last executing test programs: 8.970114967s ago: executing program 2 (id=1354): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) 8.83649606s ago: executing program 2 (id=1357): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = getpid() prlimit64(r5, 0xf, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) 5.540002932s ago: executing program 2 (id=1383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4e) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40804) 4.16782207s ago: executing program 4 (id=1397): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000c00)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0x1000) mount$cgroup(0x0, &(0x7f0000000140)='./file7\x00', 0x0, 0x89020, 0x0) 3.719993705s ago: executing program 0 (id=1398): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x10000002]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmmsg$inet6(r5, &(0x7f0000000b00), 0x1, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@local, 0x23, r7}) 3.346695343s ago: executing program 4 (id=1401): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigsuspend(&(0x7f00000000c0)={[0x4]}, 0x8) 3.331417804s ago: executing program 0 (id=1402): creat(0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r1 = gettid() ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xaf4, 0x0) 3.330134694s ago: executing program 3 (id=1403): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00), 0x0, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18004a58de4c6347c59000000000000071123200000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2.609955467s ago: executing program 1 (id=1404): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000c00)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0x1000) mount$cgroup(0x0, &(0x7f0000000140)='./file7\x00', 0x0, 0x89020, 0x0) 2.562470342s ago: executing program 3 (id=1405): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) 2.506458238s ago: executing program 1 (id=1406): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = getpid() prlimit64(r5, 0xf, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) 2.505601748s ago: executing program 2 (id=1407): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) 2.505301078s ago: executing program 3 (id=1408): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_virt_wifi\x00', @local}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x670) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x890c, &(0x7f0000000000)) 2.387999899s ago: executing program 1 (id=1409): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.387556499s ago: executing program 2 (id=1410): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) readlink(&(0x7f0000000040)='./bus\x00', &(0x7f0000000200)=""/207, 0xcf) 2.260041702s ago: executing program 2 (id=1411): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.09001074s ago: executing program 3 (id=1412): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) listen(r5, 0x3) 1.032890466s ago: executing program 0 (id=1413): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x10000002]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmmsg$inet6(r5, &(0x7f0000000b00), 0x1, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@local, 0x23, r7}) 1.013092507s ago: executing program 4 (id=1414): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) 1.012481098s ago: executing program 1 (id=1415): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x54, 0x1) 901.430779ms ago: executing program 4 (id=1416): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00), 0x0, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18004a58de4c6347c59000000000000071123200000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 881.632121ms ago: executing program 1 (id=1417): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000c00)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0x1000) mount$cgroup(0x0, &(0x7f0000000140)='./file7\x00', 0x0, 0x89020, 0x0) 881.225131ms ago: executing program 3 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4e) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40804) 865.144783ms ago: executing program 0 (id=1419): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) 780.299971ms ago: executing program 0 (id=1420): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = getpid() prlimit64(r5, 0xf, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) 480.873101ms ago: executing program 4 (id=1421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) 53.707524ms ago: executing program 1 (id=1422): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000064000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 53.079834ms ago: executing program 4 (id=1423): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_virt_wifi\x00', @local}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x670) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x890c, &(0x7f0000000000)) 8.130629ms ago: executing program 0 (id=1424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 0s ago: executing program 3 (id=1425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 50.665743][ T4172] cgroup: Unknown subsys name 'net' [ 50.801189][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.049122][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.777536][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 55.811651][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 55.871120][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 55.914099][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 55.955788][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 55.990176][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.997433][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.005842][ T4194] device bridge_slave_0 entered promiscuous mode [ 56.030289][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.037581][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.045188][ T4194] device bridge_slave_1 entered promiscuous mode [ 56.072248][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.079707][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.087944][ T4183] device bridge_slave_0 entered promiscuous mode [ 56.115254][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.122923][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.130842][ T4183] device bridge_slave_1 entered promiscuous mode [ 56.148058][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.155143][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.162878][ T4184] device bridge_slave_0 entered promiscuous mode [ 56.178021][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.185093][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.193559][ T4190] device bridge_slave_0 entered promiscuous mode [ 56.208514][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.220500][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.228511][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.236372][ T4184] device bridge_slave_1 entered promiscuous mode [ 56.243713][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.250993][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.258700][ T4190] device bridge_slave_1 entered promiscuous mode [ 56.275472][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.306942][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.342907][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.361009][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.373275][ T4194] team0: Port device team_slave_0 added [ 56.380992][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.390256][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.397523][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.405146][ T4195] device bridge_slave_0 entered promiscuous mode [ 56.421798][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.431932][ T4194] team0: Port device team_slave_1 added [ 56.446478][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.455677][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.463055][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.470718][ T4195] device bridge_slave_1 entered promiscuous mode [ 56.523299][ T4183] team0: Port device team_slave_0 added [ 56.531098][ T4183] team0: Port device team_slave_1 added [ 56.543019][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.550339][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.576497][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.590536][ T4184] team0: Port device team_slave_0 added [ 56.611185][ T4190] team0: Port device team_slave_0 added [ 56.617715][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.624672][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.651150][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.664126][ T4184] team0: Port device team_slave_1 added [ 56.672277][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.683919][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.703027][ T4190] team0: Port device team_slave_1 added [ 