last executing test programs: 2m56.373579833s ago: executing program 1 (id=230): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000019500)=@mangle={'mangle\x00', 0x64, 0x6, 0x7e0, 0x628, 0x3f8, 0x3f8, 0x0, 0x628, 0x710, 0x710, 0x710, 0x710, 0x710, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast1, [], [], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @empty, @remote, @private2, @private1, @dev, @loopback, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @loopback, @local, @private1, @dev]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'nr0\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'sit0\x00', 'sit0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x840) 2m54.261350087s ago: executing program 1 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x8, 0x1, 0x3c, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 2m50.145961855s ago: executing program 1 (id=241): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2m49.874971542s ago: executing program 1 (id=243): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c40)={0x1, &(0x7f0000000c80)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2m49.864386423s ago: executing program 1 (id=244): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="75ff000010002000040000000800000000000000", @ANYRES32=0x0, @ANYBLOB="712000000000000008001300", @ANYRES32=0x0, @ANYBLOB="bd1cc29c1d55a9d4a50578f1ebd344dbdef58ffddc13a0a451fce6e1918554ba9486814a640d67508dd2c4e480cd8995c6025d7bfa02613aef655e6cca21002cf1bf"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80d0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d80)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000e40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000f00)='./sys\x00', &(0x7f0000000f40)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r3, &(0x7f0000001000)='ji', 0x2) 2m48.699242661s ago: executing program 1 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000001b00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001b40)='./sys\x00', &(0x7f0000001b80)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x2) landlock_restrict_self(r2, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1800, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) write(r3, &(0x7f0000001c00)='1', 0x1) 2m33.33413978s ago: executing program 32 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000001b00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001b40)='./sys\x00', &(0x7f0000001b80)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x2) landlock_restrict_self(r2, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1800, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) write(r3, &(0x7f0000001c00)='1', 0x1) 19.31064627s ago: executing program 3 (id=627): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x82c0, 0x101) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x181) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1603, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000002c0)=0x7) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) ptrace$setregset(0x4205, r2, 0x202, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 17.091532326s ago: executing program 3 (id=631): r0 = socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4804497, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES32, @ANYRES32=r0], 0x68, 0xc54, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000001b80)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001bc0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001c00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001c80)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001d00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001d40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001d80)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') read$FUSE(r4, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@enum={0x3, 0x2, 0x0, 0xf, 0x4, [{0xa, 0x3}, {0xd, 0x8}]}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000003e80)=""/4115, 0x45, 0x1013, 0x1}, 0x28) 15.655147141s ago: executing program 2 (id=635): socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000025c0)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f0000000100)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'dh\x00', 0x20, 0xa8a, 0x3e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000080)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x27, 0x81, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x1, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000180)={{0x84, @rand_addr=0x64010100, 0x4e25, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4ea4, 0x10000, 0x0, 0x12d5c, 0x12d4f}}, 0x44) 13.98874778s ago: executing program 4 (id=636): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) socket(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xc41a, &(0x7f0000000280)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000840)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000980), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000a40)={0xa2, {0x14, 0x200, 0xe, 0x4, 0xfff}}) socket$inet6(0xa, 0x3, 0x7) r3 = syz_open_dev$sndctrl(&(0x7f0000000ac0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000b00)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x3d, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x2, 0xffffffffffffeaf2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x3fffffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x7fff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9295]}) 13.918816588s ago: executing program 3 (id=637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13.488771561s ago: executing program 2 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) vmsplice(r1, &(0x7f00000023c0)=[{&(0x7f0000002400)='w', 0x1}], 0x1, 0x1) setreuid(0xee01, 0xee01) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000002480)=0x9, 0x4) socket(0x10, 0x3, 0x4) setxattr$security_capability(&(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, &(0x7f00000001c0)=@v1={0x1000000, [{0x4, 0x4b}]}, 0xc, 0x2) sendto$unix(r2, &(0x7f0000002500)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimensat(r0, &(0x7f0000000000)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', &(0x7f0000000080)={{}, {r4, r5/1000+60000}}, 0x100) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 12.921716199s ago: executing program 4 (id=642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.900163451s ago: executing program 2 (id=643): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) tkill(0x0, 0x12) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 12.005587582s ago: executing program 5 (id=645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_SYNC(r4, 0x80086e8a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 8.987258698s ago: executing program 3 (id=646): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000440)=0x8000a, 0x4) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000780)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000800)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000880), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000980), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6) fsopen(&(0x7f0000000a00)='pipefs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r4) mkdir(&(0x7f0000000040)='dir0\x00', 0x0) mount(0x0, &(0x7f0000000080)='dir0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x103a42, 0x4) read$FUSE(r5, &(0x7f00000018c0)={0x2020}, 0x2020) 8.987099238s ago: executing program 4 (id=647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000600)={0xa, 0x4e21, 0x200, @local, 0x7}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 8.928767984s ago: executing program 2 (id=649): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40c0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x40, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f0000000180)="$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") openat(0xffffffffffffff9c, 0x0, 0x40942, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001300), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001400), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001480)=0x6) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000001180)={@my=0x1}) 8.849880302s ago: executing program 5 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) r4 = dup(r3) inotify_rm_watch(r4, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000440)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[], 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) 6.793454261s ago: executing program 3 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000700)=""/102392, 0x18ff8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000180)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) bind$inet(r3, &(0x7f0000019700)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NFT_BATCH(r4, 0x0, 0x20004080) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x40}, 0x20002880) 6.533682457s ago: executing program 5 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) 6.276187063s ago: executing program 4 (id=653): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x4caa) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf520a000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCGSOFTCAR(r4, 0x5414, &(0x7f0000000040)) 6.044803126s ago: executing program 2 (id=654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x1}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x105, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x96, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0x2, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x8, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9b, 0x8, 0x8000000, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x8, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x8, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x9, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1000001, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x1, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r12, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xfff3}, {}, {0xa, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x11, 0x3, 0xb, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0x1fffb, 0x1, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x9, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x3, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x5, 0x4, 0x8, 0x8, 0x7, 0x1, 0x79db, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xfc, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xa76e, 0x6, 0x1, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x3, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0xffffffff, 0x5, 0xa, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x63cd, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x41002, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0xe, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xf, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0xa00, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 3.883126436s ago: executing program 5 (id=655): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRES32], 0x67, 0xc54, &(0x7f0000002500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto(r3, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 3.874855607s ago: executing program 0 (id=656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.515056623s ago: executing program 4 (id=657): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 3.434795761s ago: executing program 0 (id=658): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = dup2(r0, r0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) 3.328953792s ago: executing program 4 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x3000, 0x800, &(0x7f00007bd000/0x3000)=nil) io_setup(0x5, &(0x7f0000000440)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r3, 0x2, &(0x7f0000000240)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x3, 0x0, r4, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x400, r4, 0x0, 0x0, 0x80, 0x0, 0x1, r4}]) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000977000/0x2000)=nil) shmctl$SHM_INFO(0x0, 0xe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.499036766s ago: executing program 3 (id=660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) sendmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000800)="e2", 0x1}], 0x1, &(0x7f0000000c40)=[@rights={{0x10}}], 0x10, 0x40040}, 0x10800) 2.498778637s ago: executing program 0 (id=661): syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000001ac0)='./file0\x00', 0x0, &(0x7f0000001b00)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000001b80)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") prlimit64(0x0, 