last executing test programs: 3m33.26056764s ago: executing program 2 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1a, 0x6, 0x4, 0x9, 0x10000, r4, 0x5, '\x00', 0x0, r3, 0x5, 0x0, 0x5, 0x0, @void, @value, @value=r3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xe24, 0x4, @mcast2, 0x14}, r7}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000007c0)={0x3, 0x40, 0xfa02, {{0x0, 0x4e24, 0x40003, @empty}, {0x2, 0x4e23, 0x6, @loopback, 0x5852}, r7, 0xe}}, 0x48) 3m32.107852307s ago: executing program 2 (id=529): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) ioctl$SIOCAX25DELUID(r3, 0x89e2, 0x0) 3m22.969315919s ago: executing program 2 (id=552): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="550bbbec", 0x4}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30}], 0x1, 0x0) recvmsg$can_bcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000400)={0x2000000, [[0x0, 0x101, 0x294b, 0x0, 0x81, 0x4, 0x23ffffc, 0x1000000], [0x18e3, 0x80000000, 0x4, 0x0, 0xffd, 0x0, 0x0, 0x9f], [0xf7, 0x3b6f, 0x0, 0x4, 0x0, 0x7ffffffd, 0xf9ec, 0xfffffffc]], '\x00', [{0xa3, 0x200000}, {}, {}, {0x0, 0xfffffffe}, {0xffffffff}, {0x81}, {0x0, 0x1980000}, {}, {}, {}, {0x0, 0x20000}], '\x00', 0x24, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000040)=0x13) ioctl$SNDCTL_DSP_GETFMTS(r7, 0x8004500b, 0x0) 3m21.119803316s ago: executing program 2 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1a, 0x6, 0x4, 0x9, 0x10000, r4, 0x5, '\x00', 0x0, r3, 0x5, 0x0, 0x5, 0x0, @void, @value, @value=r3}, 0x50) pwritev2(r4, 0x0, 0x0, 0x81, 0x0, 0x82) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xe24, 0x4, @mcast2, 0x14}, r6}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000007c0)={0x3, 0x40, 0xfa02, {{0x0, 0x4e24, 0x40003, @empty}, {0x2, 0x4e23, 0x6, @loopback, 0x5852}, r6, 0xe}}, 0x48) 3m21.087676696s ago: executing program 2 (id=558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xe}, {}, {0x8, 0xb}}}, 0x24}}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m20.097630311s ago: executing program 2 (id=562): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) ioctl$SIOCAX25DELUID(r3, 0x89e2, 0x0) 3m4.965033349s ago: executing program 32 (id=562): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) ioctl$SIOCAX25DELUID(r3, 0x89e2, 0x0) 2m31.139357998s ago: executing program 4 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x20}, 0x44800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b00000005010400000000000000000300008054020100030000000080000002ff06000700140073797a31000000000000000000000000000000000000000000000000000000004283c41a9e18d09ca54f435f1988ff82bd828f81d320447df520c31ac8366fc8"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000100)={[&(0x7f00000000c0)='\\\\\x98\xae!\\A!3\x06\xc7F\xb2?=']}, 0x1000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m27.48110858s ago: executing program 4 (id=640): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) personality(0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x16f4c000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) epoll_create1(0x80000) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(r2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 2m26.517499684s ago: executing program 4 (id=643): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getpid() sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000)) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001300), 0x101b40, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000001340)=0x5000) r4 = socket$inet(0xa, 0x801, 0x84) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x1e, "ecc1a809e5a82bbb8b0896a74d91d6ad2ad6a1239fde5b3ec9cb7b1ccb20"}, &(0x7f0000000100)=0x26) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000040), 0x4f}], 0x2, 0x0, 0x0, 0x4000010}, 0x40010) 2m20.990786584s ago: executing program 4 (id=648): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) personality(0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x16f4c000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) epoll_create1(0x80000) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(r2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 2m20.009881008s ago: executing program 4 (id=649): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) personality(0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x16f4c000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) epoll_create1(0x80000) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(r2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 2m10.524923195s ago: executing program 4 (id=659): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setregid(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 1m54.683634904s ago: executing program 33 (id=659): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setregid(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 1m14.995181617s ago: executing program 1 (id=720): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) personality(0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x16f4c000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) epoll_create1(0x80000) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(r2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 1m13.340085551s ago: executing program 1 (id=722): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setregid(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 1m6.782603826s ago: executing program 1 (id=728): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x5bbd, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0xbe2, &(0x7f0000000240), 0x0, 0x0) io_uring_enter(r4, 0x1413, 0x6040000, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m3.173049418s ago: executing program 1 (id=733): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mount$9p_virtio(0x0, &(0x7f0000000100)='\x00', 0x0, 0x2020002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m2.407003509s ago: executing program 1 (id=736): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) personality(0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x16f4c000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) epoll_create1(0x80000) close(r2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 59.863638766s ago: executing program 1 (id=738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x3, 0x25dedbfb, {0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c011}, 0x40c0) 44.731925074s ago: executing program 34 (id=738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x3, 0x25dedbfb, {0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c011}, 0x40c0) 8.624613696s ago: executing program 5 (id=806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x8, 0xb}}}, 0x24}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.825324907s ago: executing program 0 (id=807): socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioperm(0x0, 0x9, 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x86800, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4010}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x7, &(0x7f0000000400)=""/7, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r1, 0xffffffffffffffff, r5], &(0x7f0000000080)=[{0x2, 0x2, 0x7, 0xc}, {0x3, 0x2, 0xb}], 0x10, 0x1, @void, @value}, 0x94) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x2, 0x1fe000}, &(0x7f00000000c0)) sendfile(r6, 0xffffffffffffffff, 0x0, 0x20000023896) 7.031189319s ago: executing program 5 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) ftruncate(0xffffffffffffffff, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) rt_sigaction(0x11, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') read$FUSE(r4, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000000), 0x1, 0x4f3, &(0x7f0000000bc0)="$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") add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) 6.557260005s ago: executing program 0 (id=810): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.277796009s ago: executing program 3 (id=811): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="550bbbec", 0x4}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30}], 0x1, 0x0) recvmsg$can_bcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000400)={0x2000000, [[0x0, 0x101, 0x294b, 0x0, 0x81, 0x4, 0x23ffffc, 0x1000000], [0x18e3, 0x80000000, 0x4, 0x0, 0xffd, 0x0, 0x0, 0x9f], [0xf7, 0x3b6f, 0x0, 0x4, 0x0, 0x7ffffffd, 0xf9ec, 0xfffffffc]], '\x00', [{0xa3, 0x200000}, {}, {}, {0x0, 0xfffffffe}, {0xffffffff}, {0x81}, {0x0, 0x1980000}, {}, {}, {}, {0x0, 0x20000}], '\x00', 0x24, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000040)=0x13) ioctl$SNDCTL_DSP_GETFMTS(r6, 0x8004500b, 0x0) 5.662998388s ago: executing program 5 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)) fchdir(r3) semget(0x1, 0x2, 0x2e) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 4.641415483s ago: executing program 3 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) ftruncate(0xffffffffffffffff, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) rt_sigaction(0x11, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') read$FUSE(r4, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000000), 0x1, 0x4f3, &(0x7f0000000bc0)="$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") r5 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000011c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20044e, &(0x7f00000019c0)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe={'stripe', 0x3d, 0x401}}, {@test_dummy_encryption_v1}, {@data_journal}], [{@subj_type={'subj_type', 0x3d, ' hash='}}, {@obj_role={'obj_role', 0x3d, 'fscontext'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x3, 0x45d, &(0x7f0000000500)="$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") prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$restrict_keyring(0xa, r5, 0x0, 0x0) 4.543525764s ago: executing program 5 (id=814): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mount$9p_virtio(0x0, &(0x7f0000000100)='\x00', 0x0, 0x2020002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.50140547s ago: executing program 3 (id=815): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setregid(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 3.319525532s ago: executing program 0 (id=816): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5", 0x3f}], 0x1) 3.189355374s ago: executing program 5 (id=817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x8, 0xb}}}, 0x24}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.880826199s ago: executing program 0 (id=818): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="550bbbec", 0x4}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30}], 0x1, 0x0) recvmsg$can_bcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000400)={0x2000000, [[0x0, 0x101, 0x294b, 0x0, 0x81, 0x4, 0x23ffffc, 0x1000000], [0x18e3, 0x80000000, 0x4, 0x0, 0xffd, 0x0, 0x0, 0x9f], [0xf7, 0x3b6f, 0x0, 0x4, 0x0, 0x7ffffffd, 0xf9ec, 0xfffffffc]], '\x00', [{0xa3, 0x200000}, {}, {}, {0x0, 0xfffffffe}, {0xffffffff}, {0x81}, {0x0, 0x1980000}, {}, {}, {}, {0x0, 0x20000}], '\x00', 0x24, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000040)=0x13) ioctl$SNDCTL_DSP_GETFMTS(r7, 0x8004500b, 0x0) 2.426851145s ago: executing program 3 (id=819): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1817c1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) ioctl$SIOCAX25DELUID(r3, 0x89e2, 0x0) 2.319563807s ago: executing program 5 (id=820): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) personality(0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x16f4c000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(r2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 1.559552048s ago: executing program 3 (id=821): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mount$9p_virtio(0x0, &(0x7f0000000100)='\x00', 0x0, 0x2020002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.349990231s ago: executing program 0 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)) fchdir(r3) semget(0x1, 0x2, 0x2e) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 308.779056ms ago: executing program 0 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) ftruncate(0xffffffffffffffff, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) rt_sigaction(0x11, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') read$FUSE(r4, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000000), 0x1, 0x4f3, &(0x7f0000000bc0)="$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") r5 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000011c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20044e, &(0x7f00000019c0)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe={'stripe', 0x3d, 0x401}}, {@test_dummy_encryption_v1}, {@data_journal}], [{@subj_type={'subj_type', 0x3d, ' hash='}}, {@obj_role={'obj_role', 0x3d, 'fscontext'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x3, 0x45d, &(0x7f0000000500)="$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") prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$restrict_keyring(0xa, r5, 0x0, 0x0) 0s ago: executing program 3 (id=824): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 5.230185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.239253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.249468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.259015][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.266162][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.275028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.284151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.292699][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.299769][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.307672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.316445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.325071][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.332211][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.346109][ T4179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.356393][ T4179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.374134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.383681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.393043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.410031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.419849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.429797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.439358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.448137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.458553][ T4179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.475769][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.483456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.491939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.508086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.519613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.529893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.539313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.564614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.573223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.581787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.590561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.599539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.615060][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.626117][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.638781][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.678575][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.697090][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.709504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.726956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.735916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.747678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.760057][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.795427][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.805028][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.815313][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.822525][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.873988][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.910469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.926590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.937051][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.944193][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.953205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.962647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.970113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.984271][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.029293][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.045137][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.059201][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.068541][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.077525][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.085278][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.093129][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.102451][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.111002][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.122207][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.142944][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.150053][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.160273][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.175364][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.186811][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.200406][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.211924][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.224190][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.233086][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.244849][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.257818][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.275325][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.282715][ T4211] Bluetooth: hci0: command 0x041b tx timeout [ 66.290741][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.305938][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.313213][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.326397][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.344086][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.351825][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 66.352181][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 66.358054][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 66.378398][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.393615][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.409236][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.416417][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.432065][ T4212] Bluetooth: hci4: command 0x041b tx timeout [ 66.439068][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.454522][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.467640][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.477384][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.524630][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.535550][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.550941][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.560469][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.569580][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.576699][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.584647][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.595025][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.603946][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.611249][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.619340][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.629108][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.638548][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.646769][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.657156][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.666801][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.687301][ T4167] device veth0_vlan entered promiscuous mode [ 66.698965][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.710850][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.740788][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.749885][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.759604][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.773523][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.783146][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.792563][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.802502][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.811370][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.820590][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.832049][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.840631][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.850857][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.859348][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.875875][ T4167] device veth1_vlan entered promiscuous mode [ 66.892551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.900923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.914725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.924772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.954427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.963839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.980362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.989469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.009365][ T4173] device veth0_vlan entered promiscuous mode [ 67.025347][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.037279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.046322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.055258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.064909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.074427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.084396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.093816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.101811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.110211][ T4167] device veth0_macvtap entered promiscuous mode [ 67.123920][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.139041][ T4167] device veth1_macvtap entered promiscuous mode [ 67.154530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.164361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.172886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.181337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.218244][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.237816][ T4173] device veth1_vlan entered promiscuous mode [ 67.249250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.258098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.273595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.302914][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.331395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.345546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.355394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.364746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.374452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.392187][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.405174][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.414694][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.424871][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.433961][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.443325][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.452356][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.460769][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.469463][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.479367][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.487562][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.498384][ T4171] device veth0_vlan entered promiscuous mode [ 67.515952][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.526210][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.535127][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.544347][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.563795][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.573214][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.585838][ T4177] device veth0_vlan entered promiscuous mode [ 67.597853][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.606627][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.618992][ T4173] device veth0_macvtap entered promiscuous mode [ 67.642677][ T4171] device veth1_vlan entered promiscuous mode [ 67.656842][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.666465][ T4177] device veth1_vlan entered promiscuous mode [ 67.676280][ T4173] device veth1_macvtap entered promiscuous mode [ 67.685606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.697808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.706423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.717361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.787182][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.798537][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.815172][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.833223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.842342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.851210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.860439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.884303][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.895434][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.906922][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.929337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.938946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.948056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.959114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.968268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.977101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.989929][ T4179] device veth0_vlan entered promiscuous mode [ 68.017231][ T4177] device veth0_macvtap entered promiscuous mode [ 68.025083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.039199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.047983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.065737][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.074642][ T4179] device veth1_vlan entered promiscuous mode [ 68.083643][ T4173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.094297][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.094383][ T4173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.111011][ T4173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.121422][ T4173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.160114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.169148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.177950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.187264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.199421][ T4177] device veth1_macvtap entered promiscuous mode [ 68.210268][ T4171] device veth0_macvtap entered promiscuous mode [ 68.238240][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.260975][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.289886][ T4171] device veth1_macvtap entered promiscuous mode [ 68.300272][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.311058][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.321762][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.332531][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.344779][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.352675][ T4211] Bluetooth: hci0: command 0x040f tx timeout [ 68.355199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.370619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.381319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.390450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.398898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.408020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.417080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.432572][ T4210] Bluetooth: hci3: command 0x040f tx timeout [ 68.438506][ T4179] device veth0_macvtap entered promiscuous mode [ 68.445134][ T4210] Bluetooth: hci1: command 0x040f tx timeout [ 68.457389][ T4210] Bluetooth: hci2: command 0x040f tx timeout [ 