56.728239][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.735201][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.761617][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.810564][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.817620][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.844194][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.859696][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.866829][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.893067][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.909391][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.916493][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.942481][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.953868][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.960969][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.986976][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.000724][ T4195] team0: Port device team_slave_0 added [ 57.028334][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.035291][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.061459][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.073551][ T4195] team0: Port device team_slave_1 added [ 57.097680][ T4194] device hsr_slave_0 entered promiscuous mode [ 57.104360][ T4194] device hsr_slave_1 entered promiscuous mode [ 57.129764][ T4183] device hsr_slave_0 entered promiscuous mode [ 57.136563][ T4183] device hsr_slave_1 entered promiscuous mode [ 57.143198][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.151257][ T4183] Cannot create hsr debugfs directory [ 57.174132][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.181280][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.207238][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.220377][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.227405][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.253611][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.291864][ T4190] device hsr_slave_0 entered promiscuous mode [ 57.298919][ T4190] device hsr_slave_1 entered promiscuous mode [ 57.305342][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.313113][ T4190] Cannot create hsr debugfs directory [ 57.364974][ T4184] device hsr_slave_0 entered promiscuous mode [ 57.372539][ T4184] device hsr_slave_1 entered promiscuous mode [ 57.379842][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.387538][ T4184] Cannot create hsr debugfs directory [ 57.435277][ T4195] device hsr_slave_0 entered promiscuous mode [ 57.442482][ T4195] device hsr_slave_1 entered promiscuous mode [ 57.450390][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.458748][ T4195] Cannot create hsr debugfs directory [ 57.458803][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 57.471031][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 57.477422][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 57.536190][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 57.543168][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 57.719115][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.730473][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.740188][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.753007][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.783388][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.792537][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.809179][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.826353][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.898535][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.928013][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.940122][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.957983][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.964784][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.976810][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.985844][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.011008][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.022162][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.040384][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.050319][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.060590][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.089493][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.099212][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.108762][ T1430] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.116040][ T1430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.124598][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.140099][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.148982][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.159110][ T1430] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.166294][ T1430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.173875][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.196586][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.205412][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.217777][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.229833][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.239954][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.254533][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.262563][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.271080][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.280357][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.299209][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.310029][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.331023][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.340843][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.350063][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.360127][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.368770][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.377456][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.385109][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.402979][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.411787][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.422385][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.431112][ T1430] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.438200][ T1430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.468195][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.477193][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.485726][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.494887][ T1430] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.501992][ T1430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.532766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.573936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.599750][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.626737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.635803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.645802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.655420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.664132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.673435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.682266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.702465][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.714706][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.729189][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.743624][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.762291][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.770893][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.779064][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.795728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.804956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.824134][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.834847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.849307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.859772][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.866897][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.880304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.891426][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.908196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.922154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.931338][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.938468][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.952123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.961128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.969174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.978521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.986368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.000571][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.015827][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.032963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.044537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.053528][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.060642][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.069319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.078289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.108865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.118553