0xe, &(0x7f0000002000)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000002080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002100)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000002180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000021c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x6) r3 = semget(0x1, 0x5, 0x6b4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000002400), &(0x7f0000002440)='./file0\x00', 0x2000400, &(0x7f0000002480)=ANY=[], 0x6, 0x237, &(0x7f00000024c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 2.395169267s ago: executing program 5 (id=662): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4010) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000008c0)={0x0, 'bond_slave_1\x00', {0x2}, 0x100}) mount(0x0, 0x0, &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='ext4\x00', 0x8410, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, 0x0, 0xb) splice(r5, 0x0, r4, 0x0, 0xf3a, 0x8) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r4, &(0x7f0000000380)={0xffffffffffffffb6, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x2, 0x0, 0x0, 0x2a, 0x3}}, 0x50) write$binfmt_register(0xffffffffffffffff, &(0x7f0000001600)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)=ANY=[]) 1.928058534s ago: executing program 0 (id=663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1.831820524s ago: executing program 2 (id=664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.702826917s ago: executing program 0 (id=665): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0xfffffffffffffffe) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) syz_emit_ethernet(0x66, &(0x7f0000000500)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}}}}}}}}, 0x0) sendto(r3, &(0x7f0000000400)="8401fe", 0x3, 0x4085, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000004c0)=@buf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 85.943731ms ago: executing program 5 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='.\x00', 0xa880, 0x97) getdents(r3, &(0x7f0000000b00)=""/205, 0xcd) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000440)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000680)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r5, 0x1, &(0x7f00000006c0)={{0x77359400}, {0x77359400}}, 0x0) 0s ago: executing program 0 (id=667): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x400) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 62.616441][ T4177] cgroup: Unknown subsys name 'net' [ 62.743553][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.242635][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.491084][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.498943][ T4203] rdma_rxe: rxe_register_device failed with error -23 [ 65.506470][ T4203] rdma_rxe: failed to add rxe_eth0 [ 65.522368][ T4192] rdma_rxe: rxe_register_device failed with error -23 [ 65.531076][ T4191] rdma_rxe: rxe_register_device failed with error -23 [ 65.540448][ T4191] rdma_rxe: failed to add rxe_eth0 [ 65.547638][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 65.554854][ T4190] rdma_rxe: failed to add rxe_eth0 [ 65.559030][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.562085][ T4192] rdma_rxe: failed to add rxe_eth0 [ 65.618488][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.797907][ T4193] infiniband rxe0: set active [ 65.812621][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.826603][ T4193] infiniband rxe0: added rxe_eth0 [ 65.895221][ T4193] RDS/IB: rxe0: added [ 65.900158][ T4193] smc: adding ib device rxe0 with port count 1 [ 65.906506][ T4193] smc: ib device rxe0 port 1 has pnetid [ 65.918681][ T4203] chnl_net:caif_netlink_parms(): no params data found [ 65.935307][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.959398][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.088135][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 66.118839][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.133658][ T4203] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.142783][ T4203] device bridge_slave_0 entered promiscuous mode [ 66.163142][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.183502][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.191144][ T4203] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.199678][ T4203] device bridge_slave_1 entered promiscuous mode [ 66.211934][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.274781][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.310425][ T4203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.353312][ T4203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.391054][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.414223][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.428485][ T4191] device bridge_slave_0 entered promiscuous mode [ 66.465821][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.472455][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.484389][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.493188][ T4191] device bridge_slave_1 entered promiscuous mode [ 66.583864][ T4203] team0: Port device team_slave_0 added [ 66.623326][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.632343][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.644523][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.669005][ T4203] team0: Port device team_slave_1 added [ 66.700344][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.713092][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.734252][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.764485][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.791879][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.808067][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.827629][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.834743][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.843727][ T4192] device bridge_slave_1 entered promiscuous mode [ 66.897421][ T4191] team0: Port device team_slave_0 added [ 66.912487][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.920248][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.933061][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.957987][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.964974][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.994017][ T4203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.007717][ T4191] team0: Port device team_slave_1 added [ 67.022402][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.031008][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.047714][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.054702][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.117300][ T4203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.160689][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.191541][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.223205][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.263420][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.270720][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.297116][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.310458][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.317511][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.343485][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.366657][ T4203] device hsr_slave_0 entered promiscuous mode [ 67.373805][ T4203] device hsr_slave_1 entered promiscuous mode [ 67.386026][ T4192] team0: Port device team_slave_0 added [ 67.399537][ T4192] team0: Port device team_slave_1 added [ 67.412203][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.419680][ T4190] team0: Port device team_slave_0 added [ 67.428129][ T4190] team0: Port device team_slave_1 added [ 67.456630][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.463908][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.490850][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 67.497250][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 67.498338][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.513962][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 67.520116][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 67.533402][ T3855] infiniband rxe0: set active [ 67.547088][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 67.567198][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.574195][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.600969][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.623618][ T4191] device hsr_slave_0 entered promiscuous mode [ 67.630687][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.637544][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.645457][ T4191] Cannot create hsr debugfs directory [ 67.651249][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.681177][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.688641][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.715236][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.746166][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.753292][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.779612][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.840696][ T4192] device hsr_slave_0 entered promiscuous mode [ 67.847965][ T4192] device hsr_slave_1 entered promiscuous mode [ 67.855410][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.864060][ T4192] Cannot create hsr debugfs directory [ 67.895420][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.902631][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.909969][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.918037][ T4190] Cannot create hsr debugfs directory [ 68.211510][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.252436][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.274252][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 68.296653][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.313353][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.373397][ T4203] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.395164][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.402620][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.411723][ T4193] device bridge_slave_0 entered promiscuous mode [ 68.421188][ T4203] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.433233][ T4203] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.443864][ T4203] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.454332][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.461617][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.470444][ T4193] device bridge_slave_1 entered promiscuous mode [ 68.493821][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.512631][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.562984][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.572571][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.588971][ T4193] team0: Port device team_slave_0 added [ 68.598687][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.615074][ T4193] team0: Port device team_slave_1 added [ 68.648939][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.667703][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.674697][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.702778][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.715860][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.723253][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.751549][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.819864][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.848923][ T4193] device hsr_slave_0 entered promiscuous mode [ 68.855743][ T4193] device hsr_slave_1 entered promiscuous mode [ 68.864303][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.872471][ T4193] Cannot create hsr debugfs directory [ 68.878675][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.890998][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.900718][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.911550][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.956413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.967211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.009960][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.057613][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.066372][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.076106][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.083517][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.107285][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.147450][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.156685][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.165432][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.172586][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.182717][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.194055][ T4203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.226110][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.247916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.258308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.266232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.274440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.283951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.296584][ T4203] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.333559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.341906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.353024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.363224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.373159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.384311][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.397895][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.405826][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.421250][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.434472][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.455848][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.465240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.475248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.485980][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.493158][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.501175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.510506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.519184][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.526364][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.534245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.542836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.550773][ T1339] Bluetooth: hci0: command 0x041b tx timeout [ 69.556894][ T1339] Bluetooth: hci2: command 0x041b tx timeout [ 69.563345][ T1339] Bluetooth: hci3: command 0x041b tx timeout [ 69.569212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.570898][ T1339] Bluetooth: hci1: command 0x041b tx timeout [ 69.586020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.595266][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.602463][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.615797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.624027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.631872][ T1339] Bluetooth: hci4: command 0x041b tx timeout [ 69.638912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.648348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.656798][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.664028][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.673424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.682483][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.692565][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.705989][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.754169][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.767270][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.781433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.792396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.802089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.811963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.822842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.832715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.842102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.851623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.864611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.874455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.889752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.902529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.913308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.925420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.934516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.945151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.954281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.963364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.972842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.980913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.991198][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.025506][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.043542][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.055732][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.070733][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.082263][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.095036][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.106688][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.113868][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.133168][ T4203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.162837][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.171981][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.185078][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.194409][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.201687][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.210712][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.219837][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.296347][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.314017][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.324056][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.339254][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.350220][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.362254][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.374794][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.385012][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.400773][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.412787][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.425549][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.435916][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.448481][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.465611][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.514473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.523078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.547762][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.559239][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.577831][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.613056][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.653463][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.663129][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.682181][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.694672][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.705162][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.721373][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.732956][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.744813][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.757930][ T4191] device veth0_vlan entered promiscuous mode [ 70.766675][ T4203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.783470][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.792294][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.826191][ T4191] device veth1_vlan entered promiscuous mode [ 70.840072][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.849513][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.859081][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.866597][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.876685][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.885606][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.920398][ T4190] device veth0_vlan entered promiscuous mode [ 70.927499][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.935796][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.945252][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.954288][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.963698][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.977545][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.986411][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.996536][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.003701][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.020005][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.035155][ T4190] device veth1_vlan entered promiscuous mode [ 71.054335][ T4191] device veth0_macvtap entered promiscuous mode [ 71.063504][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.073788][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.083373][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.092167][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.102285][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.111408][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.120690][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.130487][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.141852][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.148983][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.161618][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.170470][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.179148][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.190220][ T4203] device veth0_vlan entered promiscuous mode [ 71.220510][ T4191] device veth1_macvtap entered promiscuous mode [ 71.231611][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.238331][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.250758][ T4203] device veth1_vlan entered promiscuous mode [ 71.262148][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.271689][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.282114][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.292007][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.353439][ T4190] device veth0_macvtap entered promiscuous mode [ 71.361453][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.372369][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.382241][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.391840][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.401214][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.410634][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.419825][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.429171][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.438409][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.446807][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.456185][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.474248][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.498621][ T4190] device veth1_macvtap entered promiscuous mode [ 71.507450][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.515630][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.530230][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.549110][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.564789][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.581927][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.603503][ T4192] device veth0_vlan entered promiscuous mode [ 71.620961][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.630349][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.639829][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 71.642554][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.646162][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 71.660207][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 71.666097][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.666444][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 71.683272][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.693592][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.704922][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.715083][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 71.716403][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.733677][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.742566][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.773504][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.783030][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.807681][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.819726][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.833031][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.844130][ T4203] device veth0_macvtap entered promiscuous mode [ 71.861072][ T4192] device veth1_vlan entered promiscuous mode [ 71.874827][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.885658][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.895040][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.904398][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.928799][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.941234][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.955630][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.971651][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.981069][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.991331][ T4203] device veth1_macvtap entered promiscuous mode [ 72.013976][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.023128][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.032483][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.041378][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.059831][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.069614][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.078538][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.086082][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.118331][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.132235][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.144354][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.162020][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.181264][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.196169][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.216656][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.235323][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.266341][ T4192] device veth0_macvtap entered promiscuous mode [ 72.276606][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.285637][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.296107][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.310513][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.325608][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.337962][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.355704][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.373315][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.396539][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.413845][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.438583][ T4203] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.451770][ T4203] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.460954][ T4203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.470004][ T4203] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.491175][ T4192] device veth1_macvtap entered promiscuous mode [ 72.547692][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.556103][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.583623][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.603735][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.638453][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.656227][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.666462][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.678736][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.688623][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.699471][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.711144][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.719195][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.727897][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.735810][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.745136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.755338][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.809191][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.825583][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.838784][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.851003][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.861187][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.872059][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.883626][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.894676][ T650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.909139][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.918093][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.926889][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.936390][ T650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.944689][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.952879][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.985525][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.002742][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.013512][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.026780][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.040629][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.055405][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.069009][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.140347][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.150585][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.187524][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.195502][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.207915][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.219602][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.227801][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.252083][ T4193] device veth0_vlan entered promiscuous mode [ 73.751627][ T4306] nvme_fcloop: unknown parameter or missing value 'wwn' [ 74.207501][ T1339] Bluetooth: hci0: command 0x0419 tx timeout [ 74.213682][ T1339] Bluetooth: hci2: command 0x0419 tx timeout [ 74.219852][ T1339] Bluetooth: hci3: command 0x0419 tx timeout [ 74.225926][ T1339] Bluetooth: hci1: command 0x0419 tx timeout [ 74.232240][ T1339] Bluetooth: hci4: command 0x0419 tx timeout [ 74.262294][ T4193] device veth1_vlan entered promiscuous mode [ 74.387000][ T650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.409824][ T650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.420784][ T4312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.465400][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.504494][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.548115][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.626897][ T4312] mmap: syz.0.6 (4312): VmData 37560320 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 74.717900][ T650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.725771][ T650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.761189][ T4193] device veth0_macvtap entered promiscuous mode [ 74.783753][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.794471][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.856421][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.879476][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.963503][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.085527][ T4193] device veth1_macvtap entered promiscuous mode [ 75.419651][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.440153][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.461153][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.489914][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.506894][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.529339][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.562298][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.572249][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.582733][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.600268][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.682358][ T4320] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 75.814896][ T4320] bond1: (slave lo): Enslaving as an active interface with an up link [ 75.968983][ T4320] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 76.180182][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.301879][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.420995][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.528237][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.575071][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.589510][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.599457][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.610370][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.620431][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.631020][ T4320] syz.1.2 (4320) used greatest stack depth: 19984 bytes left [ 76.643085][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.679896][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.693272][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.796874][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.844550][ T4351] loop2: detected capacity change from 0 to 1024 [ 76.937717][ T4353] ip_tables: iptables: counters copy to user failed while replacing table [ 77.029842][ T4354] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 77.045902][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.189138][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.576944][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 77.606942][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 77.646943][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.733845][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.848273][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.171051][ T4269] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.201111][ T650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.256651][ T650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.351393][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.381447][ T4363] loop0: detected capacity change from 0 to 256 [ 78.392483][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.437407][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.448504][ T4363] exfat: Deprecated parameter 'utf8' [ 78.497589][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.556410][ T4363] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 78.660647][ T4374] capability: warning: `syz.1.17' uses deprecated v2 capabilities in a way that may be insecure [ 79.157640][ T4393] loop0: detected capacity change from 0 to 1764 [ 79.716970][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.106940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.226937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.526943][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.866971][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!! [ 80.906969][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 83.266924][ C0] sched: RT throttling activated [ 83.267536][ T4433] Can't find ip_set type hash:net,por [ 84.601094][ T4461] loop3: detected capacity change from 0 to 512 [ 85.474530][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 85.522239][ T4461] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 85.548783][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.609591][ T4461] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.35: invalid indirect mapped block 256 (level 1) [ 85.737543][ T4461] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.35: invalid indirect mapped block 2683928664 (level 1) [ 85.803806][ T4461] EXT4-fs (loop3): 1 truncate cleaned up [ 86.055047][ T4461] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 86.622518][ T1108] cfg80211: failed to load regulatory.db [ 86.688623][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.784753][ T4489] ip_tables: iptables: counters copy to user failed while replacing table [ 87.918912][ T4503] loop0: detected capacity change from 0 to 40427 [ 88.519682][ T4503] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 88.526995][ T4503] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 88.573807][ T4503] F2FS-fs (loop0): invalid crc value [ 88.683953][ T4518] syz.1.46 uses obsolete (PF_INET,SOCK_PACKET) [ 88.710335][ T4503] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 88.792901][ T4503] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 88.800314][ T4503] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.091619][ T4523] block device autoloading is deprecated and will be removed. [ 89.556948][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 89.849875][ T4529] attempt to access beyond end of device [ 89.849875][ T4529] loop0: rw=10241, want=53256, limit=40427 [ 91.649950][ T4191] attempt to access beyond end of device [ 91.649950][ T4191] loop0: rw=2049, want=45104, limit=40427 [ 92.184258][ T4544] FAULT_INJECTION: forcing a failure. [ 92.184258][ T4544] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 92.514690][ T4544] CPU: 0 PID: 4544 Comm: syz.1.54 Not tainted syzkaller #0 [ 92.521988][ T4544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 92.532132][ T4544] Call Trace: [ 92.535442][ T4544] [ 92.538403][ T4544] dump_stack_lvl+0x188/0x250 [ 92.543145][ T4544] ? show_regs_print_info+0x20/0x20 [ 92.548604][ T4544] ? load_image+0x410/0x410 [ 92.553164][ T4544] ? __lock_acquire+0x7d40/0x7d40 [ 92.558233][ T4544] should_fail+0x383/0x4b0 [ 92.562699][ T4544] prepare_alloc_pages+0x1e3/0x5b0 [ 92.567868][ T4544] __alloc_pages+0x11b/0x480 [ 92.572500][ T4544] ? zone_statistics+0x170/0x170 [ 92.577479][ T4544] ? __rwlock_init+0x140/0x140 [ 92.582282][ T4544] ? alloc_pages+0x452/0x560 [ 92.587083][ T4544] __get_free_pages+0x8/0x30 [ 92.591716][ T4544] kasan_populate_vmalloc_pte+0x21/0xc0 [ 92.597299][ T4544] __apply_to_page_range+0x987/0xd10 [ 92.602629][ T4544] ? kasan_populate_vmalloc+0x70/0x70 [ 92.608047][ T4544] alloc_vmap_area+0x19e8/0x1b30 [ 92.613052][ T4544] ? vm_map_ram+0xba0/0xba0 [ 92.617612][ T4544] __get_vm_area_node+0x14f/0x2d0 [ 92.623419][ T4544] __vmalloc_node_range+0xef/0x8b0 [ 92.628579][ T4544] ? htab_map_alloc+0x3c9/0x1670 [ 92.633563][ T4544] ? get_usage_chars+0x1b0/0x1b0 [ 92.638556][ T4544] bpf_map_area_alloc+0xd4/0xe0 [ 92.643506][ T4544] ? htab_map_alloc+0x3c9/0x1670 [ 92.648524][ T4544] htab_map_alloc+0x3c9/0x1670 [ 92.653344][ T4544] ? __lock_acquire+0x7d40/0x7d40 [ 92.658446][ T4544] map_create+0x481/0x2330 [ 92.662906][ T4544] ? bpf_lsm_bpf+0x5/0x10 [ 92.667453][ T4544] __sys_bpf+0x30a/0x6f0 [ 92.671733][ T4544] ? bpf_link_show_fdinfo+0x380/0x380 [ 92.677160][ T4544] __x64_sys_bpf+0x78/0x90 [ 92.681625][ T4544] do_syscall_64+0x4c/0xa0 [ 92.686079][ T4544] ? clear_bhb_loop+0x30/0x80 [ 92.690800][ T4544] ? clear_bhb_loop+0x30/0x80 [ 92.695530][ T4544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.701469][ T4544] RIP: 0033:0x7f056f4d1b19 [ 92.705944][ T4544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.725770][ T4544] RSP: 002b:00007f056d728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.734343][ T4544] RAX: ffffffffffffffda RBX: 00007f056f757fa0 RCX: 00007f056f4d1b19 [ 92.742366][ T4544] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 0000000000000000 [ 92.750377][ T4544] RBP: 00007f056f569b70 R08: 0000000000000000 R09: 0000000000000000 [ 92.758530][ T4544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.766548][ T4544] R13: 00007f056f758038 R14: 00007f056f757fa0 R15: 00007ffff7c8e2e8 [ 92.774600][ T4544] [ 93.380731][ T4550] Need at least one configuration in g1. [ 93.426815][ T4550] udc dummy_udc.0: failed to start g1: -22 [ 94.411492][ T4567] loop1: detected capacity change from 0 to 16 [ 94.465112][ T4567] erofs: (device loop1): mounted with root inode @ nid 36. [ 95.655277][ T4579] loop1: detected capacity change from 0 to 128 [ 95.693203][ T4579] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 96.619686][ T4513] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 96.737345][ T4586] loop4: detected capacity change from 0 to 128 [ 96.797372][ T4586] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 96.831535][ T4588] device syzkaller0 entered promiscuous mode [ 97.278985][ T4202] Bluetooth: Frame is too long (len 38, expected len 31) [ 97.314194][ T4600] loop2: detected capacity change from 0 to 512 [ 98.047499][ T4600] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.094948][ T4616] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.117368][ T4600] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.877209][ T4625] MPTCP: addr_signal error, add_addr=1, echo=0 [ 98.922699][ T4625] MPTCP: addr_signal error, rm_addr=1 [ 99.658601][ T4664] IPVS: length: 155 != 8 [ 101.173560][ T4693] loop0: detected capacity change from 0 to 4096 [ 101.201287][ T4686] RPC: Couldn't create pipefs entry nfs/clnt1, error -12 [ 101.329367][ T4693] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 102.288148][ T4708] syz.3.84 (4708) used greatest stack depth: 18736 bytes left [ 102.904146][ T4720] Cannot find del_set index 0 as target [ 103.182923][ T4725] netlink: 120 bytes leftover after parsing attributes in process `syz.4.88'. [ 103.423946][ T4731] loop1: detected capacity change from 0 to 764 [ 103.736481][ T4739] netlink: 'syz.4.91': attribute type 2 has an invalid length. [ 104.007058][ T4736] loop2: detected capacity change from 0 to 32768 [ 105.320133][ T4736] XFS: attr2 mount option is deprecated. [ 105.533227][ T4757] "syz.0.93" (4757) uses obsolete ecb(arc4) skcipher [ 106.401346][ T4765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 106.440837][ T4736] XFS (loop2): Mounting V5 Filesystem [ 106.627932][ T4765] device hsr_slave_0 left promiscuous mode [ 106.651117][ T4736] XFS (loop2): Ending clean mount [ 107.511893][ T4765] device hsr_slave_1 left promiscuous mode [ 107.520832][ T4736] XFS (loop2): Quotacheck needed: Please wait. [ 107.631604][ T4736] XFS (loop2): Quotacheck: Done. [ 107.683739][ T4192] XFS (loop2): Unmounting Filesystem [ 107.868119][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 111.213281][ T4811] loop1: detected capacity change from 0 to 8 [ 112.542735][ T4811] squashfs image failed sanity check [ 112.636129][ T4827] ======================================================= [ 112.636129][ T4827] WARNING: The mand mount option has been deprecated and [ 112.636129][ T4827] and is ignored by this kernel. Remove the mand [ 112.636129][ T4827] option from the mount to silence this warning. [ 112.636129][ T4827] ======================================================= [ 112.673405][ T4827] 9pnet_virtio: no channels available for device 127.0.0.1 [ 113.356650][ T4826] netlink: 84 bytes leftover after parsing attributes in process `syz.3.113'. [ 113.385453][ T4832] loop4: detected capacity change from 0 to 1024 [ 116.858563][ T4858] Zero length message leads to an empty skb [ 117.947225][ T4513] rpcbind: server 127.0.0.1 not responding, timed out [ 117.970168][ T4868] process 'syz.4.121' launched '/dev/fd/3' with NULL argv: empty string added [ 118.813635][ T4877] loop0: detected capacity change from 0 to 32768 [ 119.347893][ T4877] XFS: attr2 mount option is deprecated. [ 120.577865][ T4877] XFS (loop0): Mounting V5 Filesystem [ 120.947590][ T4877] XFS (loop0): Ending clean mount [ 120.958629][ T4877] XFS (loop0): Quotacheck needed: Please wait. [ 121.044810][ T4877] XFS (loop0): Quotacheck: Done. [ 121.052665][ T4893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.067440][ T4893] team0: Port device bond2 added [ 121.224640][ T4513] team0: Failed to send port change of device bond2 via netlink (err -105) [ 123.081968][ T4191] XFS (loop0): Unmounting Filesystem [ 123.482444][ T4913] device syzkaller0 entered promiscuous mode [ 123.605943][ T4913] TC_ACT_REPEAT abuse ? [ 123.724101][ T4918] device syzkaller0 entered promiscuous mode [ 124.512097][ T26] audit: type=1400 audit(1794008085.623:2): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=4917 comm="syz.2.136" name="p" offset=79 [ 125.438696][ T4933] syz.3.137 (4933): drop_caches: 0 [ 127.334195][ T4945] loop1: detected capacity change from 0 to 128 [ 129.997380][ T4957] attempt to access beyond end of device [ 129.997380][ T4957] loop1: rw=2049, want=649, limit=128 [ 130.520864][ T4960] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 4 (only 8 groups) [ 130.763220][ T4945] attempt to access beyond end of device [ 130.763220][ T4945] loop1: rw=524288, want=369, limit=128 [ 130.776270][ T4945] attempt to access beyond end of device [ 130.776270][ T4945] loop1: rw=0, want=153, limit=128 [ 130.788117][ T4945] attempt to access beyond end of device [ 130.788117][ T4945] loop1: rw=0, want=153, limit=128 [ 130.799093][ T4945] attempt to access beyond end of device [ 130.799093][ T4945] loop1: rw=0, want=153, limit=128 [ 130.810039][ T4945] attempt to access beyond end of device [ 130.810039][ T4945] loop1: rw=0, want=153, limit=128 [ 130.821613][ T4945] attempt to access beyond end of device [ 130.821613][ T4945] loop1: rw=0, want=153, limit=128 [ 131.103506][ T4967] device syzkaller0 entered promiscuous mode [ 131.182351][ T4979] device syzkaller0 entered promiscuous mode [ 131.206385][ T4974] device syzkaller0 entered promiscuous mode [ 131.575537][ T4987] netlink: 'syz.0.144': attribute type 12 has an invalid length. [ 131.593276][ T4984] device syzkaller0 entered promiscuous mode [ 132.068810][ T4997] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 132.715989][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.722447][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.686693][ T5009] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 138.799789][ T5060] loop2: detected capacity change from 0 to 1024 [ 138.860404][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.538450][ T5060] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.743708][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 139.795071][ T26] audit: type=1804 audit(1794008100.923:3): pid=5060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.160" name="/newroot/32/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 140.473330][ T5078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 140.587119][ T13] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 140.716497][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 140.987341][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 141.527670][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 141.547466][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 141.570804][ T5095] loop1: detected capacity change from 0 to 128 [ 141.578019][ T13] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.600852][ T5092] device syzkaller0 entered promiscuous mode [ 141.618271][ T13] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.628800][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.697279][ T13] usb 2-1: can't set config #16, error -71 [ 141.759972][ T13] usb 2-1: USB disconnect, device number 2 [ 141.876025][ T5104] device syzkaller0 entered promiscuous mode [ 141.893960][ T5095] attempt to access beyond end of device [ 141.893960][ T5095] loop1: rw=2049, want=633, limit=128 [ 142.024589][ T5095] attempt to access beyond end of device [ 142.024589][ T5095] loop1: rw=524288, want=369, limit=128 [ 142.046662][ T5095] attempt to access beyond end of device [ 142.046662][ T5095] loop1: rw=0, want=153, limit=128 [ 142.064623][ T5095] attempt to access beyond end of device [ 142.064623][ T5095] loop1: rw=0, want=153, limit=128 [ 142.086527][ T5106] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 142.948106][ T5117] device vlan2 entered promiscuous mode [ 143.757797][ T5117] device bond0 entered promiscuous mode [ 143.763418][ T5117] device bond_slave_0 entered promiscuous mode [ 143.776531][ T5117] device bond_slave_1 entered promiscuous mode [ 143.908827][ T5109] fuse: Bad value for 'fd' [ 143.934668][ T5132] loop3: detected capacity change from 0 to 512 [ 145.554250][ T5132] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 145.615890][ T5147] device syzkaller0 entered promiscuous mode [ 145.627275][ T5132] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.121504][ T5151] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.190: corrupted inode contents [ 146.142479][ T5151] EXT4-fs (loop3): Remounting filesystem read-only [ 146.149255][ T5151] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #2: comm syz.3.190: mark_inode_dirty error [ 146.163730][ T5151] EXT4-fs (loop3): Remounting filesystem read-only [ 146.170918][ T5151] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.190: corrupted inode contents [ 146.188726][ T5151] EXT4-fs (loop3): Remounting filesystem read-only [ 146.195488][ T5151] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.190: mark_inode_dirty error [ 146.209156][ T5151] EXT4-fs (loop3): Remounting filesystem read-only [ 147.221523][ T5169] loop1: detected capacity change from 0 to 1024 [ 147.507297][ T5169] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 147.611735][ T5169] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 147.625870][ T5169] EXT4-fs (loop1): invalid journal inode [ 147.631730][ T5169] EXT4-fs (loop1): can't get journal size [ 147.640389][ T5169] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 150.075133][ T5196] using random self ethernet address [ 150.081012][ T5196] using random host ethernet address [ 150.089792][ T5196] using random self ethernet address [ 150.095133][ T5196] using random host ethernet address [ 150.874948][ T5218] loop0: detected capacity change from 0 to 1024 [ 150.876282][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 150.962579][ T5218] hfsplus: invalid