last executing test programs: 5.492056812s ago: executing program 2 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000340)={"9cdaa2a0aa8cfb4d0173eefb9af88b141ed8e62694d7e84cbf9743f47c9dee917a3514ccca7d219b0e886e1e2e89683aa80c1efe79fa59c15f6ac66859ae978095e19737898dfd774466d570a122ff880fd68ff048de4d2ea071ec705a792708b7e2af79e613093675644df118f24df25732a0f0c7d10563f575a3fd471fadf1cd94dbaea963d9446bef46f4a9ca041af483ac4802faaa6caa23eefa3f86649413975226a593f825aae4bee7a4c5fd95c20cdb306e29d4662a99c1eb0c0c9a1dd57c7773bb1e1e1f2b248e49f32b04cf8aa5c5324d96e3274a4a9ce8c716c2eff63ba4985081ebea8beba49b5e777d3aebfd8406988498a998d2164cb8bd39c7f31fef8c27b087341b282664f7c57312b755aa40c82baefdc1c38cfacbf540f4154ba3df0322effa6668a2e8a8696d24fe69bd5b39a31c3436c52a460c00004883a9658bf0482710d92ea0ab28848ebd15b091b7a83b4c7514f9fec42160efa471d086b5ae5c9c103e685d16e346653936006c002ddb0457799b8646bd85b6c834e9a8ba9c23439963d9c1706b14b162917a4800bda5743822d8297a00be8e8018ab2a913c94e833f6c7e6872b63803e1b61f0d334d6eb80ae8154cc4cfc9f518651394b24771ede3c6444c92ddeaa2158b8cf263f267122391875d9a0e7588013cd7e8f4057338e576ac2792696bdb97f69619f2cd00b35024cf1a2ac1364dfc001315ec3278d252600d3829be839d8be743255811c570e4d58fb3f02e52777f1f735062fd8e820bb93cbb1bdc485d2c64d5289ea7ee06b60b60e1209cbf8f3dae5c658031005fce2a62dd847b85ea5da7ba0c21ba53c7683cd27fe459cc82b97b7503b43a3894ee802f598bcac740e7c57f71a8d97a95ca7815cdab3d1d7e06f4acd377e4e7713dfe71f85da40b4128783e8033a411a1e0395464328b1d28eba1db89eb84791e389c389a4e3384001536c3792792b6ce63e0c61e6fc726cbf9aeef7842741011d2ada1454df618ce9dad078b63366798a196bdc127f1ea4a4014d03bf15808aebc3ddb1456501ffb3add6e2d290063225f6b61ac1339667a9a826eb9c319f88978db8bfe8ece08e35060e5435e8ed749f3c8233dca1ef6a06b4b21db62a829c12ff336b577b93c780b37c0d6be6a20ad6696c5e04516d898605e3f14ceb5fdc9cba9dcef83019d736e56877aa08c872a2da579fa9321ec4b9af7f6f42f71866f1a14b1174fdc18efda18a592037fa3d7d920fc54a6a044421f6d6492da606db8a83aed90a2d2b6fd38838bbed0ed96adc07bfd1a4e56a9fadc0aaf7d5df5a0edb2f31b29cbc6b2b8ca4b86eddc9c65db19a01f102f91b87668da238237a5848eb958562234e49e6291553e12ce1de2561c34eed154fcca09a3d61f2fe34241fff518db53bf90cdd32258600"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.253794691s ago: executing program 4 (id=61): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000001840)=""/198, 0xc6}], 0x1, 0x4c, 0xfffffffd) 5.253451551s ago: executing program 0 (id=62): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/21, 0xfffffe0d) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xb, 0x8, 0x7fc00002}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001400)) 5.201533796s ago: executing program 3 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r3, 0x303, 0x70bd29, 0x10000000, {0xa}}, 0x14}}, 0x4) 5.134094491s ago: executing program 4 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x1010081, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mount$fuse(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10404, 0x0) 3.361818776s ago: executing program 1 (id=65): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.225403817s ago: executing program 3 (id=66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000440)={0x8f, 0x0, 0x5553401e50964335}) 3.199568799s ago: executing program 2 (id=67): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000740)={[{@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x101}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x471, &(0x7f0000000200)="$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") 3.125781045s ago: executing program 4 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, 0x0, 0xe9) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c461c02f9b7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300000000000000000000080038000100040004"], 0x78) close(r3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.078767349s ago: executing program 3 (id=69): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) 3.06241494s ago: executing program 1 (id=70): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x40000005, 0x30}, 0xc) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0xffffffffffffffa1, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0xfff, 0x10}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x54000) 2.745836726s ago: executing program 3 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10001, 0x0) 2.404828154s ago: executing program 1 (id=72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000100)="470f009756a60000c4837904869431808ddd66470f3882744e85640f01c266b8db008ed866440fd32c25f0000000b8010000000f01d9b8010000000f01c1c74424008000c0fec744240298fb0000c7442406000000000f01142466baf80cb888e07389ef66bafc0cb80a3923c9ef", 0x6e}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.280488684s ago: executing program 4 (id=73): open(0x0, 0x101, 0x12) truncate(0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x941, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@nomblk_io_submit}, {@auto_da_alloc}, {@minixdf}]}, 0xfe, 0x572, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 2.107581248s ago: executing program 0 (id=74): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x23e, &(0x7f00000007c0)="$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") open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) 1.980468349s ago: executing program 1 (id=75): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x123c40, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f27, 0x0, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x5, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x3, 0xe66, 0x1, 0x8, 0xffffffff, 0x0, 0xfffffff8]}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) timer_create(0x9, 0x0, &(0x7f00000000c0)) accept4(r0, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x13}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000200)=@l2, 0x80, 0x0, 0x0, &(0x7f0000000b80)=""/67, 0x43}, 0x4}, {{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f00000021c0), 0x0, &(0x7f0000002240)=""/4096, 0x1000}, 0x7}], 0x2, 0x2, 0x0) 1.902316475s ago: executing program 2 (id=76): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.781807794s ago: executing program 0 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r3, 0x303, 0x70bd29, 0x10000000, {0xa}}, 0x14}}, 0x4) 1.752828767s ago: executing program 1 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) read$FUSE(r3, &(0x7f0000002f00)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004f40)={0x2020}, 0x2020) read$eventfd(r3, &(0x7f0000000000), 0x8) 1.140479917s ago: executing program 4 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0xa5, &(0x7f0000000a80)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0xd, 0x6, "31e3f9", 0x6f, 0x21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, {[], {{0x4e20, 0x4e22, 0x4, 0x1, 0x4, 0x0, 0x0, 0x5, 0x1, "7f7ccb", 0xc, "9a13ee"}, "942b73c0b4b0e0f1181a36067e08a797ce6012414b7cb6230765942e3bd5e9aeb4e2f64f783b1063c9042993c072bf0a82ca944eb6771c51461f0e99a1a1115373783f2753200d8da0f9a41cb9bf94e56b0f5d93fd85f62071e45f3e8125ee"}}}}}}, 