last executing test programs: 15.829712258s ago: executing program 4 (id=669): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/oss_mixer\x00', 0x200000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 15.283422327s ago: executing program 3 (id=672): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x478102, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000000140), 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000012c0)=[0x0]) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x2, 0x2, 0x80000006, 0xff, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x800, 0xe101, 0x2, 0x7, 0x2, 0x8}, 0x0, 0x0) 15.258325728s ago: executing program 1 (id=673): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x7, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b45, 0x0) 14.157917684s ago: executing program 1 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x10001, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 12.173910894s ago: executing program 1 (id=678): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r1, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}, 'veth0\x00'}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000240)) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f00000001c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1004480, &(0x7f0000000080)=ANY=[@ANYBLOB="73686f72746164000000006d654277e73d3030303030303030303030303030303030b030342c6e6f6164696e6963ca2cee2f9b0057192165f8a2c4811377599e664d944ab02fb24b22fb9f0ce4164c9546c61af63b57cf4a6dff0d33586c5d3dcf5c3cbf026e8bed5e56827bb3e5a8b15c9f9e451dd9ac3f4ac4000000000000", @ANYRESDEC=0x0, @ANYRES32], 0x1, 0xa1b, &(0x7f0000001540)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF043tB42oAjQg1FgPWzAkMsOA3bwDrvsFOwwDBg2GDsMxYp2Wrpm6Y3BBuS0aXhfPpQoWY7VOLZk+/Mx7C/58veSzx+afMmHbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/1lVNDB9N2twIAuJ9eGvvG0GHv/wDwSDnn8z8AAAAAAAAAAAAAAOx0KYr4s0jx6k/a6UJ1vaN+pjV75er4yOjmu+1JkaIWRVVf/q0fPHT4yNFjx4e7+cH7f9SejJfHzp1qnJ6bmV+YWlycmmyMz7Yuzk1Obfke7nb/jQarAWjMvHZl8tKlxcah5w6vu/nqwDu7H9s/cOL4i+f3dWvHR0ZHx3pq+vo/9KPf4nZneOyKIn4WKerfezc1I6IWdz8Wd3ju3Gt7qk4MVp0YHxmtOjLdas4ulTemWq6qRQz07HSyO0b3YS7uSiPiWtn8ssGDZffG5psLzYnpqcbZ5sJSa6k1N5tqndaW/RmIWgyniPmIaBe33l1/FPHvkeL777fTREQU3XF4tjox+M7tqd2DPm5BX9m3IuJmPABztoPtjiLeiBQ/OD8UF/O4VsP2TMTXy3w64ptlLkdcz9dT+QR5KuK9TZ5PPFj6ooh/ihRzqZ0mu3Nfva6ceaXxtdlLcz213deVB/794X7a4a9N9ShionrFb6cPf7ADAAAAAMDOU8TfRoobMwfSfPSuKbZmLzfONSemO98Kd7/7b+S9VlZWVgZSJxs5h3KezHk254Wc8zmv5bye882cN3K+lfNmzuWc7ZxRy4+fs5FzKOfJnGdzXsg5n/Nazus538x5I+dbOW/mXM7ZzhnWvQAAAAAAAADYYfZEET+OFF/4m29V5xVHdV76J04MH/jqF3vPGf/MHe6nrH0uIm7E1s7J7c+nDqda+eej7xdbU48ivpPP//vD7W4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwrWpRxGcixQ/faKdIEdGIuBCdXC62u3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAh1FPRZyOFL/4Sr26fjMiPhsR/7dS/omI5ZUNtrvFAAAAAAAAAMAtUhFDkeLxJ9tpICKuDryz+7H9AyeOv3h+XxFFpLKkt/7lsXOnGqfnZuYXphYXpyYb47Oti3OTU1t9uPqZ1uyVq+Mjo/ekM3e05x63f0/99Nz86wuty68ubXr73vqpicWlhebFzW+OPVGLGOrdMlg1eHxktGr0dKs5W+2aardpYC2isdXOAAAAAAAAAPDQ2JuKOBopXm0dSd11477Omv+vdK4Vq7V/8QdrvwWY3pBdvb8f2MrltNWGDlYL743xkdHRsZ7Nff23lpZtSqmIv44Un/vdJ6r18BR7N10bL+t2RYpj3zqS6wY+V9adXFdVHxwfGW28NDf75VPT03MXm0vNiempxth88+KWfzgAAAAAAAAAAPfQ3lTEn0eK3xu6mbrnnef1/77OtZ71/9+oltAr9bQ+V1Vr+x+v1vY7lz9xYrgx+mu3234v1v/LNqVUxL9Fisd//4nqfPru+v/Qhtqy7r8jxb/+41O5rrarrDvY7U7nHi+1pqeGUh6rzz/brY2q9niu/eRa7cGy9vOR4i+fWV87nGs/tVZ7qKz940jxv0c3r/30Wu3hsvaPIsVvv93o1u4ta8/k2v1rtc9dnJuevNOwlvP/d5Hi7C++mrp9vu389/z+49qGXHXLnH/w5Y9q/gd6tl3L8/rjPP8H7zD/fx8p/uSnT+W6ztgfyrc/Xv27Nv+/Eyn+61fX1x7LtfvWag9utVvbrZz/L0WKEz/60Wqf8/znkV2bod75/2zf+lx9lmzT/D/es20gt+vwLzkWj6LF17/9WnN6emrBBRdccGH1wna/MnE/lO///xwpXjhTS93jmPz+/7HOtbXjv/e/s/b+/8KGXLVN7//7era9kI9a+vsi6ksz8/37I+qLr3/7y62Z5uWpy1Ozw8eOHnl++Nix5/t3dY/t1i5teegeCuX8n4kUr/z0X1Y/x6w//tv8+H/vhly1TfP/yd4+rTuu2fJQPJLK+b8eKb779rurnzc/6Pi/+/n/wBfW5+r/v22a/0/1bKt+4//xiOd7th34dMSprT4WAAAAPGT25nXyP/31f1g953395//4Yre29/uf29kJ5/8DAAAAAMCjbm8q4q8ixf8MfSl1zyHbyu8/Jzfkqm36/d/+nm2T9+m8li0PMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADpSiiKcjxas/aaflorzeUT/Tmr1ydXxkdPPd9qRIUYuiqi//1g8eOnzk6LHjw9384P0/ak/Gy2PnTjVOz83ML0wtLk5NNsZnWxfnJqe2fA93u/9Gg9UANGZeuzJ56dJi49Bzh9fdfHXgnd2P7R84cfzF8/u6teMjo6NjPTV9/R/60W+RbrN9VxRxKVLUv/du+o8iohZ3PxZ3eO7ca3uqTgxWnRgfGa06Mt1qzi6VN6ZarqpFDPTsdLI7RvdhLu5KI+Ja2fyywYNl98bmmwvNiempxtnmwlJrqTU3m2qd1pb9GYhaDKeI+YhoF7feXX8UMREpvv9+O71dRBTdcXj2pbFvDB2+c3tq96CPvVa+u+nmvrJvRcTNeADmbAfbHUV8LFL84PxQ/KzojGs1bM9EfL3MpyO+WeZyxPV8PZVPkKci3tvk+cSDpS+KOBsp5lI7/WeR5756XTnzSuNrs5fmemq7rysP/PvD/bTDX5vqUcTPq1f8dvq5/88AAAAAAA+RIn4zUtyYOZCq9cHVNcXW7OXGuebEdOdr/e53/42818rKyspA6mQj51DOkznP5ryQcz7ntZzXc76Z80bOt3LezLmcs50zavnxczZyDuU8mfNszgs553Ney3k955s5b+R8K+fNnMs52znD9+QAAAAAAADADlSLIp6IFD98o51Wis4C74Xo5LJ1zofe/wcAAP//Vsw/Lg==") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) getsockopt$inet_opts(r4, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file1\x00') 11.884381579s ago: executing program 3 (id=679): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) syz_clone3(&(0x7f0000000000)={0x13824400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11.857430009s ago: executing program 4 (id=680): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket(0x10, 0x803, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050020000094c"], 0x4c}}, 0x0) 11.84098775s ago: executing program 0 (id=682): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x0, 0x10}, 0xc) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.619080628s ago: executing program 3 (id=684): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 10.040338577s ago: executing program 1 (id=685): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x1268, &(0x7f0000002500)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x444, 0x0, 0x1, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x100847c0, 0x0, 0x1, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0) chdir(&(0x7f0000001180)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x0) 9.962808918s ago: executing program 0 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 9.909798399s ago: executing program 3 (id=687): timer_create(0x3, 0x0, &(0x7f0000000300)) timer_create(0xfffffffd, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0xa, @pix={0x2, 0x0, 0x30314247, 0x0, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x1}}) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2084) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 9.794207401s ago: executing program 0 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x10001, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.991592478s ago: executing program 1 (id=690): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x26, 0x803, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) shutdown(r1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 7.735092172s ago: executing program 0 (id=691): r0 = socket(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r5 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@getqdisc={0x44, 0x26, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0x10}, {0xc, 0xc}, {0x0, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x800) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000001440)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x0, 0x3}}, 0x10, 0x0}, 0x200080ed) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e000503"], 0x24}, 0x1, 0x8000000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r7, 0x1, 0xfffffffe, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) 7.403868507s ago: executing program 3 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 6.289792304s ago: executing program 2 (id=694): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x808, &(0x7f00000003c0)=ANY=[], 0x1, 0x1c0, &(0x7f0000000440)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000980)='./file0\x00', 0x2800418, &(0x7f0000000180), 0x0, 0x263, &(0x7f0000000700)="$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") symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000001c0)={0x1fc, 0xffffffffffffffff, 0xfd2f, 0x2, 0x8000000000000001}) 6.199043686s ago: executing program 0 (id=695): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000240), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000d00)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 6.140545986s ago: executing program 1 (id=696): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xffffffffff600000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x0, 0xfffffffc}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2}) 4.773269437s ago: executing program 2 (id=697): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchdir(r1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r5, 0x3, 0x0) getdents(r5, 0x0, 0x58) 4.769983527s ago: executing program 3 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x8, 0x4, 0x3, 0x7f}}, 0x20) setns(r2, 0x0) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x3, &(0x7f0000000040)=ANY=[], 0x4, 0x67b, &(0x7f0000000bc0)="$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") timer_gettime(r1, &(0x7f00000000c0)) 3.101860712s ago: executing program 2 (id=699): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3008801, &(0x7f00000000c0)=ANY=[], 0x1, 0x203, &(0x7f0000000940)="$eJzsmb9v00AUx793cZO0QiAWBhYGKlEEcWwXUJcORWJEQmoRMEbUqQzXBjlGSiIxRCwsjAxIrPwDDAyZGNjYWGEAJCQGMjIb3fnsXH5BiC2Wvo8U++vzvXd3z+fvEIMgiGPLt6+/vjy/vrV3GcAJrKOi23+URn240f/zy8eXXmzfePXm0+v3RyefDCbzMQBxvPj4FoB3OyUgPKWu43g8el2f98AzfRscF7W+AwY7nWs8ivbBcE83PzB0i2khfHa/JfabgfCdZrAKVyqvGQiZLB6b37DPsA+gqodgQG1V3293ew8bAggTIfxUrMTpOFO3/lX8rX7DHY5towTyed199rQvr23d7hj1c8Hhar0Jhl2tt1CBbdu6JMJ3jfWftUb5ja2BvGtLype/RjPF6VrBCaWArkQBCS0UumT5XJYNZzmfIIBlw6vFFHNxwSZbpCdkLWeGgw/TUd//6wwzEynk/VLGNWtvfFwT4maOzGVtAnO3ROIfzAIuGP5kpa8QgHp0+Kje7vZqwWHjwD/wjzxv85pzxXGuenVlRMnxD/5XVf60ZuRfmdO3zMroNKIodDtAFLrZtZccDcfdfdv6qWK48j+OjfNJDrlV1LIrs8dg+sfVWaqN0tzJEwRBEARBEARBEARBEARBLEL6XyzOgSUfwtSHqlRO4d1SvX8HAAD//wQvYUM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$cont(0x9, 0x0, 0xb, 0x80000000000) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="00e300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @dev}}}}}}, 0x0) fadvise64(r0, 0x0, 0x4000002, 0x3) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280)={[{@test_dummy_encryption}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@barrier_val}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 3.045192523s ago: executing program 4 (id=700): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) 2.162205987s ago: executing program 4 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x10001, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.151577327s ago: executing program 2 (id=702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8004, &(0x7f0000000540)={0x11, 0x80f3, 0x0, 0x1, 0x11, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}}, 0x1c}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.803489982s ago: executing program 4 (id=703): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4002, &(0x7f00000004c0)={[{@codepage={'codepage', 0x3d, 'iso8859-1'}}, {@umask={'umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x4, 0x33e, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f000000e0c0), 0x10010) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1.014365534s ago: executing program 2 (id=704): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 214.161916ms ago: executing program 4 (id=705): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, 0x0, 0x103ec2, 0x100) clock_gettime(0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@security={'security\x00', 0xe, 0x4, 0x450, 0xffffffff, 0x2b0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, [0xffffff00, 0x0, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'bridge_slave_0\x00', 'veth1_to_bridge\x00', {}, {}, 0x16, 0xd2, 0x2, 0x20}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4, 0x4}, {0xffffffffffffffff, 0x4, 0x7}}}}, {{@uncond, 0x0, 0x1a0, 0x1e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xfffffffa, 0x5, 0x8, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x23, "5380620af63ee679cf31ee1666fe2942141a5a96428507cdffa1c5d92bb5"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000001c0)=0x9) syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback}}}}}}, 0x0) ftruncate(r2, 0x3af001) 85.893398ms ago: executing program 2 (id=706): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 0 (id=707): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x24040000) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x800}, &(0x7f0000001200)=0x0, &(0x7f0000001040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073012700000000009500008000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0xfffffffe, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x46) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 28.516164][ T3839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.532442][ T3839] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller syzkaller login: [ 42.575277][ T4055] sshd-session (4055) used greatest stack depth: 20880 bytes left Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 49.633185][ T4157] cgroup: Unknown subsys name 'net' [ 49.769471][ T4157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.035412][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.770009][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 52.788243][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 52.873855][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 52.915347][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 52.967263][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.974716][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.982520][ T4167] device bridge_slave_0 entered promiscuous mode [ 