length 32517 has been corrected to 255 [ 151.068493][ T5218] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 151.197256][ T5209] Cannot find add_set index 0 as target [ 151.855801][ T5213] ODEBUG: Out of memory. ODEBUG disabled [ 152.105293][ T5230] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 4 (only 8 groups) [ 154.988197][ T4447] Bluetooth: hci2: command 0x0409 tx timeout [ 156.213668][ T5249] loop2: detected capacity change from 0 to 4096 [ 156.263147][ T5251] loop4: detected capacity change from 0 to 764 [ 156.293299][ T5249] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 156.324344][ T5249] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 156.548913][ T5254] netlink: 156 bytes leftover after parsing attributes in process `syz.1.222'. [ 156.558226][ T5249] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 157.627838][ T5249] ntfs: volume version 3.1. [ 157.732636][ T5262] loop4: detected capacity change from 0 to 8 [ 157.811187][ T5262] squashfs image failed sanity check [ 158.057266][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 158.769822][ T4192] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 161.387594][ T5288] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 163.678464][ T5200] Set syz1 is full, maxelem 65536 reached [ 163.933212][ T5306] netlink: 156 bytes leftover after parsing attributes in process `syz.0.236'. [ 164.187010][ T4434] Bluetooth: hci1: command 0x0409 tx timeout [ 165.123712][ T4673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.275689][ T4673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.057859][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.131419][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 166.174748][ T5319] device syzkaller0 entered promiscuous mode [ 166.367999][ T5323] loop4: detected capacity change from 0 to 4096 [ 166.508333][ T5323] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 166.565006][ T5323] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 166.588837][ T5323] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 167.133451][ T5323] ntfs: volume version 3.1. [ 167.631658][ T4193] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 168.778117][ T5362] loop4: detected capacity change from 0 to 1024 [ 168.871475][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.907851][ T5362] hfsplus: invalid length 32517 has been corrected to 255 [ 168.976094][ T5362] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 169.034983][ T4202] Bluetooth: hci4: link tx timeout [ 169.040636][ T4202] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.849089][ T4434] Bluetooth: hci0: command 0x0409 tx timeout [ 171.591618][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 171.705515][ T5409] loop0: detected capacity change from 0 to 1024 [ 171.770711][ T5409] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 171.881918][ T5409] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 171.947482][ T5409] EXT4-fs (loop0): invalid journal inode [ 171.953501][ T5409] EXT4-fs (loop0): can't get journal size [ 171.964872][ T5391] netlink: 165 bytes leftover after parsing attributes in process `syz.3.254'. [ 172.181801][ T5409] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 174.624828][ T5433] loop2: detected capacity change from 0 to 1024 [ 174.775311][ T5433] hfsplus: invalid length 32517 has been corrected to 255 [ 174.870809][ T5432] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 175.159566][ T4202] Bluetooth: hci4: link tx timeout [ 175.165032][ T4202] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 175.934140][ T5449] loop0: detected capacity change from 0 to 4096 [ 176.044618][ T5449] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 176.107189][ T5449] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 176.879530][ T5449] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 177.608130][ T5449] ntfs: volume version 3.1. [ 177.995424][ T4191] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 178.149670][ T5463] "syz.2.275" (5463) uses obsolete ecb(arc4) skcipher [ 178.219771][ T5464] loop4: detected capacity change from 0 to 1024 [ 178.266006][ T5464] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 178.291496][ T5464] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 178.318871][ T5464] EXT4-fs (loop4): invalid journal inode [ 178.341232][ T5464] EXT4-fs (loop4): can't get journal size [ 178.363446][ T5464] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 179.654199][ T5485] loop4: detected capacity change from 0 to 764 [ 179.813068][ T5488] loop0: detected capacity change from 0 to 764 [ 182.885634][ T5508] loop0: detected capacity change from 0 to 8 [ 182.950986][ T5509] block device autoloading is deprecated and will be removed. [ 183.009990][ T5508] squashfs image failed sanity check [ 183.198072][ T5348] Set syz1 is full, maxelem 65536 reached [ 184.139323][ T5512] rxe_eth0 speed is unknown, defaulting to 1000 [ 186.006338][ T5512] chnl_net:caif_netlink_parms(): no params data found [ 186.106967][ T4266] Bluetooth: hci5: command 0x0409 tx timeout [ 186.881034][ T4677] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.512849][ T5556] loop0: detected capacity change from 0 to 128 [ 187.656166][ T5556] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 187.698767][ T4677] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.014892][ T5512] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.036836][ T5512] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.354788][ T5471] Bluetooth: hci5: command 0x041b tx timeout [ 189.364787][ T5512] device bridge_slave_0 entered promiscuous mode [ 189.582243][ T4677] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.147657][ T5512] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.154813][ T5512] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.267208][ T5512] device bridge_slave_1 entered promiscuous mode [ 190.847436][ T5512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.866755][ T5512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.903184][ T5512] team0: Port device team_slave_0 added [ 190.936403][ T4677] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.951513][ T5512] team0: Port device team_slave_1 added [ 190.974565][ T5512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.983573][ T5512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.009808][ T5512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.039442][ T5512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.056670][ T5512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.067659][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 191.082662][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.096086][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 191.102185][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 191.126726][ T5512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.149119][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 192.098282][ T5583] netlink: 'syz.2.315': attribute type 12 has an invalid length. [ 192.131616][ T5586] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 192.197796][ T5471] Bluetooth: hci5: command 0x040f tx timeout [ 192.982058][ T5512] device hsr_slave_0 entered promiscuous mode [ 193.102764][ T5512] device hsr_slave_1 entered promiscuous mode [ 193.353111][ T5512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.711202][ T5512] Cannot create hsr debugfs directory [ 194.127782][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.134438][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.823604][ T5467] Bluetooth: hci5: command 0x0419 tx timeout [ 195.071097][ T5512] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.190203][ T5512] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.209236][ T5620] loop2: detected capacity change from 0 to 764 [ 195.423005][ T5512] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.533483][ T5512] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.386466][ T5512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.413581][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.279427][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.420198][ T5512] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.528178][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.282203][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.296801][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.303985][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.383760][ T5649] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 198.739636][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.005042][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.036751][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.063035][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.070247][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.285547][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.349893][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.434055][ T5672] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 200.129836][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.177795][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.653380][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.782593][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.056773][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.125608][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.148144][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.167634][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.186551][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.225005][ T5512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.608201][ T5703] loop3: detected capacity change from 0 to 256 [ 201.705478][ T5703] exfat: Unknown parameter 'keep_last_dots' [ 203.597183][ T4677] device hsr_slave_0 left promiscuous mode [ 203.614381][ T4677] device hsr_slave_1 left promiscuous mode [ 203.638511][ T4677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.656580][ T4677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.683576][ T4677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.697002][ T4677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.735074][ T4677] device bridge_slave_1 left promiscuous mode [ 203.768876][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.806764][ T4677] device bridge_slave_0 left promiscuous mode [ 203.827580][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.944902][ T4677] device veth1_macvtap left promiscuous mode [ 204.060057][ T5749] loop2: detected capacity change from 0 to 764 [ 204.104086][ T4677] device veth0_macvtap left promiscuous mode [ 204.175194][ T4677] device veth1_vlan left promiscuous mode [ 204.181301][ T4677] device veth0_vlan left promiscuous mode [ 204.897356][ T5757] loop3: detected capacity change from 0 to 16 [ 204.942099][ T4677] team0 (unregistering): Port device bond2 removed [ 204.952583][ T5757] erofs: (device loop3): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 204.982608][ T4677] bond2 (unregistering): Released all slaves [ 205.016700][ T4677] bond1 (unregistering): (slave lo): Releasing backup interface [ 205.031980][ T4677] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 205.153766][ T4677] bond1 (unregistering): Released all slaves [ 206.105353][ T4677] team0 (unregistering): Port device team_slave_1 removed [ 207.117480][ T4677] team0 (unregistering): Port device team_slave_0 removed [ 207.233652][ T4677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.251106][ T4677] device bond_slave_1 left promiscuous mode [ 207.301877][ T4677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.320388][ T4677] device bond_slave_0 left promiscuous mode [ 208.217058][ T26] audit: type=1326 audit(1794008169.343:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5770 comm="syz.3.343" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fabc7843897 code=0x0 [ 208.298033][ T4677] bond0 (unregistering): Released all slaves [ 209.264981][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.280494][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.308577][ T5512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.820919][ T5791] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.098571][ T5798] loop0: detected capacity change from 0 to 2048 [ 210.932923][ T5798] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.834622][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.869980][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.942713][ T5512] device veth0_vlan entered promiscuous mode [ 