last executing test programs: 11.473103629s ago: executing program 2 (id=478): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) close(r1) socket$inet6(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES8=r0, @ANYRES8, @ANYRES16=r2, @ANYRES16=r3], 0x0) 9.406100317s ago: executing program 1 (id=486): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x22, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0xffffffff, 0x0, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x402, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000040)={0x800100, 0x0, 0x3, 0x100, 0x81, 0x4000003}) 8.057047475s ago: executing program 2 (id=489): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_io_uring_setup(0x378c, &(0x7f0000000380)={0x0, 0x4093, 0x10100, 0x10000003, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4126}}) io_uring_enter(r0, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) 7.967141829s ago: executing program 1 (id=490): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x2}]}}]}, 0x3c}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffe01}, 0x1c) 7.817757405s ago: executing program 2 (id=492): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfdfffffa, 0x7, 0x6361, 0x5, 0x9, 0xd308}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7ff, 0x9, 0x9, 0xc12, 0x26a0000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xdb, 0x2, 0x7, 0x41, 0x7dd, 0x1}, {0xb2, 0x1, 0x2, 0x1000, 0x3, 0x6}, 0xcf0, 0x5, 0xd65}}, @TCA_TBF_RATE64={0xc, 0x4, 0xafdc78dbe0554eb6}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee7f8a24a6399ccf}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 7.801958636s ago: executing program 1 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rseq(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, r4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x54) statx(r6, &(0x7f0000000240)='./file0\x00', 0x800, 0x400, 0x0) 7.345755406s ago: executing program 2 (id=496): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) 6.648979735s ago: executing program 2 (id=498): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x44000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(0x0, 0x6) syz_kvm_assert_syzos_uexit$x86(0x0, 0xffffffffffffffff) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) poll(&(0x7f0000000580)=[{r5, 0x80}], 0x1, 0x0) read$FUSE(r5, 0x0, 0x0) 5.711357106s ago: executing program 2 (id=501): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201303000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.612262733s ago: executing program 3 (id=503): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfc, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0xd, 0x0, 0x8, 0x5, 0x7d, 0xd0, 0x5, 0x3}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa5, 0x5, 0x81}, {0x6000, 0xffef3000, 0xa, 0x6, 0x4, 0x42, 0xe0, 0x4, 0x8, 0x7, 0xe}, {0xeeee8000, 0xd000, 0x0, 0x3, 0x15, 0x7, 0xab, 0x7f, 0xf, 0x83, 0xf7, 0x83}, {0x1000, 0xeeef0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0x10, 0x80, 0xf, 0x1, 0x7}, {0xb000, 0x8000000, 0x3, 0x85, 0x7, 0x5, 0x7, 0x1, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x58000, 0xf, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x8080000, 0x1}, {0x10000, 0x7}, 0x80000031, 0x0, 0x4, 0x2010, 0x2, 0xa001, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0xfd, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x7e, 0x0, '\x00', 0x5, 0x6}) 4.412065531s ago: executing program 3 (id=506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc006}, 0x0) 4.371672793s ago: executing program 1 (id=507): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f1020", @ANYBLOB], 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) write$vhost_msg_v2(r1, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private}, {@in, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0xfffffffc}}, @algo_auth_trunc={0x4c, 0x14, {{'rmd160\x00'}}}]}, 0x1a0}}, 0x0) 4.277163787s ago: executing program 3 (id=508): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) preadv(r0, &(0x7f0000002600)=[{&(0x7f00000026c0)=""/4097, 0x1001}], 0x1, 0x40000005, 0x3) 4.21361015s ago: executing program 3 (id=510): r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.144166543s ago: executing program 4 (id=511): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) r4 = openat$kvm(0x0, &(0x7f0000000140), 0x44000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(0x0, 0x6) syz_kvm_assert_syzos_uexit$x86(0x0, 0xffffffffffffffff) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) poll(&(0x7f0000000580)=[{r5, 0x80}], 0x1, 0x0) read$FUSE(r5, 0x0, 0x0) 3.949077922s ago: executing program 3 (id=512): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fchdir(r1) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000340), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2.58311318s ago: executing program 4 (id=514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.5771865s ago: executing program 0 (id=515): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xd, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b9", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.417129357s ago: executing program 0 (id=516): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$setsig(0xffffffffffffffff, 0xa, 0x29) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) setuid(0xee01) shutdown(r0, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000040)='syscall\x00') pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007) 2.416810277s ago: executing program 4 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rseq(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, r5) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r7, 0x0, 0x54) statx(r7, &(0x7f0000000240)='./file0\x00', 0x800, 0x400, 0x0) 2.213931536s ago: executing program 0 (id=518): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 2.025338094s ago: executing program 0 (id=519): socket$kcm(0x29, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001002500000008000a00", @ANYRES32=r0], 0x24}}, 0x0) 1.362352723s ago: executing program 4 (id=520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) timerfd_create(0x7, 0x800) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.212796539s ago: executing program 1 (id=521): r0 = inotify_init() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) shutdown(r2, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.212620199s ago: executing program 0 (id=522): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x0, 0x10001, 0x10000, 0x0, 0xffffffff, {0x0, 0x0, 0x400000, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x800, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x2b, 0x2, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1, 0x0) ioctl$FIBMAP(r2, 0x401870cb, &(0x7f0000000040)) 1.086706204s ago: executing program 3 (id=523): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(0x0, 0x80800) preadv2(r0, 0x0, 0x0, 0x2, 0x11a, 0x16) socket$inet(0x2, 0xa, 0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, &(0x7f0000000240)) 1.071962455s ago: executing program 1 (id=524): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000280)={{0x0, 0x1}, {0x0, 0x8}, 0xde, 0x0, 0x7}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'wlan0\x00', {0x2, 0x4e22, @empty=0x7f000000}}) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, 0xee01, r5) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x20000000) 1.017170657s ago: executing program 4 (id=525): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x402, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000040)={0x800100, 0x0, 0x3, 0x100, 0x81, 0x4000003}) 887.098063ms ago: executing program 0 (id=526): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x44000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(0x0, 0x6) syz_kvm_assert_syzos_uexit$x86(0x0, 0xffffffffffffffff) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) poll(&(0x7f0000000580)=[{r3, 0x80}], 0x1, 0x0) read$FUSE(r3, 0x0, 0x0) 0s ago: executing program 4 (id=527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x34, 0x20}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. [ 64.508324][ T4172] cgroup: Unknown subsys name 'net' [ 64.675736][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.151678][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.652537][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 67.739605][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 67.786549][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 67.850792][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 67.861026][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.868221][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.876845][ T4197] device bridge_slave_0 entered promiscuous mode [ 67.890504][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.897604][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.906221][ T4197] device bridge_slave_1 entered promiscuous mode [ 67.963425][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.992266][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.028084][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.037704][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.044891][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.053889][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.070444][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.077639][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.085946][ T4190] device bridge_slave_0 entered promiscuous mode [ 68.106030][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.113427][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.121879][ T4183] device bridge_slave_1 entered promiscuous mode [ 68.132024][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.139232][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.147406][ T4190] device bridge_slave_1 entered promiscuous mode [ 68.197871][ T4197] team0: Port device team_slave_0 added [ 68.224008][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.240856][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.248013][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.256136][ T4194] device bridge_slave_0 entered promiscuous mode [ 68.265312][ T4197] team0: Port device team_slave_1 added [ 68.273363][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.292235][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.310169][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.317246][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.325677][ T4194] device bridge_slave_1 entered promiscuous mode [ 68.341497][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.388144][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.395337][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.421639][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.433486][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.440915][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.448826][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.458789][ T4190] team0: Port device