last executing test programs: 17.50671444s ago: executing program 4 (id=16): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x26f, &(0x7f0000001d80)="$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") prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x4000) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) link(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 16.184962251s ago: executing program 4 (id=23): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{r3}, &(0x7f0000000d80), 0x0}, 0x20) 12.609685823s ago: executing program 4 (id=33): unshare(0x400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x7, @none, 0x2ef5, 0x2}, 0xe) 12.262870587s ago: executing program 3 (id=35): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = eventfd(0xe) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x100, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r1, 0x0, 0x0, 0x4}]) 12.154557062s ago: executing program 4 (id=36): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') lseek(r0, 0x5a, 0x0) 11.616948948s ago: executing program 3 (id=40): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r3, 0x1, 0xd8, 0x6, @remote}, 0x14) 11.607494404s ago: executing program 4 (id=41): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) unshare(0x6a000200) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf25020751ff", @ANYRES32=r3, @ANYBLOB="080002007f00"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 10.130280611s ago: executing program 1 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e80)={&(0x7f0000003e00)=@newlink={0x44, 0x10, 0x19, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x10, 0x4002}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) 9.833874019s ago: executing program 3 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) unshare(0x20000400) 9.214302909s ago: executing program 1 (id=50): io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x100, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0x46) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x7fbfffff}], 0x1, 0x2000, 0x0) 8.93436647s ago: executing program 2 (id=52): r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x54, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}, 0x40000) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x32a, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 7.781971604s ago: executing program 1 (id=53): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@setneightbl={0x14, 0x43, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="ac"], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000e40)='\b', 0x1}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.536682557s ago: executing program 0 (id=54): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents(r0, &(0x7f00000003c0)=""/4096, 0x1000) 6.933197541s ago: executing program 2 (id=55): r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000300)=""/183) 6.548280703s ago: executing program 3 (id=56): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0xffffffffffffffff) 6.394146953s ago: executing program 0 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0xcc, 0x2001) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) 5.926777598s ago: executing program 4 (id=58): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 5.526607712s ago: executing program 2 (id=59): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000200)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x200000000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f00000002c0)={[{@inlinecrypt}, {@journal_checksum}, {@data_writeback}, {@noload}, {@data_err_abort}, {@barrier}, {@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x577}}]}, 0x21, 0x618, &(0x7f0000000640)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) pread64(r1, &(0x7f0000002140)=""/17, 0x11, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x3, 0x0, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) 4.074526176s ago: executing program 1 (id=60): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) 3.996358362s ago: executing program 3 (id=61): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02cf5aa6a3618000031afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b0147a915378e6492e5b94473dcdc87e7c794fb262a7e9ee0b9430000000000000400000500000000", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)="9cd568f007e6fbdb5a1be2afaf20620104bb485cb7d2dfcc63838529578dcb73e9adf0c31c8d318481f8fdf53d3c3e442f432eed7729dd31ebb2844bd318b9dca1c4d3e35d5ed5bab8b780431444550f170283849a58b3f025728a177a64dc07ec27b73305d532801d81ea55b1f16465e5b5b9fcc92def4c925dcce2f49a63cea0eddc84b367ad8bc94d03000000000000854ba9a6954722a02360c9c32dd2d434e6d621d929dcbcaab2b9fa02f105aea2e486f8fc046906a0c6fe0e0000004e75ef325da7af1e069c186fdd057974cd10bd57662cd43163f312", 0xda}], 0x1}}], 0x2, 0x2090) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0x72bd2a, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xb029}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)='e', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)="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", 0x2d9}], 0x1}}], 0x2, 0x1) 2.993969138s ago: executing program 0 (id=62): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{r0}, &(0x7f0000000d80), 0x0}, 0x20) 2.178722667s ago: executing program 2 (id=63): syz_emit_ethernet(0x11, &(0x7f00000006c0)={@local, @remote, @void, {@llc_tr={0x11, {@llc={0xff, 0xff, 'Q'}}}}}, 0x0) 1.917830513s ago: executing program 0 (id=64): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000580)='./bus\x00', 0x10e, &(0x7f0000000080)={[{@errors_remount}, {@stripe={'stripe', 0x3d, 0xb}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@delalloc}, {@usrquota}, {@grpjquota}, {@data_err_abort}, {@noinit_itable}, {@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@commit={'commit', 0x3d, 0x400009}}]}, 0x3, 0x467, &(0x7f0000001440)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b000000", 0xfe60) 1.440611784s ago: executing program 2 (id=65): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121900000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.151716421s ago: executing program 1 (id=66): unshare(0x600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x13, 0x10, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x23) 927.935774ms ago: executing program 0 (id=67): mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000004010102"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x84) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/151, 0x97}, {&(0x7f00000024c0)=""/4077, 0xfed}], 0x2) 612.679123ms ago: executing program 2 (id=68): r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x810) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x2, r3, &(0x7f0000001280)='3', 0x1}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x5, 0x43, r2, 0x0, 0x0, 0x7}]) pipe(0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x12) 242.056405ms ago: executing program 1 (id=69): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001080)=ANY=[@ANYRES32=r0], 0x0) 188.393074ms ago: executing program 0 (id=70): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a1400000011000a"], 0x260}, 0x1, 0x0, 0x0, 0x2000c090}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 3 (id=71): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@rr={0x7, 0x3, 0xb3}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 176.716256][ T5557] cgroup: Unknown subsys name 'net' [ 176.857740][ T5557] cgroup: Unknown subsys name 'cpuset' [ 176.872094][ T5557] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 182.372390][ T5557] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 186.652482][ T5587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.653256][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.660801][ T5587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.676053][ T5587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.683992][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.695408][ T5587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.708564][ T5587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.719679][ T5587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.723789][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.737450][ T5591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.739864][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.767538][ T4869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.780447][ T4869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.791716][ T4869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.804450][ T5582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.847706][ T5584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.859938][ T5584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.871691][ T5584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.886111][ T5584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.891435][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.900022][ T5584] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.904104][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.939466][ T5584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.954646][ T5584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.967558][ T5584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.819211][ T5584] Bluetooth: hci0: command tx timeout [ 188.899916][ T5584] Bluetooth: hci2: command tx timeout [ 188.901454][ T4869] Bluetooth: hci1: command tx timeout [ 188.988661][ T4869] Bluetooth: hci3: command tx timeout [ 189.058733][ T4869] Bluetooth: hci4: command tx timeout [ 190.898680][ T4869] Bluetooth: hci0: command tx timeout [ 190.978903][ T4869] Bluetooth: hci1: command tx timeout [ 190.981177][ T5584] Bluetooth: hci2: command tx timeout [ 191.058746][ T5584] Bluetooth: hci3: command tx timeout [ 191.105488][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.119474][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.139142][ T5584] Bluetooth: hci4: command tx timeout [ 191.145737][ T5585] bridge_slave_0: entered allmulticast mode [ 191.162853][ T5585] bridge_slave_0: entered promiscuous mode [ 191.222813][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.242103][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.252090][ T5585] bridge_slave_1: entered allmulticast mode [ 191.273621][ T5585] bridge_slave_1: entered promiscuous mode [ 191.483275][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.519754][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.609118][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.616654][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.624367][ T5580] bridge_slave_0: entered allmulticast mode [ 191.632644][ T5580] bridge_slave_0: entered promiscuous mode [ 191.665728][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.673626][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.681319][ T5581] bridge_slave_0: entered allmulticast mode [ 191.689825][ T5581] bridge_slave_0: entered promiscuous mode [ 191.746101][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.753910][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.761625][ T5580] bridge_slave_1: entered allmulticast mode [ 191.769901][ T5580] bridge_slave_1: entered promiscuous mode [ 191.802282][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.810100][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.817557][ T5581] bridge_slave_1: entered allmulticast mode [ 191.826458][ T5581] bridge_slave_1: entered promiscuous mode [ 191.865138][ T5585] team0: Port device team_slave_0 added [ 191.893958][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.901985][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.909695][ T5592] bridge_slave_0: entered allmulticast mode [ 191.917809][ T5592] bridge_slave_0: entered promiscuous mode [ 191.955830][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.963350][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.971070][ T5583] bridge_slave_0: entered allmulticast mode [ 191.980491][ T5583] bridge_slave_0: entered promiscuous mode [ 191.996922][ T5585] team0: Port device team_slave_1 added [ 192.025035][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.032857][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.040520][ T5592] bridge_slave_1: entered allmulticast mode [ 192.049114][ T5592] bridge_slave_1: entered promiscuous mode [ 192.087169][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.108845][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.118132][ T5583] bridge_slave_1: entered allmulticast mode [ 192.136006][ T5583] bridge_slave_1: entered promiscuous mode [ 192.213699][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.253847][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.314126][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.353128][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.370509][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.382220][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.389884][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.416123][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.460479][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.500861][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.513034][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.520201][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.546449][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.585815][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.664546][ T5580] team0: Port device team_slave_0 added [ 192.700417][ T5581] team0: Port device team_slave_0 added [ 192.738079][ T5580] team0: Port device team_slave_1 added [ 192.772114][ T5581] team0: Port device team_slave_1 added [ 192.784203][ T5583] team0: Port device team_slave_0 added [ 192.801360][ T5583] team0: Port device team_slave_1 added [ 192.834344][ T5592] team0: Port device team_slave_0 added [ 192.941899][ T5592] team0: Port device team_slave_1 added [ 192.978745][ T5584] Bluetooth: hci0: command tx timeout [ 193.020760][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.027968][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.054567][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.058640][ T5584] Bluetooth: hci1: command tx timeout [ 193.071091][ T4869] Bluetooth: hci2: command tx timeout [ 193.096137][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.103557][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.130266][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.149184][ T5584] Bluetooth: hci3: command tx timeout [ 193.177359][ T5585] hsr_slave_0: entered promiscuous mode [ 193.186027][ T5585] hsr_slave_1: entered promiscuous mode [ 193.196876][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.204076][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.218790][ T5584] Bluetooth: hci4: command tx timeout [ 193.231466][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.249815][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.256896][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.283141][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.319416][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.326582][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.352929][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.369019][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.376122][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.402851][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.434050][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.441294][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.467865][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.527337][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.534556][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.560911][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.826823][ T5581] hsr_slave_0: entered promiscuous mode [ 193.835224][ T5581] hsr_slave_1: entered promiscuous mode [ 193.843225][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 193.849192][ T5581] Cannot create hsr debugfs directory [ 193.867703][ T5580] hsr_slave_0: entered promiscuous mode [ 193.876182][ T5580] hsr_slave_1: entered promiscuous mode [ 193.884507][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 193.890504][ T5580] Cannot create hsr debugfs directory [ 193.907727][ T5583] hsr_slave_0: entered promiscuous mode [ 193.916181][ T5583] hsr_slave_1: entered promiscuous mode [ 193.924239][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 193.930248][ T5583] Cannot create hsr debugfs directory [ 194.036066][ T5592] hsr_slave_0: entered promiscuous mode [ 194.044555][ T5592] hsr_slave_1: entered promiscuous mode [ 194.052572][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 194.058869][ T5592] Cannot create hsr debugfs directory [ 195.058647][ T5584] Bluetooth: hci0: command tx timeout [ 195.138803][ T5584] Bluetooth: hci1: command tx timeout [ 195.139009][ T4869] Bluetooth: hci2: command tx timeout [ 195.168822][ T5585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.190645][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.201083][ T5585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.219417][ T4869] Bluetooth: hci3: command tx timeout [ 195.230776][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.240831][ T5585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.258529][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.279882][ T5585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.297155][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.304694][ T4869] Bluetooth: hci4: command tx timeout [ 195.399377][ T5581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.426110][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.436254][ T5581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.452678][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.462601][ T5581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.481381][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.493822][ T5581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.510338][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.717603][ T5580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 195.736041][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.766976][ T5580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 