last executing test programs: 5.81927993s ago: executing program 2 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x10000, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x8}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 4.783379025s ago: executing program 2 (id=95): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f00000000000000000000001000030076657468300000000000000010001200", 0x34}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.586450799s ago: executing program 3 (id=97): sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x0, 0x7f, 0x6, 0xffffffc2}]}) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$read(0xb, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a01ff03000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c000080080003400000000214000000100001"], 0xf8}}, 0x0) 4.585176729s ago: executing program 0 (id=98): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000640)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@data_ordered}, {@init_itable}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x402) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) syz_emit_ethernet(0x5a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @mptcp=@syn={0x1e, 0xc, 0x6, 0x1, 0x4, 0x2, 0xa}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 2.861842341s ago: executing program 0 (id=103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newtfilter={0x90, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$cgroup_pid(r0, &(0x7f0000000640), 0x12) 2.775387023s ago: executing program 1 (id=105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x10000, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 2.678883065s ago: executing program 2 (id=106): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x80}, 0x10) 2.543368329s ago: executing program 3 (id=109): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 2.49137879s ago: executing program 2 (id=110): unshare(0x20000400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000100)='7', 0x1) unshare(0x2a020400) 2.465898291s ago: executing program 1 (id=111): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x10000, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x51, 0x0, 0xffffffffffffffff}) 2.45600418s ago: executing program 0 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r2 = dup(r1) readv(r2, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/37, 0x25}], 0x2) 2.1014895s ago: executing program 1 (id=114): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x70bd2d, 0x20000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1000000}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}}, 0x0) 2.101259409s ago: executing program 3 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004b00)={&(0x7f0000002400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 2.099730079s ago: executing program 4 (id=116): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f00000000000000000000001000030076657468300000000000000010001200080001007665746818", 0x3d}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.023206301s ago: executing program 1 (id=117): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0x8000, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x80, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x6, 0x15, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x7, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x80, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=@target={'target ', {'PCI:', '5', ':', 'b', ':', 'd', '.', '1e'}}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.023105231s ago: executing program 3 (id=118): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000380)=[{&(0x7f00000005c0)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.923632704s ago: executing program 3 (id=119): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f00000005c0), 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000640)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) 1.902364994s ago: executing program 2 (id=120): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x4e24}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000980)={0x1, &(0x7f00000009c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 964.989976ms ago: executing program 1 (id=121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x10000, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 963.875036ms ago: executing program 3 (id=122): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001080)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001100)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x20004010) 907.368068ms ago: executing program 2 (id=123): unshare(0x22020600) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x207, &(0x7f0000000600)={[{@errors_remount}, {@nolazytime}]}, 0x1, 0x46b, &(0x7f0000000b00)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000200)={0xa0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @local}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x37, 0x2, 0x200, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x20, 0x7, 0x6, 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@delchain={0x2c, 0x65, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x5, 0xfff2}, {0xd, 0x1}, {0x2, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x18, 0x27, 0x301, 0x70bd26, 0x8000, {0x1}, [@nested={0x4, 0x15b}]}, 0x18}, 0x1, 0x0, 0x0, 0x4840}, 0x44004) openat(0xffffffffffffff9c, &(0x7f0000000f80)='.\x00', 0x0, 0x0) r3 = fsopen(&(0x7f00000004c0)='cgroup2\x00', 0x1) fsmount(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r4, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xd769}}, 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f0000000740)=0x51) 735.269882ms ago: executing program 1 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0x4f, 0x0) write(r0, &(0x7f0000000100)='270', 0x3) syz_ublk_setup_io_uring(0x3a07, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vimc2(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x2760c000) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000640)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x50) r4 = syz_open_dev$mtd(&(0x7f0000000980), 0x0, 0x2) ioctl$BLKPG(r4, 0x1269, &(0x7f00000009c0)={0x1, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x10000, 0x1}}) 726.083522ms ago: executing program 0 (id=125): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) ptrace$cont(0x7, r0, 0x81, 0x13) ptrace$setregs(0x4212, r0, 0x58, &(0x7f0000000040)) 667.978974ms ago: executing program 4 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='autg', 0x4) 567.263106ms ago: executing program 4 (id=127): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 555.294186ms ago: executing program 4 (id=128): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 488.585188ms ago: executing program 0 (id=129): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000380)=[{&(0x7f00000005c0)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 434.627889ms ago: executing program 4 (id=130): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x9, 0x4, 0x7fff0000}]}) uname(0x0) 265.594784ms ago: executing program 0 (id=131): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0x8000, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x80, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x6, 0x15, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x7, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x80, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=@target={'target ', {'PCI:', '5', ':', 'b', ':', 'd', '.', '1e'}}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 4 (id=132): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socket$inet6_mptcp(0xa, 0x1, 0x106) msync(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. syzkaller login: [ 64.965606][ T4173] cgroup: Unknown subsys name 'net' [ 65.099932][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.610206][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.850203][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.857543][ T4186] rdma_rxe: rxe_register_device failed with error -23 [ 67.862866][ T4187] rdma_rxe: rxe_register_device failed with error -23 [ 67.869609][ T4186] rdma_rxe: failed to add rxe_eth0 [ 67.879432][ T4195] rdma_rxe: rxe_register_device failed with error -23 [ 67.890548][ T4185] rdma_rxe: rxe_register_device