0x0) 897.910627ms ago: executing program 2 (id=80): unshare(0x6c000600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x189000, 0x0) r1 = gettid() tkill(r1, 0x14) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa) 834.825912ms ago: executing program 3 (id=81): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) 809.378184ms ago: executing program 0 (id=82): semtimedop(0x0, &(0x7f0000000040)=[{0x1, 0x3ff, 0x800}, {0x0, 0x0, 0x800}, {0x4, 0x800, 0x800}, {0x1, 0x16e}, {0x1, 0x4, 0x1800}, {0x0, 0x5, 0x800}, {0x2, 0x800, 0x800}, {0x4, 0x5a38, 0x3000}], 0x14, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semtimedop(0x0, &(0x7f0000000080)=[{0x2, 0xffff}], 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x7d9]) 737.789479ms ago: executing program 0 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, 0x0, 0xe9) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c461c02f9b7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300000000000000000000080038000100040004"], 0x78) close(r3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 692.103323ms ago: executing program 2 (id=84): socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x105042, 0x44) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x404200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 393.233878ms ago: executing program 3 (id=85): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400), 0x1, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x1e) 197.798724ms ago: executing program 1 (id=86): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000500)) 82.279373ms ago: executing program 4 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f2b9ae702650f01c866dfdb440f20c066350f000000440f22c026f20f5ebe19003e0f23a50f795b0e0f013e09000f01c53626663e660ff7cf", 0x3a}], 0x1, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0, 0x10}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25.722647ms ago: executing program 2 (id=88): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x123c40, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f27, 0x0, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x5, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x3, 0xe66, 0x1, 0x8, 0xffffffff, 0x0, 0xfffffff8]}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) timer_create(0x9, 0x0, &(0x7f00000000c0)) accept4(r0, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x13}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000200)=@l2, 0x80, 0x0, 0x0, &(0x7f0000000b80)=""/67, 0x43}, 0x4}, {{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f00000021c0), 0x0, &(0x7f0000002240)=""/4096, 0x1000}, 0x7}], 0x2, 0x2, 0x0) 0s ago: executing program 0 (id=89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0xa, 0x2000000000f, 0x120000, 0x5, 0x0, 0xb, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x2, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0xffffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. syzkaller login: [ 49.252139][ T4171] cgroup: Unknown subsys name 'net' [ 49.390186][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.597348][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.843098][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 51.968555][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 51.984811][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 52.005590][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 52.042349][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.050866][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.059433][ T4187] device bridge_slave_0 entered promiscuous mode [ 52.073285][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.080451][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.088641][ T4187] device bridge_slave_1 entered promiscuous mode [ 52.144855][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.157732][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.190964][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.207137][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.214454][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.222310][ T4191] device bridge_slave_0 entered promiscuous mode [ 52.240534][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.247633][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.255518][ T4192] device bridge_slave_0 entered promiscuous mode [ 52.282272][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.289596][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.297470][ T4191] device bridge_slave_1 entered promiscuous mode [ 52.311884][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.319066][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.327271][ T4192] device bridge_slave_1 entered promiscuous mode [ 52.334206][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.342027][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.350078][ T4181] device bridge_slave_0 entered promiscuous mode [ 52.359697][ T4187] team0: Port device team_slave_0 added [ 52.367393][ T4187] team0: Port device team_slave_1 added [ 52.388001][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.395284][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.402852][ T4181] device bridge_slave_1 entered promiscuous mode [ 52.449823][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.462055][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.484638][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.501588][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.508718][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.534733][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.553873][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.561041][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.569134][ T4182] device bridge_slave_0 entered promiscuous mode [ 52.577600][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.588343][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.598727][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.606030][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.632712][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.651049][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.658379][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.666225][ T4182] device bridge_slave_1 entered promiscuous mode [ 52.681900][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.696552][ T4191] team0: Port device team_slave_0 added [ 52.731352][ T4191] team0: Port device team_slave_1 added [ 52.745712][ T4192] team0: Port device team_slave_0 added [ 52.753057][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.782227][ T4192] team0: Port device team_slave_1 added [ 52.796191][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.807287][ T4181] team0: Port device team_slave_0 added [ 52.824002][ T4187] device hsr_slave_0 entered promiscuous mode [ 52.830793][ T4187] device hsr_slave_1 entered promiscuous mode [ 52.860045][ T4181] team0: Port device