last executing test programs: 11.359465389s ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.471168025s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000480)={0x78, 0xffffffffffffffff}, 0x78) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x8) close(r2) socket$inet_udp(0x2, 0x2, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) pipe2$watch_queue(0x0, 0xb82e336200000000) 9.84212457s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x54}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x63f8, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x300, 0x0, 0x3}, 0x24}}, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00'], 0x44}}, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000440), &(0x7f0000000000)=0x80) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f000001f9c0)={0x0, {0x8000}}) 8.753914189s ago: executing program 1: r0 = gettid() close(0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_route(0x10, 0x3, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, 0x0) 5.672624047s ago: executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 5.029425636s ago: executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.866957963s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7e0}, {0x85, 0x0, 0x0, 0xb4}}, @exit], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000010000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000ac0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000001900)=ANY=[], 0xfd, 0x22e, &(0x7f0000000c00)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100001, &(0x7f0000000f40)={[{@nobh}, {@bsdgroups}, {@quota}, {@norecovery}], [{@fowner_gt={'fowner>', 0xee00}}, {@seclabel}]}, 0xdc, 0x4ad, &(0x7f0000001740)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000480, &(0x7f0000000b00), 0xfd, 0x78e, &(0x7f0000002a00)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x175d9003) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000b40), 0x280080, 0x0) accept4$x25(r3, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c30000000100"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getpid() syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800080, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@oldalloc}]}, 0x3, 0x452, &(0x7f0000000400)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyBEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbWFLu0X7+SSz+97Mm7737cxr38zrBDCyprI/ScTWiPgjIibq2eYCU/V/166cW7h+5dxCEtXqu38ntXJXr5xbKIoW+23JM9NpRPp5Ervb1Lty5uzx+Upl6VSen1098dHsypmzLxw7MX906ejSyf2HDh08MPfyS/tf7EucWZuu7vpkec/Otz74+u3DX2brxov4W+Lok6luG5+uVvtc3XBta0gnY0NsCOtSiojscJVr/X8iSrF28Cbizc+G2jhgoKrVanVL583nq8D/WBLNeV0eRkXxRZ9d/xZL6yDg1cENP4bu8mv1C6As7mv5Ut8yFmleptxyfdtPUxHx/vl/vs2WGMx9CACAJj9m45/n243/0nioodx9+dzQZETcHxHbI+KBiNgREQ9G1Mo+HBGPrLP+1kmSm8c/6aWeArtN2fjvlXxuq3n8V4z+YrKU57bV4i8nR45Vlvbl78l0lDdl+bkudfz0xu9fddrWOP7Llqz+YiyYt+PS2KbmfRbnV+fvJOZGly9E7BprF39yYyYgiYidEbGrxzqOPfv9nk7bbh1/F32YZ6p+F/FM/fifj5b4C0n3+cnZe6KytG+2OCtu9utvF9/pVP8dxd8H2fG/t+35fyP+yaRxvnZl/XVc/POLjtc0vZ7/48l7tfR4vu70/OrqqbmI8eRwvdGN6/ev7Vvki/JZ/NN72/f/7bH2TuyOiOwkfjQiHouIx/O2PxERT0bE3i7x//L6Ux/2Hv9gZfEvruv4ryXGo3VN+0Tp+M8/NFU6eVP817sf/4O11HS+5nY+/26nXb2dzQAAAPDfk0bE1kjSmRvpNJ2Zqf9efkdEWlleWX3uyPLHJxfrzwhMRjkt7nRNNNwPncsv6+v5CxFR/2lBsf1Aft/4m9LmWn5mYbmyOOzgYcRt6dD/M3+Vht06YOA8rwWjS/+H0aX/w+jS/2F0ten/m4fRDmDjtfv+/3QI7QA2Xkv/N+0HI8T1P4wu/R9Gl/4PI2llc9z6IfmuieKVety9W2LsdP2l+//KG5CI8l3RjIElIr0rmiExoMQQP5QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66N8AAAD//8fe3d4=") creat(&(0x7f0000000d00)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.806494956s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8eb7eb6e1012f622, 0x6, &(0x7f0000000600)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x6}, 0x19) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(0xffffffffffffffff, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/127, 0x7f) syz_io_uring_setup(0x1116, &(0x7f0000000300), &(0x7f00000001c0), 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x402, &(0x7f00000009c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f62617272696572000000006976655f6c6f67733d342c757365725f786174747200000000653d6c66732c616c6c6f63df6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a9e835ab286bb5980836f23dbf8ad3dd5931c08b46ea5952a332ad207000c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33206bd1049ca45fd8500d67a5aa6e1c23d9bb55bb77bcadfdf75143289938f8d282688c10f0ffcefa57ff27c893414af5266072d92b4513d8d2a3d941", @ANYRES64], 0x1, 0x54fe, &(0x7f0000006000)="$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") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000001000', @ANYBLOB=',gro', @ANYRESDEC=0x0]) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0) write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) write$FUSE_DIRENT(r2, &(0x7f0000000380)={0xb8, 0x0, 0x0, [{0x0, 0x81, 0x1, 0x1, '\x00'}, {0x0, 0x0, 0x4, 0x1, '.)/b'}, {0x0, 0x80000000, 0x0, 0xff}, {0x6, 0x8, 0xe, 0x4, 'memory.events\x00'}, {0x5, 0x0, 0x9, 0x0, 'threaded\x00'}]}, 0xb8) 4.257130387s ago: executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 3.739102433s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000200)=0x6, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000002a00)={0x0, &(0x7f0000003180)=[0x0], 0x0, 0x0, 0x0, 0x1}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0xa002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x1) accept4$packet(r0, 0x0, &(0x7f0000000180), 0x0) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x27, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x11) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x7f}], 0x0) 3.11523733s ago: executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) read$eventfd(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r3 = timerfd_create(0x0, 0x0) close(r3) creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8000003) chmod(&(0x7f0000000440)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x8, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 2.883680645s ago: executing program 4: syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000200)=ANY=[], 0x0, 0xa7a, &(0x7f0000001640)="$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") mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2.882078287s ago: executing program 3: r0 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x10) epoll_pwait(r2, 0x0, 0x0, 0x80000000, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) unshare(0x60480) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, 0x0) 2.178417645s ago: executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x80) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000040)={0x11, 0x0, {0x0, 0x0, 0x0, 0x1c, 0x0, 0x7ffd}}) ioctl$RTC_AIE_OFF(r3, 0x7002) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, 0x1}, 0xc) 2.080016555s ago: executing program 0: rt_sigreturn() r0 = syz_open_procfs(0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5450, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x2f50c15c0dbed16b) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000001c0)) close(r2) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x1f7}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.930042987s ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xf8fe3326746cd6dd}, 0x0) dup(r1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) close(r2) 1.88165347s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) listen(0xffffffffffffffff, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) 1.552693728s ago: executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.546535238s ago: executing program 4: socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f00000013c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 1.467333482s ago: executing program 2: gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x5}, {}], 0x2) rt_sigreturn() r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x7fff]) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.398109457s ago: executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000780)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa4o8T\xech\x18\xae\xd6;\x18\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)w\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\xb9\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc9\x81\rLJ\xc6\xa3\xd1\x91\xf5\x879\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\x81\xca\xa1\x83\xc5H\x04E/\xde\xb6\xa5\x9d\xe1`\x13\xd7\v\xe9\xb0\x18\x8d\xb7\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth\xac\x9a~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x86p\x98\x9d\x1a\x8b\x88\xff\x05\x86\x9d\xe5.