failed with error -23 [ 67.904885][ T4187] rdma_rxe: failed to add rxe_eth0 [ 67.915039][ T4185] rdma_rxe: failed to add rxe_eth0 [ 67.921886][ T4195] rdma_rxe: failed to add rxe_eth0 [ 67.934490][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.942329][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.099442][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.097276][ T4193] infiniband rxe0: set active [ 68.111488][ T4193] infiniband rxe0: added rxe_eth0 [ 68.163216][ T4193] RDS/IB: rxe0: added [ 68.178015][ T4193] smc: adding ib device rxe0 with port count 1 [ 68.185004][ T4193] smc: ib device rxe0 port 1 has pnetid [ 68.214826][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.222352][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.291854][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.422054][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.481342][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 68.517168][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 68.547102][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.590332][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.626210][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.633359][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.654492][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.672739][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.680060][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.692800][ T4186] device bridge_slave_1 entered promiscuous mode [ 68.823130][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.836004][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.869658][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.899726][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.907759][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.934549][ T4195] device bridge_slave_0 entered promiscuous mode [ 68.964513][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.983623][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.991906][ T4195] device bridge_slave_1 entered promiscuous mode [ 69.021566][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.033555][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.041753][ T4187] device bridge_slave_0 entered promiscuous mode [ 69.071603][ T4186] team0: Port device team_slave_0 added [ 69.084372][ T4186] team0: Port device team_slave_1 added [ 69.107166][ T4193] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.118769][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.138341][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.159166][ T4187] device bridge_slave_1 entered promiscuous mode [ 69.193318][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.213534][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.221851][ T4185] device bridge_slave_0 entered promiscuous mode [ 69.258391][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.274469][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.281465][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.309341][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.328303][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.335578][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.344229][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.360269][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.374038][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.381058][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.408005][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.432669][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.486522][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.515620][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.546838][ T4195] team0: Port device team_slave_0 added [ 69.564937][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.592556][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.600096][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.612202][ T4195] team0: Port device team_slave_1 added [ 69.620517][ T4187] team0: Port device team_slave_0 added [ 69.633523][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.643522][ T3851] infiniband rxe0: set active [ 69.658127][ T4187] team0: Port device team_slave_1 added [ 69.675314][ T4185] team0: Port device team_slave_0 added [ 69.681773][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.720846][ T4185] team0: Port device team_slave_1 added [ 69.749528][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.756750][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.783640][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.787770][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 69.803307][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.810390][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.836663][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.849052][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.856152][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.882323][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 69.888515][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.899444][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 69.905791][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 69.911901][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 69.927513][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.935049][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.961188][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.987860][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.995815][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.022195][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.069718][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.077074][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.104293][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.138678][ T4187] device hsr_slave_0 entered promiscuous mode [ 70.145970][ T4187] device hsr_slave_1 entered promiscuous mode [ 70.152972][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.161492][ T4187] Cannot create hsr debugfs directory [ 70.171750][ T4195] device hsr_slave_0 entered promiscuous mode [ 70.179179][ T4195] device hsr_slave_1 entered promiscuous mode [ 70.186741][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.194557][ T4195] Cannot create hsr debugfs directory [ 70.272731][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.284010][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.290844][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.299730][ T4185] Cannot create hsr debugfs directory [ 70.422973][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 70.591385][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.598651][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.607733][ T4193] device bridge_slave_0 entered promiscuous mode [ 70.643624][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.650796][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.662334][ T4193] device bridge_slave_1 entered promiscuous mode [ 70.685042][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.696705][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.706931][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.722445][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.748114][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.764100][ T4193] team0: Port device team_slave_0 added [ 70.770709][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.781011][ T4193] team0: Port device team_slave_1 added [ 70.820343][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.827921][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.854449][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.866784][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.877368][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.887176][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.894597][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.920915][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.942227][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.960818][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.991516][ T4193] device hsr_slave_0 entered promiscuous mode [ 71.000165][ T4193] device hsr_slave_1 entered promiscuous mode [ 71.007687][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.015902][ T4193] Cannot create hsr debugfs directory [ 71.056360][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.094893][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.123749][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.136314][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.229828][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.242734][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.252928][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.282169][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.321930][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.337489][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.356039][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.365320][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.375774][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.412991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.422923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.447853][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.467928][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.483951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.496348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.506405][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.513792][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.524850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.560276][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.581358][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.598384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.607660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.616515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.626295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.635719][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.642823][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.650949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.667349][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.698081][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.709279][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.716197][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.717983][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.730830][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.740719][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.750216][ T1264] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.757486][ T1264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.767490][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.777229][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.787338][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.796410][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.805718][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.814595][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.823882][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.830977][ T1264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.838806][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.847851][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.860111][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.868461][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 71.875010][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.886821][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.900558][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.910636][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.919892][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.929139][ T1264] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.936262][ T1264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.948485][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.954397][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 71.963231][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.973558][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 71.979709][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 71.991756][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 72.006970][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.017727][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.026645][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.036099][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.046136][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.057541][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.066582][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.076153][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.085252][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.092474][ T1264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.100386][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.115645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.145651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.155854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.168152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.177621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.186873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.195915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.206588][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.221556][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.249122][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.267224][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.283581][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.317996][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.343177][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.360742][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.372857][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.388346][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.399283][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.408659][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.424625][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.443725][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.475401][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.482842][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.498466][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.521542][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.538071][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.555994][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.579280][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.606735][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.622311][ T536] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.629488][ T536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.665950][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.683197][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.694863][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.703257][ T536] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.710409][ T536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.721283][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.731503][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.741377][ T536] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.748812][ T536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.757662][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.766855][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.775588][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.784450][ T536] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.791539][ T536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.801153][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.813941][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.822780][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.848985][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.864686][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.872249][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.903345][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.915600][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.923142][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.938204][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.952970][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.963029][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.976214][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.011732][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.021504][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.032117][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.041186][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.050416][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.059532][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.071701][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.081225][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.091303][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.100535][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.109451][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.131563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.141905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.151706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.164514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.178783][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.190590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.200725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.243628][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.252770][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.269189][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.280972][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.300861][ T4186] device veth0_vlan entered promiscuous mode [ 73.320173][ T4195] device veth0_vlan entered promiscuous mode [ 73.328116][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.343701][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.351824][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.361843][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.370776][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.379930][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.389345][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.405353][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.412878][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.428241][ T4195] device veth1_vlan entered promiscuous mode [ 73.449557][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.469436][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.486042][ T4186] device veth1_vlan entered promiscuous mode [ 73.590220][ T4195] device veth0_macvtap entered promiscuous mode [ 73.608054][ T4186] device veth0_macvtap entered promiscuous mode [ 73.620943][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.645156][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.654270][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.662997][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.671971][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.681353][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.692872][ T4195] device veth1_macvtap entered promiscuous mode [ 73.700929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.711203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.723768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.750744][ T4186] device veth1_macvtap entered promiscuous mode [ 73.765604][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.783067][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.799873][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.808980][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.835847][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.845300][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.855134][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.865995][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.891080][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.905860][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.919760][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.940642][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.951692][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 73.958522][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.968095][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.977199][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.996417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.011236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.033357][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.050406][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 74.053858][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.057975][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 74.072719][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 74.079524][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 74.089103][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.117432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.127133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.155690][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.174218][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.182980][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.194855][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.204976][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.216478][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.224846][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.251918][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.261221][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.271082][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.279930][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.289924][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.298012][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.320934][ T4187] device veth0_vlan entered promiscuous mode [ 74.361677][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.377332][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.440048][ T4187] device veth1_vlan entered promiscuous mode [ 74.447771][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.456444][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.467145][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.476406][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.485186][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.493937][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.502030][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.528914][ T4185] device veth0_vlan entered promiscuous mode [ 74.556421][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.572407][ T4193] device veth0_vlan entered promiscuous mode [ 74.582375][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.596256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.607473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.616459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.629082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.637542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.649973][ T4185] device veth1_vlan entered promiscuous mode [ 74.675462][ T4193] device veth1_vlan entered promiscuous mode [ 74.726676][ T536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.739987][ T536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.777800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.786916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.795746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.804407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.813292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.833915][ T536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.841800][ T536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.852227][ T4185] device veth0_macvtap entered promiscuous mode [ 74.868307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.884800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.907452][ T4193] device veth0_macvtap entered promiscuous mode [ 74.948631][ T4185] device veth1_macvtap entered promiscuous mode [ 74.956892][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.965962][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.975859][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.986399][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.997373][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.006956][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.017993][ T4193] device veth1_macvtap entered promiscuous