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.127373][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.134554][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.144693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.154813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.163647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.172152][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.179313][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.187359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.195963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.204502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.213628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.223333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.233199][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.240297][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.248520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.256427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.263883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.272285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.284809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.294053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.310625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.319948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.332571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.342936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.354978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.363630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.384991][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.392926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.402547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.412356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.423483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.433302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.454019][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.469668][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.493927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.504504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.513489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.523896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.533322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.536167][ T4246] Bluetooth: hci0: command 0x041b tx timeout [ 59.541564][ T4251] Bluetooth: hci1: command 0x041b tx timeout [ 59.558068][ T4246] Bluetooth: hci3: command 0x041b tx timeout [ 59.564504][ T4194] device veth0_vlan entered promiscuous mode [ 59.588250][ T4194] device veth1_vlan entered promiscuous mode [ 59.600243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.610237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.616553][ T4238] Bluetooth: hci2: command 0x041b tx timeout [ 59.618954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.630035][ T4238] Bluetooth: hci4: command 0x041b tx timeout [ 59.632534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.651856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.661239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.675273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.684333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.694631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.704876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.713388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.722503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.731429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.739408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.751532][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.770321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.779789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.809590][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.826369][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.835082][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.843944][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.878939][ T4194] device veth0_macvtap entered promiscuous mode [ 59.888817][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.898735][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.908258][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.921356][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.951778][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.978726][ T4194] device veth1_macvtap entered promiscuous mode [ 59.987541][ T4183] device veth0_vlan entered promiscuous mode [ 59.994369][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.024100][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.059959][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.068262][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.081087][ T4183] device veth1_vlan entered promiscuous mode [ 60.114066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.124522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.132446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.143873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.152174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.167102][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.180253][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.192195][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.201847][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.210253][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.218942][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.229622][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.243556][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.257438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.270062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.299361][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.308844][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.318001][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.326795][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.346435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.355482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.364586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.373650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.387317][ T4183] device veth0_macvtap entered promiscuous mode [ 60.399023][ T4183] device veth1_macvtap entered promiscuous mode [ 60.419481][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.427965][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.436642][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.445282][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.455719][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.465165][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.497974][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.507535][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.526791][ T4190] device veth0_vlan entered promiscuous mode [ 60.551139][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.559867][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.572942][ T4184] device veth0_vlan entered promiscuous mode [ 60.592372][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.602821][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.611590][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.619848][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.631909][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.642811][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.654741][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.666413][ T4190] device veth1_vlan entered promiscuous mode [ 60.679826][ T4184] device veth1_vlan entered promiscuous mode [ 60.695463][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.705174][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.713650][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.721896][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.730580][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.740070][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.749315][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.760395][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.771313][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.783088][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.798876][ T4195] device veth0_vlan entered promiscuous mode [ 60.809309][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.818340][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.826555][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.834321][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.843519][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.858064][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.867346][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.876648][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.885348][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.904403][ T4190] device veth0_macvtap entered promiscuous mode [ 60.926434][ T596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.934648][ T596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.947973][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.958046][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.966749][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.974440][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.986549][ T4190] device veth1_macvtap entered promiscuous mode [ 61.012167][ T4195] device veth1_vlan entered promiscuous mode [ 61.029977][ T4184] device veth0_macvtap entered promiscuous mode [ 61.041052][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.053093][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.065603][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.077294][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.088879][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.103188][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.113630][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.123157][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.131903][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.141588][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.154824][ T4184] device veth1_macvtap entered promiscuous mode [ 61.180125][ T1430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.190303][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.204159][ T1430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.207697][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.225025][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.235843][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.247481][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.262169][ T4195] device veth0_macvtap entered promiscuous mode [ 61.286731][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.294862][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.304127][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.314249][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.323243][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.332254][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.341224][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.352367][ T4195] device veth1_macvtap entered promiscuous mode [ 61.372864][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.391663][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.402283][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.418290][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.432187][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.443261][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.454550][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.465083][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.474114][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.482846][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.491792][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.514210][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.515221][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.533671][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.544692][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.554459][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.583031][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.597943][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.608755][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.617551][ T4245] Bluetooth: hci3: command 0x040f tx timeout [ 61.621794][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.636175][ T4245] Bluetooth: hci0: command 0x040f tx timeout [ 61.648608][ T4245] Bluetooth: hci1: command 0x040f tx timeout [ 61.659217][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.697386][ T4245] Bluetooth: hci4: command 0x040f tx timeout [ 61.703502][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.714410][ T4245] Bluetooth: hci2: command 0x040f tx timeout [ 61.720826][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.735095][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.745028][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.757900][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.769945][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.781509][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.791447][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.802148][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.812253][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.829329][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.843425][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.923173][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.931995][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.942379][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.951147][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.963005][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.084487][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.190331][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.229208][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.532752][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.543772][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.554056][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.565276][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.575569][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.586578][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.596831][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.607724][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.619976][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.718263][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.735319][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.749020][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.753518][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.770800][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.779707][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.789728][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.798764][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.816743][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.820730][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.824752][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.840482][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.880580][ T1430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.897230][ T1430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.948067][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.103118][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.113087][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.113093][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.113139][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.114407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.147977][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.150960][ T4313] overlayfs: missing 'lowerdir' [ 63.160261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.163075][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.183840][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.215764][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.240876][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.254859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.725508][ T4245] Bluetooth: hci1: command 0x0419 tx timeout [ 63.732173][ T4245] Bluetooth: hci0: command 0x0419 tx timeout [ 63.738335][ T4245] Bluetooth: hci3: command 0x0419 tx timeout [ 63.776841][ T4245] Bluetooth: hci2: command 0x0419 tx timeout [ 63.976073][ T4245] Bluetooth: hci4: command 0x0419 tx timeout [ 64.715895][ C0] sched: RT throttling activated [ 64.726772][ T4336] loop1: detected capacity change from 0 to 2048 [ 65.345863][ T4350] loop0: detected capacity change from 0 to 512 [ 65.492123][ T4350] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 65.580560][ T4336] Alternate GPT is invalid, using primary GPT. [ 65.625152][ T4336] loop1: p2 p3 p7 [ 65.633752][ T4350] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.777886][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 65.799943][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 65.868588][ T4363] udevd[4363]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 65.891334][ T26] audit: type=1326 audit(1763197237.711:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4368 comm="syz.2.29" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4d4c7f6c9 code=0x0 [ 66.054818][ T26] audit: type=1326 audit(1763197237.871:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b992eb6c9 code=0x7ffc0000 [ 66.131144][ T26] audit: type=1326 audit(1763197237.871:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f1b992eb6c9 code=0x7ffc0000 [ 66.256392][ T26] audit: type=1326 audit(1763197237.871:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b992eb6c9 code=0x7ffc0000 [ 66.325798][ T26] audit: type=1326 audit(1763197237.951:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b992eb6c9 code=0x7ffc0000 [ 66.692554][ T4409] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.135841][ T4439] ======================================================= [ 69.135841][ T4439] WARNING: The mand mount