211.969156][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.987982][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.996588][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.025126][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.078119][ T5512] device veth1_vlan entered promiscuous mode [ 212.158430][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.173850][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.205777][ T5512] device veth0_macvtap entered promiscuous mode [ 212.221644][ T5512] device veth1_macvtap entered promiscuous mode [ 212.271667][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.296990][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.325153][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.362647][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.392696][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.437022][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.468328][ T5512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.475676][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.511423][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.537693][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.573321][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.602648][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.619839][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.638705][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.655237][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.665479][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.683264][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.696992][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.725707][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.737742][ T5512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.762484][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.783475][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.797682][ T5512] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.806472][ T5512] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.836957][ T5512] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.845715][ T5512] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.968749][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.976620][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.018255][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.058822][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.073279][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.082242][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.296625][ T5848] device syzkaller0 entered promiscuous mode [ 213.403894][ T5848] 0: reclassify loop, rule prio 0, protocol 800 [ 214.839513][ T5873] ip_tables: iptables: counters copy to user failed while replacing table [ 218.553125][ T5920] loop3: detected capacity change from 0 to 256 [ 218.795616][ T5920] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.060622][ T5934] loop5: detected capacity change from 0 to 4096 [ 219.232602][ T5944] loop4: detected capacity change from 0 to 512 [ 219.269902][ T5934] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 219.606234][ T5942] UBIFS error (pid: 5942): cannot open "(null)", error -22 [ 219.653275][ T5944] EXT4-fs (loop4): Ignoring removed nobh option [ 219.899141][ T5944] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.379: invalid indirect mapped block 256 (level 2) [ 220.013043][ T5944] EXT4-fs (loop4): 2 truncates cleaned up [ 220.026985][ T5944] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 221.188141][ T5943] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.379: bg 0: block 5: invalid block bitmap [ 221.209538][ T5943] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 221.222457][ T5943] EXT4-fs (loop4): This should not happen!! Data will be lost [ 221.222457][ T5943] [ 221.232417][ T5943] EXT4-fs (loop4): Total free blocks count 0 [ 221.239454][ T5943] EXT4-fs (loop4): Free/Dirty block details [ 221.245524][ T5943] EXT4-fs (loop4): free_blocks=0 [ 221.250743][ T5943] EXT4-fs (loop4): dirty_blocks=33 [ 221.255977][ T5943] EXT4-fs (loop4): Block reservation details [ 221.262087][ T5943] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 223.764653][ T6015] loop3: detected capacity change from 0 to 512 [ 223.854181][ T6017] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 223.878972][ T6015] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 223.914766][ T6015] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 224.205103][ T5469] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 224.647454][ T5469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 224.777855][ T5469] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.016045][ T5469] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 225.028524][ T5469] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.087940][ T6036] netlink: 'syz.4.398': attribute type 4 has an invalid length. [ 225.796696][ T6051] loop3: detected capacity change from 0 to 764 [ 225.837556][ T5469] usb 3-1: string descriptor 0 read error: -22 [ 226.715133][ T5469] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 226.724416][ T5469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.013463][ T6057] tipc: Started in network mode [ 227.018991][ T6057] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 227.026467][ T6057] tipc: Enabled bearer , priority 0 [ 227.528168][ T5469] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 227.675427][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.699639][ T5469] usb 3-1: USB disconnect, device number 2 [ 228.142537][ T5467] tipc: Node number set to 43690 [ 229.926239][ T6121] device syzkaller0 entered promiscuous mode [ 236.545463][ T6168] loop3: detected capacity change from 0 to 1024 [ 236.821724][ T6189] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 238.662325][ T6213] loop5: detected capacity change from 0 to 764 [ 239.987139][ T6204] smpboot: CPU 1 is now offline [ 240.791105][ T6228] loop2: detected capacity change from 0 to 764 [ 241.910382][ T6242] tc action pedit 'at' offset 5 out of bounds [ 241.916539][ T6242] tc action pedit 'at' offset 5 out of bounds [ 241.922675][ T6242] tc action pedit 'at' offset 5 out of bounds [ 241.928936][ T6242] tc action pedit 'at' offset 5 out of bounds [ 241.935035][ T6242] tc action pedit 'at' offset 5 out of bounds [ 241.941170][ T6242] tc action pedit 'at' offset 5 out of bounds [ 241.947294][ T6242] tc action pedit 'at' offset 5 out of bounds [ 241.953384][ T6242] tc action pedit 'at' offset 5 out of bounds [ 241.959482][ T6242] tc action pedit 'at' offset 5 out of bounds [ 241.965597][ T6242] tc action pedit 'at' offset 5 out of bounds [ 241.971714][ T6242] 0: reclassify loop, rule prio 0, protocol 800 [ 242.007041][ T6252] device syzkaller0 left promiscuous mode [ 243.238915][ T6269] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 243.766540][ T6275] loop4: detected capacity change from 0 to 2048 [ 244.313278][ T6275] UDF-fs: bad mount option "˙˙˙˙˙˙" or missing value [ 244.361327][ T6283] loop0: detected capacity change from 0 to 764 [ 247.434598][ T6301] syz.4.451 (6301) used greatest stack depth: 17616 bytes left [ 247.647417][ T6311] loop0: detected capacity change from 0 to 128 [ 247.920396][ T6323] attempt to access beyond end of device [ 247.920396][ T6323] loop0: rw=2049, want=537, limit=128 [ 248.118043][ T6311] attempt to access beyond end of device [ 248.118043][ T6311] loop0: rw=524288, want=369, limit=128 [ 248.175008][ T6326] loop2: detected capacity change from 0 to 512 [ 248.210064][ T6311] attempt to access beyond end of device [ 248.210064][ T6311] loop0: rw=0, want=153, limit=128 [ 248.272374][ T6326] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 248.337608][ T6326] EXT4-fs (loop2): invalid journal inode [ 248.563044][ T6328] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.859586][ T6329] xt_NFQUEUE: number of total queues is 0 [ 250.287179][ T6343] ip_tables: iptables: counters copy to user failed while replacing table [ 253.626101][ T6373] loop2: detected capacity change from 0 to 512 [ 254.698620][ T6373] EXT4-fs (loop2): Ignoring removed nobh option [ 254.764506][ T6373] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.468: invalid indirect mapped block 256 (level 2) [ 255.747394][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.753710][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.809678][ T6373] EXT4-fs (loop2): 2 truncates cleaned up [ 255.850438][ T6373] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 257.692489][ T6372] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.468: bg 0: block 5: invalid block bitmap [ 257.707594][ T6372] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 257.720166][ T6372] EXT4-fs (loop2): This should not happen!! Data will be lost [ 257.720166][ T6372] [ 257.729881][ T6372] EXT4-fs (loop2): Total free blocks count 0 [ 257.735893][ T6372] EXT4-fs (loop2): Free/Dirty block details [ 257.741824][ T6372] EXT4-fs (loop2): free_blocks=0 [ 257.746767][ T6372] EXT4-fs (loop2): dirty_blocks=33 [ 257.751914][ T6372] EXT4-fs (loop2): Block reservation details [ 257.757920][ T6372] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 258.088346][ T6415] netlink: 'syz.2.477': attribute type 1 has an invalid length. [ 260.793873][ T6447] loop4: detected capacity change from 0 to 16 [ 260.874051][ T6447] erofs: (device loop4): mounted with root inode @ nid 36. [ 261.184181][ T6454] loop2: detected capacity change from 0 to 764 [ 262.872318][ T6470] loop2: detected capacity change from 0 to 764 [ 265.123013][ T6493] loop2: detected capacity change from 0 to 512 [ 265.195316][ T6493] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 265.379355][ T6493] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 265.763626][ T6502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.496'. [ 265.781919][ T6493] EXT4-fs (loop2): 1 truncate cleaned up [ 265.809110][ T6493] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 265.898245][ T6505] loop5: detected capacity change from 0 to 764 [ 267.604059][ T6526] loop5: detected capacity change from 0 to 764 [ 267.636236][ T6527] loop0: detected capacity change from 0 to 764 [ 270.094260][ T6549] loop3: detected capacity change from 0 to 256 [ 270.194592][ T6546] loop2: detected capacity change from 0 to 1024 [ 270.426250][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 270.491152][ T6546] hfsplus: request for non-existent node 16777216 in B*Tree [ 270.690052][ T6546] hfsplus: request for non-existent node 16777216 in B*Tree [ 270.711213][ T6568] loop0: detected capacity change from 0 to 764 [ 270.775566][ T6546] hfsplus: request for non-existent node 16777216 in B*Tree [ 271.208687][ T6571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.510'. [ 271.272272][ T6546] hfsplus: request for non-existent node 16777216 in B*Tree [ 271.340466][ T6564] hfsplus: request for non-existent node 16777216 in B*Tree [ 271.451753][ T6564] hfsplus: request for non-existent node 16777216 in B*Tree [ 273.116018][ T6589] loop3: detected capacity change from 0 to 1024 [ 273.620191][ T6589] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.805906][ T6600] device-mapper: ioctl: Geometry exceeds range limits. [ 273.908298][ T6607] loop5: detected capacity change from 0 to 256 [ 273.923852][ T26] audit: type=1804 audit(1794008235.053:5): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.517" name="/newroot/94/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 273.985270][ T6600] loop0: detected capacity change from 0 to 1024 [ 274.229135][ T6600] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.630117][ T6620] device syzkaller0 entered promiscuous mode [ 274.674856][ T6624] loop5: detected capacity change from 0 to 512 [ 274.717570][ T6627] loop3: detected capacity change from 0 to 512 [ 274.757092][ T6624] EXT4-fs (loop5): Ignoring removed orlov option [ 274.793822][ T6627] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 274.810202][ T6624] EXT4-fs (loop5): Ignoring removed oldalloc option [ 274.866426][ T6624] EXT4-fs (loop5): failed to initialize system zone (-117) [ 274.902193][ T6627] EXT4-fs (loop3): 1 truncate cleaned up [ 274.940864][ T6624] EXT4-fs (loop5): mount failed [ 274.958788][ T6627] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 277.402102][ T6624] loop5: detected capacity change from 0 to 256 [ 277.423353][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'. [ 278.898901][ T6648] device syzkaller0 entered promiscuous mode [ 280.037108][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 282.345162][ T6683] loop0: detected capacity change from 0 to 764 [ 283.980695][ T6703] loop2: detected capacity change from 0 to 512 [ 284.323574][ T6703] EXT4-fs (loop2): Ignoring