195.784891][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.819998][ T5580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 195.837278][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.879034][ T5580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.896508][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.028774][ T5583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.052773][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.064330][ T5583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.083765][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.117206][ T5583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.135130][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.145997][ T5583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.164357][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.455501][ T5592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.476352][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.509018][ T5592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.528138][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.538179][ T5592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.556205][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.568220][ T5592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.589162][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.634288][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.855850][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.891576][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.942646][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.950136][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.023730][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.031172][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.110750][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.174527][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.181916][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.302148][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.309660][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.354154][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.467152][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.575101][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.765519][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.815074][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.822750][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.897250][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.984127][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.991732][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.070418][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.077951][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.149660][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.157441][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.257299][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.395088][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.402477][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.568912][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.576418][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.975277][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.715619][ T5585] veth0_vlan: entered promiscuous mode [ 200.776601][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.895254][ T5585] veth1_vlan: entered promiscuous mode [ 201.485993][ T5585] veth0_macvtap: entered promiscuous mode [ 201.565069][ T5585] veth1_macvtap: entered promiscuous mode [ 201.722383][ T5581] veth0_vlan: entered promiscuous mode [ 201.794978][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.861879][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.912827][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.922762][ T5581] veth1_vlan: entered promiscuous mode [ 201.980019][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.084847][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.094956][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.132605][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.142082][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.211942][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.554155][ T5581] veth0_macvtap: entered promiscuous mode [ 202.569838][ T5580] veth0_vlan: entered promiscuous mode [ 202.633736][ T5581] veth1_macvtap: entered promiscuous mode [ 202.776379][ T5583] veth0_vlan: entered promiscuous mode [ 202.807143][ T5580] veth1_vlan: entered promiscuous mode [ 202.944269][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.977677][ T5583] veth1_vlan: entered promiscuous mode [ 203.067109][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.210914][ T1145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.224833][ T1145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.257443][ T1145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.277616][ T1145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.414255][ T5580] veth0_macvtap: entered promiscuous mode [ 203.507974][ T5580] veth1_macvtap: entered promiscuous mode [ 203.601415][ T5583] veth0_macvtap: entered promiscuous mode [ 203.729630][ T5583] veth1_macvtap: entered promiscuous mode [ 203.912564][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.022638][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.107866][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.130532][ T5592] veth0_vlan: entered promiscuous mode [ 204.163766][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.189885][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.200716][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.270893][ T136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.292494][ T136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.334721][ T136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.345776][ T136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.395958][ T136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.407287][ T136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.461792][ T5592] veth1_vlan: entered