team_slave_0 added [ 68.481835][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.488904][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.515401][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.526930][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.534156][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.542226][ T4184] device bridge_slave_1 entered promiscuous mode [ 68.551170][ T4190] team0: Port device team_slave_1 added [ 68.567336][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.580005][ T4183] team0: Port device team_slave_0 added [ 68.606124][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.622034][ T4183] team0: Port device team_slave_1 added [ 68.650029][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.682139][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.689305][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.715577][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.728370][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.746712][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.753828][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.781537][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.801393][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.808372][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.834830][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.855492][ T4194] team0: Port device team_slave_0 added [ 68.862178][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.869330][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.895828][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.910436][ T4197] device hsr_slave_0 entered promiscuous mode [ 68.917325][ T4197] device hsr_slave_1 entered promiscuous mode [ 68.934649][ T4194] team0: Port device team_slave_1 added [ 68.965675][ T4184] team0: Port device team_slave_0 added [ 68.999677][ T4184] team0: Port device team_slave_1 added [ 69.012907][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.020276][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.046270][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.082299][ T4183] device hsr_slave_0 entered promiscuous mode [ 69.089315][ T4183] device hsr_slave_1 entered promiscuous mode [ 69.096358][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.104558][ T4183] Cannot create hsr debugfs directory [ 69.110605][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.117825][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.143788][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.157949][ T4190] device hsr_slave_0 entered promiscuous mode [ 69.164959][ T4190] device hsr_slave_1 entered promiscuous mode [ 69.178071][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.186315][ T4190] Cannot create hsr debugfs directory [ 69.207903][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.215111][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.241564][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.270139][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.277127][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.304625][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 69.309233][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 69.311764][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.316896][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 69.389206][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 69.395902][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 69.430485][ T4194] device hsr_slave_0 entered promiscuous mode [ 69.437283][ T4194] device hsr_slave_1 entered promiscuous mode [ 69.444184][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.452096][ T4194] Cannot create hsr debugfs directory [ 69.476994][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.484123][ T4184] device hsr_slave_1 entered promiscuous mode [ 69.491104][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.498872][ T4184] Cannot create hsr debugfs directory [ 69.745607][ T4197] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.756203][ T4197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.777817][ T4197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.797583][ T4197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.848053][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.857630][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.879741][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.896878][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.946850][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.957480][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.975129][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.985376][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.065269][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.100717][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.134698][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.142176][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.152125][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.195915][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.204159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.219748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.232226][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.240215][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.262809][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.278479][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.290644][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.318557][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.330136][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.337719][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.345978][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.354053][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.364094][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.374350][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.381802][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.393580][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.402686][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.411622][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.419012][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.433033][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.441806][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.451042][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.473621][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.483223][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.494620][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.501843][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.521814][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.551996][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.563602][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.580404][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.590636][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.600138][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.608907][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.618010][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.630198][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.639392][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.648154][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.656920][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.664237][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.673191][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.682571][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.691353][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.701262][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.710251][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.724897][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.741117][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.756283][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.765142][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.782146][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.796821][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.807218][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.816769][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.825835][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.832969][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.859205][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.867987][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.879099][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.888053][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.903116][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.916565][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.931747][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.941114][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.950229][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.957335][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.976651][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.988849][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.014451][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.036461][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.045848][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.054899][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.065103][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.074734][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.108917][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.130745][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.137730][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.148701][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.157929][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.173574][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.184964][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.192797][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.205050][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.214331][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.242897][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.270126][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.280578][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.288743][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.298302][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.316393][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.327217][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.359926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.368703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.382632][ T4239] Bluetooth: hci1: command 0x041b tx timeout [ 71.382887][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.388854][ T4239] Bluetooth: hci0: command 0x041b tx timeout [ 