68.460483][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.474808][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.484887][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.495448][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.505860][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.517323][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.522389][ T4208] Bluetooth: hci4: command 0x040f tx timeout [ 68.529195][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.544145][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.555028][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.565647][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.576455][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.589320][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.601323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.617937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.627669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.637781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.647065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.656825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.670212][ T4179] device veth1_macvtap entered promiscuous mode [ 68.693695][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.704680][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.715775][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.726711][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.739890][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.750474][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.763300][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.775852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.784337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.792983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.801843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.849918][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.863546][ T4243] loop1: detected capacity change from 0 to 1024 [ 68.874195][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.884527][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.895693][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.905931][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.917415][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.927471][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.938410][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.950105][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.960867][ T4171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.970602][ T4171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.984824][ T4243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.998812][ T4171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.008667][ T4171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.058034][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.068642][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.085801][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.096624][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.145618][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.174835][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.211720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.220672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.230120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.242390][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.253620][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.278989][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.340884][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.411097][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.467899][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.525791][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.581178][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.650699][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.882512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.891282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.943620][ T4179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.975182][ T4179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.988606][ T4179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.000386][ T4179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.786188][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 70.792388][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 70.798459][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 70.801936][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.804875][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 70.818528][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 70.859422][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.884292][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.896863][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.910281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.929248][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.955926][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.975995][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.987119][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.319769][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.436617][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.912444][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.921349][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.948815][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.001617][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.029620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.090223][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.115227][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.131267][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.177470][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.393477][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.444720][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.597010][ T4261] device wg2 entered promiscuous mode [ 72.830966][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.055648][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 73.093745][ T13] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.136943][ T4254] loop4: detected capacity change from 0 to 32768 [ 73.149414][ T4273] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.166629][ T4272] loop0: detected capacity change from 0 to 1024 [ 73.235320][ T4254] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.5 (4254) [ 73.245907][ T4272] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.546634][ T4254] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 73.572114][ T4254] BTRFS info (device loop4): using free space tree [ 73.578824][ T4254] BTRFS info (device loop4): has skinny extents [ 75.009515][ T4254] BTRFS error (device loop4): open_ctree failed: -12 [ 76.019773][ T4312] sched: RT throttling activated [ 82.510838][ T1110] cfg80211: failed to load regulatory.db [ 82.539140][ T4351] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.650321][ T4359] loop2: detected capacity change from 0 to 1024 [ 86.192204][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 87.273060][ T4387] loop4: detected capacity change from 0 to 128 [ 88.515931][ T4393] xt_limit: Overflow, try lower: 2147483649/32768 [ 89.453390][ T4403] loop3: detected capacity change from 0 to 16 [ 89.533711][ T4406] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 90.651856][ T4387] EXT4-fs: error -4 creating inode table initialization thread [ 90.694476][ T4387] EXT4-fs (loop4): mount failed [ 91.747313][ T4419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 91.917720][ T4403] loop3: detected capacity change from 0 to 512 [ 92.243010][ T4403] EXT4-fs error (device loop3): ext4_fill_super:4841: inode #2: comm syz.3.33: iget: bad i_size value: -1 [ 92.256674][ T4403] EXT4-fs (loop3): get root inode failed [ 92.262466][ T4403] EXT4-fs (loop3): mount failed [ 92.360354][ T4422] loop1: detected capacity change from 0 to 1024 [ 92.847483][ T4424] loop0: detected capacity change from 0 to 1024 [ 92.914141][ T4429] loop4: detected capacity change from 0 to 64 [ 93.993615][ T4443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.42'. [ 94.034743][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 94.425868][ T4452] loop4: detected capacity change from 0 to 1024 [ 94.678934][ T4453] sp0: Synchronizing with TNC [ 94.931759][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.831721][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 95.902423][ T13] usb 4-1: no configurations [ 95.951170][ T13] usb 4-1: can't read configurations, error -22 [ 96.535815][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 96.545541][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 96.978409][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 96.987555][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 96.991528][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 96.999902][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 97.021635][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.161860][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #41!!! [ 97.171542][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 97.181525][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 98.891906][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 99.010842][ T4481] loop0: detected capacity change from 0 to 1024 [ 99.033412][ T4483] loop2: detected capacity change from 0 to 64 [ 99.100347][ T13] usb 4-1: device descriptor read/all, error -71 [ 99.159324][ T13] usb usb4-port1: attempt power cycle [ 99.164617][ T4487] loop1: detected capacity change from 0 to 128 [ 99.263373][ T4490] loop4: detected capacity change from 0 to 1024 [ 99.372502][ T4487] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 99.385754][ T4487] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.539902][ T4500] loop3: detected capacity change from 0 to 256 [ 100.705872][ T4508] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 101.772183][ T4500] ======================================================= [ 101.772183][ T4500] WARNING: The mand mount option has been deprecated and [ 101.772183][ T4500] and is ignored by this kernel. Remove the mand [ 101.772183][ T4500] option from the mount to silence this warning. [ 101.772183][ T4500] ======================================================= [ 101.826666][ T4514] loop1: detected capacity change from 0 to 1024 [ 102.630623][ T4500] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.59'. [ 102.639794][ T4500] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.59'. [ 103.834803][ T4514] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,barrier=0x000000000000004c,lazytime,init_itable=0x0000000000000005,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 103.948234][ T4530] loop0: detected capacity change from 0 to 256 [ 105.319190][ T4538] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 105.333629][ T4538] Error parsing options; rc = [-22] [ 105.876840][ T4542] loop3: detected capacity change from 0 to 164 [ 106.256850][ T4552] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 106.263758][ T4552] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.285944][ T4552] vhci_hcd vhci_hcd.0: Device attached [ 106.407428][ T4551] loop0: detected capacity change from 0 to 1024 [ 106.422034][ T4553] loop1: detected capacity change from 0 to 1024 [ 106.804338][ T4554] vhci_hcd: connection closed [ 106.806363][ T4267] vhci_hcd: stop threads [ 106.861733][ T1107] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 106.883063][ T4267] vhci_hcd: release socket [ 106.889035][ T4267] vhci_hcd: disconnect device [ 109.805242][ T4590] overlayfs: failed to get inode (-116) [ 109.812981][ T4590] overlayfs: failed to get inode (-116) [ 110.131372][ T4593] loop0: detected capacity change from 0 to 512 [ 111.191583][ T4601] loop1: detected capacity change from 0 to 1024 [ 111.303127][ T4593] EXT4-fs (loop0): Test dummy encryption mode enabled [ 111.310142][ T4593] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.323393][ T4593] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.372059][ T4593] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.79: bad orphan inode 131083 [ 111.383364][ T4593] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 111.722019][ T4613] loop4: detected capacity change from 0 to 1024 [ 111.823132][ T4616] loop3: detected capacity change from 0 to 128 [ 111.841324][ T4592] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 111.959662][ T4616] UDF-fs: bad mount option " [ 111.959662][ T4616] " or missing value [ 112.031822][ T1107] vhci_hcd: vhci_device speed not set [ 115.891847][ T4631] loop2: detected capacity change from 0 to 1764 [ 115.999049][ T4631] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 116.008095][ T4633] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.016232][ T4635] loop4: detected capacity change from 0 to 1024 [ 116.045526][ T4631] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 116.065282][ T4635] EXT4-fs (loop4): Ignoring removed bh option [ 116.074463][ T4637] loop3: detected capacity change from 0 to 1024 [ 116.167842][ T4640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 116.181872][ T4640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.91'. [ 116.806884][ T4635] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: none. [ 119.242886][ T4662] loop4: detected capacity change from 0 to 1024 [ 119.569256][ T4672] loop4: detected capacity change from 0 to 1024 [ 119.621581][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.632595][ T4672] EXT4-fs (loop4): Invalid want_extra_isize 7 [ 119.705852][ T1107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.000197][ T13] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 120.041608][ T13] usb 1-1: config 0 has no interface number 0 [ 120.057751][ T4678] loop4: detected capacity change from 0 to 256 [ 120.066157][ T13] usb 1-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 120.115168][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 120.126593][ T13] usb 1-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 120.801901][ T13] usb 1-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 120.831693][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.855378][ T1107] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 