52.994128][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.001590][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.009442][ T4167] device bridge_slave_1 entered promiscuous mode [ 53.028279][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.035484][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.043113][ T4176] device bridge_slave_0 entered promiscuous mode [ 53.050489][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 53.079015][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.087882][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.096226][ T4176] device bridge_slave_1 entered promiscuous mode [ 53.119504][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.147891][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.155056][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.162873][ T4171] device bridge_slave_0 entered promiscuous mode [ 53.174371][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.196623][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.203712][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.211990][ T4171] device bridge_slave_1 entered promiscuous mode [ 53.229944][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.262028][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.292456][ T4167] team0: Port device team_slave_0 added [ 53.312194][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.321457][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.329094][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.336820][ T4177] device bridge_slave_0 entered promiscuous mode [ 53.345420][ T4167] team0: Port device team_slave_1 added [ 53.351403][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.359312][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.367632][ T4177] device bridge_slave_1 entered promiscuous mode [ 53.381628][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.389116][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.398087][ T4168] device bridge_slave_0 entered promiscuous mode [ 53.407222][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.438787][ T4176] team0: Port device team_slave_0 added [ 53.445093][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.452151][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.460244][ T4168] device bridge_slave_1 entered promiscuous mode [ 53.489306][ T4176] team0: Port device team_slave_1 added [ 53.502574][ T4171] team0: Port device team_slave_0 added [ 53.509499][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.516729][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.544510][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.558188][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.580529][ T4171] team0: Port device team_slave_1 added [ 53.593897][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.600956][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.627111][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.639525][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.656385][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.665918][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.672876][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.699040][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.727832][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.737543][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.744786][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.771031][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.782535][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.789812][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.816996][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.830192][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.837291][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.863476][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.919350][ T4177] team0: Port device team_slave_0 added [ 53.936615][ T4168] team0: Port device team_slave_0 added [ 53.947162][ T4167] device hsr_slave_0 entered promiscuous mode [ 53.954019][ T4167] device hsr_slave_1 entered promiscuous mode [ 53.962143][ T4177] team0: Port device team_slave_1 added [ 53.977174][ T4168] team0: Port device team_slave_1 added [ 54.023522][ T4171] device hsr_slave_0 entered promiscuous mode [ 54.030304][ T4171] device hsr_slave_1 entered promiscuous mode [ 54.037262][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.045209][ T4171] Cannot create hsr debugfs directory [ 54.061135][ T4176] device hsr_slave_0 entered promiscuous mode [ 54.068203][ T4176] device hsr_slave_1 entered promiscuous mode [ 54.074834][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.082375][ T4176] Cannot create hsr debugfs directory [ 54.094065][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.101350][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.127677][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.140388][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.147722][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.174089][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.185942][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.192898][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.219102][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.250231][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.257620][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.283877][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.385675][ T4168] device hsr_slave_0 entered promiscuous mode [ 54.392400][ T4168] device hsr_slave_1 entered promiscuous mode [ 54.399271][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.407042][ T4168] Cannot create hsr debugfs directory [ 54.423229][ T4177] device hsr_slave_0 entered promiscuous mode [ 54.430394][ T4177] device hsr_slave_1 entered promiscuous mode [ 54.437114][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.445136][ T4177] Cannot create hsr debugfs directory [ 54.505333][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 54.509900][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 54.512264][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 54.524015][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 54.534586][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 54.670176][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.690834][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.699810][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.709548][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.743466][ T4171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.755547][ T4171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.773604][ T4171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.783994][ T4171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.844916][ T4176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.856778][ T4176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.869709][ T4176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.888844][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.903269][ T4176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.932629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.942929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.958881][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.972968][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.987704][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.997750][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.005067][ T4207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.025674][ T4168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.038485][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.048011][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.057546][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.066999][ T4207] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.074046][ T4207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.085279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.108093][ T4168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.121756][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.142220][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.149970][ T4168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.160127][ T4168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.182115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.191764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.216223][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.236645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.244589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.252225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.260996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.270106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.279386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.288599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.297596][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.304695][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.313118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.326743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.335684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.345949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.354330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.367426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.376163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.384851][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.392087][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.402342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.422496][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.435265][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.443884][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.453626][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.465929][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.482695][ T4177] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.496688][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.515211][ T4177] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.537844][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.554565][ T4177] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.564711][ T4177] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.574742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.586241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.594904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.602760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.610782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.620638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.634682][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.645965][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.667874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.679898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.706640][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.733628][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.747668][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.754822][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.764719][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.773320][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.781908][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.789002][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.799797][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.830982][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.857849][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.871194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.880905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.891323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.900017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.909133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.918336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.942479][ T4176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.954076][ T4176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.968229][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.976976][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.984749][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.993190][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.004324][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.012668][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.021416][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.029703][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.039296][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.048892][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.072690][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.087420][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.098968][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.109803][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.116950][ T4207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.126050][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.133574][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.141684][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.159283][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.171676][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.180965][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.189893][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.196989][ T4206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.210216][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.225973][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.270083][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.280254][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.289448][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.298901][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.309883][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.336182][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.346158][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.355197][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.362260][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.371121][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.380085][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.388986][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.396080][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.403902][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.429778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.438763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.447184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.455045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.463168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.471959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.481125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.490078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.499450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.508310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.517109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.527531][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.541965][ T4167] device veth0_vlan entered promiscuous mode [ 56.560090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.568012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.576917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.584662][ T4213] Bluetooth: hci0: command 0x041b tx timeout [ 56.584994][ T4210] Bluetooth: hci1: command 0x041b tx timeout [ 56.591360][ T4213] Bluetooth: hci3: command 0x041b tx timeout [ 56.598021][ T4210] Bluetooth: hci2: command 0x041b tx timeout [ 56.603935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.613666][ T4210] Bluetooth: hci4: command 0x041b tx timeout [ 56.618688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.631403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.662834][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.672536][ T4167] device veth1_vlan entered promiscuous mode [ 56.687167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.696100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.705205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.713814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.722455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.732011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.740972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.749995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.768521][ T4171] device veth0_vlan entered promiscuous mode [ 56.790673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.799730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.809739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.819023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.828136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.837063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.845833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.854245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.862614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.871318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.887412][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.898778][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.911491][ T4176] device veth0_vlan entered promiscuous mode [ 56.921715][ T4171] device veth1_vlan entered promiscuous mode [ 56.931763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.940922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.950033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.960966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.969596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.995528][ T4167] device veth0_macvtap entered promiscuous mode [ 57.007532][ T4176] device veth1_vlan entered promiscuous mode [ 57.025379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.045371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.053494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.069968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.078791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.092457][ T4167] device veth1_macvtap entered promiscuous mode [ 57.123399][ T4176] device veth0_macvtap entered promiscuous mode [ 57.173907][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.183732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.192147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.201835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.210619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.219329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.230332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.239095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.261027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.271830][ T4176] device veth1_macvtap entered promiscuous mode [ 57.281573][ T4171] device veth0_macvtap entered promiscuous mode [ 57.297288][ T4171] device veth1_macvtap entered promiscuous mode [ 57.307456][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.326911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.337438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.345914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.353889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.363754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.372764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.381236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.389187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.397044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.409379][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.423845][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.435448][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.447029][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.461871][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.471031][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.480849][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.491004][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.501463][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.522059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.531148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.542326][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.556167][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.567713][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.591538][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.605318][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.615730][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.626499][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.638143][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.646467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.660275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.669285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.678540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.703299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.713130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.726627][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.738222][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.750167][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.761995][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.773536][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.797826][ T4168] device veth0_vlan entered promiscuous mode [ 57.822352][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.832454][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.842549][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.852781][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.863611][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.872264][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.885172][ T4176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.894082][ T4176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.903212][ T4176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.913184][ T4176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.927798][ T4171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.938376][ T4171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.948267][ T4171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.957979][ T4171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.990873][ T4168] device veth1_vlan entered promiscuous mode [ 58.026727][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.037573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.046115][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.059541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.069908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.098941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.110272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.133030][ T4168] device veth0_macvtap entered promiscuous mode [ 58.143015][ T4168] device veth1_macvtap entered promiscuous mode [ 58.170829][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.187011][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.199159][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.208788][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.211603][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.225325][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.249114][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.260493][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.271842][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.282821][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.292717][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.304111][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.315752][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.324072][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.333737][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.341908][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.350820][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.359810][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.384114][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.385329][ T4177] device veth0_vlan entered promiscuous mode [ 58.394390][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.432682][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.449648][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.460248][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.470796][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.481016][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.492063][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.503677][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.525188][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.538419][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.547896][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.559195][ T4177] device veth1_vlan entered promiscuous mode [ 58.576121][ T4207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.590613][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.602859][ T4168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.607493][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.623651][ T4207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.625047][ T4168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.662820][ T4168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.671503][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 58.673080][ T4211] Bluetooth: hci4: command 0x040f tx timeout [ 58.677940][ T4214] Bluetooth: hci2: command 0x040f tx timeout [ 58.687121][ T4168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.713748][ T4177] device veth0_macvtap entered promiscuous mode [ 58.726371][ T4214] Bluetooth: hci1: command 0x040f tx timeout [ 58.732401][ T4214] Bluetooth: hci0: command 0x040f tx timeout [ 58.767991][ T4177] device veth1_macvtap entered promiscuous mode [ 58.803030][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.819483][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.830664][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.841347][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.851474][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.862136][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.872511][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.884435][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.899304][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.916556][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.925858][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.933822][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.943063][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.962411][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.080369][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.133577][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.253185][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.359491][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.652146][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.689903][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.700338][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.717996][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.731347][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.749600][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.762440][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.778584][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.790502][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.818675][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.828264][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.837151][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.855433][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.858071][ T4177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.863829][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.878948][ T4177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.190387][ T4177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.314130][ T4177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.467607][ T4258] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 60.533838][ T4259] netlink: 'syz.1.2': attribute type 16 has an invalid length. [ 60.547023][ T4259] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 60.559137][ T4259] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2'. [ 60.583268][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.748250][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.757087][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 60.767430][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 60.784079][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.816019][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.824055][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.832648][ T4213] Bluetooth: hci0: command 0x0419 tx timeout [ 60.858441][ T4213] Bluetooth: hci1: command 0x0419 tx timeout [ 60.868322][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.894537][ T4213] Bluetooth: hci2: command 0x0419 tx timeout [ 60.905917][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.923451][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.945061][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.968812][ T4267] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 60.982864][ T4267] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 60.992311][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.042945][ T4267] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 61.061939][ T4267] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 61.167629][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.195798][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.206726][ T4275] loop0: detected capacity change from 0 to 1024 [ 61.228599][ T26] audit: type=1326 audit(1750962376.579:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3aea929 code=0x7ffc0000 [ 61.273355][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.317426][ T4274] loop3: detected capacity change from 0 to 32768 [ 61.332292][ T26] audit: type=1326 audit(1750962376.609:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3aea929 code=0x7ffc0000 [ 61.376906][ T4275] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.391094][ T26] audit: type=1326 audit(1750962376.609:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb8b3aea929 code=0x7ffc0000 [ 61.458548][ T4274] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 61.467905][ T4274] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 61.480533][ T4289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12'. [ 61.485928][ T4274] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 61.501098][ T4211] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 61.519176][ T4211] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 61.580030][ T26] audit: type=1326 audit(1750962376.609:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3aea929 code=0x7ffc0000 [ 61.610862][ T4211] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 91ms [ 61.624184][ T4211] gfs2: fsid=syz:syz.0: jid=0: Done [ 61.630993][ T4274] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 61.662512][ T4274] attempt to access beyond end of device [ 61.662512][ T4274] loop3: rw=12288, want=9007199254757624, limit=32768 [ 61.675021][ T4274] gfs2: fsid=syz:syz.0: can't lock local "qc" file: -5 [ 61.800277][ T26] audit: type=1326 audit(1750962376.609:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3aea929 code=0x7ffc0000 [ 62.348645][ T26] audit: type=1326 audit(1750962376.619:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fb8b3aea929 code=0x7ffc0000 [ 62.442882][ T26] audit: type=1326 audit(1750962376.619:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3aea929 code=0x7ffc0000 [ 62.489133][ T26] audit: type=1326 audit(1750962376.619:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb8b3aea929 code=0x7ffc0000 [ 62.600971][ T26] audit: type=1326 audit(1750962376.619:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3aea929 code=0x7ffc0000 [ 62.628722][ T26] audit: type=1326 audit(1750962376.619:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3aea929 code=0x7ffc0000 [ 62.693063][ T4304] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 63.864681][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.121954][ T4334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22'. [ 64.244179][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 64.253312][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 64.262602][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 64.271640][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 64.280629][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 64.289656][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 64.298636][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 64.535253][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #248!!! [ 64.564200][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 64.573348][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 65.683197][ T4343] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.687773][ T4345] netlink: 64 bytes leftover after parsing attributes in process `syz.3.26'. [ 65.718293][ T4346] loop2: detected capacity change from 0 to 512 [ 65.744424][ T1107] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.767551][ T1107] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.789738][ T4345] netlink: 'syz.3.26': attribute type 11 has an invalid length. [ 65.802608][ T4345] netlink: 428 bytes leftover after parsing attributes in process `syz.3.26'. [ 65.827993][ T4346] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.874592][ T1107] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 65.894126][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 65.927979][ T4346] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #3: comm syz.2.25: corrupted inode contents [ 65.942135][ T1107] usb 2-1: SerialNumber: syz [ 65.959538][ T4346] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #3: comm syz.2.25: mark_inode_dirty error [ 65.982039][ T4346] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #3: comm syz.2.25: corrupted inode contents [ 66.001427][ T4346] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.25: mark_inode_dirty error [ 66.018781][ T4354] device syzkaller0 entered promiscuous mode [ 66.049775][ T4346] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.25: Failed to acquire dquot type 0 [ 66.072153][ T4346] EXT4-fs (loop2): 1 orphan inode deleted [ 66.078858][ T4346] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.100359][ T4346] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.209092][ T1107] usb 2-1: 0:2 : does not exist [ 66.217608][ T1107] usb 2-1: unit 5 not found! [ 66.232617][ T4358] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.296763][ T1107] usb 2-1: USB disconnect, device number 2 [ 66.765486][ T4161] udevd[4161]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 68.376969][ T4384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.38'. [ 68.417219][ T4388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.38'. [ 68.514094][ T4392] ======================================================= [ 68.514094][ T4392] WARNING: The mand mount option has been deprecated and [ 68.514094][ T4392] and is ignored by this kernel. Remove the mand [ 68.514094][ T4392] option from the mount to silence this warning. [ 68.514094][ T4392] ======================================================= [ 70.199589][ T4410] loop2: detected capacity change from 0 to 1024 [ 70.503699][ T4413] ªªªªªª: renamed from vlan0 [ 70.569171][ T4416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 70.599503][ T4416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 70.638151][ T4418] loop3: detected capacity change from 0 to 512 [ 70.697239][ T4418] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.828211][ T4418] EXT4-fs (loop3): 1 truncate cleaned up [ 70.848462][ T4418] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.006971][ T4418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.48'. [ 71.023976][ T4418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.48'. [ 71.033974][ T4430] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 71.689615][ T4441] loop2: detected capacity change from 0 to 256 [ 72.040289][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.047049][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.135803][ T4441] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.146940][ T4441] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 72.229029][ T4441] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 72.949015][ T4451] netlink: zone id is out of range [ 74.068536][ T4473] loop2: detected capacity change from 0 to 1024 [ 74.112129][ T4473] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 74.135830][ T4475] tipc: Started in network mode [ 74.141717][ T4475] tipc: Node identity 6, cluster identity 4711 [ 74.164012][ T4475] tipc: Node number set to 6 [ 74.176879][ T4473] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,max_dir_size_kb=0x0000000000000002,norecovery,debug_want_extra_isize=0x0000000000000080,block_validity,nodiscard,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 75.028130][ T4489] process 'syz.3.69' launched './file0' with NULL argv: empty string added [ 76.708192][ T23] cfg80211: failed to load regulatory.db [ 76.960181][ T4502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.72'. [ 78.683935][ T4525] loop3: detected capacity change from 0 to 1024 [ 78.849097][ T4525] hfsplus: unable to parse mount options [ 79.616150][ T4311] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 79.662086][ T4527] netlink: 41326 bytes leftover after parsing attributes in process `syz.0.80'. [ 81.102025][ T4533] fido_id[4533]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.341789][ T4552] binfmt_misc: register: failed to install interpreter file ./file0 [ 81.454563][ T4544] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.054341][ T4544] usb 1-1: Using ep0 maxpacket: 32 [ 82.065876][ T4559] netlink: 'syz.2.89': attribute type 32 has an invalid length. [ 82.813596][ T4566] Zero length message leads to an empty skb [ 82.819934][ T4544] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 82.853754][ T4544] usb 1-1: config 0 has no interface number 0 [ 82.861333][ T4568] netlink: 136 bytes leftover after parsing attributes in process `syz.4.91'. [ 82.897227][ T4544] usb 1-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.003736][ T4544] usb 1-1: config 0 interface 2 has no altsetting 0 [ 83.047910][ T4544] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 83.124310][ T4544] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.183136][ T4544] usb 1-1: config 0 descriptor?? [ 83.614156][ C0] sched: RT throttling activated [ 83.669350][ T4544] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 84.647746][ T4544] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 84.654957][ T4544] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 84.743190][ T4592] loop3: detected capacity change from 0 to 1024 [ 84.757890][ T4591] loop1: detected capacity change from 0 to 512 [ 84.833348][ T4544] uclogic 0003:5543:0781.0002: item fetching failed at offset 6/7 [ 84.841727][ T4544] uclogic 0003:5543:0781.0002: parse failed [ 84.847711][ T4544] uclogic: probe of 0003:5543:0781.0002 failed with error -22 [ 84.858778][ T4544] usb 1-1: USB disconnect, device number 2 [ 84.952140][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 84.998340][ T4591] EXT4-fs (loop1): Ignoring removed nobh option [ 85.989437][ T4591] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.98: invalid indirect mapped block 256 (level 2) [ 86.125684][ T4591] EXT4-fs (loop1): 2 truncates cleaned up [ 86.144471][ T4591] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 88.382988][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 88.383005][ T26] audit: type=1326 audit(1750962403.629:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4607 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868b202929 code=0x7ffc0000 [ 88.412754][ T4600] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 88.522871][ T26] audit: type=1326 audit(1750962403.629:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4607 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868b202929 code=0x7ffc0000 [ 88.592238][ T4621] binder: BINDER_SET_CONTEXT_MGR already set [ 88.713254][ T4621] binder: 4618:4621 ioctl 4018620d 2000000002c0 returned -16 [ 89.617611][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 90.904438][ T4311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.692069][ T4311] usb 3-1: Using ep0 maxpacket: 16 [ 92.884524][ T4311] usb 3-1: device descriptor read/all, error -71 [ 93.556157][ T4682] loop1: detected capacity change from 0 to 128 [ 93.580139][ T4677] loop2: detected capacity change from 0 to 2048 [ 93.681159][ T4677] loop2: p1 < > p4 [ 93.694795][ T4677] loop2: p4 size 8388608 extends beyond EOD, truncated [ 93.797187][ T4686] syz.0.123 uses obsolete (PF_INET,SOCK_PACKET) [ 95.902407][ T3546] loop2: p1 < > p4 [ 95.912189][ T3546] loop2: p4 size 8388608 extends beyond EOD, truncated [ 96.758308][ T4701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.127'. [ 96.829910][ T4706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.127'. [ 96.927622][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 97.537281][ T4714] xt_time: unknown flags 0xc [ 97.573777][ T4714] loop3: detected capacity change from 0 to 2048 [ 98.397182][ T4305] udevd[4305]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 98.438669][ T4286] GPT:first_usable_lbas don't match. [ 98.443985][ T4286] GPT:34 != 290 [ 98.472423][ T4159] udevd[4159]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 98.491084][ T4305] udevd[4305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 98.521343][ T4286] GPT: Use GNU Parted to correct GPT errors. [ 98.541658][ T4286] loop3: p1 p2 p3 [ 98.593609][ T4714] GPT:first_usable_lbas don't match. [ 98.599446][ T4714] GPT:34 != 290 [ 98.602933][ T4714] GPT: Use GNU Parted to correct GPT errors. [ 98.609074][ T4714] loop3: p1 p2 p3 [ 98.865775][ T4286] udevd[4286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 98.880164][ T4305] udevd[4305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 98.914220][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 99.021111][ T4286] udevd[4286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 99.023801][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 99.033862][ T4305] udevd[4305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 99.940713][ T4725] loop0: detected capacity change from 0 to 256 [ 100.661748][ T4725] FAT-fs (loop0): bogus number of FAT sectors [ 100.694278][ T4725] FAT-fs (loop0): Can't find a valid FAT filesystem [ 100.856104][ T4741] wlan0 speed is unknown, defaulting to 1000 [ 100.862695][ T4741] wlan0 speed is unknown, defaulting to 1000 [ 100.896832][ T4741] wlan0 speed is unknown, defaulting to 1000 [ 100.972802][ T4741] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.244906][ T4744] sctp: failed to load transform for md5: -2 [ 101.883572][ T4741] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.911963][ T4742] sctp: failed to load transform for md5: -4 [ 101.984546][ T4738] sctp: failed to load transform for md5: -4 [ 102.059369][ T4741] wlan0 speed is unknown, defaulting to 1000 [ 102.094961][ T4741] wlan0 speed is unknown, defaulting to 1000 [ 102.116871][ T4741] wlan0 speed is unknown, defaulting to 1000 [ 102.154700][ T4741] wlan0 speed is unknown, defaulting to 1000 [ 102.185937][ T4741] wlan0 speed is unknown, defaulting to 1000 [ 103.278242][ T4785] loop4: detected capacity change from 0 to 2048 [ 103.957885][ T4789] mmap: syz.1.147 (4789) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 103.986726][ T4785] UDF-fs: bad mount option "gid=f0lѰÙÂ/ëƘ:²orget" or missing value [ 104.606273][ T4801] netlink: 'syz.2.149': attribute type 3 has an invalid length. [ 106.303001][ T4816] loop2: detected capacity change from 0 to 2048 [ 106.850822][ T4816] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 107.023018][ T26] audit: type=1800 audit(1750962422.369:37): pid=4816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.155" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 108.637668][ T4842] orangefs_mount: mount request failed with -4 [ 111.209303][ T4206] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 111.271147][ T4869] syz.0.171[4869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.271252][ T4869] syz.0.171[4869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.315961][ T4206] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1070 with error 28 [ 111.356178][ T4873] loop4: detected capacity change from 0 to 512 [ 111.376701][ T4206] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.376701][ T4206] [ 111.392741][ T4206] EXT4-fs (loop2): Total free blocks count 0 [ 111.442536][ T4206] EXT4-fs (loop2): Free/Dirty block details [ 111.462830][ T4206] EXT4-fs (loop2): free_blocks=2415919504 [ 111.470611][ T4206] EXT4-fs (loop2): dirty_blocks=1072 [ 111.482821][ T4206] EXT4-fs (loop2): Block reservation details [ 111.491324][ T4206] EXT4-fs (loop2): i_reserved_data_blocks=67 [ 111.511259][ T4873] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 111.560163][ T4880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.568045][ T4880] device batadv_slave_0 entered promiscuous mode [ 111.587849][ T4873] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.730483][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 112.075505][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 112.485170][ C0] Unknown status report in ack skb [ 112.565683][ T4898] loop1: detected capacity change from 0 to 1024 [ 112.894331][ T4208] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.927029][ T4898] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.966574][ T4208] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.219088][ T4208] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 115.230728][ T4208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.268090][ T4208] usb 3-1: config 0 descriptor?? [ 115.814493][ T4208] usb 3-1: can't set config #0, error -71 [ 115.881310][ T4208] usb 3-1: USB disconnect, device number 4 [ 116.103497][ T4930] loop3: detected capacity change from 0 to 16 [ 116.811067][ T4930] erofs: (device loop3): mounted with root inode @ nid 36. [ 121.596323][ T4970] loop1: detected capacity change from 0 to 256 [ 122.595552][ T4975] Device name cannot be null; rc = [-22] [ 122.612407][ T4975] loop2: detected capacity change from 0 to 128 [ 123.970312][ T4980] loop0: detected capacity change from 0 to 128 [ 123.997125][ T4975] affs: Unrecognized mount option "verb" or missing value [ 124.004670][ T4975] affs: Error parsing options [ 124.006925][ T4980] UDF-fs: bad mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 125.356971][ T4980] netlink: zone id is out of range [ 125.364094][ T4980] netlink: zone id is out of range [ 125.373189][ T4980] netlink: zone id is out of range [ 125.403370][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 125.457367][ T4980] netlink: set zone limit has 4 unknown bytes [ 125.483688][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 125.627470][ T4991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 125.946973][ T4992] netlink: 'syz.3.203': attribute type 10 has an invalid length. [ 126.293818][ T4992] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 126.374490][ T26] audit: type=1326 audit(1750962441.709:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 126.460039][ T26] audit: type=1326 audit(1750962441.709:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 126.500979][ T5004] cgroup: Unknown subsys name 'obj_role' [ 126.529077][ T26] audit: type=1326 audit(1750962441.709:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 126.545376][ T5010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.206'. [ 126.560010][ T26] audit: type=1326 audit(1750962441.709:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 126.600467][ T5013] usb usb1: usbfs: process 5013 (syz.2.208) did not claim interface 6 before use [ 126.639909][ T5013] loop2: detected capacity change from 0 to 256 [ 126.688529][ T26] audit: type=1326 audit(1750962441.709:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 126.734664][ T26] audit: type=1326 audit(1750962441.709:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 126.800984][ T26] audit: type=1326 audit(1750962441.709:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 126.941761][ T26] audit: type=1326 audit(1750962441.719:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 127.843906][ T5023] netlink: 'syz.0.211': attribute type 1 has an invalid length. [ 127.882710][ T5023] netlink: 'syz.0.211': attribute type 4 has an invalid length. [ 127.934819][ T5023] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.211'. [ 127.961087][ T26] audit: type=1326 audit(1750962441.719:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 128.036981][ T5030] netlink: 'syz.0.211': attribute type 1 has an invalid length. [ 128.046191][ T5030] netlink: 'syz.0.211': attribute type 4 has an invalid length. [ 128.054636][ T5030] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.211'. [ 128.070631][ T26] audit: type=1326 audit(1750962441.719:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 132.469747][ T5076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 132.554545][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.662352][ T5076] device bridge_slave_0 left promiscuous mode [ 132.669512][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.746174][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.758616][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.361350][ T5113] loop2: detected capacity change from 0 to 128 [ 136.625160][ T5113] EXT4-fs (loop2): Test dummy encryption mode enabled [ 136.632333][ T5113] EXT4-fs (loop2): Test dummy encryption mode enabled [ 136.668729][ T5113] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 136.683828][ T5113] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.946338][ T5119] UBIFS error (pid: 5119): cannot open "./file0", error -22 [ 137.372028][ T5121] loop2: detected capacity change from 0 to 4096 [ 138.197919][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 138.197936][ T26] audit: type=1800 audit(1750962453.549:59): pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.243" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 138.228148][ T5136] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 139.569976][ T5151] loop3: detected capacity change from 0 to 8 [ 139.645739][ T5151] SQUASHFS error: lzo decompression failed, data probably corrupt [ 139.707245][ T5151] SQUASHFS error: Failed to read block 0x91: -5 [ 139.723002][ T5157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.251'. [ 139.746222][ T5151] SQUASHFS error: Unable to read metadata cache entry [8f] [ 139.783695][ T5151] SQUASHFS error: Unable to read inode 0x11f [ 139.852080][ T5159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.251'. [ 139.985951][ T5151] loop3: detected capacity change from 0 to 64 [ 140.439723][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 141.160956][ T4212] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 142.456172][ T4212] usb 4-1: device descriptor read/64, error -71 [ 144.181666][ T26] audit: type=1326 audit(1750962459.529:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5203 comm="syz.0.267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faee81b8929 code=0x0 [ 144.455026][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 144.893339][ T5229] dns_resolver: Unsupported server list version (0) [ 148.944456][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b15f400: rx timeout, send abort [ 149.058486][ T5275] loop0: detected capacity change from 0 to 512 [ 149.128072][ T5275] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.454089][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b15f400: abort rx timeout. Force session deactivation [ 149.590811][ T5277] loop2: detected capacity change from 0 to 2048 [ 149.610092][ T5275] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 149.683165][ T5275] EXT4-fs (loop0): 1 truncate cleaned up [ 149.714407][ T5275] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000066,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 149.759528][ T5294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'. [ 149.886382][ T5277] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000007,,errors=continue. Quota mode: none. [ 150.132848][ T5301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.664370][ T5290] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 329: padding at end of block bitmap is not set [ 151.701087][ T26] audit: type=1326 audit(1750962467.049:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5300 comm="syz.1.291" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72f7aed929 code=0x0 [ 151.867589][ T5277] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 294 with error 28 [ 151.952445][ T5277] EXT4-fs (loop2): This should not happen!! Data will be lost [ 151.952445][ T5277] [ 152.020905][ T5277] EXT4-fs (loop2): Total free blocks count 0 [ 152.072965][ T5277] EXT4-fs (loop2): Free/Dirty block details [ 152.123915][ T5277] EXT4-fs (loop2): free_blocks=0 [ 152.168930][ T5277] EXT4-fs (loop2): dirty_blocks=304 [ 152.217804][ T5277] EXT4-fs (loop2): Block reservation details [ 152.271224][ T5277] EXT4-fs (loop2): i_reserved_data_blocks=19 [ 153.126684][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.144020][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.425032][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.791005][ T5318] device bridge_slave_0 left promiscuous mode [ 153.799849][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.836030][ T5318] device bridge_slave_1 left promiscuous mode [ 154.005150][ T5318] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.259714][ T5318] bond0: (slave bond_slave_0): Releasing backup interface [ 154.737350][ T5318] bond0: (slave bond_slave_1): Releasing backup interface [ 154.803303][ T5338] loop1: detected capacity change from 0 to 8 [ 154.917399][ T5318] team0: Port device team_slave_0 removed [ 154.968196][ T5338] SQUASHFS error: lzo decompression failed, data probably corrupt [ 154.989365][ T5318] team0: Port device team_slave_1 removed [ 155.002030][ T5338] SQUASHFS error: Failed to read block 0x144: -5 [ 