promiscuous mode [ 204.514754][ T136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.573348][ T136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.882678][ T5592] veth0_macvtap: entered promiscuous mode [ 204.960437][ T5592] veth1_macvtap: entered promiscuous mode [ 205.235181][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.359076][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.484089][ T5707] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.509150][ T5707] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.557336][ T5707] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.586198][ T5707] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.033370][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.071170][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.405038][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.438641][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.935019][ T5585] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 208.792602][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.839168][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.849055][ T5821] netlink: 'syz.3.4': attribute type 13 has an invalid length. [ 208.887798][ T5821] netlink: 'syz.3.4': attribute type 17 has an invalid length. [ 209.149891][ T5707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.196969][ T5707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.176155][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.214139][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.482700][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.527332][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.696136][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.736913][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.875708][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.916749][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.822852][ T5858] loop0: detected capacity change from 0 to 512 [ 211.854457][ T5858] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.877241][ T5858] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.892593][ T5858] /dev/loop0: Can't open blockdev [ 211.923058][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.948956][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.000173][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 212.204736][ T9] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 212.232693][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.250640][ T9] usb 2-1: config 160 has no interface number 0 [ 212.257935][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.266283][ T9] usb 2-1: config 160 interface 200 has no altsetting 0 [ 212.303003][ T9] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 212.315517][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.334699][ T9] usb 2-1: Product: syz [ 212.348094][ T9] usb 2-1: Manufacturer: syz [ 212.372180][ T9] usb 2-1: SerialNumber: syz [ 212.760322][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.790644][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 213.439738][ T9] usb 2-1: USB disconnect, device number 2 [ 213.662663][ T5877] loop4: detected capacity change from 0 to 128 [ 213.694302][ T5877] ======================================================= [ 213.694302][ T5877] WARNING: The mand mount option has been deprecated and [ 213.694302][ T5877] and is ignored by this kernel. Remove the mand [ 213.694302][ T5877] option from the mount to silence this warning. [ 213.694302][ T5877] ======================================================= [ 213.841431][ T5879] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 213.905043][ T5877] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.958285][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.986150][ T5877] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.251464][ T5877] EXT4-fs error (device loop4): ext4_check_dx_root:2201: inode #2: comm syz.4.16: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 214.698729][ T5592] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.723637][ T5895] loop0: detected capacity change from 0 to 256 [ 214.815301][ T5895] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 215.019457][ T5897] loop3: detected capacity change from 0 to 2048 [ 215.170317][ T5897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.267433][ T5897] Illegal XDP return value 4292194984 on prog (id 3) dev syz_tun, expect packet loss! [ 215.639847][ T5585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.155614][ T5915] loop0: detected capacity change from 0 to 256 [ 217.261167][ T5913] loop3: detected capacity change from 0 to 1024 [ 217.317019][ T5913] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 217.317019][ T5913] [ 218.132933][ T29] audit: type=1800 audit(1777902070.157:2): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.28" name="file1" dev="loop0" ino=1048612 res=0 errno=0 [ 218.244327][ T5923] 9p: Bad value for 'rfdno' [ 219.386038][ T5938] loop2: detected capacity change from 0 to 512 [ 219.518035][ T5938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.635584][ T5938] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.698194][ T5950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.41'. [ 219.764429][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.41'. [ 220.069973][ T5581] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.282797][ T5957] syzkaller0: entered promiscuous mode [ 220.299391][ T5957] syzkaller0: entered allmulticast mode [ 221.119357][ T5968] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 221.186536][ T5973] ecryptfs: Unknown parameter '³' [ 226.453166][ T6000] loop4: detected capacity change from 0 to 2048 [ 226.704561][ T6000] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.769083][ T6007] loop2: detected capacity change from 0 to 1024 [ 226.849866][ T6007] EXT4-fs: inline encryption not supported [ 226.955178][ T6007] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 227.579385][ T6007] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6416!