120.868360][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.887070][ T1107] usb 3-1: Product: syz [ 120.897178][ T1107] usb 3-1: Manufacturer: syz [ 120.937991][ T1107] usb 3-1: SerialNumber: syz [ 121.013144][ T1107] usb 3-1: config 0 descriptor?? [ 121.084641][ T13] usb 1-1: Product: syz [ 121.089023][ T13] usb 1-1: Manufacturer: syz [ 121.093732][ T13] usb 1-1: SerialNumber: syz [ 121.101343][ T13] usb 1-1: config 0 descriptor?? [ 121.143844][ T13] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 121.326464][ T4687] Zero length message leads to an empty skb [ 121.360038][ T4668] process 'syz.0.98' launched '/dev/fd/-1/./file1' with NULL argv: empty string added [ 121.392117][ T1107] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 121.703038][ T13] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 121.713689][ T13] gspca_pac7302: probe of 1-1:0.101 failed with error -110 [ 122.055265][ T13] usb 1-1: USB disconnect, device number 2 [ 122.545736][ T4692] ubi31: attaching mtd0 [ 122.562631][ T4692] ubi31: scanning is finished [ 122.567419][ T4692] ubi31: empty MTD device detected [ 122.804894][ T4692] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 122.812832][ T4692] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 122.820237][ T4692] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 122.827637][ T4692] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 122.835234][ T4692] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 122.842374][ T4692] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 122.850509][ T4692] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2821666345 [ 122.861422][ T4692] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 123.044199][ T4693] ubi31: background thread "ubi_bgt31d" started, PID 4693 [ 123.833046][ T4699] loop1: detected capacity change from 0 to 128 [ 124.427021][ T4708] loop4: detected capacity change from 0 to 1024 [ 125.017781][ T1107] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 126.675953][ T4699] EXT4-fs: failed to create workqueue [ 126.681740][ T4699] EXT4-fs (loop1): mount failed [ 126.939632][ T1107] usb 3-1: USB disconnect, device number 2 [ 127.514258][ T4721] loop3: detected capacity change from 0 to 1024 [ 128.165274][ T4728] loop0: detected capacity change from 0 to 1024 [ 128.521751][ T4735] loop4: detected capacity change from 0 to 512 [ 130.078764][ T4735] EXT4-fs (loop4): Test dummy encryption mode enabled [ 130.085779][ T4735] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.308126][ T4735] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.113: bad orphan inode 131083 [ 130.319211][ T4735] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 130.676367][ T4747] 9pnet: Insufficient options for proto=fd [ 131.600154][ T4754] loop4: detected capacity change from 0 to 1024 [ 131.644919][ T4754] EXT4-fs (loop4): Ignoring removed orlov option [ 131.743123][ T4754] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,lazytime,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue. Quota mode: writeback. [ 132.020508][ T1107] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.755472][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.762591][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.075104][ T4766] netlink: 'syz.2.123': attribute type 10 has an invalid length. [ 133.759075][ T4766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.807827][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.828080][ T4777] loop4: detected capacity change from 0 to 1024 [ 133.830000][ T4766] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 133.845925][ T1107] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 133.880263][ T1107] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.908399][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.039498][ T1107] usb 1-1: config 0 descriptor?? [ 134.351579][ T1107] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 134.354157][ T4757] udc-core: couldn't find an available UDC or it's busy [ 134.451953][ T4766] syz.2.123 (4766) used greatest stack depth: 20448 bytes left [ 134.498825][ T4757] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 134.562464][ T4757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.121'. [ 134.867529][ T4789] loop3: detected capacity change from 0 to 1024 [ 135.216545][ T4212] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 135.722390][ T4798] capability: warning: `syz.1.130' uses deprecated v2 capabilities in a way that may be insecure [ 135.788355][ T4213] usb 1-1: USB disconnect, device number 3 [ 135.892051][ T4212] usb 3-1: not running at top speed; connect to a high speed hub [ 136.052439][ T4212] usb 3-1: config index 0 descriptor too short (expected 39, got 35) [ 136.184346][ T4212] usb 3-1: config 3 has an invalid interface number: 116 but max is 0 [ 136.337244][ T4212] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 136.509202][ T4212] usb 3-1: config 3 has no interface number 0 [ 136.628564][ T4212] usb 3-1: config 3 interface 116 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.687350][ T4793] sctp: failed to load transform for md5: -4 [ 136.701336][ T4795] sctp: failed to load transform for md5: -2 [ 137.032868][ T4212] usb 3-1: config 3 interface 116 has no altsetting 0 [ 137.424362][ T4811] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 140.115660][ T4212] usb 3-1: New USB device found, idVendor=53d0, idProduct=1524, bcdDevice=b3.c3 [ 140.167374][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.241774][ T4212] usb 3-1: can't set config #3, error -71 [ 140.251836][ T4849] sctp: failed to load transform for md5: -4 [ 140.264243][ T4212] usb 3-1: USB disconnect, device number 3 [ 140.280674][ T4846] sctp: failed to load transform for md5: -4 [ 140.340389][ T4852] sctp: failed to load transform for md5: -2 [ 140.346563][ T4854] sctp: failed to load transform for md5: -2 [ 140.361585][ T4859] sctp: failed to load transform for md5: -2 [ 140.368082][ T4827] sctp: failed to load transform for md5: -4 [ 140.374426][ T4864] sctp: failed to load transform for md5: -2 [ 140.415985][ T4863] sctp: failed to load transform for md5: -2 [ 141.336076][ T4873] loop2: detected capacity change from 0 to 1024 [ 145.386414][ T263] block nbd1: Attempted send on invalid socket [ 145.637148][ T263] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.650105][ T4910] qnx6: unable to read the first superblock [ 145.665462][ T263] block nbd1: Attempted send on invalid socket [ 145.673494][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.686906][ T4910] qnx6: unable to read the first superblock [ 145.693109][ T4910] qnx6: unable to read the first superblock [ 150.191716][ T26] audit: type=1326 audit(1746473809.987:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6421295969 code=0x7ffc0000 [ 150.744440][ T26] audit: type=1326 audit(1746473809.987:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6421295969 code=0x7ffc0000 [ 150.957202][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 151.532983][ T26] audit: type=1326 audit(1746473809.987:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6421295969 code=0x7ffc0000 [ 151.556360][ T26] audit: type=1326 audit(1746473809.997:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6421295969 code=0x7ffc0000 [ 151.742563][ T4968] loop1: detected capacity change from 0 to 2048 [ 151.861666][ T26] audit: type=1326 audit(1746473811.017:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 152.023861][ T26] audit: type=1326 audit(1746473811.017:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 152.252744][ T26] audit: type=1326 audit(1746473811.017:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 152.257437][ T4968] mmap: syz.1.171 (4968) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 152.388324][ T26] audit: type=1326 audit(1746473811.027:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 152.632617][ T26] audit: type=1326 audit(1746473811.027:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 152.657179][ T26] audit: type=1326 audit(1746473811.027:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4960 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 152.801967][ T4963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.983450][ T4963] bond0: (slave rose0): Enslaving as an active interface with an up link [ 153.204955][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 155.610735][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 155.610801][ T26] audit: type=1326 audit(1746473815.407:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 155.888586][ T26] audit: type=1326 audit(1746473815.417:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 155.926382][ T26] audit: type=1326 audit(1746473815.417:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 156.037373][ T26] audit: type=1326 audit(1746473815.427:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 156.214996][ T26] audit: type=1326 audit(1746473815.427:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 156.250668][ T26] audit: type=1326 audit(1746473815.427:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 156.274503][ T26] audit: type=1326 audit(1746473815.427:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 156.308404][ T26] audit: type=1326 audit(1746473815.427:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 156.331102][ T26] audit: type=1326 audit(1746473815.427:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 156.487417][ T26] audit: type=1326 audit(1746473815.427:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5011 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 167.415046][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 167.415066][ T26] audit: type=1326 audit(1746473826.997:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6421295969 code=0x7ffc0000 [ 167.542463][ T26] audit: type=1326 audit(1746473826.997:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6421295969 code=0x7ffc0000 [ 167.581524][ T26] audit: type=1326 audit(1746473827.017:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6421295969 code=0x7ffc0000 [ 167.669849][ T26] audit: type=1326 audit(1746473827.017:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6421295969 code=0x7ffc0000 [ 167.700416][ T26] audit: type=1326 audit(1746473827.017:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6421295969 code=0x7ffc0000 [ 168.472483][ T26] audit: type=1326 audit(1746473827.017:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6421295969 code=0x7ffc0000 [ 168.498945][ T26] audit: type=1326 audit(1746473827.027:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6421295969 code=0x7ffc0000 [ 168.529032][ T26] audit: type=1326 audit(1746473827.027:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6421295969 code=0x7ffc0000 [ 168.558844][ T26] audit: type=1326 audit(1746473827.027:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6421295969 code=0x7ffc0000 [ 168.608789][ T5165] loop0: detected capacity change from 0 to 2048 [ 168.616125][ T26] audit: type=1326 audit(1746473827.037:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5141 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6421295969 code=0x7ffc0000 [ 168.664310][ T5170] loop1: detected capacity change from 0 to 1024 [ 168.702848][ T5165] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 170.042449][ T5174] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 176.638200][ T5223] loop2: detected capacity change from 0 to 1024 [ 176.931138][ T4213] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 177.283312][ T4213] usb 2-1: not running at top speed; connect to a high speed hub [ 177.381867][ T4213] usb 2-1: config 0 has no interfaces? [ 178.171669][ T4213] usb 2-1: New USB device found, idVendor=53d0, idProduct=1524, bcdDevice=b3.c3 [ 178.180739][ T4213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.209542][ T4213] usb 2-1: Product: syz [ 178.214223][ T4213] usb 2-1: Manufacturer: syz [ 178.218844][ T4213] usb 2-1: SerialNumber: syz [ 178.246348][ T4213] usb 2-1: config 0 descriptor?? [ 178.436991][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 178.437007][ T26] audit: type=1326 audit(1746473838.257:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5247 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 178.488816][ T26] audit: type=1326 audit(1746473838.257:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5247 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 178.543959][ T5260] loop3: detected capacity change from 0 to 2048 [ 178.551075][ T26] audit: type=1326 audit(1746473838.267:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5247 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 178.581742][ T26] audit: type=1326 audit(1746473838.287:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5247 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 178.628481][ T26] audit: type=1326 audit(1746473838.287:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5247 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 178.694642][ T26] audit: type=1326 audit(1746473838.307:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5247 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 178.746921][ T26] audit: type=1326 audit(1746473838.307:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5247 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 178.771099][ T26] audit: type=1326 audit(1746473838.307:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5247 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 178.905609][ T5260] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 179.355154][ T26] audit: type=1326 audit(1746473838.307:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5247 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 179.503041][ T26] audit: type=1326 audit(1746473838.307:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5247 comm="syz.0.