71.398280][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.411382][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.418489][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.427367][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 71.436937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.454187][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.462187][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 71.469949][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.474555][ T4256] Bluetooth: hci4: command 0x041b tx timeout [ 71.492665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.502627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.526593][ T4197] device veth0_vlan entered promiscuous mode [ 71.541352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.557491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.566338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.582100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.594760][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.602062][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.611564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.621108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.630413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.637867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.645654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.655279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.667155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.679660][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.688683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.698656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.714540][ T4197] device veth1_vlan entered promiscuous mode [ 71.753371][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.762381][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.773815][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.787042][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.800035][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.817479][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.824644][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.834887][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.843999][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.852581][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.859686][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.868327][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.876435][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.884291][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.904425][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.918620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.930669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.950512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.960352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.988841][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.997874][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.007767][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.024952][ T4197] device veth0_macvtap entered promiscuous mode [ 72.048208][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.064343][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.098682][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.108344][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.124595][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.135822][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.157085][ T4197] device veth1_macvtap entered promiscuous mode [ 72.171060][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.180304][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.190191][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.200809][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.210089][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.225001][ T4190] device veth0_vlan entered promiscuous mode [ 72.246660][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.256195][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.266677][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.276855][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.294386][ T4190] device veth1_vlan entered promiscuous mode [ 72.309575][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.317961][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.327135][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.335979][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.346135][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.357427][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.382472][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.398627][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.407966][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.424224][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.436957][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.446499][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.462761][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.471530][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.479287][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.487208][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.496479][ T4183] device veth0_vlan entered promiscuous mode [ 72.506484][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.517678][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.527428][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.537442][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.546599][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.574871][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.584838][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.603225][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.619994][ T4190] device veth0_macvtap entered promiscuous mode [ 72.632832][ T4183] device veth1_vlan entered promiscuous mode [ 72.643348][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.652446][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.664613][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.680700][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.700248][ T4190] device veth1_macvtap entered promiscuous mode [ 72.724100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.733812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.761486][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.775745][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.784874][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.792757][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.806750][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.817885][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.831270][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.877504][ T4183] device veth0_macvtap entered promiscuous mode [ 72.886417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.896596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.907677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.916521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.925712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.953602][ T4194] device veth0_vlan entered promiscuous mode [ 72.964600][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.974575][ T4183] device veth1_macvtap entered promiscuous mode [ 73.004650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.014000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.022703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.031554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.040584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.053910][ T4194] device veth1_vlan entered promiscuous mode [ 73.062020][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.072623][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.084395][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.106006][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.116759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.125860][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.128500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.143860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.153898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.165692][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.176692][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.186859][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.197618][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.209788][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.225725][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.238494][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.250524][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.261279][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.273884][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.300475][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.309569][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.318193][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.328814][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.337682][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.357230][ T4194] device veth0_macvtap entered promiscuous mode [ 73.367234][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.377124][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.387915][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.396781][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.407790][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.417436][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.426458][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.435669][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.448014][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.457546][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.459536][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 73.470842][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.481920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.490466][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 73.494884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.496583][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 73.512830][ T4194] device veth1_macvtap entered promiscuous mode [ 73.523230][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.540601][ T4256] Bluetooth: hci4: command 0x040f tx timeout [ 73.546742][ T4256] Bluetooth: hci2: command 0x040f tx timeout [ 73.550075][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.595387][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.604207][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.615951][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.624925][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.651760][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.663587][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.676527][ T4184] device veth0_vlan entered promiscuous mode [ 