mode [ 75.031895][ T536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.047818][ T4187] device veth0_macvtap entered promiscuous mode [ 75.054450][ T536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.079549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.092901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.109099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.142975][ T4187] device veth1_macvtap entered promiscuous mode [ 75.176133][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.198796][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.211655][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.224563][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.242941][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.253157][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.270884][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.281373][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.292136][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.302790][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.315493][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.375991][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.102150][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.117025][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 76.130200][ T4300] Bluetooth: hci2: command 0x0419 tx timeout [ 76.136402][ T4300] Bluetooth: hci4: command 0x0419 tx timeout [ 76.142501][ T4300] Bluetooth: hci3: command 0x0419 tx timeout [ 76.144043][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.148857][ T4300] Bluetooth: hci1: command 0x0419 tx timeout [ 76.172834][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.185117][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.195536][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.208400][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.219860][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.231145][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.248657][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.258613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.275422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.289711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.299081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.315130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.329288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.339655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.358760][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.370460][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.380918][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.392097][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.404649][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.418569][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.437442][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.449059][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.465504][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.479575][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.495687][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.509429][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.520894][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.532376][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.543693][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.558240][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.569196][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.423427][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.433794][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.444804][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.460600][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.496377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.534331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.550848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.560320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.575704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.589552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.602890][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.612928][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.622940][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.639823][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.657839][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.667652][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.677156][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.686299][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.701054][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.711603][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.720948][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.730757][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.960442][ T4332] netlink: 'syz.3.12': attribute type 1 has an invalid length. [ 77.994454][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.002341][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.015438][ T4332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 78.057908][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.081200][ T4332] batman_adv: batadv0: Adding interface: bridge1 [ 78.088683][ T4332] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.118868][ T4332] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active [ 78.139745][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.165207][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.195259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.235744][ T536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.248230][ T536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.273256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.296119][ T536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.324035][ T536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.341845][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.357649][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.364749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.386814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.422864][ T536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.475047][ T536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.506071][ T4339] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.516975][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.902387][ T4353] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 79.045403][ T4361] 0x000000000000-0x000000010000 : "" [ 79.096145][ T4367] loop1: detected capacity change from 0 to 8 [ 79.099724][ T4361] ftl_cs: FTL header not found. [ 79.146093][ T4361] FAULT_INJECTION: forcing a failure. [ 79.146093][ T4361] name failslab, interval 1, probability 0, space 0, times 1 [ 79.163635][ T4361] CPU: 1 PID: 4361 Comm: syz.2.21 Not tainted syzkaller #0 [ 79.170926][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.181131][ T4361] Call Trace: [ 79.184450][ T4361] [ 79.187419][ T4361] dump_stack_lvl+0x188/0x250 [ 79.192164][ T4361] ? show_regs_print_info+0x20/0x20 [ 79.197410][ T4361] ? load_image+0x410/0x410 [ 79.202093][ T4361] ? __lock_acquire+0x7d40/0x7d40 [ 79.207187][ T4361] should_fail+0x383/0x4b0 [ 79.211668][ T4361] should_failslab+0x5/0x20 [ 79.216216][ T4361] slab_pre_alloc_hook+0x51/0xc0 [ 79.221208][ T4361] ? new_inode_pseudo+0x77/0x210 [ 79.226212][ T4361] kmem_cache_alloc+0x3d/0x280 [ 79.231034][ T4361] new_inode_pseudo+0x77/0x210 [ 79.235846][ T4361] new_inode+0x25/0x1d0 [ 79.240044][ T4361] ? start_creating+0x1f5/0x310 [ 79.244957][ T4361] debugfs_create_dir+0xec/0x4c0 [ 79.249955][ T4361] blk_register_queue+0x196/0x3a0 [ 79.255037][ T4361] device_add_disk+0x60f/0xde0 [ 79.259863][ T4361] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 79.265206][ T4361] mtdblock_add_mtd+0x186/0x240 [ 79.270115][ T4361] blktrans_notify_add+0x95/0xe0 [ 79.275098][ T4361] add_mtd_device+0xd40/0x1260 [ 79.279927][ T4361] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 79.285792][ T4361] ? mtd_cls_resume+0x130/0x130 [ 79.290708][ T4361] mtd_add_partition+0x25d/0x420 [ 79.295697][ T4361] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 79.300854][ T4361] ? shrink_ecclayout+0xab0/0xab0 [ 79.305939][ T4361] ? __might_fault+0xb3/0x110 [ 