69.733349][ T4546] ? load_image+0x410/0x410 [ 69.737868][ T4546] panic+0x2f8/0x850 [ 69.741768][ T4546] ? bpf_jit_dump+0xd0/0xd0 [ 69.746280][ T4546] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 69.752087][ T4546] __warn+0x248/0x2b0 [ 69.756069][ T4546] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 69.761997][ T4546] report_bug+0x1b9/0x2e0 [ 69.766341][ T4546] handle_bug+0x3a/0x70 [ 69.770509][ T4546] exc_invalid_op+0x16/0x40 [ 69.775020][ T4546] asm_exc_invalid_op+0x16/0x20 [ 69.779874][ T4546] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 69.786303][ T4546] Code: e8 b1 31 af 00 e9 a9 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f1 f7 ff ff 4c 89 ff e8 96 31 af 00 e9 e4 f7 ff ff e8 ac ec 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ea f7 ff ff 4c [ 69.805914][ T4546] RSP: 0018:ffffc900041cfca0 EFLAGS: 00010283 [ 69.811992][ T4546] RAX: ffffffff810f36b4 RBX: 1ffff1100bff1862 RCX: 0000000000080000 [ 69.819969][ T4546] RDX: ffffc9000cc11000 RSI: 0000000000000401 RDI: 0000000000000402 [ 69.827939][ T4546] RBP: 0000000000000000 R08: ffffffff8d8b2bef R09: 1ffffffff1b1657d [ 69.835916][ T4546] R10: dffffc0000000000 R11: fffffbfff1b1657e R12: ffff88801eb4b001 [ 69.843887][ T4546] R13: ffff88805ff8c0f0 R14: ffff88805ff8c000 R15: ffff88801eb4b000 [ 69.851876][ T4546] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 69.857708][ T4546] kvm_vcpu_ioctl+0x8f2/0xc10 [ 69.862393][ T4546] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 69.868054][ T4546] ? bpf_lsm_file_ioctl+0x5/0x10 [ 69.872999][ T4546] ? security_file_ioctl+0x7c/0xa0 [ 69.878118][ T4546] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 69.883757][ T4546] __se_sys_ioctl+0xfa/0x170 [ 69.888350][ T4546] do_syscall_64+0x4c/0xa0 [ 69.892765][ T4546] ? clear_bhb_loop+0x30/0x80 [ 69.897447][ T4546] ? clear_bhb_loop+0x30/0x80 [ 69.902133][ T4546] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.908029][ T4546] RIP: 0033:0x7facde6c6199 [ 69.912444][ T4546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.932049][ T4546] RSP: 002b:00007facdc91e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.940469][ T4546] RAX: ffffffffffffffda RBX: 00007facde94dfa0 RCX: 00007facde6c6199 [ 69.948439][ T4546] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 69.956409][ T4546] RBP: 00007facde75d8e0 R08: 0000000000000000 R09: 0000000000000000 [ 69.964380][ T4546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.972351][ T4546] R13: 00007facde94e038 R14: 00007facde94dfa0 R15: 00007ffd67306af8 [ 69.980341][ T4546] [ 69.983482][ T4546] Kernel Offset: disabled [ 69.987932][ T4546] Rebooting in 86400 seconds..