team_slave_1 added [ 52.871955][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.879246][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.905469][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.926141][ T4182] team0: Port device team_slave_0 added [ 52.940586][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.948413][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.974380][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.991014][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.998019][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.024335][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.042878][ T4182] team0: Port device team_slave_1 added [ 53.049289][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.056497][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.083380][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.095837][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.102807][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.128962][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.140356][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.147595][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.173921][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.224677][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.231709][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.259888][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.297735][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.304712][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.331066][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.343880][ T4191] device hsr_slave_0 entered promiscuous mode [ 53.351012][ T4191] device hsr_slave_1 entered promiscuous mode [ 53.358043][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.365912][ T4191] Cannot create hsr debugfs directory [ 53.381661][ T4192] device hsr_slave_0 entered promiscuous mode [ 53.388388][ T4192] device hsr_slave_1 entered promiscuous mode [ 53.394807][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.402546][ T4192] Cannot create hsr debugfs directory [ 53.443125][ T4181] device hsr_slave_0 entered promiscuous mode [ 53.449972][ T4181] device hsr_slave_1 entered promiscuous mode [ 53.456735][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.464280][ T4181] Cannot create hsr debugfs directory [ 53.488775][ T4182] device hsr_slave_0 entered promiscuous mode [ 53.495585][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.502105][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.509983][ T4182] Cannot create hsr debugfs directory [ 53.587972][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 53.595623][ T4193] Bluetooth: hci1: command 0x0409 tx timeout [ 53.601657][ T4193] Bluetooth: hci4: command 0x0409 tx timeout [ 53.665285][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 53.671379][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 53.785296][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.801793][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.811350][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.821088][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.864496][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.873866][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.885944][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.896989][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.954759][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.975794][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.984474][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.993892][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.042540][ T4181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.052401][ T4181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.072071][ T4181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.094279][ T4181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.107869][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.122607][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.163649][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.171415][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.183580][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.193316][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.203129][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.229401][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.239270][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.248847][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.256071][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.264489][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.274687][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.283140][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.290189][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.299258][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.308514][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.321370][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.338291][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.346694][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.354414][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.362397][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.378796][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.388274][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.397187][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.406305][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.415153][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.450651][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.458744][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.468211][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.477468][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.484677][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.492805][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.501884][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.510431][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.517518][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.527409][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.535950][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.544388][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.552854][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.561215][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.569962][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.594438][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.606939][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.616497][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.631962][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.662948][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.674536][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.690906][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.699498][