155.015063][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.038199][ T5338] SQUASHFS error: Unable to read metadata cache entry [142] [ 155.046220][ T5338] SQUASHFS error: Unable to read inode 0x11f [ 155.071807][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.082347][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.107363][ T5318] bond0: (slave wlan1): Releasing backup interface [ 155.557926][ T5332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 155.741903][ T5332] device bond_slave_0 entered promiscuous mode [ 155.748593][ T5332] device bond_slave_1 entered promiscuous mode [ 155.755237][ T5332] device macvlan0 entered promiscuous mode [ 155.761655][ T5332] device bond0 entered promiscuous mode [ 155.798905][ T5332] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 155.816619][ T5318] syz.3.296 (5318) used greatest stack depth: 19552 bytes left [ 157.497493][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.511806][ T5362] loop0: detected capacity change from 0 to 512 [ 158.001331][ T5362] EXT4-fs (loop0): Ignoring removed nobh option [ 158.119070][ T5362] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 158.127941][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 158.260593][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 158.296657][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 158.355065][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 158.456835][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 158.561076][ T5373] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 159.139882][ T5385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.559551][ T5406] loop3: detected capacity change from 0 to 512 [ 163.102622][ T5406] EXT4-fs (loop3): 1 orphan inode deleted [ 163.318885][ T5406] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.362042][ T5406] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.432771][ T5413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 167.579142][ T5445] loop4: detected capacity change from 0 to 4096 [ 168.614720][ T5456] xt_NFQUEUE: number of total queues is 0 [ 169.826923][ T5471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.335'. [ 171.073199][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 171.113193][ T5462] device bond_slave_0 entered promiscuous mode [ 171.119453][ T5462] device bond_slave_1 entered promiscuous mode [ 171.194653][ T5462] device macvlan2 entered promiscuous mode [ 171.220262][ T5462] device bond0 entered promiscuous mode [ 171.263977][ T5462] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 171.272114][ T5468] netlink: 'syz.3.336': attribute type 39 has an invalid length. [ 171.288912][ T5468] device veth0_macvtap left promiscuous mode [ 171.470630][ T5488] delete_channel: no stack [ 171.557100][ T5496] loop0: detected capacity change from 0 to 1024 [ 171.649479][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 172.424837][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 173.366396][ T5519] usb usb1: usbfs: process 5519 (syz.3.362) did not claim interface 6 before use [ 173.662792][ T5523] loop3: detected capacity change from 0 to 256 [ 174.510066][ T5547] virtio-fs: tag not found [ 174.528170][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 175.284660][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 175.325819][ T4208] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 175.404867][ T5554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.364'. [ 175.414336][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 175.431945][ T1107] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 175.478843][ T5558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.364'. [ 175.644634][ T1107] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 175.877202][ T5564] bridge0: port 1(gretap0) entered blocking state [ 175.883993][ T5564] bridge0: port 1(gretap0) entered disabled state [ 175.892710][ T5564] device gretap0 entered promiscuous mode [ 175.899871][ T5564] bridge0: port 1(gretap0) entered blocking state [ 175.906888][ T5564] bridge0: port 1(gretap0) entered forwarding state [ 176.608409][ T4208] usb 4-1: Using ep0 maxpacket: 16 [ 176.615517][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 176.621765][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 176.639410][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 177.494268][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 177.504469][ T4208] usb 4-1: config 64 has an invalid interface number: 176 but max is 0 [ 177.512746][ T4208] usb 4-1: config 64 has no interface number 0 [ 177.679097][ T5575] Can't find a SQUASHFS superblock on nullb0 [ 177.775709][ T4208] usb 4-1: config 64 interface 176 has no altsetting 0 [ 178.054516][ T1107] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 178.063692][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.081461][ T1107] usb 5-1: Product: syz [ 178.138326][ T1107] usb 5-1: config 0 descriptor?? [ 178.164774][ T1107] usb 5-1: can't set config #0, error -71 [ 178.186041][ T1107] usb 5-1: USB disconnect, device number 2 [ 178.645487][ T5584] usb usb1: usbfs: process 5584 (syz.0.369) did not claim interface 6 before use [ 178.686660][ T4208] usb 4-1: string descriptor 0 read error: -71 [ 178.692944][ T4208] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d [ 178.707591][ T4208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.744369][ T4208] usb 4-1: can't set config #64, error -71 [ 178.759307][ T5584] loop0: detected capacity change from 0 to 256 [ 178.768277][ T4208] usb 4-1: USB disconnect, device number 4 [ 182.081026][ T5631] loop4: detected capacity change from 0 to 4096 [ 182.296809][ T5631] ntfs3: Unknown parameter 'nocase' [ 182.724193][ T5632] loop0: detected capacity change from 0 to 1024 [ 183.026460][ T5639] loop3: detected capacity change from 0 to 256 [ 183.048514][ T5638] loop4: detected capacity change from 0 to 512 [ 183.079252][ T5639] FAT-fs (loop3): Directory bread(block 64) failed [ 183.086191][ T5639] FAT-fs (loop3): Directory bread(block 65) failed [ 183.092815][ T5639] FAT-fs (loop3): Directory bread(block 66) failed [ 183.099464][ T5639] FAT-fs (loop3): Directory bread(block 67) failed [ 183.106857][ T5639] FAT-fs (loop3): Directory bread(block 68) failed [ 183.113406][ T5639] FAT-fs (loop3): Directory bread(block 69) failed [ 183.120175][ T5639] FAT-fs (loop3): Directory bread(block 70) failed [ 183.126757][ T5639] FAT-fs (loop3): Directory bread(block 71) failed [ 183.133340][ T5639] FAT-fs (loop3): Directory bread(block 72) failed [ 183.139927][ T5639] FAT-fs (loop3): Directory bread(block 73) failed [ 183.179061][ T5638] EXT4-fs (loop4): Ignoring removed nobh option [ 183.213752][ T5638] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.389: invalid indirect mapped block 256 (level 2) [ 183.297191][ T5638] EXT4-fs (loop4): 2 truncates cleaned up [ 183.332446][ T5638] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 183.389297][ T5646] loop0: detected capacity change from 0 to 1024 [ 183.410896][ T5648] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 183.450617][ T5648] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 183.494579][ T5648] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 183.514186][ T5648] device gretap0 left promiscuous mode [ 183.560980][ T5648] bridge0: port 1(gretap0) entered disabled state [ 183.637575][ T5652] usb usb1: usbfs: process 5652 (syz.1.392) did not claim interface 6 before use [ 183.657818][ T5648] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 183.679274][ T5652] loop1: detected capacity change from 0 to 256 [ 183.911367][ T5648] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 183.920123][ T5648] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 183.934051][ T5648] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 183.943988][ T5648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 183.966507][ T5648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.980833][ T5648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.989930][ T5648] device bridge_slave_1 left promiscuous mode [ 184.003657][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.026624][ T5648] bond0: (slave bond_slave_0): Releasing backup interface [ 184.041246][ T5648] device bond_slave_0 left promiscuous mode [ 184.064902][ T5648] bond0: (slave bond_slave_1): Releasing backup interface [ 184.125421][ T5648] device bond_slave_1 left promiscuous mode [ 184.243358][ T5648] team0: Port device team_slave_0 removed [ 184.415924][ T5648] team0: Port device team_slave_1 removed [ 184.477094][ T5648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.514646][ T5648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.545550][ T5648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.553224][ T5665] tipc: Failed to remove unknown binding: 66,1,1/0:2351759324/2351759326 [ 184.579596][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 184.591080][ T5648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.592740][ T5665] tipc: Failed to remove unknown binding: 66,1,1/0:2351759324/2351759326 [ 184.638783][ T5667] loop4: detected capacity change from 0 to 16 [ 184.663715][ T5649] team0: Mode changed to "loadbalance" [ 184.697684][ T5667] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 185.650213][ T5679] netlink: 'syz.3.401': attribute type 3 has an invalid length. [ 185.894246][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 186.191964][ T4544] Bluetooth: hci4: command 0x0406 tx timeout [ 186.260340][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 186.524275][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 187.494471][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.442564][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.585582][ T5706] xt_socket: unknown flags 0x8 [ 189.123250][ T23] usb 2-1: string descriptor 0 read error: -71 [ 189.143687][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.104530][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.141192][ T23] usb 2-1: can't set config #1, error -71 [ 190.150985][ T23] usb 2-1: USB disconnect, device number 3 [ 190.212207][ T5710] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.254931][ T5710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.287975][ T5710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.125537][ T5718] loop2: detected capacity change from 0 to 1024 [ 191.133174][ T5710] device bridge_slave_0 left promiscuous mode [ 191.194714][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.405141][ T5710] device bridge_slave_1 left promiscuous mode [ 191.411402][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.529451][ T5710] bond0: (slave bond_slave_0): Releasing backup interface [ 191.624878][ T5710] bond0: (slave bond_slave_1): Releasing backup interface [ 191.676490][ T5710] team0: Port device team_slave_0 removed [ 191.808570][ T5710] team0: Port device team_slave_1 removed [ 192.136667][ T5710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.176754][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.778311][ T5710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.796146][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.151815][ T5750] loop1: detected capacity change from 0 to 256 [ 193.438977][ T5750] FAT-fs (loop1): bogus number of FAT sectors [ 193.517981][ T5750] FAT-fs (loop1): Can't find a valid FAT filesystem [ 194.247619][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.255760][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.685402][ T5767] loop1: detected capacity change from 0 to 1024 [ 198.793033][ T5784] binfmt_misc: register: failed to install interpreter file ./file0 [ 199.766692][ T5808] befs: (nbd1): No write support. Marking filesystem read-only [ 199.800858][ T150] block nbd1: Attempted send on invalid socket [ 199.809852][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.824878][ T5808] befs: (nbd1): unable to read superblock [ 203.293751][ T5831] overlayfs: failed to get inode (-116) [ 203.321651][ T5831] overlayfs: failed to get inode (-116) [ 203.338894][ T5831] overlayfs: failed to get inode (-116) [ 203.356095][ T5829] loop1: detected capacity change from 0 to 40427 [ 203.357435][ T5831] overlayfs: failed to get inode (-116) [ 203.466277][ T5829] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 203.474421][ T5829] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 203.509303][ T5829] F2FS-fs (loop1): invalid crc value [ 203.553291][ T5829] F2FS-fs (loop1): Found nat_bits in checkpoint [ 203.666845][ T5829] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 203.674434][ T5829] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 204.326389][ T5835] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 204.418905][ T5835] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 205.246627][ T5861] befs: (nbd3): No write support. Marking filesystem read-only [ 205.260637][ T150] block nbd3: Attempted send on invalid socket [ 205.267363][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.278974][ T5861] befs: (nbd3): unable to read superblock [ 206.842477][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 206.902819][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.351983][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.736679][ T5892] netlink: 'syz.4.461': attribute type 10 has an invalid length. [ 209.088097][ T5892] device wlan1 entered promiscuous mode [ 209.105198][ T5892] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 209.180002][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 209.550103][ T5907] loop0: detected capacity change from 0 to 40427 [ 209.564343][ T5909] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 209.671346][ T5907] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 