option has been deprecated and [ 69.135841][ T4439] and is ignored by this kernel. Remove the mand [ 69.135841][ T4439] option from the mount to silence this warning. [ 69.135841][ T4439] ======================================================= [ 70.011061][ T26] audit: type=1326 audit(1763197241.831:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.0.64" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf05bd16c9 code=0x0 [ 71.060641][ T4483] loop2: detected capacity change from 0 to 128 [ 71.226083][ T4487] loop0: detected capacity change from 0 to 2048 [ 71.301803][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.308467][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.927290][ T4487] Alternate GPT is invalid, using primary GPT. [ 71.991327][ T4487] loop0: p2 p3 p7 [ 73.053547][ T4512] loop3: detected capacity change from 0 to 512 [ 73.171932][ T4367] udevd[4367]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 73.172138][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 73.189099][ T4363] udevd[4363]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 73.283701][ T4512] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 73.316115][ T4512] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.366850][ T4539] tipc: Started in network mode [ 74.394156][ T4537] loop1: detected capacity change from 0 to 2048 [ 74.396044][ T4539] tipc: Node identity 26b05bcb8b7e, cluster identity 4711 [ 74.466761][ T4539] tipc: Enabled bearer , priority 0 [ 74.473608][ T4540] device syzkaller0 entered promiscuous mode [ 74.544280][ T4537] Alternate GPT is invalid, using primary GPT. [ 74.577578][ T4537] loop1: p2 p3 p7 [ 74.635816][ T4539] tipc: Resetting bearer [ 74.705352][ T4538] tipc: Resetting bearer [ 74.823077][ T4538] tipc: Disabling bearer [ 74.961498][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 74.981934][ T4364] udevd[4364]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 74.999873][ T4367] udevd[4367]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 75.121834][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 75.151811][ T4364] udevd[4364]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 76.208147][ T26] audit: type=1326 audit(1763197248.031:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.1.101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4201f26c9 code=0x0 [ 76.419477][ T1110] cfg80211: failed to load regulatory.db [ 78.455990][ T4583] loop1: detected capacity change from 0 to 40427 [ 78.547342][ T4583] F2FS-fs (loop1): build fault injection attr: rate: 684, type: 0x1ffff [ 78.580868][ T4583] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 78.657182][ T4583] F2FS-fs (loop1): invalid crc value [ 78.748757][ T4583] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.923221][ T4583] F2FS-fs (loop1): Start checkpoint disabled! [ 78.990660][ T4583] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 79.272046][ T4618] overlayfs: missing 'lowerdir' [ 79.398990][ T4624] F2FS-fs (loop1) : inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x2e7/0x3b0 [ 80.009515][ T144] attempt to access beyond end of device [ 80.009515][ T144] loop1: rw=2049, want=40976, limit=40427 [ 80.099377][ T4644] mmap: syz.0.133 (4644): VmData 47124480 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 80.800541][ T4658] process 'syz.3.137' launched './file0' with NULL argv: empty string added [ 83.249646][ T4715] loop3: detected capacity change from 0 to 512 [ 83.504445][ T4715] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 83.562592][ T4715] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.323470][ T4729] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 85.534854][ T4751] tipc: Enabling of bearer rejected, failed to enable media [ 86.907130][ T4782] loop2: detected capacity change from 0 to 512 [ 87.075126][ T4782] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 87.097929][ T4782] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.473014][ T4811] tipc: Enabling of bearer rejected, failed to enable media [ 88.597462][ T4814] loop2: detected capacity change from 0 to 2048 [ 88.675646][ T4185] Alternate GPT is invalid, using primary GPT. [ 88.692197][ T4185] loop2: p2 p3 p7 [ 88.745645][ T4814] Alternate GPT is invalid, using primary GPT. [ 88.777085][ T4814] loop2: p2 p3 p7 [ 88.950705][ T4364] udevd[4364]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 88.963723][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 88.991831][ T4367] udevd[4367]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 89.047051][ T4364] udevd[4364]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 89.047168][ T4367] udevd[4367]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 89.080786][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 90.179068][ T4851] loop0: detected capacity change from 0 to 2048 [ 90.242042][ T4853] tipc: Enabling of bearer rejected, failed to enable media [ 90.284509][ T4851] Alternate GPT is invalid, using primary GPT. [ 90.318499][ T4851] loop0: p2 p3 p7 [ 90.719690][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 90.748557][ T4364] udevd[4364]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 90.763672][ T4367] udevd[4367]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 93.442896][ T4884] loop1: detected capacity change from 0 to 128 [ 93.665532][ T4884] EXT4-fs (loop1): Ignoring removed nobh option [ 94.186715][ T4884] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 94.346257][ T4884] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.930301][ T4943] loop2: detected capacity change from 0 to 1024 [ 99.136236][ T4943] EXT4-fs (loop2): Test dummy encryption mode enabled [ 99.147964][ T4943] EXT4-fs (loop2): inline encryption not supported [ 99.196851][ T4943] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 99.573618][ T4963] xt_TPROXY: Can be used only with -p tcp or -p udp [ 101.194218][ T4988] netlink: 'syz.1.241': attribute type 6 has an invalid length. [ 102.620732][ T26] audit: type=1326 audit(1763197274.441:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4201f26c9 code=0x7ffc0000 [ 102.721663][ T26] audit: type=1326 audit(1763197274.441:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4201f26c9 code=0x7ffc0000 [ 102.865942][ T26] audit: type=1326 audit(1763197274.441:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4201f26c9 code=0x7ffc0000 [ 102.983589][ T26] audit: type=1326 audit(1763197274.441:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4201f26c9 code=0x7ffc0000 [ 103.114515][ T26] audit: type=1326 audit(1763197274.441:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4201f26c9 code=0x7ffc0000 [ 103.214667][ T26] audit: type=1326 audit(1763197274.441:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4201f26c9 code=0x7ffc0000 [ 103.329405][ T26] audit: type=1326 audit(1763197274.461:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4201f26c9 code=0x7ffc0000 [ 103.411477][ T26] audit: type=1326 audit(1763197274.471:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4201f26c9 code=0x7ffc0000 [ 103.520663][ T26] audit: type=1326 audit(1763197274.471:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4201f26c9 code=0x7ffc0000 [ 103.661163][ T26] audit: type=1326 audit(1763197274.471:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4201f26c9 code=0x7ffc0000 [ 105.695750][ T5097] loop4: detected capacity change from 0 to 2048 [ 105.847865][ T5097] Alternate GPT is invalid, using primary GPT. [ 105.876280][ T5097] loop4: p2 p3 p7 [ 106.111323][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 106.124230][ T4364] udevd[4364]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 106.140734][ T4367] udevd[4367]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 106.289033][ T4364] udevd[4364]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 106.294047][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 106.302407][ T4367] udevd[4367]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 109.644554][ T5154] loop3: detected capacity change from 0 to 128 [ 109.690477][ T5154] EXT4-fs (loop3): Ignoring removed nobh option [ 110.417776][ T5154] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 110.442080][ T5154] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.702148][ T5160] device syzkaller0 entered promiscuous mode [ 111.686970][ T5169] loop1: detected capacity change from 0 to 512 [ 112.169987][ T5169] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 112.449674][ T5169] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.512766][ T5188] netlink: 84 bytes leftover after parsing attributes in process `syz.2.338'. [ 113.584887][ T5188] netlink: 68 bytes leftover after parsing attributes in process `syz.2.338'. [ 123.984860][ T5381] loop4: detected capacity change from 0 to 1024 [ 124.089750][ T5381] EXT4-fs (loop4): Test dummy encryption mode enabled [ 124.154617][ T5381] EXT4-fs (loop4): inline encryption not supported [ 124.205026][ T5381] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 124.657594][ T5391] xt_TPROXY: Can be used only with -p tcp or -p udp [ 127.472146][ T5418] loop4: detected capacity change from 0 to 1024 [ 127.588496][ T5418] EXT4-fs (loop4): Test dummy encryption mode enabled [ 127.595595][ T5418] EXT4-fs (loop4): inline encryption not supported [ 127.717073][ T5418] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 129.812440][ T5447] overlayfs: missing 'lowerdir' [ 132.423008][ T5486] overlayfs: missing 'lowerdir' [ 132.738876][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.745349][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.168042][ T5502] loop1: detected capacity change from 0 to 1024 [ 133.248216][ T5502] EXT4-fs (loop1): Test dummy encryption mode enabled [ 133.265394][ T5502] EXT4-fs (loop1): inline encryption not supported [ 133.368635][ T5502] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 133.691219][ T5516] overlayfs: missing 'lowerdir' [ 134.311243][ T5524] xt_TPROXY: Can be used only with -p tcp or -p udp [ 137.597692][ T5542] overlayfs: missing 'lowerdir' [ 138.895493][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 139.730924][ T5559] loop1: detected capacity change from 0 to 512 [ 139.829755][ T5559] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 139.875511][ T5559] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.089216][ T5631] device syzkaller0 entered promiscuous mode [ 144.123996][ T5632] loop3: detected capacity change from 0 to 1024 [ 144.294961][ T5632] EXT4-fs (loop3): Test dummy encryption mode enabled [ 144.320197][ T5632] EXT4-fs (loop3): inline encryption not supported [ 144.382401][ T5632] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 144.476398][ T5642] loop1: detected capacity change from 0 to 512 [ 144.632343][ T5642] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 144.671861][ T5642] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.857508][ T5669] xt_TPROXY: Can be used only with -p tcp or -p udp [ 146.913728][ T5679] loop0: detected capacity change from 0 to 128 [ 146.931548][ T5679] EXT4-fs (loop0): Ignoring removed nobh option [ 147.039375][ T5679] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 147.125186][ T5679] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.189896][ T5726] loop4: detected capacity change from 0 to 128 [ 150.393628][ T5726] EXT4-fs (loop4): Ignoring removed nobh option [ 150.802331][ T5726] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 151.107971][ T5726] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.233905][ T5776] device syzkaller0 entered promiscuous mode [ 153.427324][ T5785] loop3: detected capacity change from 0 to 512 [ 153.620696][ T5785] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 153.657244][ T5785] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.141044][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 154.141059][ T26] audit: type=1326 audit(1763197325.961:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b992eb6c9 code=0x7ffc0000 [ 154.230705][ T26] audit: type=1326 audit(1763197325.991:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b992eb6c9 code=0x7ffc0000 [ 156.497651][ T5838] loop2: detected capacity change from 0 to 512 [ 157.325262][ T5838] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 157.345678][ T5838] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.452293][ T5858] overlayfs: missing 'lowerdir' [ 157.485438][ T5865] loop3: detected capacity change from 0 to 128 [ 157.589075][ T5865] EXT4-fs (loop3): Ignoring removed nobh option [ 157.639614][ T5865] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 157.692539][ T5865] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.845598][ T5898] overlayfs: missing 'lowerdir' [ 159.293113][ T5915] loop4: detected capacity change from 0 to 128 [ 159.382408][ T5915] EXT4-fs (loop4): Ignoring removed nobh option [ 159.424090][ T5915] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 159.472939][ T5915] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.539757][ T5940] loop1: detected capacity change from 0 to 1024 [ 160.685510][ T5940] EXT4-fs (loop1): Test dummy encryption mode enabled [ 160.711961][ T5940] EXT4-fs (loop1): inline encryption not supported [ 160.790889][ T5953] loop0: detected capacity change from 0 to 512 [ 160.873565][ T5940] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 162.249405][ T5953] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 162.251565][ T5953] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.935847][ T5979] loop3: detected capacity change from 0 to 128 [ 163.010783][ T5979] EXT4-fs (loop3): Ignoring removed nobh option [ 163.793224][ T5979] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 163.836205][ T5979] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.592631][ T5995] loop1: detected capacity change from 0 to 1024 [ 164.690507][ T5995] EXT4-fs (loop1): Test dummy encryption mode enabled [ 164.747402][ T5995] EXT4-fs (loop1): inline encryption not supported [ 165.407662][ T5995] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 165.745402][ T6019] xt_TPROXY: Can be used only with -p tcp or -p udp [ 166.292834][ T26] audit: type=1326 audit(1763197338.091:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679f1ea6c9 code=0x7ffc0000 [ 166.407902][ T26] audit: type=1326 audit(1763197338.091:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679f1ea6c9 code=0x7ffc0000 [ 166.432349][ T26] audit: type=1326 audit(1763197338.091:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f679f1ea6c9 code=0x7ffc0000 [ 167.163818][ T26] audit: type=1326 audit(1763197338.091:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679f1ea6c9 code=0x7ffc0000 [ 167.310746][ T6051] syz.4.662[6051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.310843][ T6051] syz.4.662[6051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.332719][ T26] audit: type=1326 audit(1763197338.091:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679f1ea6c9 code=0x7ffc0000 [ 167.557980][ T26] audit: type=1326 audit(1763197338.101:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f679f1ea6c9 code=0x7ffc0000 [ 167.648135][ T26] audit: type=1326 audit(1763197338.101:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679f1ea6c9 code=0x7ffc0000 [ 167.671204][ T26] audit: type=1326 audit(1763197338.101:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679f1ea6c9 code=0x7ffc0000 [ 167.717275][ T26] audit: type=1326 audit(1763197338.141:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f679f1ea6c9 code=0x7ffc0000 [ 167.766629][ T26] audit: type=1326 audit(1763197338.141:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679f1ea6c9 code=0x7ffc0000 [ 167.984364][ T6078] loop4: detected capacity change from 0 to 512 [ 168.104539][ T6081] netlink: 27 bytes leftover after parsing attributes in process `syz.2.675'. [ 168.801394][ T6078] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 168.859178][ T6078] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.706304][ T6118] loop4: detected capacity change from 0 to 128 [ 169.748943][ T6118] EXT4-fs (loop4): Ignoring removed nobh option [ 169.791829][ T6118] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 169.876796][ T6118] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.428286][ T6138] loop0: detected capacity change from 0 to 512 [ 170.790794][ T6138] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 170.867776][ T6138] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.804665][ T6180] Zero length message leads to an empty skb [ 173.484659][ T6200] device syzkaller0 entered promiscuous mode [ 173.896617][ T6214] device bridge0 entered promiscuous mode [ 173.916185][ T6214] device vlan2 entered promiscuous mode [ 174.027929][ T6217] loop2: detected capacity change from 0 to 128 [ 174.095821][ T6217] EXT4-fs (loop2): Ignoring removed nobh option [ 174.209297][ T6217] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 174.275294][ T6217] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.802374][ T6243] device syzkaller0 entered promiscuous mode [ 179.151439][ T6285] device syzkaller0 entered promiscuous mode [ 179.310545][ T6289] loop1: detected capacity change from 0 to 512 [ 179.421872][ T6289] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 179.510844][ T6289] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.896677][ T4174] Bluetooth: hci0: command 0x0406 tx timeout [ 180.905496][ T4174] Bluetooth: hci1: command 0x0406 tx timeout [ 181.452614][ T5221] Bluetooth: hci3: command 0x0406 tx timeout [ 181.458734][ T5221] Bluetooth: hci2: command 0x0406 tx timeout [ 181.464776][ T5221] Bluetooth: hci4: command 0x0406 tx timeout [ 183.837256][ T6364] xt_CT: No such helper "pptp" [ 185.154849][ T6387] tipc: Enabling of bearer rejected, failed to enable media [ 185.196729][ T6387] device syzkaller0 entered promiscuous mode [ 190.942045][ T6476] loop1: detected capacity change from 0 to 1024 [ 191.195040][ T6476] EXT4-fs (loop1): Test dummy encryption mode enabled [ 191.228998][ T6476] EXT4-fs (loop1): inline encryption not supported [ 191.537564][ T6476] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 192.001671][ T6476] xt_TPROXY: Can be used only with -p tcp or -p udp [ 193.373094][ T6519] loop2: detected capacity change from 0 to 1024 [ 193.380901][ T6524] netlink: 84 bytes leftover after parsing attributes in