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 179.679025][ T5269] loop2: detected capacity change from 0 to 1024 [ 180.308469][ T5266] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 180.626814][ T4211] usb 2-1: USB disconnect, device number 2 [ 182.830599][ T5323] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 182.851183][ T5323] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 187.147171][ T5355] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 187.157899][ T5355] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 187.311836][ T4213] Bluetooth: hci4: command 0x0406 tx timeout [ 187.319059][ T4213] Bluetooth: hci3: command 0x0406 tx timeout [ 187.334853][ T4213] Bluetooth: hci0: command 0x0406 tx timeout [ 187.340932][ T4213] Bluetooth: hci1: command 0x0406 tx timeout [ 187.367064][ T4213] Bluetooth: hci2: command 0x0406 tx timeout [ 187.688823][ T5369] loop3: detected capacity change from 0 to 2048 [ 187.781816][ T5369] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 188.062175][ T5372] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 188.690995][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 188.691014][ T26] audit: type=1326 audit(1746473848.447:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 188.892881][ T26] audit: type=1326 audit(1746473848.447:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 189.565082][ T26] audit: type=1326 audit(1746473848.447:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 189.641208][ T26] audit: type=1326 audit(1746473848.447:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 189.715413][ T26] audit: type=1326 audit(1746473848.447:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 189.779905][ T26] audit: type=1326 audit(1746473848.447:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 189.809872][ T26] audit: type=1326 audit(1746473848.447:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 189.873872][ T26] audit: type=1326 audit(1746473848.447:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 189.980612][ T5387] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 190.143746][ T26] audit: type=1326 audit(1746473848.447:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 190.284381][ T5387] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 190.318539][ T26] audit: type=1326 audit(1746473848.447:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa86583f969 code=0x7ffc0000 [ 190.740433][ T5399] loop1: detected capacity change from 0 to 1024 [ 193.695558][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 193.695574][ T26] audit: type=1326 audit(1746473853.497:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5401 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605d0b5969 code=0x7ffc0000 [ 193.695617][ T26] audit: type=1326 audit(1746473853.497:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5401 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605d0b5969 code=0x7ffc0000 [ 193.704315][ T5427] loop2: detected capacity change from 0 to 2048 [ 194.042558][ T5427] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 194.157655][ T26] audit: type=1326 audit(1746473853.957:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 194.286826][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.300465][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.631770][ T26] audit: type=1326 audit(1746473853.967:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 194.753608][ T26] audit: type=1326 audit(1746473853.967:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 194.801550][ T26] audit: type=1326 audit(1746473853.967:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 194.929987][ T5445] loop0: detected capacity change from 0 to 1024 [ 194.943387][ T26] audit: type=1326 audit(1746473853.967:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 195.649583][ T26] audit: type=1326 audit(1746473853.977:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 195.962140][ T26] audit: type=1326 audit(1746473853.977:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 196.065861][ T26] audit: type=1326 audit(1746473853.977:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 197.157287][ T5441] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 197.539324][ T5459] loop0: detected capacity change from 0 to 1024 [ 203.626256][ T5514] loop2: detected capacity change from 0 to 2048 [ 204.869711][ T5514] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 204.893222][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 204.893283][ T26] audit: type=1326 audit(1746473864.487:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 205.388832][ T26] audit: type=1326 audit(1746473864.497:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 205.532742][ T26] audit: type=1326 audit(1746473864.507:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 206.721597][ T26] audit: type=1326 audit(1746473864.507:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 206.849041][ T26] audit: type=1326 audit(1746473864.507:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 206.881416][ T26] audit: type=1326 audit(1746473864.507:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 206.916195][ T26] audit: type=1326 audit(1746473864.507:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 207.101512][ T26] audit: type=1326 audit(1746473864.507:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 207.226714][ T5529] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 207.774123][ T26] audit: type=1326 audit(1746473864.507:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 207.797139][ T26] audit: type=1326 audit(1746473864.507:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8c9628969 code=0x7ffc0000 [ 209.014067][ T5568] loop0: detected capacity change from 0 to 1024 [ 209.608866][ T5570] loop3: detected capacity change from 0 to 2048 [ 209.712384][ T5570] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 210.684041][ T5576] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 212.533098][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 213.431820][ T7] usb 1-1: not running at top speed; connect to a high speed hub [ 213.511995][ T7] usb 1-1: config index 0 descriptor too short (expected 39, got 35) [ 213.520922][ T7] usb 1-1: config 3 has an invalid interface number: 116 but max is 0 [ 213.548252][ T7] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 213.564630][ T7] usb 1-1: config 3 has no interface number 0 [ 213.570919][ T7] usb 1-1: config 3 interface 116 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.597858][ T7] usb 1-1: config 3 interface 116 has no altsetting 0 [ 213.604299][ T5615] loop1: detected capacity change from 0 to 1024 [ 214.881883][ T7] usb 1-1: New USB device found, idVendor=53d0, idProduct=1524, bcdDevice=b3.c3 [ 214.957451][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.537736][ T7] usb 1-1: Product: syz [ 215.545272][ T7] usb 1-1: Manufacturer: syz [ 215.582142][ T7] usb 1-1: can't set config #3, error -71 [ 215.753172][ T7] usb 1-1: USB disconnect, device number 4 [ 223.654389][ T1107] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 225.831699][ T1107] usb 2-1: device descriptor read/all, error -71 [ 228.156745][ T5744] loop3: detected capacity change from 0 to 1024 [ 231.722202][ T5795] loop1: detected capacity change from 0 to 2048 [ 232.722083][ T5795] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 235.287957][ T5809] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 238.881617][ T4211] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 239.188698][ T5890] loop2: detected capacity change from 0 to 2048 [ 239.221811][ T4211] usb 2-1: not running at top speed; connect to a high speed hub [ 239.302377][ T4211] usb 2-1: config index 0 descriptor too short (expected 39, got 35) [ 239.321924][ T4211] usb 2-1: config 3 has an invalid interface number: 116 but max is 0 [ 239.329330][ T5885] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 239.336266][ T4211] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 239.351048][ T5885] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 239.412647][ T5890] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 239.510807][ T4211] usb 2-1: config 3 has no interface number 0 [ 239.600319][ T4211] usb 2-1: config 3 interface 116 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.702892][ T5896] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 239.753225][ T4211] usb 2-1: config 3 interface 116 has no altsetting 0 [ 240.091860][ T4211] usb 2-1: New USB device found, idVendor=53d0, idProduct=1524, bcdDevice=b3.c3 [ 240.110805][ T4211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.129814][ T4211] usb 2-1: Product: syz [ 240.138288][ T4211] usb 2-1: Manufacturer: syz [ 240.144058][ T4211] usb 2-1: SerialNumber: syz [ 246.276081][ T4211] usb-storage 2-1:3.116: USB Mass Storage device detected [ 246.448347][ T4211] usb 2-1: USB disconnect, device number 5 [ 247.117859][ T5980] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 247.126562][ T5980] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 249.518819][ T7] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 251.081362][ T6047] loop2: detected capacity change from 0 to 1024 [ 251.304105][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 251.411762][ T7] usb 4-1: config index 0 descriptor too short (expected 39, got 35) [ 251.784130][ T7] usb 4-1: config 3 has an invalid interface number: 116 but max is 0 [ 252.285609][ T7] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 252.300107][ T7] usb 4-1: config 3 has no interface number 0 [ 252.308294][ T7] usb 4-1: config 3 interface 116 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.323334][ T7] usb 4-1: config 3 interface 116 has no altsetting 0 [ 252.422070][ T7] usb 4-1: string descriptor 0 read error: -71 [ 252.528914][ T7] usb 4-1: New USB device found, idVendor=53d0, idProduct=1524, bcdDevice=b3.c3 [ 253.090449][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.417522][ T7] usb 4-1: can't set config #3, error -71 [ 254.431051][ T7] usb 4-1: USB disconnect, device number 5 [ 255.062322][ T6080] loop0: detected capacity change from 0 to 2048 [ 255.581472][ T6080] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 255.663118][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.679487][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.455657][ T6097] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 259.786758][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 259.786775][ T26] audit: type=1326 audit(1746473919.187:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 259.936003][ T26] audit: type=1326 audit(1746473919.197:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 260.005628][ T26] audit: type=1326 audit(1746473919.207:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 260.043842][ T26] audit: type=1326 audit(1746473919.207:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 260.067018][ T26] audit: type=1326 audit(1746473919.207:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 260.106183][ T26] audit: type=1326 audit(1746473919.207:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 260.150553][ T26] audit: type=1326 audit(1746473919.487:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 260.176124][ T6158] loop2: detected capacity change from 0 to 1024 [ 260.302641][ T26] audit: type=1326 audit(1746473919.487:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 262.791625][ T6195] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.477'. [ 265.683610][ T26] audit: type=1326 audit(1746473925.487:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 265.684099][ T26] audit: type=1326 audit(1746473925.487:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 265.684561][ T26] audit: type=1326 audit(1746473925.497:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 265.684898][ T26] audit: type=1326 audit(1746473925.497:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 265.685440][ T26] audit: type=1326 audit(1746473925.497:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 265.685833][ T26] audit: type=1326 audit(1746473925.497:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 265.686200][ T26] audit: type=1326 audit(1746473925.497:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 265.686763][ T26] audit: type=1326 audit(1746473925.497:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 265.687082][ T26] audit: type=1326 audit(1746473925.497:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 265.687442][ T26] audit: type=1326 audit(1746473925.497:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.4.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5a3d4969 code=0x7ffc0000 [ 266.079698][ T6230] loop3: detected capacity change from 0 to 1024 [ 266.688361][ T6238] loop2: detected capacity change from 0 to 2048 [ 267.362783][ T6238] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 268.112065][ T6249] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 269.907681][ T6276] loop0: detected capacity change from 0 to 2048 [ 270.795863][ T6276] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 272.327813][ T6305] loop2: detected capacity change from 0 to 2048 [ 275.178154][ T6305] EXT4-fs: failed to create workqueue [ 275.209204][ T6305] EXT4-fs (loop2): mount failed [ 280.501679][ T6408] loop1: detected capacity change from 0 to 2048 [ 281.152435][ T6408] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 285.582636][ T6457] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 286.381545][ T6457] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 287.031653][ T4311] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 288.981702][ T4311] usb 2-1: not running at top speed; connect to a high speed hub [ 289.071923][ T4311] usb 2-1: config index 0 descriptor too short (expected 39, got 35) [ 289.130883][ T4311] usb 2-1: config 3 has an invalid interface number: 116 but max is 0 [ 289.304123][ T4311] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 289.532488][ T4311] usb 2-1: config 3 has no interface number 0 [ 289.703685][ T4311] usb 2-1: config 3 interface 116 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.926618][ T4311] usb 2-1: config 3 interface 116 has no altsetting 0 [ 290.107936][ T4311] usb 2-1: string descriptor 0 read error: -71 [ 290.114749][ T4311] usb 2-1: New USB device found, idVendor=53d0, idProduct=1524, bcdDevice=b3.c3 [ 290.124573][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.178428][ T4311] usb 2-1: can't set config #3, error -71 [ 293.225548][ T4311] usb 2-1: USB disconnect, device number 6 [ 299.902373][ T6575] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.576'. [ 300.628882][ T4213] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 301.412111][ T4213] usb 2-1: not running at top speed; connect to a high speed hub [ 301.581768][ T4213] usb 2-1: config index 0 descriptor too short (expected 