73.709661][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.732531][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.744640][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.755807][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.766209][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.776830][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.788414][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.801885][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.812901][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.823815][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.834852][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.845018][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.855763][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.868080][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.885482][ T4184] device veth1_vlan entered promiscuous mode [ 73.897213][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.905838][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.914967][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.925948][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.934845][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.970786][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.975513][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.982823][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.997240][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.009561][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.053620][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.100825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.117168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.127330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.175549][ T4184] device veth0_macvtap entered promiscuous mode [ 74.198197][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.207060][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.207110][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.217061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.234649][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.247252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.256195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.301617][ T4184] device veth1_macvtap entered promiscuous mode [ 74.409796][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.435297][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.460233][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.471602][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.473994][ T4304] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.481913][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.513360][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.524052][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.536241][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.557144][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.575941][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.592913][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.602059][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.602583][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.618915][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.632046][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.655252][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.666066][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.677166][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.691678][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.703817][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.710646][ T4309] loop3: detected capacity change from 0 to 512 [ 74.717886][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.731459][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.746894][ T4309] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 74.751404][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.766665][ T4309] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.781367][ T4309] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.9: Block bitmap for bg 0 marked uninitialized [ 74.801275][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.810716][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.824246][ T4309] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 74.830298][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.842383][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.845316][ T4309] EXT4-fs (loop3): 1 orphan inode deleted [ 74.854438][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.856949][ T4309] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.870085][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.896602][ T4309] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 74.902203][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.926336][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.935293][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.938031][ T4309] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: none. [ 74.945107][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.981008][ T4309] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.9: Block bitmap for bg 0 marked uninitialized [ 75.069486][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.090074][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.100982][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.182407][ T4313] loop4: detected capacity change from 0 to 512 [ 75.269096][ T4313] EXT4-fs (loop4): Unrecognized mount option "hash" or missing value [ 75.305896][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.356918][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.385029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.389458][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.432330][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.470142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.505799][ T4315] ODEBUG: Out of memory. ODEBUG disabled [ 75.544195][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 75.552565][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 75.559631][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 75.620022][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 75.636028][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 75.646091][ T4326] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.699684][ T4226] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.837942][ T4316] loop0: detected capacity change from 0 to 8192 [ 75.911853][ T4316] FAT-fs (loop0): Unrecognized mount option " [ 75.911853][ T4316] " or missing value [ 75.949152][ T4226] usb 2-1: Using ep0 maxpacket: 16 [ 76.049240][ T2287] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.070176][ T4226] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 76.089280][ T4226] usb 2-1: config 0 has no interface number 0 [ 76.168894][ T4335] input: syz0 as /devices/virtual/input/input5 [ 76.260161][ T4226] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 76.279855][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.316032][ T4226] usb 2-1: Product: syz [ 76.326084][ T4226] usb 2-1: Manufacturer: syz [ 76.335714][ T4226] usb 2-1: SerialNumber: syz [ 76.369886][ T2287] usb 3-1: Using ep0 maxpacket: 16 [ 76.374763][ T4226] usb 2-1: config 0 descriptor?? [ 76.431187][ T4226] hub 2-1:0.132: bad descriptor, ignoring hub [ 76.447472][ T4226] hub: probe of 2-1:0.132 failed with error -5 [ 76.474727][ T4226] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input6 [ 76.535684][ T2287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 76.729324][ T2287] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 76.746114][ T2287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.758504][ T2287] usb 3-1: Product: syz [ 76.768674][ T2287] usb 3-1: Manufacturer: syz [ 76.774034][ T2287] usb 3-1: SerialNumber: syz [ 76.819945][ T2287] usb 3-1: config 0 descriptor?? [ 76.828019][ T4348] netlink: 9 bytes leftover after parsing attributes in process `syz.0.19'. [ 76.892464][ T2287] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 76.913628][ T4348] device gretap0 entered promiscuous mode [ 76.919829][ T2287] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 76.928766][ T4350] loop3: detected capacity change from 0 to 2048 [ 77.010337][ T7] usb 2-1: USB disconnect, device number 2 [ 77.046059][ T4350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.559310][ T2287] em28xx 3-1:0.0: chip ID is em2765 [ 77.882738][ T4376] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.920742][ T4374] loop3: detected capacity change from 0 to 8192 [ 77.950121][ T4374] FAT-fs (loop3): Unrecognized mount option " [ 77.950121][ T4374] " or missing value [ 78.295273][ T2287] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 78.309879][ T2287] em28xx 3-1:0.0: board has no eeprom [ 78.697806][ T4391] netlink: 9 bytes leftover after parsing attributes in process `syz.1.31'. [ 78.716068][ T4391] device gretap0 entered promiscuous mode [ 78.733363][ T2287] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 78.769602][ T2287] em28xx 3-1:0.0: dvb set to bulk mode. [ 78.777857][ T13] em28xx 3-1:0.0: Binding DVB extension [ 78.833466][ T4394] netlink: 'syz.3.42': attribute type 16 has an invalid length. [ 78.841339][ T4394] netlink: 'syz.3.42': attribute type 17 has an invalid length. [ 78.863681][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.871590][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.879156][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.905866][ T4394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.054877][ T4396] netlink: 452 bytes leftover after parsing attributes in process `syz.4.36'. [ 79.091350][ T4398] loop1: detected capacity change from 0 to 2048 [ 79.200527][ T4398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.478300][ T2287] usb 3-1: USB disconnect, device number 2 [ 80.593730][ T13] em28xx 3-1:0.0: Registering input extension [ 80.611539][ T2287] em28xx 3-1:0.0: Disconnecting em28xx [ 80.617445][ T2287] em28xx 3-1:0.0: Closing input extension [ 80.707917][ T2287] em28xx 3-1:0.0: Freeing device [ 80.838982][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 80.848107][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 80.857393][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 80.866506][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 80.875617][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 80.884755][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 80.893939][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 80.903111][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 80.912216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 80.921409][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.104065][ T4456] loop4: detected capacity change from 0 to 1024 [ 83.365738][ T4456] ======================================================= [ 83.365738][ T4456] WARNING: The mand mount option has been deprecated and [ 83.365738][ T4456] and is ignored by this kernel. Remove the mand [ 83.365738][ T4456] option from the mount to silence this warning. [ 83.365738][ T4456] ======================================================= [ 83.585307][ T4467] overlayfs: './file1' not a directory [ 84.028447][ T4471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'. [ 84.136282][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.255768][ T4456] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.469268][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 85.526219][ T4491] loop0: detected capacity change from 0 to 2048 [ 85.556551][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 85.661250][ T4497] loop1: detected capacity change from 0 to 512 [ 85.681021][ T4491] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 85.769346][ T13] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 85.778748][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.859218][ T4491] EXT4-fs (loop0): shut down requested (1) [ 85.861375][ T13] usb 4-1: Product: syz [ 85.871456][ T4497] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 85.890035][ T4497] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 85.899669][ T13] usb 4-1: Manufacturer: syz [ 85.900661][ T4497] EXT4-fs (loop1): orphan cleanup on readonly fs [ 85.904380][ T13] usb 4-1: SerialNumber: syz [ 85.918479][ T13] usb 4-1: config 0 descriptor?? [ 85.953146][ T4497] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 85.975493][ T13] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 86.001413][ T13] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 86.027848][ T4497] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 86.153667][ T4497] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 86.215508][ T4497] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.66: bg 0: block 40: padding at end of block bitmap is not set [ 86.265413][ T4497] EXT4-fs (loop1): Remounting filesystem read-only [ 86.285705][ T4497] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 86.302120][ T4497] EXT4-fs (loop1): Remounting filesystem read-only [ 86.315599][ T4497] EXT4-fs (loop1): 1 truncate cleaned up [ 86.324187][ T4497] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,data=writeback,. Quota mode: writeback. [ 86.351493][ T4505] netlink: 'syz.0.68': attribute type 16 has an invalid length. [ 86.359563][ T4505] netlink: 'syz.0.68': attribute type 17 has an invalid length. [ 86.370857][ T4505] device gretap0 left promiscuous mode [ 86.387728][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.395835][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.403332][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.418410][ T4505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.480075][ T4497] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 86.705623][ T13] em28xx 4-1:0.0: chip ID is em2765 [ 86.742871][ T1110] cfg80211: failed to load regulatory.db [ 86.795076][ T4510] input: syz0 as /devices/virtual/input/input8 [ 86.851605][ T4500] udevd[4500]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 87.481471][ T13] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 87.581713][ T13] em28xx 4-1:0.0: board has no eeprom [ 88.070041][ T4525] syz.4.74 uses obsolete (PF_INET,SOCK_PACKET) [ 88.373354][ T13] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 88.385485][ T13] em28xx 4-1:0.0: dvb set to bulk mode. [ 88.406591][ T13] usb 4-1: USB disconnect, device number 2 [ 88.417227][ T13] em28xx 4-1:0.0: Disconnecting em28xx [ 88.427298][ T4300] em28xx 4-1:0.0: Binding DVB extension [ 89.326072][ T4300] em28xx 4-1:0.0: Registering input extension [ 89.350083][ T13] em28xx 4-1:0.0: Closing input extension [ 89.368673][ T13] em28xx 4-1:0.0: Freeing device [ 89.541274][ T4547] loop2: detected capacity change from 0 to 64 [ 89.681825][ T4547] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 92.210986][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.589080][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 93.445740][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 93.739212][ T13] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 93.748758][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.761705][ T13] usb 2-1: Product: syz [ 93.765988][ T13] usb 2-1: Manufacturer: syz [ 93.771467][ T13] usb 2-1: SerialNumber: syz [ 93.778196][ T13] usb 2-1: config 0 descriptor?? [ 93.923344][ T13] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 93.932898][ T13] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 94.179449][ T13] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 94.339615][ T13] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 94.363814][ T13] em28xx 2-1:0.0: board has no eeprom [ 94.579328][ T13] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 94.587471][ T13] em28xx 2-1:0.0: dvb set to bulk mode. [ 94.677833][ T13] usb 2-1: USB disconnect, device number 3 [ 94.735232][ T13] em28xx 2-1:0.0: Disconnecting em28xx [ 94.790642][ T4300] em28xx 2-1:0.0: Binding DVB extension [ 95.025136][ T4300] em28xx 2-1:0.0: Registering input extension [ 95.062267][ T13] em28xx 2-1:0.0: Closing input extension [ 95.094876][ T13] em28xx 2-1:0.0: Freeing device [ 97.568857][ T4662] loop0: detected capacity change from 0 to 1024 [ 97.597615][ T4665] netlink: 256 bytes leftover after parsing attributes in process `syz.2.125'. [ 97.775864][ T4447] hfsplus: b-tree write err: -5, ino 4 [ 99.364481][ T4692] netlink: 'syz.3.132': attribute type 16 has an invalid length. [ 99.372348][ T4692] netlink: 'syz.3.132': attribute type 17 has an invalid length. [ 99.384499][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.434764][ T4692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.393544][ T4702] loop0: detected capacity change from 0 to 512 [ 100.797045][ T4702] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 100.809986][ T4702] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.052965][ T4191] Bluetooth: unknown link type 128 [ 104.056127][ T4769] loop4: detected capacity change from 0 to 512 [ 104.180829][ T4769] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.193545][ T4769] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.920995][ T4788] netlink: 'syz.4.164': attribute type 16 has an invalid length. [ 104.929871][ T4788] netlink: 'syz.4.164': attribute type 17 has an invalid length. [ 104.955051][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.962845][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.970918][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.985284][ T4788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.059084][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 106.777281][ T4824] loop3: detected capacity change from 0 to 64 [ 108.116926][ T4848] loop4: detected capacity change from 0 to 2048 [ 108.639621][ T4848] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 108.841628][ T4859] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 108.848652][ T4859] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.931257][ T4856] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 108.937856][ T4856] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.950103][ T4856] vhci_hcd vhci_hcd.0: Device attached [ 108.955214][ T4852] loop3: detected capacity change from 0 to 4096 [ 108.959691][ T4869] netdevrim0: renamed from gretap0 [ 108.971910][ T4859] vhci_hcd vhci_hcd.0: Device attached [ 109.001740][ T4869] A link change request failed with some changes committed already. Interface netdevrim0 may have been left with an inconsistent configuration, please check. [ 109.037089][ T4862] vhci_hcd: connection closed [ 109.040082][ T4863] vhci_hcd: connection closed [ 109.045427][ T144] vhci_hcd: stop threads [ 109.056640][ T4852] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 109.065432][ T144] vhci_hcd: release socket [ 109.090441][ T4848] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.189: bg 0: block 234: padding at end of block bitmap is not set [ 109.110132][ T144] vhci_hcd: disconnect device [ 109.133599][ T144] vhci_hcd: stop threads [ 109.137977][ T144] vhci_hcd: release socket [ 109.158185][ T4873] loop2: detected capacity change from 0 to 1024 [ 109.176889][ T144] vhci_hcd: disconnect device [ 109.187078][ T4848] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 352 with error 28 [ 109.209636][ T4848] EXT4-fs (loop4): This should not happen!! Data will be lost [ 109.209636][ T4848] [ 109.239186][ T1107] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 109.247526][ T1107] usb 37-1: enqueue for inactive port 0 [ 109.255606][ T4848] EXT4-fs (loop4): Total free blocks count 0 [ 109.269035][ T4848] EXT4-fs (loop4): Free/Dirty block details [ 109.293733][ T4848] EXT4-fs (loop4): free_blocks=0 [ 109.312995][ T4848] EXT4-fs (loop4): dirty_blocks=352 [ 109.318683][ T4848] EXT4-fs (loop4): Block reservation details [ 109.372150][ T4848] EXT4-fs (loop4): i_reserved_data_blocks=22 [ 109.429100][ T26] audit: type=1800 audit(1764330729.928:2): pid=4873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.195" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 109.513540][ T1107] vhci_hcd: vhci_device speed not set [ 109.777295][ T4879] netlink: 'syz.1.198': attribute type 16 has an invalid length. [ 109.785319][ T4879] netlink: 'syz.1.198': attribute type 17 has an invalid length. [ 109.796838][ T4879] device netdevrim0 left promiscuous mode [ 109.813868][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.821674][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.829317][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.836737][ T154] hfsplus: b-tree write err: -5, ino 3 [ 109.845641][ T4879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.224681][ T1107] kernel write not supported for file /sequencer2 (pid: 1107 comm: kworker/0:2) [ 112.379128][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.779489][ T13] usb 2-1: config 0 has an invalid descriptor of length 240, skipping remainder of the config [ 112.810481][ T13] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.850816][ T13] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 112.915789][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.980620][ T13] usb 2-1: config 0 descriptor?? [ 113.642197][ T4948] loop2: detected capacity change from 0 to 1024 [ 113.921857][ T4948] hfsplus: invalid length 32517 has been corrected to 255 [ 114.212008][ T4412] hfsplus: b-tree write err: -5, ino 4 [ 114.299201][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.715167][ T4977] netlink: 'syz.3.228': attribute type 16 has an invalid length. [ 114.723153][ T4977] netlink: 'syz.3.228': attribute type 17 has an invalid length. [ 114.734874][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.744859][ T4977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.168850][ T4300] usb 2-1: USB disconnect, device number 4 [ 117.196277][ T5002] loop3: detected capacity change from 0 to 512 [ 117.249090][ T13] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 117.266921][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.285596][ T13] usb 5-1: Product: syz [ 117.295714][ T13] usb 5-1: Manufacturer: syz [ 117.310677][ T5006] batman_adv: batadv0: Adding interface: dummy0 [ 117.317241][ T5002] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 117.326023][ T13] usb 5-1: config 0 descriptor?? [ 117.331270][ T5002] EXT4-fs (loop3): inline encryption not supported [ 117.349225][ T5006] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.377339][ T5002] EXT4-fs (loop3): Test dummy encryption mode enabled [ 117.385918][ T5002] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 117.394007][ T13] usb 5-1: can't set config #0, error -71 [ 117.401507][ T5002] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 117.415785][ T13] usb 5-1: USB disconnect, device number 2 [ 117.424712][ T5002] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.443907][ T5006] batman_adv: batadv0: Interface activated: dummy0 [ 117.599299][ T5016] batadv0: mtu less than device minimum [ 117.626786][ T5016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.639991][ T5016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.652843][ T5016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.665603][ T5016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.678404][ T5016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.691210][ T5016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.699809][ T5002] EXT4-fs (loop3): 1 truncate cleaned up [ 117.704233][ T5016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.720138][ T5016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.723678][ T5002] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 118.423454][ T5027] loop0: detected capacity change from 0 to 8192 [ 118.735782][ T5040] netlink: 'syz.1.244': attribute type 16 has an invalid length. [ 118.743957][ T5040] netlink: 'syz.1.244': attribute type 17 has an invalid length. [ 118.756304][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.760124][ T5027] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 119.373116][ T5027] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 119.479116][ T5027] ntfs3: loop0: Failed to load $Extend. [ 120.123885][ T5054] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.114664][ T5067] loop0: detected capacity change from 0 to 4096 [ 121.268853][ T5072] loop4: detected capacity change from 0 to 1024 [ 121.355913][ T5074] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.542789][ T4433] hfsplus: b-tree write err: -5, ino 4 [ 122.761925][ T5095] netlink: 'syz.2.269': attribute type 29 has an invalid length. [ 122.807665][ T5095] netlink: 'syz.2.269': attribute type 29 has an invalid length. [ 122.873274][ T5095] device syzkaller1 entered promiscuous mode [ 123.353019][ T4266] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.121412][ T4266] usb 4-1: Using ep0 maxpacket: 32 [ 124.319115][ T4266] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 124.328052][ T4266] usb 4-1: config 0 has no interface number 0 [ 124.350183][ T4266] usb 4-1: config 0 interface 12 has no altsetting 0 [ 124.530395][ T4266] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 124.564336][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.582481][ T4266] usb 4-1: Product: syz [ 124.586765][ T4266] usb 4-1: Manufacturer: syz [ 124.589448][ T5132] loop2: detected capacity change from 0 to 1024 [ 124.599995][ T5134] netlink: 256 bytes leftover after parsing attributes in process `syz.0.282'. [ 124.618036][ T4266] usb 4-1: SerialNumber: syz [ 124.624075][ T5134] netlink: 56 bytes leftover after parsing attributes in process `syz.0.282'. [ 124.636096][ T4266] usb 4-1: config 0 descriptor?? [ 124.680508][ T4266] f81534 4-1:0.12: required endpoints missing [ 124.740855][ T5140] loop0: detected capacity change from 0 to 136 [ 124.772227][ T5132] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.885229][ T4266] usb 4-1: USB disconnect, device number 3 [ 125.063489][ T5145] loop2: detected capacity change from 0 to 128 [ 125.275864][ T5145] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 125.316757][ T5145] hpfs: filesystem error: improperly stopped [ 125.329358][ T5145] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 125.392471][ T5145] hpfs: You really don't want any checks? You are crazy... [ 125.467181][ T5145] hpfs: hpfs_map_sector(): read error [ 125.522468][ T5145] hpfs: code page support is disabled [ 125.585655][ T5145] hpfs: hpfs_map_4sectors(): unaligned read [ 125.643267][ T5145] hpfs: hpfs_map_4sectors(): unaligned read [ 125.709459][ T5145] hpfs: filesystem error: unable to find root dir [ 127.265342][ T5174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.297'. [ 127.297240][ T5176] netlink: 'syz.1.291': attribute type 16 has an invalid length. [ 127.330473][ T5178] ./file0: Can't open blockdev [ 127.366110][ T5176] netlink: 'syz.1.291': attribute type 17 has an invalid length. [ 127.385945][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.406809][ T5176] net_ratelimit: 12 callbacks suppressed [ 127.406819][ T5176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.939747][ T5227] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 131.943766][ T5258] process 'syz.1.329' launched '/dev/fd/4' with NULL argv: empty string added [ 131.989105][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.561444][ T5272] loop1: detected capacity change from 0 to 16 [ 132.812747][ T5272] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 132.837057][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.847454][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.119021][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 133.155852][ T5276] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.980383][ T21] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 133.988607][ T21] usb 3-1: config 0 has no interface number 0 [ 134.000490][ T21] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 134.158701][ T5292] loop0: detected capacity change from 0 to 256 [ 134.199125][ T21] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 134.212901][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.231668][ T21] usb 3-1: Product: syz [ 134.235891][ T21] usb 3-1: Manufacturer: syz [ 134.249038][ T21] usb 3-1: SerialNumber: syz [ 134.249848][ T5292] exfat: Unknown parameter 'sys_tz' [ 134.275112][ T21] usb 3-1: config 0 descriptor?? [ 134.309582][ T5253] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 134.517383][ T5303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.347'. [ 134.543826][ T5253] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 135.897622][ T5315] Zero length message leads to an empty skb [ 135.947660][ T5316] netlink: 'syz.4.341': attribute type 16 has an invalid length. [ 135.993863][ T5316] netlink: 'syz.4.341': attribute type 17 has an invalid length. [ 136.034012][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.037773][ T21] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 136.066587][ T5316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.401899][ T5327] loop0: detected capacity change from 0 to 64 [ 136.504202][ T26] audit: type=1800 audit(1764330757.028:3): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.355" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 136.774780][ T21] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 136.797272][ T21] asix: probe of 3-1:0.188 failed with error -71 [ 136.859243][ T21] usb 3-1: USB disconnect, device number 3 [ 137.734598][ T5348] loop4: detected capacity change from 0 to 512 [ 137.882692][ T5348] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.921260][ T5348] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.978826][ T5348] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 18: comm syz.4.364: lblock 23 mapped to illegal pblock 18 (length 1) [ 138.085448][ T5354] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 12: comm syz.4.364: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 138.212407][ T5354] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.364: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 138.286156][ T5354] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 14: comm syz.4.364: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 138.377717][ T5354] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 15: comm syz.4.364: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 138.428849][ T5354] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz.4.364: path /58/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 139.111823][ T5377] netlink: 'syz.4.373': attribute type 16 has an invalid length. [ 139.119759][ T5377] netlink: 'syz.4.373': attribute type 17 has an invalid length. [ 139.131975][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.434028][ T5377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.714024][ T5390] dccp_invalid_packet: P.Data Offset(10) too large [ 139.736670][ T5368] mmap: syz.2.371 (5368) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 140.783648][ T5408] loop2: detected capacity change from 0 to 2048 [ 140.890367][ T5408] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.243508][ T5417] loop2: detected capacity change from 0 to 512 [ 141.255088][ T5419] netdevsim netdevsim3: Direct firmware load for þ failed with error -2 [ 141.278203][ T5417] EXT4-fs (loop2): Ignoring removed bh option [ 141.347539][ T5422] netlink: 'syz.1.389': attribute type 16 has an invalid length. [ 141.355390][ T5422] netlink: 'syz.1.389': attribute type 17 has an invalid length. [ 141.378819][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.396846][ T5422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.519957][ T5419] netdevsim netdevsim3: Falling back to sysfs fallback for: þ [ 142.136846][ T5417] EXT4-fs (loop2): Test dummy encryption mode enabled [ 142.185936][ T5417] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,barrier,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,stripe=0x0000000000000008,. Quota mode: writeback. [ 142.313598][ T5440] loop1: detected capacity change from 0 to 64 [ 142.654526][ T5445] loop4: detected capacity change from 0 to 2048 [ 142.832532][ T5445] loop4: p1 p2 p4 [ 142.851014][ T5445] loop4: p1 size 4278190080 extends beyond EOD, truncated [ 142.900213][ T5445] loop4: p2 size 4864 extends beyond EOD, truncated [ 142.909371][ T5445] loop4: p4 size 262144 extends beyond EOD, truncated [ 143.129389][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 143.130455][ T4199] udevd[4199]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 143.167494][ T4500] udevd[4500]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 143.189032][ T13] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 143.562068][ T13] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 143.673668][ T13] usb 2-1: config 0 has no interface number 0 [ 143.849633][ T13] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 143.882275][ T5468] netlink: 'syz.2.404': attribute type 16 has an invalid length. [ 143.890272][ T5468] netlink: 'syz.2.404': attribute type 17 has an invalid length. [ 