process `syz.0.857'. [ 193.439736][ T6524] netlink: 72 bytes leftover after parsing attributes in process `syz.0.857'. [ 193.499603][ T6519] EXT4-fs (loop2): Test dummy encryption mode enabled [ 193.523468][ T6519] EXT4-fs (loop2): inline encryption not supported [ 193.620168][ T6519] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 194.180988][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.187399][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.546437][ T6519] xt_TPROXY: Can be used only with -p tcp or -p udp [ 194.876356][ T6542] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 196.586026][ T6576] tipc: Enabling of bearer rejected, failed to enable media [ 196.699017][ T6577] device syzkaller0 entered promiscuous mode [ 198.107705][ T6612] loop1: detected capacity change from 0 to 512 [ 198.127279][ T6615] tipc: Enabling of bearer rejected, failed to enable media [ 198.182767][ T6617] device syzkaller0 entered promiscuous mode [ 200.748533][ T6647] loop4: detected capacity change from 0 to 128 [ 200.793027][ T6647] EXT4-fs (loop4): Ignoring removed nobh option [ 202.021506][ T6647] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 202.068337][ T6647] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.591765][ T6702] loop4: detected capacity change from 0 to 128 [ 204.632048][ T6702] EXT4-fs (loop4): Ignoring removed nobh option [ 204.799099][ T6707] loop3: detected capacity change from 0 to 2048 [ 205.055142][ T6702] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 205.261624][ T6702] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.995169][ T6707] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 206.089167][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 206.089182][ T26] audit: type=1800 audit(1763197377.911:45): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.923" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 207.076360][ T6743] tipc: Enabling of bearer rejected, failed to enable media [ 207.153284][ T6747] device syzkaller0 entered promiscuous mode [ 209.803831][ T6775] loop2: detected capacity change from 0 to 128 [ 209.990928][ T6775] EXT4-fs (loop2): Ignoring removed nobh option [ 210.941918][ T6775] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 211.023553][ T6775] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.757066][ T6828] loop2: detected capacity change from 0 to 128 [ 212.778215][ T6828] EXT4-fs (loop2): Ignoring removed nobh option [ 212.823224][ T6828] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 212.849726][ T6828] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.335327][ T6839] loop4: detected capacity change from 0 to 1024 [ 213.435591][ T6839] EXT4-fs (loop4): Test dummy encryption mode enabled [ 213.470012][ T6839] EXT4-fs (loop4): inline encryption not supported [ 213.519754][ T6839] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 213.773952][ T6852] xt_TPROXY: Can be used only with -p tcp or -p udp [ 215.338278][ T6863] loop0: detected capacity change from 0 to 128 [ 215.451095][ T6863] EXT4-fs (loop0): Ignoring removed nobh option [ 215.521787][ T6863] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 215.682643][ T6863] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.046418][ T6900] loop2: detected capacity change from 0 to 1024 [ 218.125387][ T6900] EXT4-fs (loop2): Test dummy encryption mode enabled [ 218.135289][ T6900] EXT4-fs (loop2): inline encryption not supported [ 218.208433][ T6909] loop0: detected capacity change from 0 to 128 [ 218.230462][ T6900] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 218.381367][ T6909] EXT4-fs (loop0): Ignoring removed nobh option [ 218.412302][ T6909] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 218.623731][ T6909] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.672641][ T6915] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.031099][ T6918] capability: warning: `syz.2.1000' uses deprecated v2 capabilities in a way that may be insecure [ 219.207132][ T6921] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 221.798445][ T6934] loop4: detected capacity change from 0 to 16 [ 221.852289][ T6934] erofs: (device loop4): mounted with root inode @ nid 36. [ 223.057517][ T6948] loop0: detected capacity change from 0 to 1024 [ 223.128106][ T6948] EXT4-fs (loop0): Test dummy encryption mode enabled [ 223.175153][ T6948] EXT4-fs (loop0): inline encryption not supported [ 223.368889][ T6948] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 223.446884][ T6963] loop4: detected capacity change from 0 to 512 [ 223.670447][ T6963] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.1016: ea_inode with extended attributes [ 223.689190][ T6969] xt_TPROXY: Can be used only with -p tcp or -p udp [ 223.709940][ T6963] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1016: error while reading EA inode 11 err=-117 [ 223.750881][ T6963] EXT4-fs (loop4): 1 orphan inode deleted [ 223.758465][ T6972] binder: BINDER_SET_CONTEXT_MGR already set [ 223.770323][ T6963] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 223.885948][ T6972] binder: 6971:6972 ioctl 4018620d 200000000040 returned -16 [ 224.824674][ T6982] device syzkaller0 entered promiscuous mode [ 225.802535][ T6996] loop3: detected capacity change from 0 to 128 [ 225.912807][ T6996] EXT4-fs (loop3): Ignoring removed nobh option [ 225.974105][ T6996] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 226.058959][ T7006] binder: BINDER_SET_CONTEXT_MGR already set [ 226.065382][ T6996] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.111621][ T7006] binder: 7005:7006 ioctl 4018620d 200000000040 returned -16 [ 228.648876][ T7052] loop1: detected capacity change from 0 to 128 [ 228.860443][ T7052] EXT4-fs (loop1): Ignoring removed nobh option [ 229.385624][ T7052] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 229.560531][ T7052] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.946959][ T7137] overlayfs: failed to resolve './bus': -2 [ 235.328013][ T7154] loop0: detected capacity change from 0 to 1024 [ 235.892621][ T7154] EXT4-fs (loop0): Test dummy encryption mode enabled [ 236.100537][ T7154] EXT4-fs (loop0): inline encryption not supported [ 236.191313][ T7154] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 236.432413][ T7171] loop1: detected capacity change from 0 to 128 [ 236.499535][ T7171] EXT4-fs (loop1): Ignoring removed nobh option [ 236.537997][ T7174] xt_TPROXY: Can be used only with -p tcp or -p udp [ 236.735246][ T7171] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 236.818804][ T7171] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 239.395791][ T7216] loop2: detected capacity change from 0 to 512 [ 239.560633][ T7216] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 239.623288][ T7216] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.730184][ T7226] loop3: detected capacity change from 0 to 1024 [ 239.922073][ T7226] EXT4-fs (loop3): Test dummy encryption mode enabled [ 239.978732][ T7226] EXT4-fs (loop3): inline encryption not supported [ 240.473351][ T7226] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 241.101947][ T7238] xt_TPROXY: Can be used only with -p tcp or -p udp [ 247.100069][ T7300] device syzkaller0 entered promiscuous mode [ 249.096552][ T7325] device syzkaller0 entered promiscuous mode [ 251.412520][ T7352] device syzkaller0 entered promiscuous mode [ 253.105453][ T7379] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 253.117805][ T7379] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 253.286613][ T7386] device syzkaller0 entered promiscuous mode [ 253.383365][ T7390] loop0: detected capacity change from 0 to 512 [ 253.513203][ T7390] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 253.536131][ T7390] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.037800][ T7413] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 254.064738][ T7413] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 255.316183][ T7426] device syzkaller0 entered promiscuous mode [ 255.618481][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.624839][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.086011][ T7466] device syzkaller0 entered promiscuous mode [ 260.075081][ T7488] overlayfs: missing 'lowerdir' [ 262.813578][ T7523] overlayfs: missing 'lowerdir' [ 265.750741][ T7554] overlayfs: missing 'lowerdir' [ 267.238695][ T7583] overlayfs: missing 'lowerdir' [ 268.111382][ T7588] loop0: detected capacity change from 0 to 128 [ 268.204993][ T7588] EXT4-fs (loop0): Ignoring removed nobh option [ 268.316836][ T7588] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 268.436252][ T7588] ext4 filesystem being mounted at /296/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 268.458627][ T7594] loop2: detected capacity change from 0 to 1024 [ 268.515267][ T7594] EXT4-fs (loop2): Test dummy encryption mode enabled [ 268.565985][ T7594] EXT4-fs (loop2): inline encryption not supported [ 268.649061][ T7600] overlayfs: missing 'lowerdir' [ 268.679295][ T7594] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 269.129303][ T7614] xt_TPROXY: Can be used only with -p tcp or -p udp [ 275.010780][ T7660] loop2: detected capacity change from 