\xfc\xa2v\xb1\xff\xc6\xbd\xfa\xa5\x96|\xcb\xa5[\xabZ\xbd\a\xa1\x8a\xd0\x8b\xebG\xde\x82\xdb\xe3\x9f\x11\xea\x0e}\xeb\x8cX\xeft$\aW\xe7\xe5cL\xf4\xbd9\xcd,\x0fd{\x19\x98\xaa\x12\xad\xce\r$3j/\xda\xc1-X\xf1\x82\fC\xe9\x187\xd3\x84[\x92\f#\x00\xba\xd4b\b\xafr\x7f\x02i+)\xb7]\x98x\x13\xe3\xbc\x04\x1es\xa3\xd4\xdf\x0fZL\x94E\x81\xa1z\x88\x9a{\xbf\xe4\x1a\x81\x8a\xbf\x18/-M\x12\xe6\xdfvzJR\x83\xd5\x03\xf2\xc1\xce\xaf\xfa\xb8\xa7\v`1\xae\xe7\xab\x98*\xd9U\xfe\x9aE\xe5\x14\x10\xd0\xc8M\xf4\x99\xeb\b\x89\xa5\xe5\xbd\xb7\x92[<\x89\x95Y\b[-P\xbc\x9c\x85E\xcf\xf7\xc3\x86\n\xe7\xa9\xf8L\x89\x86\xbbc\x98$/5\x82\x85\xdad\x8e]\xcc\xff\x855\x9f\xa3\xe6w\x17\\\x0f\xec\xef\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x8000007) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x8910, &(0x7f0000000480)={'ip6gre0\x00', 0x0}) 1.292047845s ago: executing program 2: shutdown(0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f0000000000)=""/167, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdd5}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d}, 0x28) 1.122922477s ago: executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) read$eventfd(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r3 = timerfd_create(0x0, 0x0) close(r3) creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8000003) chmod(&(0x7f0000000440)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x8, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 1.107753603s ago: executing program 0: r0 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x10) epoll_pwait(r2, 0x0, 0x0, 0x80000000, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) unshare(0x60480) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, 0x0) 954.010277ms ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) mknodat$loop(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000a00)) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r3, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r4) socketpair(0x1, 0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 880.304694ms ago: executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x531000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(0xffffffffffffffff, 0x0, 0x0) readv(r3, &(0x7f00000003c0), 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x25a5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x600, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$kcm(0x10, 0x2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001200)="a96e9ea23e0dcbc86937d77f60cec86d8662c749b47b4a4a6cd9fcf7475338acbfbce1848b24af0b9466da9ec647087d0c289ca8b881df515f6eac8c8f11be23885612cc6340fa10983ce42b246b05312ed01befd59b21a4ad447e80df24cdab9398aaea833eccd9a83d6f2b9c9c324f4384f7850a4e6e12512859996d84c19c453ec3af501842b181f2832ac083277eccb39d4632ce9ca77855f3e1626e8ee2", 0xa0}, {&(0x7f00000010c0)="22b0a9b3a22fbea75003d4d177ad2d0e6847e1907bf2a37d2a4ad22a275fe5b63bc4d9d013037be469f35ebe6bf9e908759330d4ca5f5c43f788d45dd120666f529fd7b3a6b23d495ffab58ca00549f27b733581186bd5cab8d6c072b3c509ff7a36c59999eec2851a57d0", 0x6b}, {0x0}, {0x0}, {&(0x7f0000001440)="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", 0xfe0}, {&(0x7f0000002440)="72e31080ab0daa052d915741997bab630e8ec650f877f22b51d2d842dbdbb6de84b7c472219ab84e34b821ab0a744f12bc635a4da9b9e41f400e2eed2546e34abad4d55f3484297e1c2fc8778ae9000d1e7a6dbc4cef273d72c9", 0x5a}, {&(0x7f00000024c0)="4d144d8c1c9aa126f50c580b76e86e84e0b45b1381937d59607af1ff029e0651d3854c60d77d510548083b7872ad37fd43e9a0", 0x33}], 0x7, &(0x7f0000002640)=[{0xf0, 0x1, 0x8, "8759a8d7978a237e5fc041c56fafa8794e0fc2b72352addb30b4542d8701c74c58af558f9e88f2e92680490ecebc81edee089f0b320be7c934a9db8b5deda63bfb16806e24fba567ed39b2ab14023ab65bd3237dfee8656981a21efe2b992fdf48c5c2cf39cad25b111437fe60e7a5b93196b7c6290b78741ed115b785d89ed7fa62ba64944f571d90562a3b7306d967726efb522428ca6fe7e7d11f71b7eef8956529491a554853d086d9f8c50b4453fda73c4fd479e8de538b3f3d47a32c8c5a7ac10b4515191063d9d5400206b5f7ff5e26df3d3648b208b8"}, {0x10, 0x11, 0x80000001}, {0x40, 0x84, 0x10000, "5564738106208f09d7cf133d114a13d9aa9ef5cd7e4c07b78877a528cee807c46bcca923d95f66b4e5b31065b558"}, {0x10, 0x1, 0xfff}, {0x68, 0x3a, 0xff, "85048a02d020aeb93177a61d8f479ba2cfbfd1e98fe10adedda07a30f8b0e296e8ec1f74e69526b95afae6e29ff01ee5f0ed7c0935b52f06795e8089fa1307f2f1ded50754f43960814915305e75767b07aa28906b75ad"}, {0xb90, 0x114, 0x0, "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"}], 0xd48}, 0x0, 0x8000}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 631.552229ms ago: executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/23, 0x17}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000008240)=""/223, 0xdf}], 0x1}}], 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) 532.012391ms ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 465.83973ms ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) listen(0xffffffffffffffff, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) 0s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101d02, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.241' (ED25519) to the list of known hosts. 2024/06/13 22:56:45 fuzzer started 2024/06/13 22:56:45 dialing manager at 10.128.0.169:30008 [ 53.767113][ T5080] cgroup: Unknown subsys name 'net' [ 53.975920][ T5080] cgroup: Unknown subsys name 'rlimit' 2024/06/13 22:56:46 starting 5 executor processes [ 55.047685][ T5081] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.707540][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.709556][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.729167][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.736882][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.744619][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.747494][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.752421][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.767146][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.767923][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.775709][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.782834][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.789057][ T5113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.795665][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.802215][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.813106][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.822950][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.823480][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.833212][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.844165][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.846750][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.852182][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.862328][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.867322][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.872264][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.879740][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.887224][ T4480] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.905951][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.921113][ T4480] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.928548][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.936367][ T4480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.353188][ T5101] chnl_net:caif_netlink_parms(): no params data found [ 57.464817][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 57.481993][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 57.588622][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.596114][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.603648][ T5101] bridge_slave_0: entered allmulticast mode [ 57.610506][ T5101] bridge_slave_0: entered promiscuous mode [ 57.659788][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.668873][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.676574][ T5101] bridge_slave_1: entered allmulticast mode [ 57.684290][ T5101] bridge_slave_1: entered promiscuous mode [ 57.763900][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.771163][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.779361][ T5108] bridge_slave_0: entered allmulticast mode [ 57.786268][ T5108] bridge_slave_0: entered promiscuous mode [ 57.847031][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.855592][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.865111][ T5108] bridge_slave_1: entered allmulticast mode [ 57.871811][ T5108] bridge_slave_1: entered promiscuous mode [ 57.881836][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.894601][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.929692][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.938256][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.945681][ T5110] bridge_slave_0: entered allmulticast mode [ 57.952452][ T5110] bridge_slave_0: entered promiscuous mode [ 57.968924][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 57.983551][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 57.996678][ T5101] team0: Port device team_slave_0 added [ 58.003276][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.010592][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.018559][ T5110] bridge_slave_1: entered allmulticast mode [ 58.025500][ T5110] bridge_slave_1: entered promiscuous mode [ 58.063863][ T5101] team0: Port device team_slave_1 added [ 58.084729][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.102357][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.183453][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.207793][ T5108] team0: Port device team_slave_0 added [ 58.222909][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.229877][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.255992][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.270521][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.291382][ T5108] team0: Port device team_slave_1 added [ 58.305841][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.313160][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.339569][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.409637][ T5110] team0: Port device team_slave_0 added [ 58.419471][ T5110] team0: Port device team_slave_1 added [ 58.444995][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.452174][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.459581][ T5102] bridge_slave_0: entered allmulticast mode [ 58.466338][ T5102] bridge_slave_0: entered promiscuous mode [ 58.474874][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.482054][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.489847][ T5102] bridge_slave_1: entered allmulticast mode [ 58.497461][ T5102] bridge_slave_1: entered promiscuous mode [ 58.533022][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.540005][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.566382][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.607666][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.614796][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.641765][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.653700][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.660654][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.686803][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.698022][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.705618][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.712948][ T5109] bridge_slave_0: entered allmulticast mode [ 58.719629][ T5109] bridge_slave_0: entered promiscuous mode [ 58.727506][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.734731][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.741848][ T5109] bridge_slave_1: entered allmulticast mode [ 58.749222][ T5109] bridge_slave_1: entered promiscuous mode [ 58.769165][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.784040][ T5101] hsr_slave_0: entered promiscuous mode [ 58.790354][ T5101] hsr_slave_1: entered promiscuous mode [ 58.798093][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.805153][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.831319][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.863397][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.950390][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.964107][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.966740][ T4480] Bluetooth: hci3: command tx timeout [ 58.973499][ T5118] Bluetooth: hci1: command tx timeout [ 58.978757][ T53] Bluetooth: hci0: command tx timeout [ 58.984403][ T5106] Bluetooth: hci4: command tx timeout [ 58.990111][ T53] Bluetooth: hci2: command tx timeout [ 59.034376][ T5110] hsr_slave_0: entered promiscuous mode [ 59.040839][ T5110] hsr_slave_1: entered promiscuous mode [ 59.047383][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.055512][ T5110] Cannot create hsr debugfs directory [ 59.081883][ T5102] team0: Port device team_slave_0 added [ 59.116471][ T5108] hsr_slave_0: entered promiscuous mode [ 59.123511][ T5108] hsr_slave_1: entered promiscuous mode [ 59.129588][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.137418][ T5108] Cannot create hsr debugfs directory [ 59.159454][ T5102] team0: Port device team_slave_1 added [ 59.196961][ T5109] team0: Port device team_slave_0 added [ 59.228642][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.235768][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.261927][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.286529][ T5109] team0: Port device team_slave_1 added [ 59.316912][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.323981][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.350581][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.423191][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.430167][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.457072][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.470362][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.477399][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.503817][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.595412][ T5109] hsr_slave_0: entered promiscuous mode [ 59.601585][ T5109] hsr_slave_1: entered promiscuous mode [ 59.607953][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.615620][ T5109] Cannot create hsr debugfs directory [ 59.670038][ T5102] hsr_slave_0: entered promiscuous mode [ 59.677526][ T5102] hsr_slave_1: entered promiscuous mode [ 59.684270][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.691831][ T5102] Cannot create hsr debugfs directory [ 59.897728][ T5101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.929793][ T5101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.965311][ T5101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.984637][ T5101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.999705][ T5108] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.027811][ T5108] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.052900][ T5108] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.064124][ T5108] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.118400][ T5110] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.141141][ T5110] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.153137][ T5110] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.167755][ T5110] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.239777][ T5109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.256003][ T5109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.265558][ T5109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.303943][ T5109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.380572][ T5102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.411773][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.418939][ T5102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.451641][ T5102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.461491][ T5102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.514474][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.549766][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.598589][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.606010][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.617509][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.624659][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.652283][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.689109][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.696263][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.708539][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.715654][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.751677][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.805720][ T5101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.817606][ T5101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.842392][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.864789][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.929947][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.937163][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.976677][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.983858][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.015143][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.032717][ T5113] Bluetooth: hci4: command tx timeout [ 61.035689][ T4480] Bluetooth: hci1: command tx timeout [ 61.038133][ T5113] Bluetooth: hci0: command tx timeout [ 61.044516][ T53] Bluetooth: hci3: command tx timeout [ 61.049943][ T5113] Bluetooth: hci2: command tx timeout [ 61.117979][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.158447][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.165655][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.208770][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.215933][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.259622][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.279995][ T5110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.314044][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.377161][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.384360][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.403431][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.410528][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.517608][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.589891][ T5101] veth0_vlan: entered promiscuous mode [ 61.614542][ T5102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.691054][ T5101] veth1_vlan: entered promiscuous mode [ 61.714984][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.745815][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.792386][ T5108] veth0_vlan: entered promiscuous mode [ 61.828467][ T5101] veth0_macvtap: entered promiscuous mode [ 61.871403][ T5101] veth1_macvtap: entered promiscuous mode [ 61.891250][ T5108] veth1_vlan: entered promiscuous mode [ 61.928875][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.951647][ T5109] veth0_vlan: entered promiscuous mode [ 61.971110][ T5109] veth1_vlan: entered promiscuous mode [ 61.991329][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.007314][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.047577][ T5108] veth0_macvtap: entered promiscuous mode [ 62.059543][ T5101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.069504][ T5101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.080213][ T5101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.089502][ T5101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.118383][ T5108] veth1_macvtap: entered promiscuous mode [ 62.167886][ T5109] veth0_macvtap: entered promiscuous mode [ 62.207601][ T5109] veth1_macvtap: entered promiscuous mode [ 62.218611][ T5110] veth0_vlan: entered promiscuous mode [ 62.226234][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.239248][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.251345][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.284437][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.297990][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.311237][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.330556][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.349872][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.360449][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.372173][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.386002][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.426302][ T5110] veth1_vlan: entered promiscuous mode [ 62.438294][ T5108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.447215][ T5108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.457217][ T5108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.466161][ T5108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.481582][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.495239][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.505137][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.515800][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.527214][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.588997][ T5109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.598087][ T5109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.607425][ T5109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.616820][ T5109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.699474][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.711240][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.739997][ T5110] veth0_macvtap: entered promiscuous mode [ 62.751545][ T5102] veth0_vlan: entered promiscuous mode [ 62.768558][ T5110] veth1_macvtap: entered promiscuous mode [ 62.798120][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.811444][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.822408][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.832329][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.833488][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.850743][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.865653][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.879040][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.890780][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.905849][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.917279][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.927916][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.938387][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.948238][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.960304][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.971703][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.008322][ T5110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.018965][ T5110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.027756][ T5110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.037100][ T5110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.068767][ T5102] veth1_vlan: entered promiscuous mode [ 63.095040][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.109450][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.117424][ T5113] Bluetooth: hci3: command tx timeout [ 63.117464][ T5113] Bluetooth: hci1: command tx timeout [ 63.123008][ T53] Bluetooth: hci0: command tx timeout [ 63.123087][ T53] Bluetooth: hci2: command tx timeout [ 63.128847][ T5113] Bluetooth: hci4: command tx timeout [ 63.244416][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.253304][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.335223][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.344424][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.396556][ T5102] veth0_macvtap: entered promiscuous mode [ 63.444772][ T5102] veth1_macvtap: entered promiscuous mode [ 63.455603][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.490988][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.562436][ T2469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.569208][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.592476][ T2469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.595887][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.613242][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.643347][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.673337][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.697361][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.707538][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.720099][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.735123][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.812107][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.832429][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.843967][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.856216][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.866958][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.870423][ T5199] loop0: detected capacity change from 0 to 1024 [ 63.878132][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.895135][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.920057][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.935055][ T5199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.936333][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.956997][ T5199] journal_path: Lookup failure for './bus' [ 63.966582][ T5199] EXT4-fs: error: could not find journal device path [ 63.991789][ T5102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.011836][ T5102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.021998][ T5102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.036642][ T5102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.053249][ T5186] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.095504][ T2486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.105937][ T2486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.269735][ T5186] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 64.288776][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.307148][ T5186] usb 3-1: config 0 has no interface number 0 [ 64.333283][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.341045][ T5186] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.387375][ T5186] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.423549][ T5186] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 64.445760][ T5186] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 64.472002][ T5186] usb 3-1: Manufacturer: syz [ 64.487672][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.492921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.513525][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.533908][ T5186] usb 3-1: config 0 descriptor?? [ 65.028345][ T5186] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0001/input/input5 [ 65.059955][ T5214] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.194551][ T5113] Bluetooth: hci2: command tx timeout [ 65.194665][ T53] Bluetooth: hci1: command tx timeout [ 65.200041][ T5113] Bluetooth: hci0: command tx timeout [ 65.205630][ T4480] Bluetooth: hci3: command tx timeout [ 65.210784][ T5113] Bluetooth: hci4: command tx timeout [ 65.227039][ T5186] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 65.283928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.328523][ T5186] usb 3-1: USB disconnect, device number 2 [ 65.433322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 65.441974][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.482048][ T5217] kvm: emulating exchange as write [ 65.601935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.522996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.136960][ T5242] loop4: detected capacity change from 0 to 2048 [ 67.187275][ T5242] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 67.291471][ T5249] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.359649][ T5242] overlayfs: failed to resolve './file1': -2 [ 67.557069][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.982912][ T784] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.198440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.208040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.227133][ T784] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 68.260028][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.286096][ T784] usb 2-1: config 0 descriptor?? [ 69.193609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.224155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.335326][ T5278] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.519616][ T784] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 69.594888][ T784] asix 2-1:0.0: probe with driver asix failed with error -71 [ 69.613250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.624020][ T784] usb 2-1: USB disconnect, device number 2 [ 69.800178][ T5154] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 70.708784][ T5150] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.771401][ T5154] usb 4-1: unable to get BOS descriptor or descriptor too short [ 70.847643][ T5154] usb 4-1: not running at top speed; connect to a high speed hub [ 70.911235][ T5154] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 70.935510][ T5150] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 70.985602][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.023094][ T5154] usb 4-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.40 [ 71.035442][ T5291] loop2: detected capacity change from 0 to 2048 [ 71.059431][ T5150] usb 1-1: config 0 descriptor?? [ 71.072799][ T5154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.080842][ T5154] usb 4-1: Product: syz [ 71.085168][ T5291] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 71.118937][ T5154] usb 4-1: Manufacturer: syz [ 71.125176][ T5154] usb 4-1: SerialNumber: syz [ 71.137835][ T5154] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 71.179714][ T5298] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.227599][ T5291] overlayfs: failed