143.945267][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.953722][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.963029][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.131458][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.335795][ T13] usb 2-1: Product: syz [ 144.446791][ T13] usb 2-1: Manufacturer: syz [ 144.472694][ T13] usb 2-1: SerialNumber: syz [ 144.508887][ T13] usb 2-1: config 0 descriptor?? [ 144.526386][ T5468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.716320][ T5482] loop0: detected capacity change from 0 to 128 [ 144.867214][ T5482] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.880490][ T5482] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.079128][ T13] usb 2-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 145.114184][ T13] usb 2-1: Firmware version (0.0) predates our first public release. [ 145.155625][ T13] usb 2-1: Please update to version 0.2 or newer [ 145.209277][ T13] usb 2-1: Firmware: build ˜`^ [ 145.214671][ T13] usb 2-1: atusb_probe: initialization failed, error = -32 [ 145.243850][ T13] atusb: probe of 2-1:0.128 failed with error -32 [ 147.386927][ T13] usb 2-1: USB disconnect, device number 5 [ 147.407675][ T4174] Bluetooth: hci2: command 0x0406 tx timeout [ 147.713622][ T5524] netlink: 'syz.1.422': attribute type 16 has an invalid length. [ 147.721636][ T5524] netlink: 'syz.1.422': attribute type 17 has an invalid length. [ 147.745068][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.787424][ T5524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.703104][ T5558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 151.150327][ T5569] netlink: 'syz.0.441': attribute type 16 has an invalid length. [ 151.158245][ T5569] netlink: 'syz.0.441': attribute type 17 has an invalid length. [ 151.180554][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.192737][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 151.210631][ T5569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.101756][ T5593] loop2: detected capacity change from 0 to 8 [ 156.067308][ T5644] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.541296][ T5678] netlink: 'syz.4.479': attribute type 1 has an invalid length. [ 158.589995][ T4861] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 158.663651][ T5678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.925683][ T5681] bond1: (slave geneve2): making interface the new active one [ 158.949235][ T4861] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.976837][ T4861] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.989232][ T5681] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 159.149427][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 159.230509][ T5681] syz.4.479 (5681) used greatest stack depth: 20200 bytes left [ 159.978994][ T4861] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 159.988112][ T4861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 159.997149][ T4861] usb 3-1: SerialNumber: syz [ 160.126100][ T5693] loop1: detected capacity change from 0 to 4096 [ 160.283715][ T4861] usb 3-1: 0:2 : does not exist [ 160.300953][ T4861] usb 3-1: unit 255 not found! [ 160.330414][ T4266] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 160.396081][ T4861] usb 3-1: USB disconnect, device number 4 [ 161.600328][ T4500] udevd[4500]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.729321][ T4266] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 161.737021][ T4266] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 161.829039][ T4266] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.889034][ T4266] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 161.941539][ T4266] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 161.960811][ T4266] usb 5-1: config 168 interface 0 has no altsetting 0 [ 161.981354][ T5713] device syzkaller0 entered promiscuous mode [ 162.157835][ T4266] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 162.173083][ T4266] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 162.185047][ T4266] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 162.203632][ T4266] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 162.215588][ T4266] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 162.229774][ T4266] usb 5-1: config 168 interface 0 has no altsetting 0 [ 162.330037][ T4266] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 162.337623][ T4266] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 162.359079][ T4266] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 162.370744][ T4266] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 162.382326][ T4266] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 162.397071][ T4266] usb 5-1: config 168 interface 0 has no altsetting 0 [ 162.689154][ T4266] usb 5-1: string descriptor 0 read error: -22 [ 162.699196][ T4266] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 162.719001][ T4266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.802677][ T4266] adutux 5-1:168.0: interrupt endpoints not found [ 162.994783][ T4266] usb 5-1: USB disconnect, device number 3 [ 163.680271][ T5734] netlink: 'syz.0.495': attribute type 16 has an invalid length. [ 163.758799][ T5734] netlink: 'syz.0.495': attribute type 17 has an invalid length. [ 163.771415][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.813328][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 163.871260][ T5734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.459272][ T1107] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 165.139469][ T1107] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 165.148729][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.216099][ T1107] usb 3-1: Product: syz [ 165.235170][ T1107] usb 3-1: Manufacturer: syz [ 165.240546][ T1107] usb 3-1: SerialNumber: syz [ 165.762353][ T4239] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 165.846919][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 166.309135][ T4239] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 166.327981][ T4239] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.338732][ T4239] usb 2-1: config 0 has no interface number 0 [ 166.347752][ T4239] usb 2-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 166.365566][ T4239] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 166.377887][ T4239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.680201][ T4239] usb 2-1: config 0 descriptor?? [ 167.292178][ T4239] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 167.789465][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 167.990170][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 168.430277][ T4443] usb 2-1: Failed to submit usb control message: -110 [ 168.438061][ T4443] usb 2-1: unable to send the bmi data to the device: -110 [ 168.475597][ T4443] usb 2-1: unable to get target info from device [ 168.503253][ T4247] usb 2-1: USB disconnect, device number 6 [ 168.513230][ T4443] usb 2-1: could not get target info (-110) [ 168.553555][ T4443] usb 2-1: could not probe fw (-110) [ 168.589594][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 168.661599][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 168.679320][ T5819] sd 0:0:1:0: PR command failed: 2 [ 168.686821][ T5819] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 168.726086][ T5819] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 168.737685][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 168.789962][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 168.822285][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 168.869280][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 168.954966][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 168.995460][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 169.015222][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 169.825315][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 169.919723][ T1107] lan78xx: probe of 3-1:1.0 failed with error -71 [ 169.990499][ T1107] usb 3-1: USB disconnect, device number 5 [ 275.028895][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 275.036054][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5826/1:b..l P5835/2:b..l [ 275.045764][ C1] (detected by 1, t=10502 jiffies, g=15941, q=208) [ 275.052400][ C1] task:syz.0.526 state:R running task stack:25056 pid: 5835 ppid: 4197 flags:0x00004000 [ 275.064652][ C1] Call Trace: [ 275.068055][ C1] [ 275.071023][ C1] __schedule+0x11bb/0x4390 [ 275.075604][ C1] ? mark_lock+0x94/0x320 [ 275.079970][ C1] ? release_firmware_map_entry+0x190/0x190 [ 275.085899][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 275.091223][ C1] preempt_schedule_irq+0xb1/0x150 [ 275.096367][ C1] ? __cond_resched+0xb0/0xb0 [ 275.101081][ C1] ? rcu_is_watching+0x11/0xa0 [ 275.105880][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 275.111810][ C1] irqentry_exit+0x63/0x70 [ 275.116256][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 275.122284][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 275.127629][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 275.147370][ C1] RSP: 0018:ffffc90003a0f300 EFLAGS: 00000206 [ 275.153473][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 73b24ee91a7f6800 [ 275.161469][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b2f00 RDI: ffffffff8a59e580 [ 275.169475][ C1] RBP: ffffc90003a0f410 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 275.177480][ C1] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: ffffffff8c11c760 [ 275.185476][ C1] R13: 1ffff92000741e6c R14: 0000000000000246 R15: dffffc0000000000 [ 275.193586][ C1] ? read_lock_is_recursive+0x10/0x10 [ 275.199004][ C1] rcu_lock_acquire+0x20/0x30 [ 275.203791][ C1] ? __page_memcg+0x140/0x140 [ 275.208492][ C1] percpu_ref_tryget+0x12/0x150 [ 275.213459][ C1] get_mem_cgroup_from_mm+0xda/0x260 [ 275.218780][ C1] __mem_cgroup_charge+0x11/0x80 [ 275.223832][ C1] shmem_add_to_page_cache+0xa83/0x14b0 [ 275.229514][ C1] ? put_page+0x200/0x200 [ 275.233884][ C1] ? mark_lock+0x94/0x320 [ 275.238247][ C1] ? verify_lock_unused+0x140/0x140 [ 275.243479][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 275.248546][ C1] shmem_getpage_gfp+0x1793/0x2d40 [ 275.253717][ C1] shmem_fault+0x1a9/0x520 [ 275.258170][ C1] ? shmem_fallocate+0xe20/0xe20 [ 275.263144][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 275.268453][ C1] ? count_memcg_event_mm+0x311/0x360 [ 275.273856][ C1] __do_fault+0x141/0x330 [ 275.278303][ C1] handle_mm_fault+0x2946/0x43b0 [ 275.283369][ C1] ? get_page+0xe0/0xe0 [ 275.287561][ C1] ? follow_page_mask+0xa6e/0x12d0 [ 275.292803][ C1] __get_user_pages+0x93e/0x11c0 [ 275.297828][ C1] ? populate_vma_page_range+0x290/0x290 [ 275.303600][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 275.309375][ C1] populate_vma_page_range+0x213/0x290 [ 275.314895][ C1] __mm_populate+0x26f/0x3a0 [ 275.319536][ C1] ? check_vma_flags+0x480/0x480 [ 275.324640][ C1] ? preempt_count_add+0x8d/0x190 [ 275.329955][ C1] ? up_write+0x1bb/0x420 [ 275.334317][ C1] vm_mmap_pgoff+0x203/0x2b0 [ 275.338936][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 