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.708460][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.720061][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.728720][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.738668][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.747514][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.791005][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.808735][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.824781][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.852270][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.861414][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.877365][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.889502][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.897570][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.906498][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.914298][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.922223][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.949366][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.977221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.987084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.997539][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.004922][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.016419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.029319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.038195][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.045406][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.053317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.062648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.071528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.080852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.089918][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.097178][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.105564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.114536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.124824][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.131920][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.140210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.149973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.158811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.168894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.179955][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.188956][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.198948][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.227247][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.238780][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.247918][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.257023][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.266043][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.274876][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.283675][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.294137][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.303142][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.313975][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.326094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.335890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.344062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.352538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.361768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.370580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.387838][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.397564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.407874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.419324][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.437883][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.453334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.461682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.469219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.477828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.494602][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.518090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.530210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.542227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.554643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.566290][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.573347][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.581579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.590240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.599212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.608407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.616920][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.624030][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.631832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.641765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.650095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.658588][ T4191] device veth0_vlan entered promiscuous mode [ 55.665567][ T4225] Bluetooth: hci4: command 0x041b tx timeout [ 55.682365][ T4191] device veth1_vlan entered promiscuous mode [ 55.689168][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 55.700054][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.720524][ T4225] Bluetooth: hci2: command 0x041b tx timeout [ 55.727392][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.747576][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 55.765248][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 55.780778][ T4187] device veth0_vlan entered promiscuous mode [ 55.795418][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.803430][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.812776][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.824744][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.834087][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.842632][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.850996][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.860631][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.869072][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.877445][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.889002][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.900032][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.912739][ T4191] device veth0_macvtap entered promiscuous mode [ 55.926468][ T4187] device veth1_vlan entered promiscuous mode [ 55.934724][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.948562][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.957929][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.968033][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.979708][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.988792][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.997550][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.006239][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.014690][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.022435][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.039770][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.055251][ T4191] device veth1_macvtap entered promiscuous mode [ 56.075346][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.108519][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.121082][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.149151][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.168684][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.176801][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.184291][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.194416][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.204014][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.212836][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.223890][ T4187] device veth0_macvtap entered promiscuous mode [ 56.240820][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.250578][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.270641][ T4187] device veth1_macvtap entered promiscuous mode [ 56.283300][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.292636][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.301909][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.311895][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.321107][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.329053][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.340447][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.350492][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.361071][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.369879][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.389554][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.401141][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.416213][ T4192] device veth0_vlan entered promiscuous mode [ 56.436374][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.457208][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.472165][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.492561][ T4192] device veth1_vlan entered promiscuous mode [ 56.551447][ T4192] device veth0_macvtap entered promiscuous mode [ 56.565397][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.576454][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.587985][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.601374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.609617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.618104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.627304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.636591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.645745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.654444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.681795][ T4192] device veth1_macvtap entered promiscuous mode [ 56.699489][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.714300][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.726566][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.754830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.764428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.778330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.788602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.797873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.807316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.818693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.829709][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.838758][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.848006][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.858703][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.885529][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.890667][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.893518][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.905696][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.922028][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.933944][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.945947][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.958892][ T4181] device veth0_vlan entered promiscuous mode [ 56.973355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.981713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.990988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.000219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.009496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.018444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.028039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.038082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.046521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.054254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.062518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.075597][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.076300][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.087973][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.104493][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.107816][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.124334][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.135824][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.159398][ T4182] device veth0_vlan entered promiscuous mode [ 57.167724][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.176725][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.189856][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.201631][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.210463][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.219622][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.228753][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.245625][ T4181] device veth1_vlan entered promiscuous mode [ 57.261069][ T4182] device veth1_vlan entered promiscuous mode [ 57.343545][ T4181] device veth0_macvtap entered promiscuous mode [ 57.362466][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.372893][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.397725][ T4182] device veth0_macvtap entered promiscuous mode [ 57.414579][ T4181] device veth1_macvtap entered promiscuous mode [ 57.441254][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.459360][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.461282][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.469345][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.487107][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.496591][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.508423][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.520440][ T4182] device veth1_macvtap entered promiscuous mode [ 