39, got 35) [ 301.647361][ T4213] usb 2-1: config 3 has an invalid interface number: 116 but max is 0 [ 301.790114][ T4213] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 301.813712][ T4213] usb 2-1: config 3 has no interface number 0 [ 302.992216][ T4213] usb 2-1: config 3 interface 116 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.198880][ T4213] usb 2-1: config 3 interface 116 has no altsetting 0 [ 304.987523][ T4213] usb 2-1: string descriptor 0 read error: -71 [ 304.997529][ T4213] usb 2-1: New USB device found, idVendor=53d0, idProduct=1524, bcdDevice=b3.c3 [ 305.025749][ T4213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.171611][ T4213] usb 2-1: can't set config #3, error -71 [ 305.299012][ T4213] usb 2-1: USB disconnect, device number 7 [ 308.911687][ T7] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 309.391984][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 309.459501][ T6640] chnl_net:caif_netlink_parms(): no params data found [ 309.481858][ T7] usb 4-1: config index 0 descriptor too short (expected 39, got 35) [ 309.493270][ T7] usb 4-1: config 3 has an invalid interface number: 116 but max is 0 [ 309.508120][ T7] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 309.518862][ T7] usb 4-1: config 3 has no interface number 0 [ 309.525372][ T7] usb 4-1: config 3 interface 116 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.540549][ T7] usb 4-1: config 3 interface 116 has no altsetting 0 [ 309.593485][ T6640] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.600870][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.623066][ T6640] device bridge_slave_0 entered promiscuous mode [ 309.671572][ T6640] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.679040][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.706923][ T6640] device bridge_slave_1 entered promiscuous mode [ 309.721842][ T7] usb 4-1: New USB device found, idVendor=53d0, idProduct=1524, bcdDevice=b3.c3 [ 309.731507][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.739990][ T7] usb 4-1: Product: syz [ 309.744902][ T7] usb 4-1: Manufacturer: syz [ 309.749634][ T7] usb 4-1: SerialNumber: syz [ 309.953466][ T6640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.999270][ T6640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.923647][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 312.312729][ T7] usb-storage 4-1:3.116: USB Mass Storage device detected [ 313.323568][ T6640] team0: Port device team_slave_0 added [ 313.329954][ T7] usb 4-1: USB disconnect, device number 6 [ 313.362983][ T6640] team0: Port device team_slave_1 added [ 314.394991][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 314.932814][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.939891][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.005312][ T6640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.683065][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.689421][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.705522][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 317.878418][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.891578][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.949541][ T6640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.023449][ T6640] device hsr_slave_0 entered promiscuous mode [ 318.552578][ T6640] device hsr_slave_1 entered promiscuous mode [ 318.559436][ T6640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.568621][ T6640] Cannot create hsr debugfs directory [ 318.960195][ T6640] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.998352][ T6640] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 319.028299][ T6640] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 319.083661][ T6640] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 320.120608][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 321.337413][ T6640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.415934][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.449020][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.470798][ T6640] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.507052][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.537016][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.549101][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.556258][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.617185][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.630079][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.640296][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.651123][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.658376][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.672440][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.697369][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.906185][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.930402][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.000139][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.019141][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.041200][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.321694][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.320031][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.581637][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.590335][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.608043][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.873599][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.934010][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.874876][ T6640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.041273][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.069358][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.155658][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 328.175246][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.208011][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.223688][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.252868][ T6640] device veth0_vlan entered promiscuous mode [ 328.280984][ T6640] device veth1_vlan entered promiscuous mode [ 328.339020][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 328.351010][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 328.360857][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 328.371053][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 328.384576][ T6640] device veth0_macvtap entered promiscuous mode [ 329.149545][ T6640] device veth1_macvtap entered promiscuous mode [ 329.733659][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 329.752852][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 329.910505][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.120639][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.313064][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.331666][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.358341][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.472737][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.482685][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.493366][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.503266][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.513786][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.669575][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.694879][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.742378][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.295540][ T6789] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.626'. [ 333.026741][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.120919][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.610886][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.331487][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.341611][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.371443][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.410326][ T6640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.455618][ T6640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.502155][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.594663][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.622429][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.898267][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.933920][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.981980][ T6640] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.990742][ T6640] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.035862][ T6640] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.241472][ T6640] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.576842][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.644300][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.731724][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 337.739910][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.807330][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.977344][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.472621][ T6827] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.636'. [ 340.852305][ T4213] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 343.631659][ T4213] usb 4-1: device descriptor read/all, error -71 [ 345.273390][ T4363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.329645][ T4363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.734406][ T4363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.026818][ T4363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.131526][ T13] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 361.461781][ T13] usb 6-1: not running at top speed; connect to a high speed hub [ 361.591782][ T13] usb 6-1: config index 0 descriptor too short (expected 39, got 35) [ 361.599916][ T13] usb 6-1: config 3 has an invalid interface number: 116 but max is 0 [ 362.469830][ T13] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 362.506061][ T13] usb 6-1: config 3 has no interface number 0 [ 362.551552][ T13] usb 6-1: config 3 interface 116 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.680051][ T13] usb 6-1: config 3 interface 116 has no altsetting 0 [ 362.961704][ T13] usb 6-1: string descriptor 0 read error: -71 [ 362.968106][ T13] usb 6-1: New USB device found, idVendor=53d0, idProduct=1524, bcdDevice=b3.c3 [ 363.771478][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.875747][ T13] usb 6-1: can't set config #3, error -71 [ 363.964081][ T13] usb 6-1: USB disconnect, device number 2 [ 373.645057][ T4363] device hsr_slave_0 left promiscuous mode [ 373.664964][ T4363] device hsr_slave_1 left promiscuous mode [ 373.697057][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.741590][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.771177][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.821584][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.863687][ T4363] device bridge_slave_1 left promiscuous mode [ 373.871700][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.970459][ T4363] device bridge_slave_0 left promiscuous mode [ 374.032273][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.233520][ T4363] device veth1_macvtap left promiscuous mode [ 374.240090][ T4363] device veth0_macvtap left promiscuous mode [ 374.288460][ T4363] device veth1_vlan left promiscuous mode [ 374.876243][ T4363] device veth0_vlan left promiscuous mode [ 378.925382][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.931839][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.491657][ T4304] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 379.546387][ T7051] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 379.584867][ T7051] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 379.851577][ T4304] usb 4-1: not running at top speed; connect to a high speed hub [ 380.041656][ T4304] usb 4-1: config index 0 descriptor too short (expected 39, got 35) [ 380.061498][ T4304] usb 4-1: config 3 has an invalid interface number: 116 but max is 0 [ 380.069734][ T4304] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 380.296090][ T4304] usb 4-1: config 3 has no interface number 0 [ 380.352760][ T4304] usb 4-1: config 3 interface 116 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.417553][ T7059] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 380.904671][ T4304] usb 4-1: config 3 interface 116 has no altsetting 0 [ 380.980335][ T7059] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 381.171599][ T4304] usb 4-1: New USB device found, idVendor=53d0, idProduct=1524, bcdDevice=b3.c3 [ 381.180693][ T4304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.225842][ T4363] team0 (unregistering): Port device team_slave_1 removed [ 381.337588][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 381.392787][ T4363] team0 (unregistering): Port device team_slave_0 removed [ 381.490442][ T4363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.668980][ T4363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.993836][ T4304] usb 4-1: Product: syz [ 381.998762][ T4304] usb 4-1: Manufacturer: syz [ 382.006126][ T4304] usb 4-1: SerialNumber: syz [ 382.031857][ T4363] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 382.071615][ T4304] usb 4-1: can't set config #3, error -71 [ 382.099221][ T4304] usb 4-1: USB disconnect, device number 9 [ 384.166467][ T4212] Bluetooth: hci5: command 0x041b tx timeout [ 385.507421][ T7093] loop0: detected capacity change from 0 to 2048 [ 385.716151][ T4363] bond0 (unregistering): Released all slaves [ 385.856326][ T7093] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 387.822833][ T7099] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 387.838923][ T4213] Bluetooth: hci5: command 0x040f tx timeout [ 388.150178][ T7114] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.693'. [ 389.933867][ T7052] chnl_net:caif_netlink_parms(): no params data found [ 389.951485][ T4213] Bluetooth: hci5: command 0x0419 tx timeout [ 390.520728][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.551685][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.572659][ T7052] device bridge_slave_0 entered promiscuous mode [ 390.610889][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.671774][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.680186][ T7052] device bridge_slave_1 entered promiscuous mode [ 390.793860][ T7052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.875197][ T7052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.030375][ T7052] team0: Port device team_slave_0 added [ 392.343785][ T7052] team0: Port device team_slave_1 added [ 393.715599][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.733907][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.091481][ T7052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.185029][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.242975][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.076921][ T7052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.340365][ T7052] device hsr_slave_0 entered promiscuous mode [ 400.612962][ T7052] device hsr_slave_1 entered promiscuous mode [ 400.661818][ T7052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.701470][ T7052] Cannot create hsr debugfs directory [ 402.660744][ T7052] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 402.902059][ T7052] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 402.982539][ T7052] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 403.035067][ T7052] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 403.642195][ T7052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.882576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 404.543060][ T7214] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.705'. [ 405.512329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.328953][ T7052] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.461601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 408.964420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 409.711965][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.719255][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.769918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 409.792203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 409.800885][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.808017][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.923572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 409.965960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 410.012697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 410.069716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 410.123112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 410.153503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 410.211641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 410.229348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 410.292991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 411.083527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 412.818919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 413.023884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 413.978146][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 415.126498][ T6861] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.476652][ T6861] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.152127][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 418.257413][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.586781][ T6861] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.667585][ T7052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.715674][ T6861] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.492729][ T7332] loop1: detected capacity change from 0 to 2048 [ 423.550753][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 423.762726][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.684003][ T7332] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 424.867530][ T7052] device veth0_vlan entered promiscuous mode [ 424.972913][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 424.983345][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 426.964582][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 427.022316][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 427.087754][ T7052] device veth1_vlan entered promiscuous mode [ 427.200125][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 427.230957][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 427.343648][ T7052] device veth0_macvtap entered promiscuous mode [ 427.394847][ T7052] device veth1_macvtap entered promiscuous mode [ 427.425149][ T7356] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 427.447484][ T7356] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 427.490603][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.521692][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.578263][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.615948][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.637122][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.708514][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.966159][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.991541][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.021486][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.053198][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.217419][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.230263][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.242006][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.252080][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.291434][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.311419][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.454390][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.464636][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.475381][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.485621][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.496330][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.554189][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.153792][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 430.206022][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 430.247086][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 430.308233][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.318211][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 430.332553][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.799942][ T4304] Bluetooth: hci1: command 0x0406 tx timeout [ 431.907848][ T7052] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.921313][ T7052] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.930384][ T7052] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.951698][ T7052] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.513753][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.451658][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.616625][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 435.923518][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.981408][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.001816][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 436.551068][ T6861] device hsr_slave_0 left promiscuous mode [ 436.614804][ T6861] device hsr_slave_1 left promiscuous mode [ 436.795196][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.661720][ T6861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.872223][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.879707][ T6861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.871473][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 439.953658][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.960057][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.008733][ T6861] device bridge_slave_1 left promiscuous mode [ 441.271587][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.698821][ T6861] device bridge_slave_0 left promiscuous mode [ 441.883144][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.393255][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 442.496933][ T6861] device veth1_macvtap left promiscuous mode [ 442.511908][ T6861] device veth0_macvtap left promiscuous mode [ 442.663343][ T6861] device veth1_vlan left promiscuous mode [ 442.669221][ T6861] device veth0_vlan left promiscuous mode [ 443.631659][ T7457] loop3: detected capacity change from 0 to 2048 [ 443.901968][ T7457] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 444.673936][ T7170] Bluetooth: hci2: command 0x040f tx timeout [ 445.621150][ T6861] team0 (unregistering): Port device team_slave_1 removed [ 445.631666][ T7464] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 445.709581][ T6861] team0 (unregistering): Port device team_slave_0 removed [ 445.833985][ T6861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.858732][ T6861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.964889][ T6861] bond0 (unregistering): Released all slaves [ 446.769860][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 448.588975][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 448.616497][ T7473] chnl_net:caif_netlink_parms(): no params data found [ 450.060683][ T7428] chnl_net:caif_netlink_parms(): no params data found [ 450.697158][ T7473] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.777301][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.208547][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 451.262149][ T7473] device bridge_slave_0 entered promiscuous mode [ 451.415067][ T7473] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.571475][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.643697][ T7473] device bridge_slave_1 entered promiscuous mode [ 453.231688][ T2304] Bluetooth: hci5: command 0x040f tx timeout [ 453.351515][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.358623][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.422738][ T7428] device bridge_slave_0 entered promiscuous mode [ 453.453578][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.460691][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.500854][ T7428] device bridge_slave_1 entered promiscuous mode [ 453.560923][ T7473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.901696][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.913612][ T7473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.970160][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 457.374098][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.395121][ T7473] team0: Port device team_slave_0 added [ 457.634491][ T7473] team0: Port device team_slave_1 added [ 457.648855][ T7428] team0: Port device team_slave_0 added [ 457.790964][ T7428] team0: Port device team_slave_1 added [ 457.819856][ T7473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.837169][ T7473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.981528][ T7473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.222328][ T7473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.236157][ T7473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.411667][ T7473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.452654][ T7588] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 458.491752][ T7588] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 458.503646][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.521084][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.598040][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.708556][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.727059][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.954406][ T7596] loop0: detected capacity change from 0 to 512 [ 459.407527][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.480291][ T7596] EXT4-fs (loop0): orphan cleanup on readonly fs [ 459.508578][ T7596] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.775: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 459.573133][ T7596] EXT4-fs error (device loop0): ext4_quota_enable:6415: comm syz.0.775: Bad quota inode: 4, type: 1 [ 459.595292][ T7596] EXT4-fs warning (device loop0): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 459.613927][ T7596] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 459.621299][ T7596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 460.294325][ T7473] device hsr_slave_0 entered promiscuous mode [ 460.317013][ T7473] device hsr_slave_1 entered promiscuous mode [ 460.338290][ T7473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.363975][ T7473] Cannot create hsr debugfs directory [ 460.612286][ T7428] device hsr_slave_0 entered promiscuous mode [ 460.651971][ T7428] device hsr_slave_1 entered promiscuous mode [ 460.678153][ T7428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.702685][ T7428] Cannot create hsr debugfs directory [ 462.647214][ T7629] loop5: detected capacity change from 0 to 512 [ 462.869665][ T7629] EXT4-fs (loop5): orphan cleanup on readonly fs [ 462.962867][ T7629] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #4: comm syz.5.779: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 463.405718][ T6861] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.483442][ T7629] EXT4-fs error (device loop5): ext4_quota_enable:6415: comm syz.5.779: Bad quota inode: 4, type: 1 [ 463.582368][ T7629] EXT4-fs warning (device loop5): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 463.643169][ T6861] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.652005][ T7629] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 463.674297][ T7636] loop0: detected capacity change from 0 to 2048 [ 463.681039][ T7629] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 463.742149][ T6861] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.880337][ T7636] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 465.106657][ T6861] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.313053][ T7473] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 466.391136][ T7473] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 466.484848][ T7473] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 466.720395][ T7473] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 471.087614][ T7700] loop3: detected capacity change from 0 to 512 [ 471.279615][ T7700] EXT4-fs (loop3): orphan cleanup on readonly fs [ 471.302062][ T7700] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.789: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 471.362282][ T7700] EXT4-fs error (device loop3): ext4_quota_enable:6415: comm syz.3.789: Bad quota inode: 4, type: 1 [ 471.376580][ T7700] EXT4-fs warning (device loop3): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 471.391958][ T7700] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 471.398679][ T7700] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 