to resolve './file1': -2 [ 71.346208][ T5154] usb 4-1: USB disconnect, device number 2 [ 71.490232][ T5150] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 71.512526][ T5150] asix 1-1:0.0: probe with driver asix failed with error -71 [ 71.545354][ T5150] usb 1-1: USB disconnect, device number 2 [ 71.687052][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.696021][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.016436][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 72.320973][ T5315] loop0: detected capacity change from 0 to 2048 [ 72.444961][ T5221] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 73.222832][ T5313] loop4: detected capacity change from 0 to 32768 [ 73.914879][ T5313] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 74.278301][ T5343] loop1: detected capacity change from 0 to 2048 [ 74.303554][ T5343] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 74.345765][ T5313] XFS (loop4): Ending clean mount [ 74.384686][ T5344] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.506619][ T5102] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 76.289746][ T5359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.583904][ T5364] wg2: entered promiscuous mode [ 76.588900][ T5364] wg2: entered allmulticast mode [ 77.271888][ T783] cfg80211: failed to load regulatory.db [ 79.033757][ T5382] loop3: detected capacity change from 0 to 2048 [ 79.098671][ T5382] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 79.186166][ T5392] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.321176][ T5395] loop1: detected capacity change from 0 to 2048 [ 79.339996][ T5395] NILFS (loop1): invalid segment: Sequence number mismatch [ 79.347546][ T5395] NILFS (loop1): trying rollback from an earlier position [ 79.407776][ T5395] NILFS (loop1): recovery complete [ 79.415716][ T5398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.416533][ T5399] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.671674][ T5421] loop0: detected capacity change from 0 to 128 [ 81.259060][ T5428] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.811007][ T5434] loop1: detected capacity change from 0 to 2048 [ 81.869234][ T5434] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.929944][ T5435] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.413522][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 82.795750][ T5433] loop2: detected capacity change from 0 to 32768 [ 82.923966][ T5433] [ 82.923966][ T5433] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 82.923966][ T5433] [ 83.026086][ T5433] [ 83.026086][ T5433] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.026086][ T5433] [ 83.037784][ T5433] [ 83.037784][ T5433] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.037784][ T5433] [ 83.060684][ T5433] [ 83.060684][ T5433] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.060684][ T5433] [ 83.088588][ T5433] [ 83.088588][ T5433] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.088588][ T5433] [ 83.107977][ T5451] [ 83.107977][ T5451] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.107977][ T5451] [ 83.158961][ T112] [ 83.158961][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.158961][ T112] [ 83.208263][ T5451] [ 83.208263][ T5451] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.208263][ T5451] [ 83.276519][ T5451] jfs: Unrecognized mount option "18446744073709551615ÿ00000000000000000000000ñ¼ÊíXc¥vÌ:ýQºòœÞ"¨C’ôæo÷ï"ªš÷'ήŠŽÉ_Á·0ƒÞ-è% Ë+ çtý³6P×ÚÎ'ÁkÂ;/|·%…T‰9i(Š©%ZŠ’@øG~‚ºͱý\¢ñ«œâÌÄÒÚøÚÇ%S:UVTúõà’OvO7MfO­Jj²NÀè"çùBnŽ]áþXZ [ 83.276519][ T5451] èoÐ*‹“e–4Ôb¹ûL±¡ú–*‹" or missing value [ 83.427096][ T5108] [ 83.427096][ T5108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.427096][ T5108] [ 83.469880][ T5108] [ 83.469880][ T5108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.469880][ T5108] [ 84.057073][ T5468] loop3: detected capacity change from 0 to 2048 [ 84.112614][ T5468] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.155655][ T5469] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.251865][ T5464] loop1: detected capacity change from 0 to 32768 [ 84.451200][ T5464] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.748128][ T5464] XFS (loop1): Ending clean mount [ 84.940321][ T5110] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.640376][ T5506] net_ratelimit: 2 callbacks suppressed [ 85.640417][ T5506] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [FSP]L3 index 0 [ 85.696788][ T5506] loop3: detected capacity change from 0 to 8 [ 85.805084][ T5506] SQUASHFS error: lzo decompression failed, data probably corrupt [ 85.831753][ T5506] SQUASHFS error: Failed to read block 0x28d: -5 [ 85.837045][ T5499] loop4: detected capacity change from 0 to 32768 [ 85.844932][ T5506] SQUASHFS error: Unable to read metadata cache entry [28b] [ 85.852396][ T5506] SQUASHFS error: Unable to read inode 0x11f [ 85.863114][ T5509] loop0: detected capacity change from 0 to 2048 [ 85.886321][ T5499] [ 85.886321][ T5499] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.886321][ T5499] [ 85.894837][ T5509] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 85.920253][ T5499] [ 85.920253][ T5499] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.920253][ T5499] [ 85.952475][ T5499] [ 85.952475][ T5499] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.952475][ T5499] [ 85.963423][ T5513] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.992912][ T5499] [ 85.992912][ T5499] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.992912][ T5499] [ 86.043910][ T5499] [ 86.043910][ T5499] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.043910][ T5499] [ 86.094608][ T5516] [ 86.094608][ T5516] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.094608][ T5516] [ 86.131902][ T111] [ 86.131902][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.131902][ T111] [ 86.174307][ T5516] [ 86.174307][ T5516] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.174307][ T5516] [ 86.186996][ T5516] jfs: Unrecognized mount option "18446744073709551615ÿ00000000000000000000000ñ¼ÊíXc¥vÌ:ýQºòœÞ"¨C’ôæo÷ï"ªš÷'ήŠŽÉ_Á·0ƒÞ-è% Ë+ çtý³6P×ÚÎ'ÁkÂ;/|·%…T‰9i(Š©%ZŠ’@øG~‚ºͱý\¢ñ«œâÌÄÒÚøÚÇ%S:UVTúõà’OvO7MfO­Jj²NÀè"çùBnŽ]áþXZ [ 86.186996][ T5516] èoÐ*‹“e–4Ôb¹ûL±¡ú–*‹" or missing value [ 86.215008][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.427319][ T5102] [ 86.427319][ T5102] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.427319][ T5102] [ 86.459167][ T5102] [ 86.459167][ T5102] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.459167][ T5102] [ 86.544301][ T5534] loop2: detected capacity change from 0 to 16 [ 86.584833][ T5534] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 86.645770][ T5534] cramfs: empty filesystem [ 87.172928][ T5554] loop1: detected capacity change from 0 to 2048 [ 87.202640][ T5554] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 87.270912][ T5555] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.418261][ T5531] loop3: detected capacity change from 0 to 32768 [ 87.494952][ T5531] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.736570][ T5531] XFS (loop3): Ending clean mount [ 87.972421][ T5572] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 87.992954][ T5572] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 88.021563][ T5531] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.604447][ T5572] syz-executor.1 (5572) used greatest stack depth: 18128 bytes left [ 89.367418][ T5593] loop1: detected capacity change from 0 to 16 [ 89.386476][ T5593] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 89.414522][ T5594] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [FSP]L3 index 0 [ 89.435510][ T5593] cramfs: empty filesystem [ 89.459343][ T5594] loop3: detected capacity change from 0 to 8 [ 89.512834][ T5594] SQUASHFS error: lzo decompression failed, data probably corrupt [ 89.520833][ T5594] SQUASHFS error: Failed to read block 0x28d: -5 [ 89.527414][ T5594] SQUASHFS error: Unable to read metadata cache entry [28b] [ 89.537555][ T5594] SQUASHFS error: Unable to read inode 0x11f [ 89.541081][ T5599] loop2: detected capacity change from 0 to 2048 [ 89.569009][ T5599] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 89.662012][ T5602] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.908901][ T5626] loop0: detected capacity change from 0 to 32768 [ 90.935518][ T5626] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5626) [ 90.965310][ T5626] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.975861][ T5626] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 90.984753][ T5626] BTRFS info (device loop0): using free-space-tree [ 91.115040][ T5609] loop1: detected capacity change from 0 to 32768 [ 91.143612][ T5609] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5609) [ 91.418604][ T5609] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 91.467896][ T5609] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 91.501858][ T5609] BTRFS info (device loop1): disk space caching is enabled [ 91.831030][ T5611] loop4: detected capacity change from 0 to 32768 [ 91.885539][ T5609] BTRFS info (device loop1): rebuilding free space tree [ 91.901170][ T5611] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 91.910664][ T5101] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 91.958899][ T5609] BTRFS info (device loop1): disabling free space tree [ 91.966024][ T5609] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 91.976927][ T5609] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.135915][ T5110] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.185481][ T5611] XFS (loop4): Ending clean mount [ 92.452308][ T5611] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.501626][ T5694] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.369663][ T5715] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 94.115242][ T5716] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 94.483275][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 94.727950][ T5746] loop0: detected capacity change from 0 to 16 [ 94.757469][ T783] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.784097][ T5746] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 94.832880][ T5746] cramfs: empty filesystem [ 94.974439][ T783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 94.998495][ T783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 95.008889][ T783] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.055192][ T783] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.083713][ T783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.121761][ T783] usb 3-1: config 0 descriptor?? [ 95.552996][ T783] usbhid 3-1:0.0: can't add hid device: -71 [ 95.561094][ T5773] loop4: detected capacity change from 0 to 1764 [ 95.572792][ T783] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 95.677694][ T783] usb 3-1: USB disconnect, device number 3 [ 95.728041][ T5773] Zero length message leads to an empty skb [ 95.891346][ T5781] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 95.962377][ T5773] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 96.490602][ T5796] pimreg: entered allmulticast mode [ 96.813242][ T5798] dvmrp5: entered allmulticast mode [ 96.877217][ T5798] pimreg: left allmulticast mode [ 96.889104][ T5798] dvmrp5: left allmulticast mode [ 96.952740][ T5150] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.039686][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.202685][ T5150] usb 4-1: Using ep0 maxpacket: 8 [ 97.241723][ T5150] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.264578][ T5150] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.301688][ T5150] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31016, setting to 1024 [ 97.359650][ T5150] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 97.389978][ T5150] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.468178][ T5829] loop0: detected capacity change from 0 to 16 [ 97.511374][ T5829] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 97.512341][ T5150] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.532023][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.577560][ T5829] cramfs: empty filesystem [ 97.649127][ T5832] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.810821][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.874973][ T5150] usb 4-1: GET_CAPABILITIES returned 0 [ 97.881281][ T5150] usbtmc 4-1:16.0: can't read capabilities [ 98.083204][ T5154] usb 4-1: USB disconnect, device number 3 [ 98.415112][ T5848] loop1: detected capacity change from 0 to 1764 [ 98.466766][ T5848] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 98.476099][ T5848] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 99.107100][ T5858] misc userio: No port type given on /dev/userio [ 99.119112][ T5858] misc userio: Invalid payload size [ 99.478672][ T5866] loop3: detected capacity change from 0 to 256 [ 99.586560][ T5868] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.661668][ T5872] loop1: detected capacity change from 0 to 16 [ 99.675242][ T5872] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 99.677430][ T5153] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.703703][ T5872] cramfs: empty filesystem [ 99.779629][ T5844] loop2: detected capacity change from 0 to 32768 [ 99.861883][ T5844] [ 99.861883][ T5844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.861883][ T5844] [ 99.923488][ T5153] usb 1-1: Using ep0 maxpacket: 16 [ 99.954642][ T5153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 99.978154][ T5844] [ 99.978154][ T5844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.978154][ T5844] [ 99.994933][ T5153] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 99.998461][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.017234][ T5844] [ 100.017234][ T5844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.017234][ T5844] [ 100.031454][ T5883] [ 100.031454][ T5883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.031454][ T5883] [ 100.036832][ T5153] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 100.068137][ T5844] [ 100.068137][ T5844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.068137][ T5844] [ 100.093947][ T5153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.095161][ T5844] [ 100.095161][ T5844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.095161][ T5844] [ 100.102821][ T5153] usb 1-1: Product: syz [ 100.137186][ T5153] usb 1-1: Manufacturer: syz [ 100.141833][ T5153] usb 1-1: SerialNumber: syz [ 100.147566][ T5883] [ 100.147566][ T5883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.147566][ T5883] [ 100.147614][ T5883] jfs: Unrecognized mount option "18446744073709551615ÿ00000000000000000000000ñ¼ÊíXc¥vÌ:ýQºòœÞ"¨C’ôæo÷ï"ªš÷'ήŠŽÉ_Á·0ƒÞ-è% Ë+ çtý³6P×ÚÎ'ÁkÂ;/|·%…T‰9i(Š©%ZŠ’@øG~‚ºͱý\¢ñ«œâÌÄÒÚøÚÇ%S:UVTúõà’OvO7MfO­Jj²NÀè"çùBnŽ]áþXZ [ 100.147614][ T5883] èoÐ*‹“e–4Ôb¹ûL±¡ú–*‹" or missing value [ 100.153072][ T5844] [ 100.153072][ T5844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.153072][ T5844] [ 100.221203][ T5153] usb 1-1: config 0 descriptor?? [ 100.234447][ T5844] [ 100.234447][ T5844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.234447][ T5844] [ 100.258516][ T5153] opticon 1-1:0.0: opticon converter detected [ 100.295785][ T5153] usb 1-1: opticon converter now attached to ttyUSB0 [ 100.305057][ T5886] loop1: detected capacity change from 0 to 1764 [ 100.322705][ T5844] [ 100.322705][ T5844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.322705][ T5844] [ 100.370373][ T112] [ 100.370373][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.370373][ T112] [ 100.419802][ T5886] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 100.450487][ T5886] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 100.468556][ T5154] usb 1-1: USB disconnect, device number 3 [ 100.476206][ T5108] [ 100.476206][ T5108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.476206][ T5108] [ 100.510299][ T5154] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 100.517122][ T5108] [ 100.517122][ T5108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.517122][ T5108] [ 100.524715][ T5154] opticon 1-1:0.0: device disconnected [ 101.052186][ T5879] loop3: detected capacity change from 0 to 32768 [ 101.178791][ T5118] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 101.185483][ T5118] Bluetooth: Wrong link type (-22) [ 101.256883][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.568776][ T5913] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.260705][ T5925] can0: slcan on ptm0. [ 103.409762][ T5930] ALSA: mixer_oss: invalid OSS volume 'u' [ 104.109324][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 104.272938][ T5915] can0 (unregistered): slcan off ptm0. [ 104.640232][ T5963] misc userio: No port type given on /dev/userio [ 104.700387][ T5963] misc userio: Invalid payload size [ 104.777433][ T5966] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.511946][ T5999] loop3: detected capacity change from 0 to 2048 [ 105.555447][ T5999] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 105.604930][ T6002] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.643367][ T5999] overlayfs: missing 'lowerdir' [ 105.962852][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.981476][ T6006] can0: slcan on ptm0. [ 106.119388][ T6019] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.403531][ T6003] can0 (unregistered): slcan off ptm0. [ 107.487495][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.613295][ T6011] loop3: detected capacity change from 0 to 32768 [ 107.673717][ T6011] [ 107.673717][ T6011] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.673717][ T6011] [ 107.705773][ T6036] pimreg: entered allmulticast mode [ 107.772780][ T6011] [ 107.772780][ T6011] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.772780][ T6011] [ 107.804061][ T6011] [ 107.804061][ T6011] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.804061][ T6011] [ 107.892790][ T6011] [ 107.892790][ T6011] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.892790][ T6011] [ 107.903953][ T6039] dvmrp5: entered allmulticast mode [ 107.922416][ T6038] [ 107.922416][ T6038] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.922416][ T6038] [ 107.964403][ T6039] pimreg: left allmulticast mode [ 107.969634][ T6039] dvmrp5: left allmulticast mode [ 107.976812][ T6011] [ 107.976812][ T6011] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.976812][ T6011] [ 108.041745][ T6038] [ 108.041745][ T6038] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.041745][ T6038] [ 108.065580][ T112] [ 108.065580][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.065580][ T112] [ 108.081604][ T6038] jfs: Unrecognized mount option "18446744073709551615ÿ00000000000000000000000ñ¼ÊíXc¥vÌ:ýQºòœÞ"¨C’ôæo÷ï"ªš÷'ήŠŽÉ_Á·0ƒÞ-è% Ë+ çtý³6P×ÚÎ'ÁkÂ;/|·%…T‰9i(Š©%ZŠ’@øG~‚ºͱý\¢ñ«œâÌÄÒÚøÚÇ%S:UVTúõà’OvO7MfO­Jj²NÀè"çùBnŽ]áþXZ [ 108.081604][ T6038] èoÐ*‹“e–4Ôb¹ûL±¡ú–*‹" or missing value [ 108.109487][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.222344][ T6045] loop2: detected capacity change from 0 to 2048 [ 108.252679][ T5109] [ 108.252679][ T5109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.252679][ T5109] [ 108.280002][ T5109] [ 108.280002][ T5109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.280002][ T5109] [ 108.291362][ T6045] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 108.408234][ T6048] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.438190][ T6045] overlayfs: missing 'lowerdir' [ 109.062294][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.271408][ T6062] loop4: detected capacity change from 0 to 4096 [ 109.353502][ T6062] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 109.516428][ T6068] can0: slcan on ptm0. [ 109.540350][ T6062] ntfs3: loop4: ino=1b, "file0" failed to parse mft record [ 109.550678][ T6062] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 109.566738][ T6067] loop2: detected capacity change from 0 to 4096 [ 109.574423][ T6062] ntfs3: loop4: ino=1b, "file0" attr_set_size [ 109.635042][ T6067] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 109.732684][ T29] audit: type=1800 audit(1718319461.632:2): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=34 res=0 errno=0 [ 110.315369][ T6064] can0 (unregistered): slcan off ptm0. [ 110.658389][ T6092] loop1: detected capacity change from 0 to 2048 [ 110.721989][ T6092] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.782431][ T6097] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.897115][ T6092] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.465451][ T6080] loop3: detected capacity change from 0 to 32768 [ 111.499365][ T6080] bcachefs (/dev/loop3): error reading default superblock: Invalid superblock: too big (got 4760 bytes, layout max 512) [ 111.851986][ T6122] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.928434][ T6080] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 111.970538][ T6080] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 112.110800][ T6080] bcachefs (loop3): alloc_read... done [ 112.130950][ T6080] bcachefs (loop3): stripes_read... done [ 112.151030][ T6080] bcachefs (loop3): snapshots_read... done [ 112.174954][ T6080] bcachefs (loop3): journal_replay... done [ 112.181245][ T6080] bcachefs (loop3): resume_logged_ops... done [ 112.221157][ T6080] bcachefs (loop3): going read-write [ 112.235090][ T6102] loop2: detected capacity change from 0 to 32768 [ 112.259808][ T6080] bcachefs (loop3): done starting filesystem [ 112.360554][ T6102] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.411842][ T5109] bcachefs (loop3): shutting down [ 112.436045][ T5109] bcachefs (loop3): going read-only [ 112.444366][ T5109] bcachefs (loop3): finished waiting for writes to stop [ 112.501627][ T5109] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 112.518579][ T5109] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 112.558335][ T5109] bcachefs (loop3): shutdown complete, journal seq 11 [ 112.590041][ T5109] bcachefs (loop3): marking filesystem clean [ 112.657440][ T6102] XFS (loop2): Ending clean mount [ 112.762377][ T5109] bcachefs (loop3): shutdown complete [ 112.794161][ T6102] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.000963][ T6149] loop1: detected capacity change from 0 to 128 [ 113.238528][ T6149] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.334713][ T6149] ext4 filesystem being mounted at /root/syzkaller-testdir1228163828/syzkaller.1g7IR7/53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.608045][ T5110] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.666246][ T6159] can0: slcan on ptm0. [ 113.785955][ T6162] loop2: detected capacity change from 0 to 2048 [ 113.818712][ T6162] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 113.881732][ T6167] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.919165][ T6162] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.423287][ T6156] can0 (unregistered): slcan off ptm0. [ 114.804569][ T6192] loop3: detected capacity change from 0 to 512 [ 114.916511][ T6192] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 115.000236][ T6192] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.091036][ T784] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 115.095535][ T6192] EXT4-fs (loop3): 1 orphan inode deleted [ 115.106378][ T6192] EXT4-fs (loop3): 1 truncate cleaned up [ 115.125546][ T6192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.167646][ T6202] loop2: detected capacity change from 0 to 512 [ 115.217429][ T784] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 115.266337][ T29] audit: type=1326 audit(1718319467.172:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6199 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f367aa7cea9 code=0x0 [ 115.339160][ T784] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 115.574876][ T5154] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.793667][ T5154] usb 4-1: Using ep0 maxpacket: 32 [ 115.824825][ T5154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.854709][ T5154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.881524][ T5154] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 115.899263][ T5154] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 115.936668][ T5154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.976960][ T5154] usb 4-1: config 0 descriptor?? [ 116.037166][ T6197] loop0: detected capacity change from 0 to 32768 [ 116.124278][ T6197] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.155940][ T6152] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 116.249921][ T6152] EXT4-fs (loop3): Remounting filesystem read-only [ 116.362765][ T6197] XFS (loop0): Ending clean mount [ 116.424829][ T5154] ntrig 0003:1B96:000A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 116.468266][ T6197] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.620091][ T6242] loop4: detected capacity change from 0 to 2048 [ 116.670936][ T6242] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 116.770794][ T5154] usb 4-1: USB disconnect, device number 4 [ 116.801825][ T6244] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.894316][ T6242] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 117.314193][ T5109] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.497467][ T6256] can0: slcan on ptm0. [ 118.167119][ T6250] can0 (unregistered): slcan off ptm0. [ 118.942748][ T5158] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 118.950234][ T5158] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 118.973662][ T6291] loop0: detected capacity change from 0 to 2048 [ 118.985916][ T6294] loop4: detected capacity change from 0 to 512 [ 119.004315][ T5158] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 119.010925][ T6291] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.115319][ T29] audit: type=1326 audit(1718319471.022:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6285 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78f947cea9 code=0x0 [ 119.159296][ T6300] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.177494][ T6301] loop2: detected capacity change from 0 to 512 [ 119.218618][ T6291] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 119.238604][ T6301] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.252938][ T6291] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 119.296971][ T6291] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 119.317533][ T6301] EXT4-fs (loop2): 1 orphan inode deleted [ 119.351894][ T6301] EXT4-fs (loop2): 1 truncate cleaned up [ 119.381028][ T6301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.737546][ T5154] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.954832][ T5154] usb 3-1: Using ep0 maxpacket: 32 [ 119.989504][ T5154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.032631][ T5154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.072649][ T5154] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 120.102633][ T5154] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 120.111785][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.167183][ T6326] loop3: detected capacity change from 0 to 128 [ 120.197600][ T5154] usb 3-1: config 0 descriptor?? [ 120.669897][ T5154] ntrig 0003:1B96:000A.0005: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 120.916259][ T5154] usb 3-1: USB disconnect, device number 4 [ 121.456797][ T5108] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.709448][ T6345] can0: slcan on ptm0. [ 122.229229][ T6355] loop4: detected capacity change from 0 to 2048 [ 122.244565][ T6343] can0 (unregistered): slcan off ptm0. [ 122.358670][ T6355] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 122.783432][ T6358] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.945952][ T6355] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 122.969155][ T6355] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 122.991405][ T6355] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 123.094663][ T6332] loop1: detected capacity change from 0 to 40427 [ 123.358228][ T6332] F2FS-fs (loop1): invalid crc value [ 123.399279][ T6332] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 230.122508][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 230.129543][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6392/1:b..l [ 230.137946][ C0] rcu: (detected by 0, t=10503 jiffies, g=14805, q=426 ncpus=2) [ 230.145683][ C0] task:syz-executor.1 state:R running task stack:25632 pid:6392 tgid:6391 ppid:5110 flags:0x00004006 [ 230.158625][ C0] Call Trace: [ 230.161921][ C0] [ 230.164866][ C0] __schedule+0x179e/0x49d0 [ 230.169419][ C0] ? __pfx_validate_chain+0x10/0x10 [ 230.174637][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 230.179693][ C0] ? __pfx___schedule+0x10/0x10 [ 230.184568][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.190562][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 230.195611][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 230.200920][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 