=35945) [ 227.906208][ T6007] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.066811][ T6007] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 228.380363][ T6011] loop1: detected capacity change from 0 to 2048 [ 228.573936][ T6011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 229.291737][ T6025] loop0: detected capacity change from 0 to 512 [ 229.338246][ T6025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.375217][ T6025] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 229.468042][ T6025] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 229.753380][ T5583] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 230.996260][ T6038] ===================================================== [ 231.003747][ T6038] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a97/0x20d0 [ 231.012265][ T6038] bpf_prog_run_generic_xdp+0x1a97/0x20d0 [ 231.018182][ T6038] do_xdp_generic+0xe07/0x17b0 [ 231.023379][ T6038] tun_get_user+0x52df/0x6fe0 [ 231.028230][ T6038] tun_chr_write_iter+0x3e9/0x5c0 [ 231.033570][ T6038] vfs_write+0xbe1/0x15c0 [ 231.038088][ T6038] ksys_write+0x1d9/0x470 [ 231.042837][ T6038] __x64_sys_write+0x97/0xf0 [ 231.047678][ T6038] x64_sys_call+0x2ff0/0x3ea0 [ 231.052742][ T6038] do_syscall_64+0x134/0xf80 [ 231.057512][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.063784][ T6038] [ 231.066251][ T6038] Uninit was stored to memory at: [ 231.071668][ T6038] pskb_expand_head+0x497/0x1a40 [ 231.076781][ T6038] do_xdp_generic+0xb30/0x17b0 [ 231.081882][ T6038] tun_get_user+0x52df/0x6fe0 [ 231.086750][ T6038] tun_chr_write_iter+0x3e9/0x5c0 [ 231.092088][ T6038] vfs_write+0xbe1/0x15c0 [ 231.096600][ T6038] ksys_write+0x1d9/0x470 [ 231.101262][ T6038] __x64_sys_write+0x97/0xf0 [ 231.106046][ T6038] x64_sys_call+0x2ff0/0x3ea0 [ 231.111036][ T6038] do_syscall_64+0x134/0xf80 [ 231.115809][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.122287][ T6038] [ 231.124694][ T6038] Uninit was created at: [ 231.129307][ T6038] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 231.135986][ T6038] __alloc_skb+0x90d/0x1190 [ 231.140794][ T6038] alloc_skb_with_frags+0xc5/0x990 [ 231.146088][ T6038] sock_alloc_send_pskb+0xacb/0xc60 [ 231.151624][ T6038] tun_get_user+0xefa/0x6fe0 [ 231.156385][ T6038] tun_chr_write_iter+0x3e9/0x5c0 [ 231.161739][ T6038] vfs_write+0xbe1/0x15c0 [ 231.166410][ T6038] ksys_write+0x1d9/0x470 [ 231.166554][ T6038] __x64_sys_write+0x97/0xf0 [ 231.175769][ T6038] x64_sys_call+0x2ff0/0x3ea0 [ 231.180868][ T6038] do_syscall_64+0x134/0xf80 [ 231.185646][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.191853][ T6038] [ 231.194307][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.1.69 Not tainted syzkaller #0 PREEMPT(full) [ 231.203721][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.214070][ T6038] ===================================================== [ 231.221233][ T6038] Disabling lock debugging due to kernel taint [ 231.227482][ T6038] Kernel panic - not syncing: kmsan.panic set ... [ 231.234021][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.1.69 Tainted: G B syzkaller #0 PREEMPT(full) [ 231.244880][ T6038] Tainted: [B]=BAD_PAGE [ 231.249133][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.259319][ T6038] Call Trace: [ 231.262698][ T6038] [ 231.265712][ T6038] __dump_stack+0x26/0x30 [ 231.270212][ T6038] dump_stack_lvl+0x50/0x1c0 [ 231.274977][ T6038] ? dump_stack+0x12/0x25 [ 231.279482][ T6038] dump_stack+0x1e/0x25 [ 231.283798][ T6038] vpanic+0x7b4/0x1430 [ 231.288078][ T6038] panic+0x15d/0x160 [ 231.292189][ T6038] kmsan_report+0x31a/0x320 [ 231.296884][ T6038] ? __msan_warning+0x1b/0x30 [ 231.301749][ T6038] ? bpf_prog_run_generic_xdp+0x1a97/0x20d0 [ 231.307865][ T6038] ? do_xdp_generic+0xe07/0x17b0 [ 231.312998][ T6038] ? tun_get_user+0x52df/0x6fe0 [ 231.318030][ T6038] ? tun_chr_write_iter+0x3e9/0x5c0 [ 231.323406][ T6038] ? vfs_write+0xbe1/0x15c0 [ 231.328090][ T6038] ? ksys_write+0x1d9/0x470 [ 231.332774][ T6038] ? __x64_sys_write+0x97/0xf0 [ 231.337734][ T6038] ? x64_sys_call+0x2ff0/0x3ea0 [ 231.342771][ T6038] ? do_syscall_64+0x134/0xf80 [ 231.347704][ T6038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.353954][ T6038] ? ___bpf_prog_run+0xe95c/0xea90 [ 231.359308][ T6038] ? __bpf_prog_run32+0xc2/0xf0 [ 231.364377][ T6038] ? kmsan_get_metadata+0xf1/0x160 [ 231.369716][ T6038] __msan_warning+0x1b/0x30 [ 231.374423][ T6038] bpf_prog_run_generic_xdp+0x1a97/0x20d0 [ 231.380412][ T6038] do_xdp_generic+0xe07/0x17b0 [ 231.385380][ T6038] ? tun_get_user+0x4e61/0x6fe0 [ 231.390417][ T6038] ? filter_irq_stacks+0x49/0x190 [ 231.395646][ T6038] ? tun_get_user+0x525e/0x6fe0 [ 231.400679][ T6038] tun_get_user+0x52df/0x6fe0 [ 231.405542][ T6038] ? stack_depot_save_flags+0x35/0x790 [ 231.411208][ T6038] ? kmsan_get_metadata+0xf1/0x160 [ 231.416520][ T6038] ? kmsan_get_metadata+0xf1/0x160 [ 231.421845][ T6038] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 231.428177][ T6038] ? kmsan_get_metadata+0xf1/0x160 [ 231.433514][ T6038] tun_chr_write_iter+0x3e9/0x5c0 [ 231.438741][ T6038] vfs_write+0xbe1/0x15c0 [ 231.443292][ T6038] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 231.449029][ T6038] ksys_write+0x1d9/0x470 [ 231.453566][ T6038] __x64_sys_write+0x97/0xf0 [ 231.458352][ T6038] x64_sys_call+0x2ff0/0x3ea0 [ 231.463224][ T6038] do_syscall_64+0x134/0xf80 [ 231.468347][ T6038] ? clear_bhb_loop+0x50/0xa0 [ 231.473203][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.479270][ T6038] RIP: 0033:0x7fbf28f5d60e [ 231.483821][ T6038] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 231.503601][ T6038] RSP: 002b:00007fbf29edefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.512197][ T6038] RAX: ffffffffffffffda RBX: 00007fbf29edf6c0 RCX: 00007fbf28f5d60e [ 231.520310][ T6038] RDX: 000000000000fdef RSI: 0000200000001080 RDI: 00000000000000c8 [ 231.528413][ T6038] RBP: 00007fbf29032d69 R08: 0000000000000000 R09: 0000000000000000 [ 231.536512][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.544604][ T6038] R13: 00007fbf29216038 R14: 00007fbf29215fa0 R15: 00007ffe982ba878 [ 231.552747][ T6038] [ 231.556304][ T6038] Kernel Offset: disabled [ 231.560696][ T6038] Rebooting in 86400 seconds..