79.310656][ T4361] ? _copy_from_user+0x111/0x170 [ 79.315638][ T4361] mtdchar_ioctl+0x14cb/0x1d70 [ 79.320480][ T4361] ? mtdchar_close+0x180/0x180 [ 79.325298][ T4361] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.331321][ T4361] ? verify_lock_unused+0x140/0x140 [ 79.336555][ T4361] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 79.342255][ T4361] ? rcu_lock_release+0x5/0x20 [ 79.347065][ T4361] ? __mutex_trylock_common+0x15c/0x260 [ 79.352646][ T4361] ? rcu_lock_release+0x20/0x20 [ 79.357525][ T4361] ? __mutex_lock_common+0x435/0x2400 [ 79.362929][ T4361] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 79.368359][ T4361] ? mutex_lock_io_nested+0x60/0x60 [ 79.373626][ T4361] mtdchar_unlocked_ioctl+0xad/0xd0 [ 79.378848][ T4361] ? mtdchar_write+0x5a0/0x5a0 [ 79.383637][ T4361] __se_sys_ioctl+0xfa/0x170 [ 79.388264][ T4361] do_syscall_64+0x4c/0xa0 [ 79.392703][ T4361] ? clear_bhb_loop+0x30/0x80 [ 79.397412][ T4361] ? clear_bhb_loop+0x30/0x80 [ 79.402136][ T4361] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.408065][ T4361] RIP: 0033:0x7fae7866f559 [ 79.412505][ T4361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.432258][ T4361] RSP: 002b:00007fae768c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.440711][ T4361] RAX: ffffffffffffffda RBX: 00007fae788f6fa0 RCX: 00007fae7866f559 [ 79.448702][ T4361] RDX: 00002000000009c0 RSI: 0000000000001269 RDI: 0000000000000004 [ 79.456697][ T4361] RBP: 00007fae787068b0 R08: 0000000000000000 R09: 0000000000000000 [ 79.464694][ T4361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.472691][ T4361] R13: 00007fae788f7038 R14: 00007fae788f6fa0 R15: 00007ffff3be66e8 [ 79.480703][ T4361] [ 79.519188][ T4367] SQUASHFS error: zlib decompression failed, data probably corrupt [ 79.545956][ T4361] debugfs: out of free dentries, can not create directory 'mtdblock1' [ 79.555197][ T4367] SQUASHFS error: Failed to read block 0x9b: -5 [ 79.561673][ T4367] SQUASHFS error: Unable to read metadata cache entry [99] [ 79.579454][ T4367] SQUASHFS error: Unable to read inode 0x127 [ 79.622768][ T4378] FAULT_INJECTION: forcing a failure. [ 79.622768][ T4378] name fail_futex, interval 1, probability 0, space 0, times 1 [ 80.038006][ T4378] CPU: 1 PID: 4378 Comm: syz.0.27 Not tainted syzkaller #0 [ 80.045395][ T4378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.055491][ T4378] Call Trace: [ 80.058805][ T4378] [ 80.061768][ T4378] dump_stack_lvl+0x188/0x250 [ 80.066511][ T4378] ? show_regs_print_info+0x20/0x20 [ 80.071752][ T4378] ? load_image+0x410/0x410 [ 80.076293][ T4378] ? place_entity+0x4f0/0x4f0 [ 80.081019][ T4378] should_fail+0x383/0x4b0 [ 80.085474][ T4378] get_futex_key+0x1a1/0x12d0 [ 80.090191][ T4378] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.096216][ T4378] ? futex_wait_restart+0x250/0x250 [ 80.101464][ T4378] ? lock_chain_count+0x20/0x20 [ 80.106363][ T4378] futex_wait_setup+0x4b/0x520 [ 80.111167][ T4378] ? lockdep_hardirqs_on+0x94/0x140 [ 80.116402][ T4378] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 80.122344][ T4378] futex_wait+0x22f/0x680 [ 80.126751][ T4378] ? __lock_acquire+0x13b3/0x7d40 [ 80.131831][ T4378] ? do_futex+0x12b0/0x12b0 [ 80.136407][ T4378] ? verify_lock_unused+0x140/0x140 [ 80.141671][ T4378] ? verify_lock_unused+0x140/0x140 [ 80.146980][ T4378] do_futex+0xdc2/0x12b0 [ 80.151295][ T4378] ? futex_exit_release+0x1c0/0x1c0 [ 80.156545][ T4378] ? __context_tracking_exit+0x4c/0x80 [ 80.162048][ T4378] __se_sys_futex+0x389/0x420 [ 80.166779][ T4378] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.172803][ T4378] ? __x64_sys_futex+0xf0/0xf0 [ 80.177612][ T4378] ? __x64_sys_futex+0x1d/0xf0 [ 80.182427][ T4378] do_syscall_64+0x4c/0xa0 [ 80.186885][ T4378] ? clear_bhb_loop+0x30/0x80 [ 80.191604][ T4378] ? clear_bhb_loop+0x30/0x80 [ 80.196323][ T4378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.202272][ T4378] RIP: 0033:0x7fbd1d3c7559 [ 80.206721][ T4378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.226372][ T4378] RSP: 002b:00007fbd1b61f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 80.234842][ T4378] RAX: ffffffffffffffda RBX: 00007fbd1d64efa8 RCX: 00007fbd1d3c7559 [ 80.242867][ T4378] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbd1d64efa8 [ 80.250883][ T4378] RBP: 00007fbd1d64efa0 R08: 0000000000000000 R09: 0000000000000000 [ 80.258904][ T4378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.267007][ T4378] R13: 00007fbd1d64f038 R14: 00007ffd1117e390 R15: 00007ffd1117e478 [ 80.275065][ T4378] [ 80.629523][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.560165][ T4419] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.857318][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.198048][ T4444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.45'. [ 82.283816][ T1107] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 82.374310][ T1107] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 83.263917][ T1107] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 83.280455][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.300063][ T1107] usb 2-1: Product: syz [ 83.334073][ T1107] usb 2-1: Manufacturer: syz [ 83.338751][ T1107] usb 2-1: SerialNumber: syz [ 83.651603][ T4407] loop1: detected capacity change from 0 to 512 [ 83.721430][ T4485] device syzkaller0 entered promiscuous mode [ 83.746748][ T4407] EXT4-fs (loop1): Ignoring removed nobh option [ 83.781229][ T4407] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 83.843104][ T4407] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 83.858431][ T4407] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #13: comm syz.1.34: inode has both inline data and extents flags [ 83.873927][ T4407] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.34: couldn't read orphan inode 13 (err -117) [ 83.903767][ T4407] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 85.373741][ T1107] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 85.408858][ T1107] usb 2-1: unit 4 not found! [ 85.651187][ T1107] usb 2-1: USB disconnect, device number 2 [ 85.926771][ T4188] Bluetooth: hci3: command 0x2016 tx timeout [ 86.656128][ T4297] udevd[4297]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.951887][ T4563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 86.968235][ T4563] Zero length message leads to an empty skb [ 87.346257][ T4573] loop2: detected capacity change from 0 to 256 [ 87.404933][ T4573] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.474687][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.502095][ T4573] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.940587][ T7] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 87.961328][ T7] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 88.884062][ T7] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 88.905418][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.920350][ T7] usb 1-1: Product: syz [ 88.925250][ T7] usb 1-1: Manufacturer: syz [ 88.934398][ T7] usb 1-1: SerialNumber: syz [ 89.072743][ T4602] loop2: detected capacity change from 0 to 1024 [ 89.144146][ T4602] ======================================================= [ 89.144146][ T4602] WARNING: The mand mount option has been deprecated and [ 89.144146][ T4602] and is ignored by this kernel. Remove the mand [ 89.144146][ T4602] option from the mount to silence this warning. [ 89.144146][ T4602] ======================================================= [ 89.276347][ T4602] EXT4-fs (loop2): Ignoring removed oldalloc option [ 89.289758][ T4602] EXT4-fs (loop2): Ignoring removed orlov option [ 89.314779][ T4568] loop0: detected capacity change from 0 to 512 [ 89.376012][ T4568] EXT4-fs (loop0): Ignoring removed nobh option [ 89.478780][ T4602] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback. [ 89.494440][ T4568] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 89.502341][ T4568] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 89.554222][ T4602] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.565158][ T4568] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #13: comm syz.0.72: inode has both inline data and extents flags [ 89.599182][ T4568] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.72: couldn't read orphan inode 13 (err -117) [ 89.617480][ T4602] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.81: lblock 0 mapped to illegal