removed orlov option [ 285.891087][ T6703] EXT4-fs (loop2): Ignoring removed oldalloc option [ 285.968648][ T6703] EXT4-fs (loop2): failed to initialize system zone (-117) [ 287.557308][ T6703] EXT4-fs (loop2): mount failed [ 287.570711][ T6729] loop0: detected capacity change from 0 to 16 [ 287.692194][ T6729] erofs: (device loop0): mounted with root inode @ nid 36. [ 289.183326][ T6737] loop3: detected capacity change from 0 to 512 [ 289.227785][ T6737] configfs: Unknown parameter 'data_err' [ 289.267842][ T6719] attempt to access beyond end of device [ 289.267842][ T6719] loop0: rw=0, want=40, limit=16 [ 290.804190][ T6762] netlink: 2 bytes leftover after parsing attributes in process `syz.3.561'. [ 291.259771][ T6768] loop5: detected capacity change from 0 to 8 [ 292.750931][ T6768] SQUASHFS error: Unable to read directory block [629:fe] [ 293.120297][ T6779] loop5: detected capacity change from 0 to 764 [ 296.304954][ T6802] loop3: detected capacity change from 0 to 1024 [ 296.629796][ T6802] EXT4-fs (loop3): Ignoring removed bh option [ 296.722984][ T6802] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 296.823141][ T6812] loop2: detected capacity change from 0 to 256 [ 296.873030][ T6812] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 298.150673][ T6825] netlink: 'syz.5.577': attribute type 2 has an invalid length. [ 298.646608][ T6828] loop5: detected capacity change from 0 to 1024 [ 298.753386][ T6828] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,noauto_da_alloc,resuid=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 298.893211][ T6828] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.460362][ T6848] loop3: detected capacity change from 0 to 764 [ 302.257271][ T6809] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 302.813636][ T6879] loop3: detected capacity change from 0 to 256 [ 308.828209][ T5474] Bluetooth: hci5: command 0x0406 tx timeout [ 308.926375][ T6928] loop3: detected capacity change from 0 to 512 [ 311.227828][ T6928] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 311.338925][ T6928] EXT4-fs (loop3): 1 truncate cleaned up [ 311.385230][ T6928] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 312.435872][ T6966] netlink: 364 bytes leftover after parsing attributes in process `syz.0.612'. [ 314.981966][ T7012] loop5: detected capacity change from 0 to 512 [ 315.077397][ T7012] EXT4-fs (loop5): Ignoring removed orlov option [ 315.170543][ T7012] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: writeback. [ 315.581854][ T7012] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.680802][ T7042] ip_tables: iptables: counters copy to user failed while replacing table [ 316.932222][ T7047] device syzkaller0 entered promiscuous mode [ 316.992057][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.000498][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.059536][ T7071] loop3: detected capacity change from 0 to 2048 [ 321.560096][ T7071] UDF-fs: bad mount option "˙˙000000000000000000000030xffffffffffffffff˙˙˙˙" or missing value [ 327.654145][ T7128] loop2: detected capacity change from 0 to 4096 [ 329.602233][ T7133] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.675133][ T7149] loop5: detected capacity change from 0 to 2048 [ 332.796401][ T7149] UDF-fs: bad mount option "˙˙˙˙˙˙" or missing value [ 333.574191][ T7161] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 442.296770][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 442.303780][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4513/1:b..l [ 442.312199][ C0] (detected by 0, t=10502 jiffies, g=23241, q=44) [ 442.318752][ C0] task:kworker/u4:12 state:R running task stack:22736 pid: 4513 ppid: 2 flags:0x00004000 [ 442.330759][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 442.338615][ C0] Call Trace: [ 442.341904][ C0] [ 442.344864][ C0] __schedule+0x11c3/0x4350 [ 442.349397][ C0] ? ret_from_fork+0x1f/0x30 [ 442.354170][ C0] ? kfree+0xef/0x2a0 [ 442.358174][ C0] ? release_firmware_map_entry+0x190/0x190 [ 442.364072][ C0] ? batadv_tvlv_container_ogm_append+0x1ce/0x4a0 [ 442.370530][ C0] ? process_one_work+0x867/0xff0 [ 442.376005][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 442.381294][ C0] preempt_schedule_irq+0xbb/0x160 [ 442.386414][ C0] ? __cond_resched+0xd0/0xd0 [ 442.391111][ C0] ? rcu_is_watching+0x11/0xa0 [ 442.395876][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 442.401684][ C0] irqentry_exit+0x63/0x70 [ 442.406102][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 442.412170][ C0] RIP: 0010:lock_acquire+0x143/0x400 [ 442.417590][ C0] Code: 42 0f b6 04 38 84 c0 0f 85 09 02 00 00 41 83 3e 00 0f 85 17 01 00 00 43 c6 44 3c 08 00 48 c7 84 24 a0 00 00 00 00 00 00 00 9c <8f> 84 24 a0 00 00 00 4c 8b b4 24 a0 00 00 00 43 c6 44 3c 08 f8 fa [ 442.437244][ C0] RSP: 0018:ffffc9000331f8f8 EFLAGS: 00000246 [ 442.443325][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 9705206fddcf1b00 [ 442.451295][ C0] RDX: 0000000000000000 RSI: ffffffff8a7a50e0 RDI: ffffffff8a7a50a0 [ 442.459266][ C0] RBP: ffffc9000331fa20 R08: ffffffff8e6d322f R09: 1ffffffff1cda645 [ 442.467236][ C0] R10: dffffc0000000000 R11: fffffbfff1cda646 R12: 1ffff92000663f2c [ 442.475212][ C0] R13: ffffffff8d11efa0 R14: ffff88802305642c R15: dffffc0000000000 [ 442.483204][ C0] ? rcu_lock_release+0x5/0x20 [ 442.487992][ C0] ? read_lock_is_recursive+0x10/0x10 [ 442.493373][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 442.498399][ C0] ? batadv_tvlv_container_ogm_append+0x440/0x4a0 [ 442.504821][ C0] rcu_lock_acquire+0x2a/0x30 [ 442.509500][ C0] ? rcu_lock_acquire+0x5/0x30 [ 442.514283][ C0] batadv_iv_ogm_schedule+0x434/0x1000 [ 442.519742][ C0] ? pskb_expand_head+0xb45/0x1100 [ 442.524859][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 442.532074][ C0] ? batadv_send_skb_packet+0x36e/0x580 [ 442.537624][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6e9/0x800 [ 442.544665][ C0] process_one_work+0x867/0xff0 [ 442.549524][ C0] ? worker_detach_from_pool+0x240/0x240 [ 442.555167][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 442.560477][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 442.565505][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 442.571052][ C0] ? wq_worker_running+0x97/0x170 [ 442.576076][ C0] worker_thread+0xad7/0x12a0 [ 442.580776][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 442.586671][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 442.592573][ C0] kthread+0x42e/0x520 [ 442.596651][ C0] ? rcu_lock_release+0x20/0x20 [ 442.601514][ C0] ? kthread_blkcg+0xd0/0xd0 [ 442.606105][ C0] ret_from_fork+0x1f/0x30 [ 442.610622][ C0] [ 442.613645][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g23241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 442.624836][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 442.634904][ C0] rcu: RCU grace-period kthread stack dump: [ 442.640788][ C0] task:rcu_preempt state:R running task stack:28080 pid: 15 ppid: 2 flags:0x00004000 [ 442.651563][ C0] Call Trace: [ 442.654860][ C0] [ 442.657796][ C0] __schedule+0x11c3/0x4350 [ 442.662324][ C0] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 442.667789][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 442.672995][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 442.678889][ C0] ? _raw_spin_unlock+0x40/0x40 [ 442.683747][ C0] ? rcu_is_watching+0x11/0xa0 [ 442.688528][ C0] ? release_firmware_map_entry+0x190/0x190 [ 442.694443][ C0] schedule+0x11b/0x1e0 [ 442.698646][ C0] schedule_timeout+0x184/0x2d0 [ 442.703507][ C0] ? console_conditional_schedule+0x40/0x40 [ 442.709403][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 442.715302][ C0] ? update_process_times+0x200/0x200 [ 442.720686][ C0] ? prepare_to_swait_event+0x33d/0x360 [ 442.726251][ C0] rcu_gp_fqs_loop+0x2be/0x11f0 [ 442.731110][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 442.736316][ C0] ? dump_blkd_tasks+0x7f0/0x7f0 [ 442.741348][ C0] ? rcu_gp_init+0xd72/0x10f0 [ 442.746059][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 442.750837][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 442.756065][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 442.761376][ C0] rcu_gp_kthread+0x9a/0x370 [ 442.765994][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 442.771112][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 442.777014][ C0] ? __kthread_parkme+0x14e/0x1b0 [ 442.782044][ C0] kthread+0x42e/0x520 [ 442.786119][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 442.791233][ C0] ? kthread_blkcg+0xd0/0xd0 [ 442.795843][ C0] ret_from_fork+0x1f/0x30 [ 442.800274][ C0] [ 442.803304][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 442.809640][ C0] NMI backtrace for cpu 0 [ 442.813993][ C0] CPU: 0 PID: 7187 Comm: syz.5.666 Not tainted syzkaller #0 [ 442.821307][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 442.831393][ C0] Call Trace: [ 442.834677][ C0] [ 442.837572][ C0] dump_stack_lvl+0x188/0x250 [ 442.842396][ C0] ? show_regs_print_info+0x20/0x20 [ 442.847826][ C0] ? load_image+0x410/0x410 [ 442.852367][ C0] ? irq_work_queue+0xbf/0x140 [ 442.857144][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 442.862092][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 442.868271][ C0] ? _printk+0xda/0x130 [ 442.872675][ C0] ? cpu_online+0x1d/0x30 [ 442.877023][ C0] ? load_image+0x410/0x410 [ 442.881537][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 442.887613][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 442.893618][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 442.899804][ C0] print_other_cpu_stall+0x1110/0x1270 [ 442.905308][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 442.910258][ C0] ? timekeeping_advance+0x82c/0xb20 [ 442.915560][ C0] rcu_sched_clock_irq+0x845/0x1120 [ 442.920764][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 442.925659][ C0] ? hrtimer_run_queues+0x162/0x400 [ 442.930861][ C0] ? account_process_tick+0x22a/0x3a0 [ 442.936239][ C0] update_process_times+0x193/0x200 [ 442.941446][ C0] tick_sched_timer+0x37d/0x560 [ 442.946319][ C0] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 442.951867][ C0] __hrtimer_run_queues+0x4b0/0xb60 [ 442.957068][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 442.963068][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 442.968226][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 442.974581][ C0] hrtimer_interrupt+0x397/0x8b0 [ 442.979556][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 442.985621][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 442.991424][ C0] [ 442.994398][ C0] [ 442.997343][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 443.003369][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 443.009194][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ae 73 8a f7 48 89 df e8 b6 55 8b f7 e8 81 56 ac f7 fb bf 01 00 00 00 f6 5b 7f f7 65 8b 05 c7 6c 2f 76 85 c0 74 02 5b c3 e8 04 7a 2d [ 443.028819][ C0] RSP: 0018:ffffc9000361fbc0 EFLAGS: 00000282 [ 443.035407][ C0] RAX: 8456c08540ef3a00 RBX: ffff8880654e4a00 RCX: 8456c08540ef3a00 [ 443.043394][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2b60 RDI: 0000000000000001 [ 443.051375][ C0] RBP: 0000000000000000 R08: ffff8880654e4a03 R09: 1ffff1100ca9c940 [ 443.059356][ C0] R10: dffffc0000000000 R11: ffffed100ca9c941 R12: dffffc0000000000 [ 443.067418][ C0] R13: ffff8880654e4a00 R14: 0000000000000021 R15: 000000001c000004 [ 443.075410][ C0] get_signal+0x11f2/0x12e0 [ 443.079934][ C0] arch_do_signal_or_restart+0xe6/0x12a0 [ 443.085767][ C0] ? __ia32_sys_rt_sigreturn+0x624/0x750 [ 443.091426][ C0] ? load_gs_index+0x130/0x130 [ 443.096211][ C0] ? get_sigframe_size+0x10/0x10 [ 443.101192][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 443.106661][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 443.111964][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 443.117546][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 443.123018][ C0] do_syscall_64+0x58/0xa0 [ 443.127611][ C0] ? clear_bhb_loop+0x30/0x80 [ 443.132446][ C0] ? clear_bhb_loop+0x30/0x80 [ 443.137145][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 443.143060][ C0] RIP: 0033:0x7f7277960b19 [ 443.147533][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.167149][ C0] RSP: 002b:00007f7275b960e8 EFLAGS: 00000246 [ 443.173330][ C0] RAX: 0000000000000001 RBX: 00007f7277be7098 RCX: 00007f7277960b19 [ 443.181322][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7277be709c [ 443.189295][ C0] RBP: 00007f7277be7090 R08: 002f6f782666054c R09: 0000000000000000 [ 443.197311][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.205295][ C0] R13: 00007f7277be7128 R14: 00007fff2c7a35d0 R15: 00007fff2c7a36b8 [ 443.213321][ C0]