230.206054][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 230.211806][ C0] irqentry_exit+0x5e/0x90 [ 230.216238][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 230.222254][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 230.227556][ C0] Code: 2b 00 74 08 4c 89 f7 e8 ba 3a 86 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 230.247185][ C0] RSP: 0018:ffffc9000d897440 EFLAGS: 00000206 [ 230.253274][ C0] RAX: 0000000000000001 RBX: 1ffff92001b12e94 RCX: 0000000000000001 [ 230.261260][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcacd00 RDI: ffffffff8c1f2480 [ 230.269246][ C0] RBP: ffffc9000d8975a0 R08: ffffffff92f74587 R09: 1ffffffff25ee8b0 [ 230.277238][ C0] R10: dffffc0000000000 R11: fffffbfff25ee8b1 R12: 1ffff92001b12e90 [ 230.285223][ C0] R13: dffffc0000000000 R14: ffffc9000d8974a0 R15: 0000000000000246 [ 230.293234][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 230.298297][ C0] ? debug_check_no_obj_freed+0x561/0x580 [ 230.304046][ C0] ? page_ext_put+0x97/0xc0 [ 230.308604][ C0] ? page_ext_get+0x20/0x2a0 [ 230.313208][ C0] page_ext_get+0x3d/0x2a0 [ 230.318419][ C0] ? page_ext_get+0x20/0x2a0 [ 230.323022][ C0] __reset_page_owner+0x2f/0x3f0 [ 230.327980][ C0] free_unref_folios+0xf12/0x19c0 [ 230.333033][ C0] folios_put_refs+0x93a/0xa60 [ 230.337820][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 230.343113][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.348342][ C0] ? folio_batch_remove_exceptionals+0x18a/0x1f0 [ 230.354701][ C0] shmem_undo_range+0x6de/0x1df0 [ 230.359766][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 230.364815][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 230.370230][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 230.376453][ C0] ? shmem_fallocate+0xcb8/0x11f0 [ 230.381544][ C0] ? folio_unlock+0x126/0x2f0 [ 230.386262][ C0] shmem_fallocate+0x1071/0x11f0 [ 230.391257][ C0] ? __pfx_shmem_fallocate+0x10/0x10 [ 230.396574][ C0] ? rcu_read_lock_any_held+0xb7/0x160 [ 230.402065][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 230.408005][ C0] vfs_fallocate+0x564/0x6c0 [ 230.412633][ C0] __x64_sys_fallocate+0xbd/0x110 [ 230.417685][ C0] do_syscall_64+0xf3/0x230 [ 230.422209][ C0] ? clear_bhb_loop+0x35/0x90 [ 230.426913][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.432829][ C0] RIP: 0033:0x7f679a87cea9 [ 230.437265][ C0] RSP: 002b:00007f679b5e90c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 230.445695][ C0] RAX: ffffffffffffffda RBX: 00007f679a9b3f80 RCX: 00007f679a87cea9 [ 230.453674][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 230.461653][ C0] RBP: 00007f679a8ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 230.469632][ C0] R10: 0000000008000007 R11: 0000000000000246 R12: 0000000000000000 [ 230.477702][ C0] R13: 000000000000000b R14: 00007f679a9b3f80 R15: 00007ffc8649cfd8 [ 230.485706][ C0] [ 230.488732][ C0] rcu: rcu_preempt kthread starved for 10534 jiffies! g14805 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 230.499933][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 230.509924][ C0] rcu: RCU grace-period kthread stack dump: [ 230.515818][ C0] task:rcu_preempt state:R running task stack:26576 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 230.527577][ C0] Call Trace: [ 230.530862][ C0] [ 230.533803][ C0] __schedule+0x1796/0x49d0 [ 230.538346][ C0] ? __pfx___schedule+0x10/0x10 [ 230.543403][ C0] ? __pfx_lock_release+0x10/0x10 [ 230.548439][ C0] ? __asan_memset+0x23/0x50 [ 230.553050][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 230.558867][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.565205][ C0] ? schedule+0x90/0x320 [ 230.569461][ C0] schedule+0x14b/0x320 [ 230.573636][ C0] schedule_timeout+0x1be/0x310 [ 230.578500][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 230.583884][ C0] ? __pfx_process_timeout+0x10/0x10 [ 230.589193][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 230.594755][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 230.599621][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 230.604573][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 230.609780][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 230.615859][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 230.621155][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 230.627071][ C0] ? finish_swait+0xd4/0x1e0 [ 230.631674][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 230.636284][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 230.641494][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 230.647408][ C0] ? __kthread_parkme+0x169/0x1d0 [ 230.652447][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 230.657653][ C0] kthread+0x2f0/0x390 [ 230.661735][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 230.666942][ C0] ? __pfx_kthread+0x10/0x10 [ 230.671549][ C0] ret_from_fork+0x4b/0x80 [ 230.675978][ C0] ? __pfx_kthread+0x10/0x10 [ 230.680580][ C0] ret_from_fork_asm+0x1a/0x30 [ 230.685371][ C0] [ 230.688393][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 230.694733][ C0] Sending NMI from CPU 0 to CPUs 1: [ 230.699949][ C1] NMI backtrace for cpu 1 [ 230.699968][ C1] CPU: 1 PID: 6410 Comm: syz-executor.3 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 230.699984][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 230.699993][ C1] RIP: 0010:lock_release+0x604/0x9f0 [ 230.700013][ C1] Code: 4c 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 70 11 86 00 48 c7 84 24 90 00 00 00 00 00 00 00 9c 8f 84 24 90 00 00 00 <42> 80 3c 3b 00 74 08 4c 89 f7 e8 5d 10 86 00 f6 84 24 91 00 00 00 [ 230.700025][ C1] RSP: 0018:ffffc900097f75e0 EFLAGS: 00000046 [ 230.700039][ C1] RAX: 0000000000000001 RBX: 1ffff920012feece RCX: ffffc900097f7603 [ 230.700050][ C1] RDX: 0000000000000001 RSI: ffffffff8bcacd00 RDI: ffffffff8c1f2480 [ 230.700061][ C1] RBP: ffffc900097f7708 R08: ffffffff8fac246f R09: 1ffffffff1f5848d [ 230.700072][ C1] R10: dffffc0000000000 R11: fffffbfff1f5848e R12: 1ffff920012feec8 [ 230.700084][ C1] R13: 0000000000000046 R14: ffffc900097f7670 R15: dffffc0000000000 [ 230.700094][ C1] FS: 00007f81be5276c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 230.700108][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.700118][ C1] CR2: 00007f81bd9aeb68 CR3: 000000005eb44000 CR4: 00000000003506f0 [ 230.700131][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 230.700140][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.700150][ C1] Call Trace: [ 230.700157][ C1] [ 230.700164][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 230.700185][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 230.700202][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 230.700221][ C1] ? nmi_handle+0x2a/0x5a0 [ 230.700249][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 230.700265][ C1] ? nmi_handle+0x14f/0x5a0 [ 230.700285][ C1] ? nmi_handle+0x2a/0x5a0 [ 230.700305][ C1] ? lock_release+0x604/0x9f0 [ 230.700319][ C1] ? default_do_nmi+0x63/0x160 [ 230.700340][ C1] ? exc_nmi+0x123/0x1f0 [ 230.700359][ C1] ? end_repeat_nmi+0xf/0x53 [ 230.700383][ C1] ? lock_release+0x604/0x9f0 [ 230.700398][ C1] ? lock_release+0x604/0x9f0 [ 230.700414][ C1] ? lock_release+0x604/0x9f0 [ 230.700429][ C1] [ 230.700434][ C1] [ 230.700443][ C1] ? update_rq_clock+0x22b/0x8a0 [ 230.700456][ C1] ? rcu_read_lock_sched_held+0x8d/0x130 [ 230.700473][ C1] ? __pfx_lock_release+0x10/0x10 [ 230.700490][ C1] ? sched_clock+0x4a/0x70 [ 230.700510][ C1] psi_account_irqtime+0x382/0x5d0 [ 230.700537][ C1] ? update_rq_clock+0x22b/0x8a0 [ 230.700552][ C1] update_rq_clock+0x22b/0x8a0 [ 230.700570][ C1] __schedule+0x432/0x49d0 [ 230.700601][ C1] ? __pfx___schedule+0x10/0x10 [ 230.700619][ C1] ? schedule+0x90/0x320 [ 230.700636][ C1] ? __pfx_lock_release+0x10/0x10 [ 230.700654][ C1] ? plist_check_list+0x2cb/0x300 [ 230.700673][ C1] ? futex_wait_queue+0x27/0x1d0 [ 230.700692][ C1] ? schedule+0x90/0x320 [ 230.700708][ C1] schedule+0x14b/0x320 [ 230.700726][ C1] ? futex_wait_queue+0x27/0x1d0 [ 230.700742][ C1] futex_wait_queue+0x14e/0x1d0 [ 230.700760][ C1] __futex_wait+0x17f/0x320 [ 230.700776][ C1] ? mark_lock+0x9a/0x350 [ 230.700794][ C1] ? __pfx___futex_wait+0x10/0x10 [ 230.700812][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 230.700838][ C1] futex_wait+0x101/0x360 [ 230.700855][ C1] ? __pfx_futex_wait+0x10/0x10 [ 230.700875][ C1] ? __pfx_lock_release+0x10/0x10 [ 230.700895][ C1] do_futex+0x33b/0x560 [ 230.700912][ C1] ? __pfx_do_futex+0x10/0x10 [ 230.700924][ C1] ? restore_altstack+0x10c/0x150 [ 230.700942][ C1] ? __pfx_restore_altstack+0x10/0x10 [ 230.700962][ C1] __se_sys_futex+0x3f9/0x480 [ 230.700980][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 230.700994][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.701010][ C1] ? do_syscall_64+0x100/0x230 [ 230.701028][ C1] ? __x64_sys_futex+0x21/0xf0 [ 230.701043][ C1] do_syscall_64+0xf3/0x230 [ 230.701060][ C1] ? clear_bhb_loop+0x35/0x90 [ 230.701078][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.701096][ C1] RIP: 0033:0x7f81bd87cea9 [ 230.701108][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 230.701119][ C1] RSP: 002b:00007f81be527178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 230.701133][ C1] RAX: ffffffffffffffda RBX: 00007f81bd9b3f88 RCX: 00007f81bd87cea9 [ 230.701144][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f81bd9b3f88 [ 230.701153][ C1] RBP: 00007f81bd9b3f80 R08: 00007f81be5276c0 R09: 00007f81be5276c0 [ 230.701164][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f81bd9b3f8c [ 230.701173][ C1] R13: 000000000000000b R14: 00007ffd3e8911b0 R15: 00007ffd3e891298 [ 230.701192][ C1]