57.540411][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.554474][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.564916][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.571965][ T4294] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.575916][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.606655][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.623421][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.641164][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.661384][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.674598][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.684014][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.693758][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.716440][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.743989][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.746200][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 57.755825][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.773619][ T4299] loop2: detected capacity change from 0 to 16 [ 57.779052][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 57.781023][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.796284][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.807256][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.818882][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.828071][ T4255] Bluetooth: hci3: command 0x040f tx timeout [ 57.838983][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 57.846396][ T4255] Bluetooth: hci2: command 0x040f tx timeout [ 57.853335][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.863340][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.874828][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.884646][ T4299] erofs: (device loop2): mounted with root inode @ nid 36. [ 57.891448][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.906618][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.917811][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.941044][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.949467][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.964830][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.978033][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.987231][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.995908][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.008352][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.019615][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.029741][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.040273][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.050422][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.061786][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.073849][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.086375][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.094353][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.102432][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.111227][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.175902][ T4304] loop2: detected capacity change from 0 to 512 [ 58.203858][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.216267][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.228559][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.240857][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.251618][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.252715][ T4304] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 58.262463][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.281011][ T4304] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.285514][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.318637][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.335712][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.350255][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.373939][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.383490][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.393625][ T4304] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1932406473 [ 58.416467][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.426586][ T4304] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1932406473 [ 58.433513][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.445133][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.477715][ T4304] Quota error (device loop2): write_blk: dquota write failed [ 58.487274][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.487877][ T4304] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 58.511158][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.511566][ T4304] Quota error (device loop2): qtree_write_dquot: Error -12 occurred while creating quota [ 58.520135][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.538031][ T4304] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.8: Failed to acquire dquot type 1 [ 58.749479][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.795949][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.802385][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.898669][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.898756][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.903066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.946020][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.946757][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.061277][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.155751][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.155839][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.157613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.374105][ T4328] loop2: detected capacity change from 0 to 136 [ 59.439957][ T4330] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 59.448990][ T4328] rock: directory entry would overflow storage [ 59.476985][ T4328] rock: sig=0x4f50, size=4, remaining=3 [ 59.519090][ T4328] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 59.527492][ T4330] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 59.567708][ T4327] loop4: detected capacity change from 0 to 8192 [ 59.834851][ T4302] Bluetooth: hci4: command 0x0419 tx timeout [ 59.896695][ T4302] Bluetooth: hci1: command 0x0419 tx timeout [ 60.018429][ T4302] Bluetooth: hci2: command 0x0419 tx timeout [ 60.120439][ T4302] Bluetooth: hci0: command 0x0419 tx timeout [ 60.275830][ T4302] Bluetooth: hci3: command 0x0419 tx timeout [ 60.327593][ T4348] ======================================================= [ 60.327593][ T4348] WARNING: The mand mount option has been deprecated and [ 60.327593][ T4348] and is ignored by this kernel. Remove the mand [ 60.327593][ T4348] option from the mount to silence this warning. [ 60.327593][ T4348] ======================================================= [ 60.780776][ T4370] Zero length message leads to an empty skb [ 60.823492][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 60.865540][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.028349][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.233360][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 