pblock 0 (length 1) [ 89.663530][ T4568] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 89.734171][ T4602] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 89.763531][ T4602] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.763531][ T4602] [ 90.132272][ T4617] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 90.173920][ T7] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 90.193980][ T7] usb 1-1: unit 4 not found! [ 90.236139][ T7] usb 1-1: USB disconnect, device number 2 [ 90.546192][ T4639] ip_tables: iptables: counters copy to user failed while replacing table [ 91.303461][ T4299] Bluetooth: hci1: command 0x2016 tx timeout [ 91.417113][ T4648] binfmt_misc: register: failed to install interpreter file ./file0 [ 91.660268][ T4661] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 91.668573][ T4661] overlayfs: failed to set xattr on upper [ 91.674794][ T4661] overlayfs: ...falling back to index=off,metacopy=off. [ 91.860651][ T4663] loop0: detected capacity change from 0 to 1024 [ 91.903597][ T4663] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 93.304608][ T21] cfg80211: failed to load regulatory.db [ 93.515869][ T4682] TC_ACT_REPEAT abuse ? [ 93.702132][ T4694] FAULT_INJECTION: forcing a failure. [ 93.702132][ T4694] name failslab, interval 1, probability 0, space 0, times 0 [ 93.733803][ T4694] CPU: 0 PID: 4694 Comm: syz.2.110 Not tainted syzkaller #0 [ 93.741171][ T4694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.751383][ T4694] Call Trace: [ 93.754706][ T4694] [ 93.757668][ T4694] dump_stack_lvl+0x188/0x250 [ 93.762397][ T4694] ? show_regs_print_info+0x20/0x20 [ 93.767636][ T4694] ? load_image+0x410/0x410 [ 93.772194][ T4694] ? __lock_acquire+0x7d40/0x7d40 [ 93.777370][ T4694] should_fail+0x383/0x4b0 [ 93.781844][ T4694] should_failslab+0x5/0x20 [ 93.786392][ T4694] slab_pre_alloc_hook+0x51/0xc0 [ 93.791369][ T4694] ? alloc_vfsmnt+0x24/0x450 [ 93.796010][ T4694] kmem_cache_alloc+0x3d/0x280 [ 93.800861][ T4694] alloc_vfsmnt+0x24/0x450 [ 93.805325][ T4694] clone_mnt+0x6b/0xcd0 [ 93.809518][ T4694] ? is_subdir+0x4d/0x210 [ 93.813891][ T4694] copy_tree+0x3ce/0x7e0 [ 93.818192][ T4694] copy_mnt_ns+0x16b/0x980 [ 93.822649][ T4694] ? create_new_namespaces+0x34/0x700 [ 93.828094][ T4694] ? kmem_cache_alloc+0x189/0x280 [ 93.833196][ T4694] create_new_namespaces+0xd3/0x700 [ 93.838450][ T4694] ? bpf_lsm_capable+0x5/0x10 [ 93.843178][ T4694] ? security_capable+0x85/0xb0 [ 93.848104][ T4694] unshare_nsproxy_namespaces+0x116/0x160 [ 93.853880][ T4694] ksys_unshare+0x4f6/0x8e0 [ 93.858520][ T4694] ? __lock_acquire+0x7d40/0x7d40 [ 93.863594][ T4694] ? sighand_ctor+0x40/0x40 [ 93.868157][ T4694] ? lock_chain_count+0x20/0x20 [ 93.873093][ T4694] ? syscall_enter_from_user_mode+0x21/0x70 [ 93.879080][ T4694] __x64_sys_unshare+0x34/0x40 [ 93.883891][ T4694] do_syscall_64+0x4c/0xa0 [ 93.888358][ T4694] ? clear_bhb_loop+0x30/0x80 [ 93.893080][ T4694] ? clear_bhb_loop+0x30/0x80 [ 93.897806][ T4694] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.903750][ T4694] RIP: 0033:0x7fae7866f559 [ 93.908213][ T4694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.927857][ T4694] RSP: 002b:00007fae768c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 93.936328][ T4694] RAX: ffffffffffffffda RBX: 00007fae788f6fa0 RCX: 00007fae7866f559 [ 93.944351][ T4694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 93.952396][ T4694] RBP: 00007fae787068b0 R08: 0000000000000000 R09: 0000000000000000 [ 93.960433][ T4694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.968445][ T4694] R13: 00007fae788f7038 R14: 00007fae788f6fa0 R15: 00007ffff3be66e8 [ 93.976488][ T4694] [ 94.307359][ T4721] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 95.312867][ T4729] loop2: detected capacity change from 0 to 512 [ 95.371502][ T4729] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 95.399829][ T4729] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.416963][ T4729] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.123: Block bitmap for bg 0 marked uninitialized [ 95.451538][ T4729] EXT4-fs (loop2): Remounting filesystem read-only [ 95.496970][ T4729] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 95.541379][ T4741] WARNING! power/level is deprecated; use power/control instead [ 95.560601][ T4729] EXT4-fs (loop2): Remounting filesystem read-only [ 95.579903][ T4729] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.123: Block bitmap for bg 0 marked uninitialized [ 95.609427][ T4740] 0x000000000000-0x000000010000 : "" [ 95.653851][ T4729] EXT4-fs (loop2): Remounting filesystem read-only [ 95.670662][ T4740] ftl_cs: FTL header not found. [ 95.689670][ T4729] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 95.714511][ T4740] FAULT_INJECTION: forcing a failure. [ 95.714511][ T4740] name failslab, interval 1, probability 0, space 0, times 0 [ 95.749614][ T4729] EXT4-fs (loop2): Remounting filesystem read-only [ 95.770901][ T4729] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.123: Block bitmap for bg 0 marked uninitialized [ 95.803596][ T4740] CPU: 1 PID: 4740 Comm: syz.1.124 Not tainted syzkaller #0 [ 95.810977][ T4740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.821085][ T4740] Call Trace: [ 95.824408][ T4740] [ 95.827378][ T4740] dump_stack_lvl+0x188/0x250 [ 95.832220][ T4740] ? show_regs_print_info+0x20/0x20 [ 95.837481][ T4740] ? load_image+0x410/0x410 [ 95.842055][ T4740] ? __might_sleep+0xf0/0xf0 [ 95.846738][ T4740] ? __lock_acquire+0x7d40/0x7d40 [ 95.851844][ T4740] should_fail+0x383/0x4b0 [ 95.856356][ T4740] should_failslab+0x5/0x20 [ 95.860910][ T4740] slab_pre_alloc_hook+0x51/0xc0 [ 95.865909][ T4740] ? __kernfs_new_node+0xe3/0x6b0 [ 95.871014][ T4740] kmem_cache_alloc+0x3d/0x280 [ 95.875848][ T4740] __kernfs_new_node+0xe3/0x6b0 [ 95.880756][ T4740] ? __lock_acquire+0x7d40/0x7d40 [ 95.885836][ T4740] ? kernfs_new_node+0x250/0x250 [ 95.890845][ T4740] ? kernfs_activate+0x1eb/0x210 [ 95.895839][ T4740] kernfs_new_node+0x148/0x250 [ 95.900684][ T4740] __kernfs_create_file+0x47/0x2e0 [ 95.905863][ T4740] sysfs_add_file_mode_ns+0x2d2/0x390 [ 95.911410][ T4740] internal_create_group+0x492/0xd00 [ 95.916769][ T4740] ? kobject_init+0x1c0/0x1c0 [ 95.921517][ T4740] ? sysfs_create_group+0x20/0x20 [ 95.926623][ T4740] blk_register_queue+0xdd/0x3a0 [ 95.931635][ T4740] device_add_disk+0x60f/0xde0 [ 95.936648][ T4740] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 95.942091][ T4740] mtdblock_add_mtd+0x186/0x240 [ 95.947011][ T4740] blktrans_notify_add+0x95/0xe0 [ 95.952011][ T4740] add_mtd_device+0xd40/0x1260 [ 95.956853][ T4740] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 95.962728][ T4740] ? mtd_cls_resume+0x130/0x130 [ 95.967685][ T4740] mtd_add_partition+0x25d/0x420 [ 95.972691][ T4740] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 95.977868][ T4740] ? shrink_ecclayout+0xab0/0xab0 [ 95.982964][ T4740] ? __might_fault+0xb3/0x110 [ 95.987708][ T4740] ? _copy_from_user+0x111/0x170 [ 95.992703][ T4740] mtdchar_ioctl+0x14cb/0x1d70 [ 95.997522][ T4740] ? mtdchar_close+0x180/0x180 [ 96.002349][ T4740] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.008404][ T4740] ? verify_lock_unused+0x140/0x140 [ 96.013686][ T4740] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 96.019390][ T4740] ? rcu_lock_release+0x5/0x20 [ 96.024352][ T4740] ? __mutex_trylock_common+0x15c/0x260 [ 96.029947][ T4740] ? rcu_lock_release+0x20/0x20 [ 96.034850][ T4740] ? __mutex_lock_common+0x435/0x2400 [ 96.040295][ T4740] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 96.045758][ T4740] ? mutex_lock_io_nested+0x60/0x60 [ 96.051086][ T4740] mtdchar_unlocked_ioctl+0xad/0xd0 [ 96.056322][ T4740] ? mtdchar_write+0x5a0/0x5a0 [ 96.061117][ T4740] __se_sys_ioctl+0xfa/0x170 [ 96.065737][ T4740] do_syscall_64+0x4c/0xa0 [ 96.070182][ T4740] ? clear_bhb_loop+0x30/0x80 [ 96.074889][ T4740] ? clear_bhb_loop+0x30/0x80 [ 96.079705][ T4740] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.085819][ T4740] RIP: 0033:0x7f9d7717b559 [ 96.090279][ T4740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.109937][ T4740] RSP: 002b:00007f9d753d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.118395][ T4740] RAX: ffffffffffffffda RBX: 00007f9d77402fa0 RCX: 00007f9d7717b559 [ 96.126410][ T4740] RDX: 00002000000009c0 RSI: 0000000000001269 RDI: 0000000000000007 [ 96.134415][ T4740] RBP: 00007f9d772128b0 R08: 0000000000000000 R09: 0000000000000000 [ 96.142430][ T4740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.150425][ T4740] R13: 00007f9d77403038 R14: 00007f9d77402fa0 R15: 00007ffd1d5b3868 [ 96.158443][ T4740] [ 96.169606][ T4740] ------------[ cut here ]------------ [ 96.175466][ T4740] WARNING: CPU: 1 PID: 4740 at block/genhd.c:554 device_add_disk+0x8d6/0xde0 [ 96.194675][ T4729] EXT4-fs (loop2): Remounting filesystem read-only [ 96.210095][ T4740] Modules linked in: [ 96.221626][ T4729] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 96.241752][ T4740] CPU: 1 PID: 4740 Comm: syz.1.124 Not tainted syzkaller #0 [ 96.279868][ T4729] EXT4-fs (loop2): Remounting filesystem read-only [ 96.313451][ T4740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.325221][ T4729] EXT4-fs (loop2): 1 orphan inode deleted [ 96.335929][ T4740] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 96.342612][ T4740] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 00 f4 70 8d e8 b1 3d 37 00 eb 05 e8 ea 04 a6 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 96.342734][ T4729] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,. Quota mode: none. [ 96.380019][ T4740] RSP: 0018:ffffc90003c6f470 EFLAGS: 00010287 [ 96.409447][ T4740] RAX: ffffffff83d31e76 RBX: ffff8880211d1800 RCX: 0000000000080000 [ 96.418558][ T4740] RDX: ffffc9000be81000 RSI: 000000000006820b RDI: 000000000006820c [ 96.433196][ T4740] RBP: 000000000000001f R08: ffff888079bb01db R09: 1ffff1100f37603b [ 96.448989][ T4740] R10: dffffc0000000000 R11: ffffed100f37603c R12: ffff88814089a380 [ 96.457497][ T4740] R13: ffff8880211d1950 R14: dffffc0000000000 R15: ffff88814089a380 [ 96.472335][ T4740] FS: 00007f9d753d36c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 96.481794][ T4740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.495442][ T4740] CR2: 000000110c38011c CR3: 0000000026a32000 CR4: 00000000003506f0 [ 96.508113][ T4740] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.523130][ T4740] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.531599][ T4740] Call Trace: [ 96.535336][ T4740] [ 96.538494][ T4740] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 96.545410][ T4740] mtdblock_add_mtd+0x186/0x240 [ 96.550497][ T4740] blktrans_notify_add+0x95/0xe0 [ 96.555983][ T4740] add_mtd_device+0xd40/0x1260 [ 96.560873][ T4740] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 96.567274][ T4740] ? mtd_cls_resume+0x130/0x130 [ 96.572374][ T4740] mtd_add_partition+0x25d/0x420 [ 96.577867][ T4740] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 96.583151][ T4740] ? shrink_ecclayout+0xab0/0xab0 [ 96.589387][ T4740] ? __might_fault+0xb3/0x110 [ 96.594349][ T4740] ? _copy_from_user+0x111/0x170 [ 96.599507][ T4740] mtdchar_ioctl+0x14cb/0x1d70 [ 96.604593][ T4740] ? mtdchar_close+0x180/0x180 [ 96.609506][ T4740] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.619148][ T4740] ? verify_lock_unused+0x140/0x140 [ 96.624629][ T4740] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 96.630358][ T4740] ? rcu_lock_release+0x5/0x20 [ 96.635276][ T4740] ? __mutex_trylock_common+0x15c/0x260 [ 96.640907][ T4740] ? rcu_lock_release+0x20/0x20 [ 96.647535][ T4740] ? __mutex_lock_common+0x435/0x2400 [ 96.652989][ T4740] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 96.658506][ T4740] ? mutex_lock_io_nested+0x60/0x60 [ 96.664377][ T4740] mtdchar_unlocked_ioctl+0xad/0xd0 [ 96.670795][ T4740] ? mtdchar_write+0x5a0/0x5a0 [ 96.675847][ T4740] __se_sys_ioctl+0xfa/0x170 [ 96.680497][ T4740] do_syscall_64+0x4c/0xa0 [ 96.685388][ T4740] ? clear_bhb_loop+0x30/0x80 [ 96.697918][ T4740] ? clear_bhb_loop+0x30/0x80 [ 96.703901][ T4740] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.709980][ T4740] RIP: 0033:0x7f9d7717b559 [ 96.714599][ T4740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.737960][ T4740] RSP: 002b:00007f9d753d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.746637][ T4740] RAX: ffffffffffffffda RBX: 00007f9d77402fa0 RCX: 00007f9d7717b559 [ 96.767489][ T4740] RDX: 00002000000009c0 RSI: 0000000000001269 RDI: 0000000000000007 [ 96.775790][ T4740] RBP: 00007f9d772128b0 R08: 0000000000000000 R09: 0000000000000000 [ 96.783922][ T4740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.792089][ T4740] R13: 00007f9d77403038 R14: 00007f9d77402fa0 R15: 00007ffd1d5b3868 [ 96.800589][ T4740] [ 96.803740][ T4740] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.811051][ T4740] CPU: 0 PID: 4740 Comm: syz.1.124 Not tainted syzkaller #0 [ 96.818375][ T4740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.828469][ T4740] Call Trace: [ 96.831782][ T4740] [ 96.834738][ T4740] dump_stack_lvl+0x188/0x250 [ 96.839456][ T4740] ? show_regs_print_info+0x20/0x20 [ 96.844698][ T4740] ? load_image+0x410/0x410 [ 96.849266][ T4740] panic+0x2f8/0x850 [ 96.853321][ T4740] ? bpf_jit_dump+0xd0/0xd0 [ 96.857902][ T4740] ? device_add_disk+0x8d6/0xde0 [ 96.862889][ T4740] __warn+0x248/0x2b0 [ 96.866909][ T4740] ? device_add_disk+0x8d6/0xde0 [ 96.871887][ T4740] report_bug+0x1b9/0x2e0 [ 96.876440][ T4740] handle_bug+0x3a/0x70 [ 96.880634][ T4740] exc_invalid_op+0x16/0x40 [ 96.885180][ T4740] asm_exc_invalid_op+0x16/0x20 [ 96.890067][ T4740] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 96.895634][ T4740] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 00 f4 70 8d e8 b1 3d 37 00 eb 05 e8 ea 04 a6 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 96.915451][ T4740] RSP: 0018:ffffc90003c6f470 EFLAGS: 00010287 [ 96.921561][ T4740] RAX: ffffffff83d31e76 RBX: ffff8880211d1800 RCX: 0000000000080000 [ 96.929566][ T4740] RDX: ffffc9000be81000 RSI: 000000000006820b RDI: 000000000006820c [ 96.937581][ T4740] RBP: 000000000000001f R08: ffff888079bb01db R09: 1ffff1100f37603b [ 96.945894][ T4740] R10: dffffc0000000000 R11: ffffed100f37603c R12: ffff88814089a380 [ 96.953905][ T4740] R13: ffff8880211d1950 R14: dffffc0000000000 R15: ffff88814089a380 [ 96.962024][ T4740] ? device_add_disk+0x8d6/0xde0 [ 96.967024][ T4740] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 96.972360][ T4740] mtdblock_add_mtd+0x186/0x240 [ 96.977241][ T4740] blktrans_notify_add+0x95/0xe0 [ 96.982211][ T4740] add_mtd_device+0xd40/0x1260 [ 96.987008][ T4740] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 96.992949][ T4740] ? mtd_cls_resume+0x130/0x130 [ 96.997946][ T4740] mtd_add_partition+0x25d/0x420 [ 97.002922][ T4740] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 97.008063][ T4740] ? shrink_ecclayout+0xab0/0xab0 [ 97.013168][ T4740] ? __might_fault+0xb3/0x110 [ 97.017962][ T4740] ? _copy_from_user+0x111/0x170 [ 97.022971][ T4740] mtdchar_ioctl+0x14cb/0x1d70 [ 97.027784][ T4740] ? mtdchar_close+0x180/0x180 [ 97.032586][ T4740] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.038591][ T4740] ? verify_lock_unused+0x140/0x140 [ 97.043857][ T4740] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 97.049549][ T4740] ? rcu_lock_release+0x5/0x20 [ 97.054482][ T4740] ? __mutex_trylock_common+0x15c/0x260 [ 97.060180][ T4740] ? rcu_lock_release+0x20/0x20 [ 97.065116][ T4740] ? __mutex_lock_common+0x435/0x2400 [ 97.070651][ T4740] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 97.076063][ T4740] ? mutex_lock_io_nested+0x60/0x60 [ 97.081302][ T4740] mtdchar_unlocked_ioctl+0xad/0xd0 [ 97.086519][ T4740] ? mtdchar_write+0x5a0/0x5a0 [ 97.091319][ T4740] __se_sys_ioctl+0xfa/0x170 [ 97.095945][ T4740] do_syscall_64+0x4c/0xa0 [ 97.100395][ T4740] ? clear_bhb_loop+0x30/0x80 [ 97.105105][ T4740] ? clear_bhb_loop+0x30/0x80 [ 97.109839][ T4740] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.115771][ T4740] RIP: 0033:0x7f9d7717b559 [ 97.120221][ T4740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.139862][ T4740] RSP: 002b:00007f9d753d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.148335][ T4740] RAX: ffffffffffffffda RBX: 00007f9d77402fa0 RCX: 00007f9d7717b559 [ 97.156349][ T4740] RDX: 00002000000009c0 RSI: 0000000000001269 RDI: 0000000000000007 [ 97.164362][ T4740] RBP: 00007f9d772128b0 R08: 0000000000000000 R09: 0000000000000000 [ 97.172366][ T4740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.180535][ T4740] R13: 00007f9d77403038 R14: 00007f9d77402fa0 R15: 00007ffd1d5b3868 [ 97.188572][ T4740] [ 97.191978][ T4740] Kernel Offset: disabled [ 97.196487][ T4740] Rebooting in 86400 seconds..