275.344598][ C1] ? account_locked_vm+0xe0/0xe0 [ 275.349622][ C1] ? ksys_mmap_pgoff+0x124/0x780 [ 275.354692][ C1] ksys_mmap_pgoff+0x140/0x780 [ 275.359488][ C1] ? mmap_region+0x1660/0x1660 [ 275.364283][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 275.369532][ C1] do_syscall_64+0x4c/0xa0 [ 275.373973][ C1] ? clear_bhb_loop+0x30/0x80 [ 275.378843][ C1] ? clear_bhb_loop+0x30/0x80 [ 275.383560][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 275.389922][ C1] RIP: 0033:0x7fc09a13c749 [ 275.394631][ C1] RSP: 002b:00007fc098361038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 275.403223][ C1] RAX: ffffffffffffffda RBX: 00007fc09a393180 RCX: 00007fc09a13c749 [ 275.411227][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 275.419226][ C1] RBP: 00007fc09a1c0f91 R08: ffffffffffffffff R09: 0000000000000000 [ 275.427248][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 275.435249][ C1] R13: 00007fc09a393218 R14: 00007fc09a393180 R15: 00007ffe3ebbf878 [ 275.443362][ C1] [ 275.446412][ C1] task:syz.1.524 state:R running task stack:25024 pid: 5826 ppid: 4194 flags:0x00004000 [ 275.457223][ C1] Call Trace: [ 275.460532][ C1] [ 275.463495][ C1] __schedule+0x11bb/0x4390 [ 275.468045][ C1] ? mark_lock+0x94/0x320 [ 275.472415][ C1] ? release_firmware_map_entry+0x190/0x190 [ 275.478524][ C1] ? verify_lock_unused+0x140/0x140 [ 275.483879][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 275.489201][ C1] preempt_schedule_irq+0xb1/0x150 [ 275.494926][ C1] ? __cond_resched+0xb0/0xb0 [ 275.499648][ C1] ? rcu_is_watching+0x11/0xa0 [ 275.504539][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 275.510381][ C1] irqentry_exit+0x63/0x70 [ 275.514826][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 275.520839][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x60 [ 275.527024][ C1] Code: ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 00 83 fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 14 16 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 [ 275.546658][ C1] RSP: 0018:ffffc900034bf448 EFLAGS: 00000246 [ 275.552760][ C1] RAX: ffffffff83ff8be4 RBX: ffff88805d874b00 RCX: ffff88801d35bb80 [ 275.560759][ C1] RDX: ffffc90005761000 RSI: 000000000007ffff RDI: 0000000000000040 [ 275.568837][ C1] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 275.576830][ C1] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: ffffc900034bf540 [ 275.585082][ C1] R13: 0000000000000000 R14: 0000000000000006 R15: 00000000000008e1 [ 275.593255][ C1] ? xas_descend+0x74/0x3b0 [ 275.597804][ C1] xas_descend+0x74/0x3b0 [ 275.602259][ C1] xas_load+0xba/0x140 [ 275.606365][ C1] pagecache_get_page+0x19d/0xef0 [ 275.611423][ C1] ? page_cache_prev_miss+0x360/0x360 [ 275.616821][ C1] ? mark_lock+0x94/0x320 [ 275.621180][ C1] ? verify_lock_unused+0x140/0x140 [ 275.626517][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 275.631580][ C1] shmem_getpage_gfp+0x305/0x2d40 [ 275.636772][ C1] shmem_fault+0x1a9/0x520 [ 275.641239][ C1] ? shmem_fallocate+0xe20/0xe20 [ 275.646207][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 275.651348][ C1] ? count_memcg_event_mm+0x311/0x360 [ 275.656763][ C1] __do_fault+0x141/0x330 [ 275.661156][ C1] handle_mm_fault+0x2946/0x43b0 [ 275.666312][ C1] ? get_page+0xe0/0xe0 [ 275.670589][ C1] ? follow_page_mask+0xa6e/0x12d0 [ 275.675906][ C1] __get_user_pages+0x93e/0x11c0 [ 275.681067][ C1] ? populate_vma_page_range+0x290/0x290 [ 275.686726][ C1] ? read_lock_is_recursive+0x10/0x10 [ 275.692244][ C1] populate_vma_page_range+0x213/0x290 [ 275.697913][ C1] __mm_populate+0x26f/0x3a0 [ 275.702541][ C1] ? check_vma_flags+0x480/0x480 [ 275.707504][ C1] ? preempt_count_add+0x8d/0x190 [ 275.712551][ C1] ? up_write+0x1bb/0x420 [ 275.716915][ C1] vm_mmap_pgoff+0x203/0x2b0 [ 275.721772][ C1] ? account_locked_vm+0xe0/0xe0 [ 275.726919][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 275.731987][ C1] ksys_mmap_pgoff+0x140/0x780 [ 275.736787][ C1] ? mmap_region+0x1660/0x1660 [ 275.741583][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 275.746815][ C1] do_syscall_64+0x4c/0xa0 [ 275.751264][ C1] ? clear_bhb_loop+0x30/0x80 [ 275.755993][ C1] ? clear_bhb_loop+0x30/0x80 [ 275.760718][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 275.766656][ C1] RIP: 0033:0x7f0c4aef5749 [ 275.771097][ C1] RSP: 002b:00007f0c4915c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 275.779548][ C1] RAX: ffffffffffffffda RBX: 00007f0c4b14bfa0 RCX: 00007f0c4aef5749 [ 275.787558][ C1] RDX: b635773f06ebbee2 RSI: 0000000000b36000 RDI: 0000200000000000 [ 275.795562][ C1] RBP: 00007f0c4af79f91 R08: ffffffffffffffff R09: 0000000000000000 [ 275.803559][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 275.811637][ C1] R13: 00007f0c4b14c038 R14: 00007f0c4b14bfa0 R15: 00007fff31232888 [ 275.819654][ C1] [ 275.822708][ C1] rcu: rcu_preempt kthread starved for 10571 jiffies! g15941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 275.833923][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 275.843945][ C1] rcu: RCU grace-period kthread stack dump: [ 275.849849][ C1] task:rcu_preempt state:R running task stack:28064 pid: 15 ppid: 2 flags:0x00004000 [ 275.860652][ C1] Call Trace: [ 275.863946][ C1] [ 275.866904][ C1] __schedule+0x11bb/0x4390 [ 275.871455][ C1] ? lock_chain_count+0x20/0x20 [ 275.876359][ C1] ? release_firmware_map_entry+0x190/0x190 [ 275.882539][ C1] ? finish_lock_switch+0x12f/0x280 [ 275.887766][ C1] ? finish_task_switch+0x12f/0x640 [ 275.892993][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 275.898316][ C1] preempt_schedule_irq+0xb1/0x150 [ 275.903454][ C1] ? __cond_resched+0xb0/0xb0 [ 275.908170][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 275.914049][ C1] irqentry_exit+0x63/0x70 [ 275.918504][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 275.924002][ C1] RIP: 0010:timer_delete_sync+0x158/0x260 [ 275.929881][ C1] Code: 00 4d 85 ed 75 16 e8 97 9b 10 00 eb 15 e8 90 9b 10 00 e8 5b 3d 42 08 4d 85 ed 74 ea e8 81 9b 10 00 fb 65 44 8b 35 30 3f 9b 7e <44> 89 f6 81 e6 00 00 0f 00 31 ff e8 c8 9e 10 00 41 81 e6 00 00 0f [ 275.949517][ C1] RSP: 0018:ffffc90000d47b00 EFLAGS: 00000293 [ 275.955620][ C1] RAX: ffffffff8167308f RBX: ffffc90000d47be0 RCX: ffff88813feabb80 [ 275.963708][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.971714][ C1] RBP: ffffc90000d47bb0 R08: dffffc0000000000 R09: fffffbfff1ad33a6 [ 275.979712][ C1] R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: dffffc0000000000 [ 275.987731][ C1] R13: 0000000000000200 R14: 0000000080000000 R15: 1ffff920001a8f60 [ 275.995741][ C1] ? timer_delete_sync+0x14f/0x260 [ 276.000910][ C1] ? try_to_del_timer_sync+0x1b0/0x1b0 [ 276.006431][ C1] schedule_timeout+0x164/0x280 [ 276.011323][ C1] ? console_conditional_schedule+0x40/0x40 [ 276.017268][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 276.023204][ C1] ? update_process_times+0x200/0x200 [ 276.028627][ C1] ? prepare_to_swait_event+0x331/0x350 [ 276.034212][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 276.039112][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 276.044339][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 276.050518][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 276.055308][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 276.060532][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 276.065764][ C1] rcu_gp_kthread+0x98/0x350 [ 276.070385][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 276.075518][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 276.081524][ C1] ? __kthread_parkme+0x157/0x1b0 [ 276.086579][ C1] kthread+0x436/0x520 [ 276.090668][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 276.095859][ C1] ? kthread_blkcg+0xd0/0xd0 [ 276.100477][ C1] ret_from_fork+0x1f/0x30 [ 276.105005][ C1] [ 276.108040][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 276.114400][ C1] Sending NMI from CPU 1 to CPUs 0: [ 276.119625][ C0] NMI backtrace for cpu 0 [ 276.119647][ C0] CPU: 0 PID: 5828 Comm: syz.3.523 Not tainted syzkaller #0 [ 276.119664][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.119674][ C0] RIP: 0010:check_preemption_disabled+0x42/0x110 [ 276.119698][ C0] Code: 65 8b 05 49 97 58 76 65 8b 0d b2 f1 58 76 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 [ 276.119712][ C0] RSP: 0018:ffffc9000345fa68 EFLAGS: 00000046 [ 276.119727][ C0] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: 3316e40e1c4b6000 [ 276.119739][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2f00 RDI: ffffffff8a59e580 [ 276.119751][ C0] RBP: ffffc9000345fbb0 R08: dffffc0000000000 R09: fffffbfff1ad33a6 [ 276.119763][ C0] R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: ffff888061e428b0 [ 276.119776][ C0] R13: dffffc0000000000 R14: ffff888061e428a0 R15: 1ffff9200068bf60 [ 276.119789][ C0] FS: 00007f5a1a58c6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 276.119804][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.119816][ C0] CR2: 00007f5a1c57bfa8 CR3: 0000000074054000 CR4: 00000000003506f0 [ 276.119831][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 276.119842][ C0] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 276.119853][ C0] Call Trace: [ 276.119858][ C0] [ 276.119865][ C0] lock_release+0x540/0x870 [ 276.119886][ C0] ? kmem_cache_free+0x14c/0x210 [ 276.119902][ C0] ? get_signal+0x11d6/0x12c0 [ 276.119919][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 276.119937][ C0] ? __dequeue_signal+0x4c4/0x5d0 [ 276.119956][ C0] ? recalc_sigpending+0x1a0/0x230 [ 276.119976][ C0] ? rcu_is_watching+0x11/0xa0 [ 276.119993][ C0] _raw_spin_unlock_irq+0x12/0x40 [ 276.120009][ C0] get_signal+0x11d6/0x12c0 [ 276.120033][ C0] arch_do_signal_or_restart+0xc1/0x1300 [ 276.120053][ C0] ? _copy_from_user+0x111/0x170 [ 276.120071][ C0] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 276.120094][ C0] ? rcu_lock_release+0x5/0x20 [ 276.120110][ C0] ? load_gs_index+0x120/0x120 [ 276.120129][ C0] ? get_sigframe_size+0x10/0x10 [ 276.120157][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 276.120179][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 276.120198][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 276.120217][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 276.120235][ C0] do_syscall_64+0x58/0xa0 [ 276.120249][ C0] ? clear_bhb_loop+0x30/0x80 [ 276.120265][ C0] ? clear_bhb_loop+0x30/0x80 [ 276.120282][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.120299][ C0] RIP: 0033:0x7f5a1c325747 [ 276.120314][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 276.120326][ C0] RSP: 002b:00007f5a1a58c0e8 EFLAGS: 00000246 [ 276.120339][ C0] RAX: 00000000000000ca RBX: 00007f5a1c57bfa8 RCX: 00007f5a1c325749 [ 276.120361][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5a1c57bfa8 [ 276.120371][ C0] RBP: 00007f5a1c57bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 276.120382][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.120392][ C0] R13: 00007f5a1c57c038 R14: 00007ffe75c6eb60 R15: 00007ffe75c6ec48 [ 276.120411][ C0] [ 276.121301][ C1] sched: RT throttling activated