209.679202][ T5907] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 209.699882][ T5907] F2FS-fs (loop0): invalid crc value [ 210.081205][ T5907] F2FS-fs (loop0): Found nat_bits in checkpoint [ 210.788903][ T5907] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 210.796133][ T5907] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 213.490352][ T5938] binfmt_misc: register: failed to install interpreter file ./file0 [ 214.099697][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 214.160960][ T5949] bridge2: port 1(ip6gretap1) entered blocking state [ 214.412905][ T5949] bridge2: port 1(ip6gretap1) entered disabled state [ 215.016862][ T5949] device ip6gretap1 entered promiscuous mode [ 215.064409][ T5952] wlan0 speed is unknown, defaulting to 1000 [ 215.096917][ T5948] device veth3 entered promiscuous mode [ 215.166386][ T26] audit: type=1326 audit(1750962786.518:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 215.343032][ T26] audit: type=1326 audit(1750962786.518:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 216.515640][ T5964] befs: (nbd0): No write support. Marking filesystem read-only [ 216.525948][ T150] block nbd0: Attempted send on invalid socket [ 216.532324][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.544587][ T5964] befs: (nbd0): unable to read superblock [ 217.177020][ T5962] netlink: 'syz.1.479': attribute type 10 has an invalid length. [ 217.200020][ T26] audit: type=1326 audit(1750962786.518:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 217.248080][ T26] audit: type=1326 audit(1750962786.518:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 217.757144][ T5962] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 217.841347][ T26] audit: type=1326 audit(1750962786.518:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 217.967591][ T26] audit: type=1326 audit(1750962786.518:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 218.092518][ T26] audit: type=1326 audit(1750962786.518:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 218.127532][ T26] audit: type=1326 audit(1750962786.518:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 218.393994][ T26] audit: type=1326 audit(1750962786.518:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 218.845906][ T5982] orangefs_mount: mount request failed with -4 [ 219.017507][ T26] audit: type=1326 audit(1750962786.518:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 219.574715][ T5992] loop3: detected capacity change from 0 to 512 [ 220.051292][ T5992] EXT4-fs (loop3): Ignoring removed nobh option [ 220.093380][ T5992] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 220.251224][ T6002] loop4: detected capacity change from 0 to 1024 [ 220.295206][ T6002] hfsplus: unable to parse mount options [ 220.372474][ T6001] wlan0 speed is unknown, defaulting to 1000 [ 222.216996][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.494'. [ 223.214220][ T5699] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 224.978098][ T6044] binfmt_misc: register: failed to install interpreter file ./file0 [ 225.014320][ T6046] loop3: detected capacity change from 0 to 1024 [ 225.172970][ T5699] usb 5-1: unable to read config index 0 descriptor/all [ 225.362547][ T6050] wlan0 speed is unknown, defaulting to 1000 [ 225.519700][ T6050] loop2: detected capacity change from 0 to 1024 [ 225.578189][ T6050] hfsplus: unable to parse mount options [ 226.153535][ T5699] usb 5-1: can't read configurations, error -71 [ 228.147215][ T6073] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 228.454169][ T4544] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 230.294226][ T4544] usb 4-1: Using ep0 maxpacket: 16 [ 230.724178][ T4544] usb 4-1: unable to read config index 0 descriptor/all [ 230.731189][ T4544] usb 4-1: can't read configurations, error -71 [ 231.438512][ T6098] xt_ecn: cannot match TCP bits for non-tcp packets [ 236.384493][ C1] ODEBUG: Out of memory. ODEBUG disabled [ 237.876536][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 238.054682][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 238.512311][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 238.608792][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 238.619115][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 238.644711][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 238.856259][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 240.112540][ T6173] loop4: detected capacity change from 0 to 40427 [ 240.324479][ T6178] xt_NFQUEUE: number of total queues is 0 [ 240.846590][ T6173] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 240.854826][ T6173] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 240.878295][ T6173] F2FS-fs (loop4): invalid crc value [ 242.335091][ T6173] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.456701][ T6173] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 242.463906][ T6173] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 243.185112][ T6209] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 247.603690][ T6237] xt_NFQUEUE: number of total queues is 0 [ 248.425727][ T6244] loop3: detected capacity change from 0 to 2048 [ 249.518630][ T6244] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.718547][ T6255] device wg2 entered promiscuous mode [ 249.932023][ T6262] netlink: 'syz.1.552': attribute type 10 has an invalid length. [ 251.244587][ T6263] loop2: detected capacity change from 0 to 40427 [ 251.309254][ T6263] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 251.317172][ T6263] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 251.335305][ T6263] F2FS-fs (loop2): invalid crc value [ 252.053166][ T6263] F2FS-fs (loop2): Found nat_bits in checkpoint [ 252.247453][ T6263] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 252.254950][ T6263] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 255.052054][ T6316] xt_NFQUEUE: number of total queues is 0 [ 255.435852][ T6319] loop0: detected capacity change from 0 to 1024 [ 255.490885][ T6319] hfsplus: unable to parse mount options [ 255.637317][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.643992][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.941268][ T6343] loop1: detected capacity change from 0 to 40427 [ 257.998020][ T6343] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 258.005897][ T6343] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 258.047793][ T6343] F2FS-fs (loop1): invalid crc value [ 258.176930][ T6343] F2FS-fs (loop1): Found nat_bits in checkpoint [ 258.242041][ T6343] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 258.250508][ T6343] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 258.425022][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 262.415746][ T6370] loop0: detected capacity change from 0 to 1024 [ 264.908159][ T6419] loop1: detected capacity change from 0 to 8192 [ 265.083131][ T6419] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 265.164723][ T6419] REISERFS (device loop1): using ordered data mode [ 265.171272][ T6419] reiserfs: using flush barriers [ 265.241683][ T6419] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 265.242494][ T6419] REISERFS (device loop1): checking transaction log (loop1) [ 265.270173][ T6419] REISERFS (device loop1): Using r5 hash to sort names [ 265.280605][ T6419] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 266.402894][ T6453] loop3: detected capacity change from 0 to 40427 [ 266.616740][ T6456] loop2: detected capacity change from 0 to 40427 [ 267.867235][ T6453] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 267.875123][ T6453] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 267.897139][ T6456] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 267.904988][ T6453] F2FS-fs (loop3): invalid crc value [ 267.905729][ T6456] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 267.934212][ T6420] syz.0.588 (6420): drop_caches: 2 [ 267.945331][ T6456] F2FS-fs (loop2): invalid crc value [ 268.019393][ T6456] F2FS-fs (loop2): Found nat_bits in checkpoint [ 268.055951][ T6456] F2FS-fs (loop2): Start checkpoint disabled! [ 268.066806][ T6453] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 268.112321][ T6456] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 270.108969][ T6492] wlan0 speed is unknown, defaulting to 1000 [ 272.599792][ T6508] xt_ecn: cannot match TCP bits for non-tcp packets [ 273.340768][ T6518] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 275.742872][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 275.742919][ T26] audit: type=1326 audit(1750962847.088:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 275.955240][ T6543] wlan0 speed is unknown, defaulting to 1000 [ 276.194953][ T6543] loop1: detected capacity change from 0 to 1024 [ 276.293761][ T6543] hfsplus: unable to parse mount options [ 276.650888][ T26] audit: type=1326 audit(1750962847.128:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 276.714177][ T26] audit: type=1326 audit(1750962847.138:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 276.743422][ T6545] loop1: detected capacity change from 0 to 64 [ 276.820635][ T26] audit: type=1326 audit(1750962847.138:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 276.967868][ T26] audit: type=1326 audit(1750962847.138:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 277.003764][ T26] audit: type=1326 audit(1750962847.138:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 277.014733][ T6545] hfs: unable to locate alternate MDB [ 277.045994][ T6545] hfs: continuing without an alternate MDB [ 277.848390][ T6550] netlink: 'syz.2.617': attribute type 10 has an invalid length. [ 278.148591][ T26] audit: type=1326 audit(1750962847.138:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 278.347879][ T26] audit: type=1326 audit(1750962847.138:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 278.455114][ T6550] device wlan1 entered promiscuous mode [ 278.556261][ T6550] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 278.613699][ T26] audit: type=1326 audit(1750962847.138:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 278.661326][ T26] audit: type=1326 audit(1750962847.138:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fef1016a929 code=0x7ffc0000 [ 278.951759][ T6558] tipc: Started in network mode [ 278.975933][ T6558] tipc: Node identity 080211000001, cluster identity 4711 [ 278.983565][ T6558] tipc: Enabled bearer , priority 0 [ 279.004129][ T6561] device syzkaller0 entered promiscuous mode [ 279.114362][ T6558] tipc: Resetting bearer [ 280.443527][ T6574] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 280.443527][ T6574] program syz.2.623 not setting count and/or reply_len properly [ 280.471236][ T4214] tipc: Node number set to 134418688 [ 280.729263][ T6579] loop3: detected capacity change from 0 to 128 [ 281.409003][ T6589] loop0: detected capacity change from 0 to 256 [ 282.820411][ T6594] FAT-fs (loop3): error, clusters badly computed (2 != 0) [ 282.827930][ T6594] FAT-fs (loop3): Filesystem has been set read-only [ 283.929360][ T6594] FAT-fs (loop3): error, clusters badly computed (3 != 1) [ 283.950602][ T6594] FAT-fs (loop3): error, clusters badly computed (4 != 2) [ 284.027854][ T6589] FAT-fs (loop0): Directory bread(block 64) failed [ 284.034790][ T6589] FAT-fs (loop0): Directory bread(block 65) failed [ 284.041839][ T6589] FAT-fs (loop0): Directory bread(block 66) failed [ 284.048826][ T6589] FAT-fs (loop0): Directory bread(block 67) failed [ 284.055965][ T6589] FAT-fs (loop0): Directory bread(block 68) failed [ 284.062638][ T6589] FAT-fs (loop0): Directory bread(block 69) failed [ 284.069830][ T6589] FAT-fs (loop0): Directory bread(block 70) failed [ 284.077102][ T6589] FAT-fs (loop0): Directory bread(block 71) failed [ 284.083965][ T6589] FAT-fs (loop0): Directory bread(block 72) failed [ 284.090789][ T6589] FAT-fs (loop0): Directory bread(block 73) failed [ 286.012396][ T6631] loop1: detected capacity change from 0 to 512 [ 286.656958][ T6631] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 286.699868][ T6631] EXT4-fs (loop1): orphan cleanup on readonly fs [ 286.718852][ T6631] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 286.785502][ T6631] __quota_error: 5 callbacks suppressed [ 286.785517][ T6631] Quota error (device loop1): write_blk: dquota write failed [ 286.850731][ T6631] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 286.874787][ T6631] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.639: Failed to acquire dquot type 0 [ 286.927426][ T6631] EXT4-fs (loop1): 1 truncate cleaned up [ 286.950404][ T6631] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 289.942510][ T6654] loop2: detected capacity change from 0 to 40427 [ 290.621437][ T6654] F2FS-fs (loop2): invalid crc value [ 290.722393][ T6654] F2FS-fs (loop2): Found nat_bits in checkpoint [ 290.761235][ T6654] F2FS-fs (loop2): Start checkpoint disabled! [ 290.837373][ T6654] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 292.159148][ T151] attempt to access beyond end of device [ 292.159148][ T151] loop2: rw=2049, want=40968, limit=40427 [ 296.815722][ T6719] loop0: detected capacity change from 0 to 40427 [ 297.352493][ T6719] F2FS-fs (loop0): invalid crc value [ 297.455575][ T6719] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 297.506893][ T6719] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 297.513855][ T6719] F2FS-fs (loop0): Start checkpoint disabled! [ 297.651960][ T6731] loop4: detected capacity change from 0 to 1024 [ 297.673289][ T6719] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 297.946773][ T6731] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 298.701064][ T4551] attempt to access beyond end of device [ 298.701064][ T4551] loop0: rw=2049, want=45104, limit=40427 [ 298.856336][ T6742] netlink: 'syz.2.667': attribute type 39 has an invalid length. [ 298.942901][ T6731] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,dioread_nolock,. Quota mode: none. [ 298.984350][ T6731] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.844762][ T6748] loop3: detected capacity change from 0 to 1024 [ 301.066176][ T4371] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 302.104204][ T4371] usb 5-1: Using ep0 maxpacket: 16 [ 302.341842][ T4371] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.524734][ T4371] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.138508][ T6786] netlink: 'syz.1.678': attribute type 9 has an invalid length. [ 304.208151][ T6786] loop1: detected capacity change from 0 to 1024 [ 304.242804][ T6786] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.454147][ T4371] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.154430][ T4371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.224856][ T4371] usb 5-1: can't set config #1, error -71 [ 305.424559][ T4371] usb 5-1: USB disconnect, device number 5 [ 306.182110][ T6818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.686'. [ 306.195093][ T6820] batman_adv: batadv0: Adding interface: dummy0 [ 306.202576][ T6820] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.220855][ T6817] loop1: detected capacity change from 0 to 8192 [ 306.297366][ T6820] batman_adv: batadv0: Interface activated: dummy0 [ 306.488012][ T6824] batadv0: mtu less than device minimum [ 306.498012][ T6824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.510832][ T6824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.523089][ T6824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.535387][ T6824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.547694][ T6824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.560065][ T6824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.572407][ T6824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.584896][ T6824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.597243][ T6824] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.506102][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 309.695085][ T6846] loop3: detected capacity change from 0 to 40427 [ 309.717785][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 309.737589][ T6848] loop2: detected capacity change from 0 to 16 [ 309.759992][ T6846] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 309.767820][ T6846] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 309.786689][ T6846] F2FS-fs (loop3): invalid crc value [ 309.838892][ T6846] F2FS-fs (loop3): Found nat_bits in checkpoint [ 309.885014][ T6848] erofs: (device loop2): mounted with root inode @ nid 36. [ 309.929993][ T6846] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 309.937253][ T6846] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 312.970561][ T6871] loop2: detected capacity change from 0 to 16 [ 313.042837][ T6871] erofs: (device loop2): mounted with root inode @ nid 36. [ 313.671317][ T6875] attempt to access beyond end of device [ 313.671317][ T6875] loop2: rw=524288, want=34359740336, limit=16 [ 314.310244][ T6885] wlan0 speed is unknown, defaulting to 1000 [ 314.914349][ T6886] loop4: detected capacity change from 0 to 64 [ 315.943241][ T6895] wlan0 speed is unknown, defaulting to 1000 [ 316.017055][ T6895] loop3: detected capacity change from 0 to 1024 [ 316.261037][ T6895] hfsplus: unable to parse mount options [ 421.093952][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 421.100959][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P151/1:b..l P3546/1:b..l [ 421.110507][ C1] (detected by 1, t=10502 jiffies, g=16213, q=246) [ 421.117090][ C1] task:udevd state:R running task stack:23168 pid: 3546 ppid: 1 flags:0x00004002 [ 421.129180][ C1] Call Trace: [ 421.132481][ C1] [ 421.135413][ C1] __schedule+0x11b8/0x43b0 [ 421.139939][ C1] ? __wake_up_sync+0x114/0x180 [ 421.144806][ C1] ? ep_poll_callback+0x5b6/0x9f0 [ 421.149824][ C1] ? release_firmware_map_entry+0x190/0x190 [ 421.155716][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 421.160762][ C1] ? preempt_schedule+0xa7/0xb0 [ 421.165609][ C1] preempt_schedule_common+0x82/0xd0 [ 421.170892][ C1] preempt_schedule+0xa7/0xb0 [ 421.175566][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 421.181197][ C1] ? lock_chain_count+0x20/0x20 [ 421.186061][ C1] preempt_schedule_thunk+0x16/0x18 [ 421.191267][ C1] _raw_spin_unlock_irqrestore+0xf6/0x100 [ 421.196982][ C1] ? _raw_spin_unlock+0x40/0x40 [ 421.201831][ C1] ? __wake_up_common+0x2a4/0x4e0 [ 421.206862][ C1] __wake_up_sync_key+0x11b/0x180 [ 421.211889][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 421.217872][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 421.223783][ C1] sock_def_readable+0x136/0x250 [ 421.228736][ C1] netlink_sendskb+0x97/0x130 [ 421.233413][ C1] netlink_sendmsg+0x8ab/0xbc0 [ 421.238224][ C1] ? netlink_getsockopt+0x560/0x560 [ 421.243421][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 421.248362][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 421.253647][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 421.259224][ C1] ? netlink_getsockopt+0x560/0x560 [ 421.264440][ C1] ____sys_sendmsg+0x5a2/0x8c0 [ 421.269217][ C1] ? memset+0x1e/0x40 [ 421.273200][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 421.278235][ C1] ? import_iovec+0x6f/0xa0 [ 421.282739][ C1] ___sys_sendmsg+0x1f0/0x260 [ 421.287429][ C1] ? __sys_sendmsg+0x250/0x250 [ 421.292224][ C1] ? __context_tracking_exit+0x4c/0x80 [ 421.297685][ C1] ? __fdget+0x150/0x210 [ 421.301929][ C1] __se_sys_sendmsg+0x190/0x250 [ 421.306800][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 421.311736][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 421.317726][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 421.322927][ C1] do_syscall_64+0x4c/0xa0 [ 421.327348][ C1] ? clear_bhb_loop+0x30/0x80 [ 421.332104][ C1] ? clear_bhb_loop+0x30/0x80 [ 421.336812][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 421.342716][ C1] RIP: 0033:0x7f9e764c7407 [ 421.347124][ C1] RSP: 002b:00007fff561e6c40 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 421.355537][ C1] RAX: ffffffffffffffda RBX: 00007f9e763d9880 RCX: 00007f9e764c7407 [ 421.363516][ C1] RDX: 0000000000000000 RSI: 00007fff561e6ca0 RDI: 0000000000000004 [ 421.371480][ C1] RBP: 000056154387d790 R08: 0000000000000000 R09: 0000000000000000 [ 421.379450][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000b4 [ 421.387503][ C1] R13: 000056154385c9e0 R14: 0000000000000000 R15: 0000000000000000 [ 421.395487][ C1] [ 421.398497][ C1] task:kworker/u4:2 state:R running task stack:21896 pid: 151 ppid: 2 flags:0x00004000 [ 421.409277][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 421.417090][ C1] Call Trace: [ 421.420361][ C1] [ 421.423289][ C1] __schedule+0x11b8/0x43b0 [ 421.427796][ C1] ? __kasan_kmalloc+0xcc/0xf0 [ 421.432556][ C1] ? __alloc_skb+0x22c/0x750 [ 421.437141][ C1] ? batadv_iv_ogm_schedule+0xacc/0xe90 [ 421.442681][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x72d/0x840 [ 421.449878][ C1] ? mark_lock+0x94/0x320 [ 421.454220][ C1] ? release_firmware_map_entry+0x190/0x190 [ 421.460115][ C1] ? mark_lock+0x94/0x320 [ 421.464458][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 421.470433][ C1] ? preempt_schedule+0xa7/0xb0 [ 421.475280][ C1] preempt_schedule_common+0x82/0xd0 [ 421.480649][ C1] preempt_schedule+0xa7/0xb0 [ 421.485320][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 421.491031][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 421.496231][ C1] preempt_schedule_thunk+0x16/0x18 [ 421.501432][ C1] kmem_cache_alloc_trace+0x1c6/0x2a0 [ 421.506798][ C1] ? batadv_forw_packet_alloc+0x1e5/0x380 [ 421.512520][ C1] batadv_forw_packet_alloc+0x1e5/0x380 [ 421.518068][ C1] batadv_iv_ogm_queue_add+0x77b/0xcf0 [ 421.523656][ C1] batadv_iv_ogm_schedule+0xacc/0xe90 [ 421.529043][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 421.536244][ C1] ? batadv_send_skb_packet+0x392/0x5f0 [ 421.541799][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x72d/0x840 [ 421.548835][ C1] process_one_work+0x863/0x1000 [ 421.553781][ C1] ? worker_detach_from_pool+0x240/0x240 [ 421.559406][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 421.564706][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 421.569726][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 421.575096][ C1] ? wq_worker_running+0x97/0x170 [ 421.580117][ C1] worker_thread+0xaa8/0x12a0 [ 421.584815][ C1] kthread+0x436/0x520 [ 421.588882][ C1] ? rcu_lock_release+0x20/0x20 [ 421.593732][ C1] ? kthread_blkcg+0xd0/0xd0 [ 421.598317][ C1] ret_from_fork+0x1f/0x30 [ 421.602744][ C1] [ 421.605755][ C1] rcu: rcu_preempt kthread starved for 9484 jiffies! g16213 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 421.616854][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 421.626813][ C1] rcu: RCU grace-period kthread stack dump: [ 421.632691][ C1] task:rcu_preempt state:R running task stack:27808 pid: 15 ppid: 2 flags:0x00004000 [ 421.643549][ C1] Call Trace: [ 421.646823][ C1] [ 421.649751][ C1] __schedule+0x11b8/0x43b0 [ 421.654275][ C1] ? release_firmware_map_entry+0x190/0x190 [ 421.660181][ C1] schedule+0x11b/0x1e0 [ 421.664338][ C1] schedule_timeout+0x15c/0x280 [ 421.669186][ C1] ? console_conditional_schedule+0x40/0x40 [ 421.675071][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 421.680962][ C1] ? update_process_times+0x200/0x200 [ 421.686337][ C1] ? prepare_to_swait_event+0x331/0x350 [ 421.691885][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 421.696747][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 421.701944][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 421.708218][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 421.713006][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 421.718219][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 421.723425][ C1] rcu_gp_kthread+0x98/0x350 [ 421.728019][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 421.733128][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 421.739032][ C1] ? __kthread_parkme+0x157/0x1b0 [ 421.744063][ C1] kthread+0x436/0x520 [ 421.748129][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 421.753234][ C1] ? kthread_blkcg+0xd0/0xd0 [ 421.757823][ C1] ret_from_fork+0x1f/0x30 [ 421.762246][ C1] [ 421.765257][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 421.771570][ C1] NMI backtrace for cpu 1 [ 421.775902][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.185-syzkaller #0 [ 421.783712][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.793849][ C1] Call Trace: [ 421.797127][ C1] [ 421.799965][ C1] dump_stack_lvl+0x168/0x230 [ 421.804646][ C1] ? show_regs_print_info+0x20/0x20 [ 421.809867][ C1] ? load_image+0x3b0/0x3b0 [ 421.814375][ C1] ? irq_work_queue+0xbf/0x140 [ 421.819150][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 421.824174][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 421.830323][ C1] ? _printk+0xcc/0x110 [ 421.834475][ C1] ? cpu_online+0x1d/0x30 [ 421.838801][ C1] ? load_image+0x3b0/0x3b0 [ 421.843301][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 421.849371][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 421.855351][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 421.861507][ C1] print_other_cpu_stall+0x10c8/0x1220 [ 421.866973][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 421.871916][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 421.877210][ C1] rcu_sched_clock_irq+0x831/0x1110 [ 421.882509][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 421.887358][ C1] ? account_process_tick+0x227/0x3a0 [ 421.892729][ C1] update_process_times+0x193/0x200 [ 421.897932][ C1] tick_sched_timer+0x37d/0x560 [ 421.902787][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 421.907991][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 421.913542][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 421.918655][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 421.924744][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 421.929718][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 421.935717][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 421.941359][ C1] [ 421.944286][ C1] [ 421.947213][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 421.953198][ C1] RIP: 0010:default_idle+0xb/0x10 [ 421.958228][ C1] Code: bf 48 89 df e8 26 8c 12 f8 eb b5 e8 3f be f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 97 13 5b 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 421.972458][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 421.977934][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 421.977952][ C1] RAX: f93ce1630f6c6800 RBX: ffff88813fe28000 RCX: f93ce1630f6c6800 [ 421.977964][ C1] RDX: 0000000000000001 RSI: ffffffff8a0b11c0 RDI: ffffffff8a59a740 [ 421.977976][ C1] RBP: ffffc90000d67e80 R08: dffffc0000000000 R09: ffffed101722765a [ 421.994028][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 421.998217][ C1] R10: ffffed101722765a R11: 1ffff11017227659 R12: ffffffff8d68abe8 [ 422.028443][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11027fc5000 [ 422.036436][ C1] default_idle_call+0x81/0xc0 [ 422.041209][ C1] do_idle+0x21b/0x5b0 [ 422.045281][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 422.050563][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 422.055774][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 422.061440][ C1] cpu_startup_entry+0x14/0x20 [ 422.066218][ C1] start_secondary+0x31f/0x430 [ 422.070994][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 422.076377][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 422.082293][ C1]