61.265610][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.540583][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 61.585269][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.594261][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.603202][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 61.745142][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 63.392525][ T4388] loop1: detected capacity change from 0 to 512 [ 63.599915][ T4402] loop0: detected capacity change from 0 to 512 [ 63.695641][ T4388] EXT4-fs (loop1): Test dummy encryption mode enabled [ 63.724808][ T4402] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.772189][ T4388] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.29: inode #1: comm syz.1.29: iget: illegal inode # [ 63.909226][ T4402] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.34: Siphash requires key [ 63.939539][ T4388] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.29: error while reading EA inode 1 err=-117 [ 64.091997][ T4388] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.296560][ T4388] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.29: inode #1: comm syz.1.29: iget: illegal inode # [ 64.564975][ T4388] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.29: error while reading EA inode 1 err=-117 [ 64.602749][ T4418] loop3: detected capacity change from 0 to 1024 [ 64.609656][ T4388] EXT4-fs (loop1): 1 orphan inode deleted [ 64.620217][ T4388] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue. Quota mode: none. [ 64.666610][ T4418] EXT4-fs (loop3): Ignoring removed bh option [ 64.684058][ T4422] loop0: detected capacity change from 0 to 512 [ 64.873000][ T4422] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 65.015656][ T4418] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000000,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 65.063251][ T4422] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 65.211507][ T4422] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 65.322680][ T4418] EXT4-fs error (device loop3): ext4_read_inline_dir:1600: inode #12: block 7: comm syz.3.38: path /6/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 65.354233][ T4422] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 65.382602][ T4418] EXT4-fs (loop3): Remounting filesystem read-only [ 65.408485][ T4422] EXT4-fs (loop0): orphan cleanup on readonly fs [ 65.430859][ T4422] EXT4-fs error (device loop0): ext4_quota_enable:6411: comm syz.0.39: Bad quota inum: 3, type: 1 [ 65.451061][ T4422] EXT4-fs warning (device loop0): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-117, ino=3). Please run e2fsck to fix. [ 65.473041][ T4422] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 65.481390][ T4422] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,nodioread_nolock,errors=continue,lazytime,noblock_validity,usrjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 65.515314][ T4422] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.39: deleted inode referenced: 12 [ 65.767460][ T4446] loop1: detected capacity change from 0 to 2048 [ 65.881517][ T4446] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 66.123903][ T4446] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 66.268979][ T4453] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 66.595950][ T4453] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 66.750358][ T4464] loop0: detected capacity change from 0 to 512 [ 66.934473][ T4464] EXT4-fs (loop0): Test dummy encryption mode enabled [ 67.049640][ T4464] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.347966][ T4464] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.462644][ T4469] loop1: detected capacity change from 0 to 512 [ 67.483912][ T4464] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.53: corrupted in-inode xattr [ 67.591678][ T4464] EXT4-fs (loop0): 1 orphan inode deleted [ 67.600177][ T4472] loop4: detected capacity change from 0 to 8192 [ 67.633979][ T4469] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000007,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 67.660884][ T4464] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 67.678773][ T4469] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.737279][ T4464] EXT4-fs (loop0): Test dummy encryption mode enabled [ 67.746622][ T4464] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 67.769472][ T4484] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3988469896 (255262073344 ns) > initial count (48628088192 ns). Using initial count to start timer. [ 67.816075][ T4470] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 67.837963][ T4470] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 70.070381][ T4514] loop2: detected capacity change from 0 to 512 [ 70.075078][ T26] audit: type=1326 audit(1755123895.829:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119a809be9 code=0x7fc00000 [ 70.132531][ T26] audit: type=1326 audit(1755123895.829:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f119a809be9 code=0x7fc00000 [ 70.516789][ T4514] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.67: inode #2214592512: comm syz.2.67: iget: illegal inode # [ 70.692069][ T26] audit: type=1326 audit(1755123895.829:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119a809be9 code=0x7fc00000 [ 70.727030][ T4514] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.67: error while reading EA inode 2214592512 err=-117 [ 70.819992][ T26] audit: type=1326 audit(1755123895.829:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119a809be9 code=0x7fc00000 [ 70.864408][ T4526] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.868282][ T26] audit: type=1326 audit(1755123895.829:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119a809be9 code=0x7fc00000 [ 70.906630][ T26] audit: type=1326 audit(1755123895.829:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119a809be9 code=0x7fc00000 [ 70.929528][ T4514] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.67: inode #2214592512: comm syz.2.67: iget: illegal inode # [ 70.943201][ T26] audit: type=1326 audit(1755123895.829:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119a809be9 code=0x7fc00000 [ 70.943238][ T26] audit: type=1326 audit(1755123895.829:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119a809be9 code=0x7fc00000 [ 70.943264][ T26] audit: type=1326 audit(1755123895.829:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119a809be9 code=0x7fc00000 [ 70.943290][ T26] audit: type=1326 audit(1755123895.829:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4491 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119a809be9 code=0x7fc00000 [ 71.058071][ T4535] loop0: detected capacity change from 0 to 16 [ 71.062317][ T4514] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.67: error while reading EA inode 2214592512 err=-117 [ 71.082308][ T4528] loop4: detected capacity change from 0 to 1024 [ 71.084411][ T4514] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.67: inode #1: comm syz.2.67: iget: illegal inode # [ 71.118595][ T4514] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.67: error while reading EA inode 1 err=-117 [ 71.140220][ T4514] EXT4-fs (loop2): 1 orphan inode deleted [ 71.146892][ T4514] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,journal_dev=0x0000000000000101,debug_want_extra_isize=0x000000000000004c,auto_da_alloc=0x0000000000000008,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: writeback. [ 71.159234][ T4535] erofs: (device loop0): mounted with root inode @ nid 36. [ 71.209529][ T4528] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 71.333073][ T4528] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000000a,nomblk_io_submit,auto_da_alloc,minixdf,,errors=continue. Quota mode: none. [ 71.512036][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.595139][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.286127][ T4573] loop3: detected capacity change from 0 to 4096 [ 73.326977][ T4571] ------------[ cut here ]------------ [ 73.333402][ T4571] WARNING: CPU: 0 PID: 4571 at arch/x86/kvm/x86.c:10351 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 73.353382][ T4571] Modules linked in: [ 73.357612][ T4571] CPU: 0 PID: 4571 Comm: syz.0.89 Not tainted 5.15.189-syzkaller #0 [ 73.375264][ T4571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.387410][ T4571] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 73.398914][ T4571] Code: e8 81 37 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 66 37 ad 00 e9 c8 ed ff ff e8 4c d4 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 73.421198][ T4571] RSP: 0018:ffffc90002fcfc30 EFLAGS: 00010283 [ 73.427141][ T4573] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.428441][ T4571] RAX: ffffffff810eefd4 RBX: ffff888074bd8000 RCX: 0000000000080000 [ 73.448621][ T4571] RDX: ffffc90003cf3000 RSI: 0000000000000407 RDI: 0000000000000408 [ 73.458510][ T4571] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 73.470782][ T4571] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: ffff888029c79001 [ 73.481125][ T4571] R13: 1ffff1100e97b01e R14: ffff888074bd80f0 R15: ffff888029c79000 [ 73.489393][ T4571] FS: 00007f1198a716c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 73.498702][ T4571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.504972][ T4569] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 73.505789][ T4571] CR2: 00007f67ef7e9020 CR3: 0000000061d38000 CR4: 00000000003526f0 [ 73.517659][ T4569] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 73.523045][ T4571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.565249][ T4571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.611954][ T4571] Call Trace: [ 73.625746][ T4571] [ 73.640032][ T4571] ? __lock_acquire+0x7c60/0x7c60 [ 73.655320][ T4571] kvm_vcpu_ioctl+0x887/0xb80 [ 73.686136][ T4571] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 73.702679][ T4571] ? bpf_lsm_file_ioctl+0x5/0x10 [ 73.721153][ T4571] ? security_file_ioctl+0x7c/0xa0 [ 73.741609][ T4571] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 73.748200][ T4571] __se_sys_ioctl+0xfa/0x170 [ 73.753063][ T4571] do_syscall_64+0x4c/0xa0 [ 73.758777][ T4571] ? clear_bhb_loop+0x30/0x80 [ 73.763624][ T4571] ? clear_bhb_loop+0x30/0x80 [ 73.769486][ T4571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.776280][ T4571] RIP: 0033:0x7f119a809be9 [ 73.780831][ T4571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.801157][ T4571] RSP: 002b:00007f1198a71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.810105][ T4571] RAX: ffffffffffffffda RBX: 00007f119aa30fa0 RCX: 00007f119a809be9 [ 73.818661][ T4571] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 73.827531][ T4571] RBP: 00007f119a88ce19 R08: 0000000000000000 R09: 0000000000000000 [ 73.836868][ T4571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.850416][ T4571] R13: 00007f119aa31038 R14: 00007f119aa30fa0 R15: 00007fff26a39848 [ 73.859495][ T4571] [ 73.862746][ T4571] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 73.870036][ T4571] CPU: 1 PID: 4571 Comm: syz.0.89 Not tainted 5.15.189-syzkaller #0 [ 73.878055][ T4571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.888160][ T4571] Call Trace: [ 73.891450][ T4571] [ 73.894374][ T4571] dump_stack_lvl+0x168/0x230 [ 73.899067][ T4571] ? show_regs_print_info+0x20/0x20 [ 73.904261][ T4571] ? load_image+0x3b0/0x3b0 [ 73.908769][ T4571] panic+0x2c9/0x7f0 [ 73.912660][ T4571] ? bpf_jit_dump+0xd0/0xd0 [ 73.917177][ T4571] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 73.923142][ T4571] __warn+0x248/0x2b0 [ 73.927134][ T4571] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 73.932963][ T4571] report_bug+0x1b7/0x2e0 [ 73.937321][ T4571] handle_bug+0x3a/0x70 [ 73.941618][ T4571] exc_invalid_op+0x16/0x40 [ 73.946171][ T4571] asm_exc_invalid_op+0x16/0x20 [ 73.951215][ T4571] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 73.957647][ T4571] Code: e8 81 37 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 66 37 ad 00 e9 c8 ed ff ff e8 4c d4 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 73.977444][ T4571] RSP: 0018:ffffc90002fcfc30 EFLAGS: 00010283 [ 73.983524][ T4571] RAX: ffffffff810eefd4 RBX: ffff888074bd8000 RCX: 0000000000080000 [ 73.991681][ T4571] RDX: ffffc90003cf3000 RSI: 0000000000000407 RDI: 0000000000000408 [ 73.999750][ T4571] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 74.007735][ T4571] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: ffff888029c79001 [ 74.015723][ T4571] R13: 1ffff1100e97b01e R14: ffff888074bd80f0 R15: ffff888029c79000 [ 74.023780][ T4571] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 74.029654][ T4571] ? __lock_acquire+0x7c60/0x7c60 [ 74.034881][ T4571] kvm_vcpu_ioctl+0x887/0xb80 [ 74.039711][ T4571] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 74.045473][ T4571] ? bpf_lsm_file_ioctl+0x5/0x10 [ 74.050527][ T4571] ? security_file_ioctl+0x7c/0xa0 [ 74.055656][ T4571] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 74.061299][ T4571] __se_sys_ioctl+0xfa/0x170 [ 74.065911][ T4571] do_syscall_64+0x4c/0xa0 [ 74.070860][ T4571] ? clear_bhb_loop+0x30/0x80 [ 74.075546][ T4571] ? clear_bhb_loop+0x30/0x80 [ 74.080251][ T4571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.086543][ T4571] RIP: 0033:0x7f119a809be9 [ 74.091060][ T4571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.111028][ T4571] RSP: 002b:00007f1198a71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.119691][ T4571] RAX: ffffffffffffffda RBX: 00007f119aa30fa0 RCX: 00007f119a809be9 [ 74.128090][ T4571] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 74.136163][ T4571] RBP: 00007f119a88ce19 R08: 0000000000000000 R09: 0000000000000000 [ 74.144568][ T4571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.152552][ T4571] R13: 00007f119aa31038 R14: 00007f119aa30fa0 R15: 00007fff26a39848 [ 74.160582][ T4571] [ 74.163860][ T4571] Kernel Offset: disabled [ 74.168649][ T4571] Rebooting in 86400 seconds..