474.271419][ T7723] loop0: detected capacity change from 0 to 512 [ 474.528966][ T7723] EXT4-fs (loop0): orphan cleanup on readonly fs [ 474.546199][ T7723] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.795: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 474.576002][ T7723] EXT4-fs error (device loop0): ext4_quota_enable:6415: comm syz.0.795: Bad quota inode: 4, type: 1 [ 474.633199][ T7723] EXT4-fs warning (device loop0): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 474.649903][ T7723] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 474.656824][ T7723] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 478.728627][ T7745] loop3: detected capacity change from 0 to 2048 [ 478.743052][ T7473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.995506][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 480.031720][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 480.108610][ T7473] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.154867][ T7745] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 480.275642][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 480.293791][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.328615][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.335813][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.359409][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 480.492575][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 480.515367][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.522564][ T4264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.411108][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 481.420175][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 481.430317][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 481.440646][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 481.466408][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.121907][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 482.130411][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 482.189363][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 482.238182][ T7428] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 482.287898][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 482.330122][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 483.234400][ T7796] loop5: detected capacity change from 0 to 512 [ 483.353103][ T7428] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 483.777434][ T7796] EXT4-fs (loop5): orphan cleanup on readonly fs [ 483.830656][ T7796] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #4: comm syz.5.809: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 483.861733][ T7796] EXT4-fs error (device loop5): ext4_quota_enable:6415: comm syz.5.809: Bad quota inode: 4, type: 1 [ 483.879066][ T7796] EXT4-fs warning (device loop5): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 483.895107][ T7796] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 483.902424][ T7796] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 484.359242][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 484.384036][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 484.456444][ T7473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 485.380037][ T7428] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 485.598045][ T7816] loop3: detected capacity change from 0 to 512 [ 485.772721][ T7816] EXT4-fs (loop3): orphan cleanup on readonly fs [ 485.794643][ T7816] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.813: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 485.827244][ T7816] EXT4-fs error (device loop3): ext4_quota_enable:6415: comm syz.3.813: Bad quota inode: 4, type: 1 [ 485.849421][ T7816] EXT4-fs warning (device loop3): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 485.867099][ T7816] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 485.874219][ T7816] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 486.546608][ T7428] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 488.385173][ T6861] device hsr_slave_0 left promiscuous mode [ 488.721827][ T6861] device hsr_slave_1 left promiscuous mode [ 488.901411][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.908909][ T6861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.986596][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.043674][ T6861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.922480][ T6861] device bridge_slave_1 left promiscuous mode [ 489.951689][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.012151][ T6861] device bridge_slave_0 left promiscuous mode [ 490.041597][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.159091][ T6861] device veth1_macvtap left promiscuous mode [ 490.193081][ T6861] device veth0_macvtap left promiscuous mode [ 490.210564][ T6861] device veth1_vlan left promiscuous mode [ 490.231057][ T6861] device veth0_vlan left promiscuous mode [ 595.791316][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 595.798323][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6861/1:b..l [ 595.806806][ C0] (detected by 0, t=10502 jiffies, g=24113, q=52) [ 595.813332][ C0] task:kworker/u4:17 state:R running task stack:24800 pid: 6861 ppid: 2 flags:0x00004000 [ 595.825360][ C0] Workqueue: netns cleanup_net [ 595.830190][ C0] Call Trace: [ 595.833490][ C0] [ 595.836471][ C0] __schedule+0x11b8/0x43b0 [ 595.841012][ C0] ? mark_lock+0x94/0x320 [ 595.845376][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 595.851382][ C0] ? lock_chain_count+0x20/0x20 [ 595.856264][ C0] ? release_firmware_map_entry+0x190/0x190 [ 595.862194][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 595.868132][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 595.874198][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 595.879443][ C0] ? preempt_schedule+0xa7/0xb0 [ 595.884319][ C0] ? sctp_inet6addr_event+0x67d/0x730 [ 595.889747][ C0] preempt_schedule_common+0x82/0xd0 [ 595.895059][ C0] preempt_schedule+0xa7/0xb0 [ 595.899759][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 595.905422][ C0] ? lock_chain_count+0x20/0x20 [ 595.910304][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 595.916499][ C0] preempt_schedule_thunk+0x16/0x18 [ 595.921743][ C0] __local_bh_enable_ip+0x13b/0x1b0 [ 595.927071][ C0] ? _local_bh_enable+0xa0/0xa0 [ 595.931965][ C0] ? wq_worker_last_func+0x40/0x40 [ 595.937100][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 595.942320][ C0] ? sctp_inet6addr_event+0x67d/0x730 [ 595.947719][ C0] sctp_inet6addr_event+0x67d/0x730 [ 595.952959][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 595.958706][ C0] addrconf_ifdown+0xdf4/0x1970 [ 595.963581][ C0] ? lock_chain_count+0x20/0x20 [ 595.968461][ C0] ? tls_dev_event+0x66e/0xe50 [ 595.973251][ C0] ? addrconf_cleanup+0x260/0x260 [ 595.978298][ C0] ? __local_bh_enable_ip+0x12a/0x1b0 [ 595.983705][ C0] addrconf_notify+0x445/0xf00 [ 595.988528][ C0] raw_notifier_call_chain+0xcb/0x160 [ 595.993938][ C0] dev_close_many+0x28d/0x400 [ 595.998734][ C0] ? __dev_open+0x420/0x420 [ 596.003273][ C0] unregister_netdevice_many+0x472/0x18f0 [ 596.009037][ C0] ? rcu_is_watching+0x11/0xa0 [ 596.013822][ C0] ? alloc_netdev_mqs+0xc40/0xc40 [ 596.018877][ C0] ? unregister_netdevice_queue+0x1aa/0x360 [ 596.024803][ C0] ? list_netdevice+0x450/0x450 [ 596.029683][ C0] ? br_dev_delete+0xd6/0x100 [ 596.034484][ C0] default_device_exit_batch+0x336/0x390 [ 596.040154][ C0] ? default_device_exit+0x360/0x360 [ 596.045566][ C0] ? wait_woken+0x1b0/0x1b0 [ 596.050622][ C0] ? mutex_lock_nested+0x17/0x20 [ 596.055580][ C0] ? default_device_exit+0x360/0x360 [ 596.060889][ C0] cleanup_net+0x77b/0xb80 [ 596.065353][ C0] ? ops_free_list+0x330/0x330 [ 596.070138][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 596.075544][ C0] process_one_work+0x863/0x1000 [ 596.080519][ C0] ? worker_detach_from_pool+0x240/0x240 [ 596.086174][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 596.091485][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 596.096539][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 596.101938][ C0] ? wq_worker_running+0x97/0x170 [ 596.106984][ C0] worker_thread+0xaa8/0x12a0 [ 596.111809][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 596.117744][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 596.122982][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 596.128206][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 596.134136][ C0] kthread+0x436/0x520 [ 596.138232][ C0] ? rcu_lock_release+0x20/0x20 [ 596.143204][ C0] ? kthread_blkcg+0xd0/0xd0 [ 596.147822][ C0] ret_from_fork+0x1f/0x30 [ 596.152278][ C0] [ 596.155310][ C0] rcu: rcu_preempt kthread starved for 10528 jiffies! g24113 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 596.166520][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 596.176597][ C0] rcu: RCU grace-period kthread stack dump: [ 596.182505][ C0] task:rcu_preempt state:R running task stack:28032 pid: 15 ppid: 2 flags:0x00004000 [ 596.193322][ C0] Call Trace: [ 596.196615][ C0] [ 596.199566][ C0] __schedule+0x11b8/0x43b0 [ 596.204125][ C0] ? release_firmware_map_entry+0x190/0x190 [ 596.210057][ C0] schedule+0x11b/0x1e0 [ 596.214237][ C0] schedule_timeout+0x15c/0x280 [ 596.219106][ C0] ? console_conditional_schedule+0x40/0x40 [ 596.225020][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 596.230938][ C0] ? update_process_times+0x200/0x200 [ 596.236333][ C0] ? prepare_to_swait_event+0x331/0x350 [ 596.241923][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 596.246815][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 596.252064][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 596.258243][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 596.263031][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 596.268255][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 596.273483][ C0] rcu_gp_kthread+0x98/0x350 [ 596.278099][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 596.283230][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 596.289246][ C0] ? __kthread_parkme+0x157/0x1b0 [ 596.294299][ C0] kthread+0x436/0x520 [ 596.298386][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 596.303514][ C0] ? kthread_blkcg+0xd0/0xd0 [ 596.308132][ C0] ret_from_fork+0x1f/0x30 [ 596.312593][ C0] [ 596.315639][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 596.321973][ C0] Sending NMI from CPU 0 to CPUs 1: [ 596.327211][ C1] NMI backtrace for cpu 1 [ 596.327226][ C1] CPU: 1 PID: 7865 Comm: syz.0.823 Not tainted 5.15.181-syzkaller #0 [ 596.327244][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 596.327258][ C1] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 596.327285][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 1f 30 c8 02 66 2e 0f 1f 84 00 00 00 00 00 [ 596.327305][ C1] RSP: 0018:ffffc90000dd0e48 EFLAGS: 00000046 [ 596.327320][ C1] RAX: 000000000003dfc2 RBX: 000000000003dfc2 RCX: 0000000000000838 [ 596.327332][ C1] RDX: 0000000000000000 RSI: 000000000003dfc2 RDI: 0000000000000838 [ 596.327342][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad155e [ 596.327354][ C1] R10: fffffbfff1ad155e R11: 1ffffffff1ad155d R12: dffffc0000000000 [ 596.327367][ C1] R13: 0000000010005c46 R14: ffffffff8bbae9c8 R15: dffffc0000000000 [ 596.327380][ C1] FS: 000055557cb8f500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 596.327395][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 596.327407][ C1] CR2: 0000562444b3fbf8 CR3: 000000006a6be000 CR4: 00000000003506e0 [ 596.327421][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 596.327431][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 596.327441][ C1] Call Trace: [ 596.327449][ C1] [ 596.327454][ C1] lapic_next_event+0x5b/0x70 [ 596.327476][ C1] clockevents_program_event+0x1bc/0x310 [ 596.327501][ C1] hrtimer_interrupt+0x4de/0x8d0 [ 596.327533][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 596.327555][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 596.327576][ C1] [ 596.327580][ C1] [ 596.327586][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 596.327603][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 596.327623][ C1] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4e d6 b1 f7 48 89 df e8 16 ab b2 f7 e8 71 4f d3 f7 fb bf 01 00 00 00 46 cf a6 f7 65 8b 05 e7 e2 57 76 85 c0 74 02 5b c3 e8 94 ed 55 [ 596.327637][ C1] RSP: 0018:ffffc9000418fbc0 EFLAGS: 00000282 [ 596.327650][ C1] RAX: 850f6cffa2a70600 RBX: ffff8880758b3780 RCX: 850f6cffa2a70600 [ 596.327663][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b0fc0 RDI: 0000000000000001 [ 596.327675][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100eb166f1 [ 596.327687][ C1] R10: ffffed100eb166f1 R11: 1ffff1100eb166f0 R12: ffff8880758b3780 [ 596.327700][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004 [ 596.327720][ C1] get_signal+0x11d6/0x12c0 [ 596.327746][ C1] arch_do_signal_or_restart+0xc1/0x1300 [ 596.327767][ C1] ? _copy_from_user+0x111/0x170 [ 596.327786][ C1] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 596.327809][ C1] ? load_gs_index+0x120/0x120 [ 596.327828][ C1] ? get_sigframe_size+0x10/0x10 [ 596.327856][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 596.327878][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 596.327898][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 596.327919][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 596.327938][ C1] do_syscall_64+0x58/0xa0 [ 596.327954][ C1] ? clear_bhb_loop+0x15/0x70 [ 596.327969][ C1] ? clear_bhb_loop+0x15/0x70 [ 596.327984][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 596.328004][ C1] RIP: 0033:0x7fa865707830 [ 596.328019][ C1] Code: ef fe ff ff 48 8d 3d 02 ad 1b 00 31 c0 e8 48 82 ff ff 48 8d 3d db ae 1b 00 31 c0 e8 3a 82 ff ff 66 2e 0f 1f 84 00 00 00 00 00 <41> 57 41 56 41 55 41 54 55 53 48 83 ec 18 48 8b 47 38 48 8b 57 40 [ 596.328033][ C1] RSP: 002b:00007ffec35c9938 EFLAGS: 00010246 [ 596.328045][ C1] RAX: 0000000000002008 RBX: 00007fa866596720 RCX: 0000000000000000 [ 596.328056][ C1] RDX: 0000000000000031 RSI: 0000000000000008 RDI: 00007fa866596720 [ 596.328067][ C1] RBP: 00000000000000fc R08: 00007fa864eb00a8 R09: 00007fa865a53000 [ 596.328078][ C1] R10: 00007fa864eb0008 R11: 0000000000000005 R12: ffffffff814a19fa [ 596.328090][ C1] R13: 00007fa865a67038 R14: 00000000000000cb R15: ffffffffffffdff8 [ 596.328103][ C1] ? dequeue_signal+0x2a/0x440 [ 596.328127][ C1]