0 to 128 [ 275.401961][ T7660] EXT4-fs (loop2): Ignoring removed nobh option [ 275.545742][ T7660] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 275.577818][ T7660] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 275.804248][ T7672] overlayfs: missing 'lowerdir' [ 279.854278][ T7721] overlayfs: missing 'workdir' [ 282.645142][ T7766] loop4: detected capacity change from 0 to 128 [ 282.733229][ T7766] EXT4-fs (loop4): Ignoring removed nobh option [ 282.845835][ T7766] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 282.910645][ T7766] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.833671][ T7833] overlayfs: missing 'lowerdir' [ 287.413101][ T7851] loop3: detected capacity change from 0 to 128 [ 287.520721][ T7851] EXT4-fs (loop3): Ignoring removed nobh option [ 287.601137][ T7851] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 287.665054][ T7851] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 288.335109][ T7865] overlayfs: missing 'lowerdir' [ 290.184373][ T7898] overlayfs: missing 'workdir' [ 290.919203][ T7907] overlayfs: missing 'workdir' [ 291.542572][ T7926] overlayfs: missing 'workdir' [ 291.785615][ T7934] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1395'. [ 293.598547][ T7967] overlayfs: missing 'workdir' [ 296.217005][ C1] [ 296.219368][ C1] ====================================================== [ 296.226572][ C1] WARNING: possible circular locking dependency detected [ 296.233770][ C1] syzkaller #0 Not tainted [ 296.238170][ C1] ------------------------------------------------------ [ 296.245164][ C1] syz.4.1423/8013 is trying to acquire lock: [ 296.251113][ C1] ffff8880b9127eb8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x186/0x7c0 [ 296.259705][ C1] [ 296.259705][ C1] but task is already holding lock: [ 296.267047][ C1] ffff88801f06d238 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 296.276058][ C1] [ 296.276058][ C1] which lock already depends on the new lock. [ 296.276058][ C1] [ 296.286439][ C1] [ 296.286439][ C1] the existing dependency chain (in reverse order) is: [ 296.295421][ C1] [ 296.295421][ C1] -> #2 (&trie->lock){-.-.}-{2:2}: [ 296.302695][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 296.308402][ C1] trie_delete_elem+0x90/0x710 [ 296.313746][ C1] 0xffffffffa0018b02 [ 296.318217][ C1] bpf_trace_run2+0x15b/0x2d0 [ 296.323386][ C1] enqueue_hrtimer+0x314/0x370 [ 296.328641][ C1] hrtimer_start_range_ns+0xa7e/0xc20 [ 296.334504][ C1] futex_wait_queue_me+0x18c/0x440 [ 296.340193][ C1] futex_wait+0x202/0x5c0 [ 296.345017][ C1] do_futex+0xd1c/0x1240 [ 296.349755][ C1] __se_sys_futex+0x3a3/0x430 [ 296.354924][ C1] do_syscall_64+0x4c/0xa0 [ 296.359847][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.366233][ C1] [ 296.366233][ C1] -> #1 (hrtimer_bases.lock){-.-.}-{2:2}: [ 296.374102][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 296.379793][ C1] hrtimer_start_range_ns+0xff/0xc20 [ 296.385573][ C1] kvfree_call_rcu+0x60d/0x7c0 [ 296.390828][ C1] rtnl_register_internal+0x489/0x590 [ 296.396698][ C1] rtnl_register+0x2e/0x70 [ 296.401693][ C1] ip_rt_init+0x2e0/0x3a0 [ 296.406515][ C1] ip_init+0xa/0x20 [ 296.410811][ C1] inet_init+0x28b/0x3a0 [ 296.415546][ C1] do_one_initcall+0x1ee/0x680 [ 296.420804][ C1] do_initcall_level+0x137/0x1f0 [ 296.426331][ C1] do_initcalls+0x4b/0x90 [ 296.431170][ C1] kernel_init_freeable+0x3ce/0x560 [ 296.436868][ C1] kernel_init+0x19/0x1b0 [ 296.441811][ C1] ret_from_fork+0x1f/0x30 [ 296.446758][ C1] [ 296.446758][ C1] -> #0 (krc.lock){..-.}-{2:2}: [ 296.453857][ C1] __lock_acquire+0x2c33/0x7c60 [ 296.459207][ C1] lock_acquire+0x197/0x3f0 [ 296.464203][ C1] _raw_spin_lock+0x2a/0x40 [ 296.469197][ C1] kvfree_call_rcu+0x186/0x7c0 [ 296.474455][ C1] trie_delete_elem+0x58c/0x710 [ 296.479798][ C1] bpf_prog_8c8ab8634bca3061+0x3a/0x940 [ 296.485841][ C1] bpf_trace_run3+0x17e/0x320 [ 296.491184][ C1] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 296.497311][ C1] kmem_cache_free+0x1e7/0x210 [ 296.502664][ C1] packet_rcv+0x16a/0x1210 [ 296.507573][ C1] dev_queue_xmit_nit+0xa69/0xb00 [ 296.513116][ C1] dev_hard_start_xmit+0x13e/0x7e0 [ 296.518726][ C1] sch_direct_xmit+0x24e/0x4a0 [ 296.524007][ C1] __dev_queue_xmit+0x170e/0x2ed0 [ 296.529523][ C1] ip_finish_output2+0xc69/0x1080 [ 296.535040][ C1] __ip_queue_xmit+0x11c3/0x1c00 [ 296.540560][ C1] __tcp_transmit_skb+0x1ced/0x31c0 [ 296.546253][ C1] tcp_delack_timer_handler+0x32e/0x730 [ 296.552293][ C1] tcp_delack_timer+0x188/0x2e0 [ 296.557637][ C1] call_timer_fn+0x16c/0x530 [ 296.562721][ C1] __run_timers+0x525/0x7c0 [ 296.567733][ C1] run_timer_softirq+0x63/0xf0 [ 296.572994][ C1] handle_softirqs+0x328/0x820 [ 296.578260][ C1] __irq_exit_rcu+0x12f/0x220 [ 296.583429][ C1] irq_exit_rcu+0x5/0x20 [ 296.588161][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 296.594285][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 296.600759][ C1] __kernel_text_address+0x3/0x100 [ 296.606365][ C1] unwind_get_return_address+0x49/0x80 [ 296.612404][ C1] arch_stack_walk+0xf2/0x140 [ 296.617576][ C1] stack_trace_save+0x98/0xe0 [ 296.622830][ C1] save_stack+0xf3/0x1e0 [ 296.627566][ C1] __set_page_owner+0x41/0x2d0 [ 296.632910][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 296.638984][ C1] __alloc_pages+0x1e1/0x470 [ 296.644068][ C1] alloc_pages_vma+0x393/0x7c0 [ 296.649323][ C1] shmem_alloc_and_acct_page+0x427/0xb70 [ 296.655533][ C1] shmem_getpage_gfp+0x14f4/0x2d40 [ 296.661136][ C1] shmem_fault+0x1a9/0x520 [ 296.666044][ C1] __do_fault+0x141/0x330 [ 296.670865][ C1] handle_mm_fault+0x2946/0x43b0 [ 296.676293][ C1] __get_user_pages+0x93e/0x11c0 [ 296.681819][ C1] populate_vma_page_range+0x213/0x290 [ 296.688204][ C1] __mm_populate+0x26f/0x3a0 [ 296.693283][ C1] vm_mmap_pgoff+0x203/0x2b0 [ 296.698363][ C1] ksys_mmap_pgoff+0x140/0x780 [ 296.703615][ C1] do_syscall_64+0x4c/0xa0 [ 296.708522][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.714906][ C1] [ 296.714906][ C1] other info that might help us debug this: [ 296.714906][ C1] [ 296.725107][ C1] Chain exists of: [ 296.725107][ C1] krc.lock --> hrtimer_bases.lock --> &trie->lock [ 296.725107][ C1] [ 296.737407][ C1] Possible unsafe locking scenario: [ 296.737407][ C1] [ 296.744826][ C1] CPU0 CPU1 [ 296.750165][ C1] ---- ---- [ 296.755499][ C1] lock(&trie->lock); [ 296.759538][ C1] lock(hrtimer_bases.lock); [ 296.766715][ C1] lock(&trie->lock); [ 296.773272][ C1] lock(krc.lock); [ 296.777052][ C1] [ 296.777052][ C1] *** DEADLOCK *** [ 296.777052][ C1] [ 296.785165][ C1] 11 locks held by syz.4.1423/8013: [ 296.790333][ C1] #0: ffff88802c1a7828 (&mm->mmap_lock){++++}-{3:3}, at: __mm_populate+0x15e/0x3a0 [ 296.799689][ C1] #1: ffffc90000dd0be0 ((&icsk->icsk_delack_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbb/0x530 [ 296.809997][ C1] #2: ffff888029f118a0 (slock-AF_INET){+.-.}-{2:2}, at: tcp_delack_timer+0x2b/0x2e0 [ 296.819440][ C1] #3: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 296.828794][ C1] #4: ffffffff8c11c7c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 296.838334][ C1] #5: ffffffff8c11c7c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 296.847858][ C1] #6: ffff888023371258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x10b9/0x2ed0 [ 296.860253][ C1] #7: ffff888022618218 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x156/0x4a0 [ 296.869694][ C1] #8: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 296.879137][ C1] #9: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 296.888403][ C1] #10: ffff88801f06d238 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 296.897757][ C1] [ 296.897757][ C1] stack backtrace: [ 296.903639][ C1] CPU: 1 PID: 8013 Comm: syz.4.1423 Not tainted syzkaller #0 [ 296.910977][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 296.921013][ C1] Call Trace: [ 296.924269][ C1] [ 296.927088][ C1] dump_stack_lvl+0x168/0x230 [ 296.931743][ C1] ? load_image+0x3b0/0x3b0 [ 296.936219][ C1] ? show_regs_print_info+0x20/0x20 [ 296.941391][ C1] ? print_circular_bug+0x12b/0x1a0 [ 296.946559][ C1] check_noncircular+0x274/0x310 [ 296.951469][ C1] ? add_chain_block+0x940/0x940 [ 296.956389][ C1] ? lockdep_lock+0xdc/0x1e0 [ 296.960955][ C1] ? mark_lock+0x94/0x320 [ 296.965254][ C1] __lock_acquire+0x2c33/0x7c60 [ 296.970081][ C1] ? verify_lock_unused+0x140/0x140 [ 296.975253][ C1] lock_acquire+0x197/0x3f0 [ 296.979724][ C1] ? kvfree_call_rcu+0x186/0x7c0 [ 296.984631][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 296.989971][ C1] ? read_lock_is_recursive+0x10/0x10 [ 296.995314][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 297.001177][ C1] ? _raw_spin_unlock+0x40/0x40 [ 297.005996][ C1] ? debug_object_active_state+0x6b/0x340 [ 297.011778][ C1] _raw_spin_lock+0x2a/0x40 [ 297.016258][ C1] ? kvfree_call_rcu+0x186/0x7c0 [ 297.021165][ C1] kvfree_call_rcu+0x186/0x7c0 [ 297.025917][ C1] ? call_rcu+0x930/0x930 [ 297.030216][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 297.035621][ C1] ? _raw_spin_lock+0x40/0x40 [ 297.040269][ C1] ? longest_prefix_match+0x4c6/0x660 [ 297.045618][ C1] trie_delete_elem+0x58c/0x710 [ 297.050626][ C1] bpf_prog_8c8ab8634bca3061+0x3a/0x940 [ 297.056144][ C1] bpf_trace_run3+0x17e/0x320 [ 297.060798][ C1] ? bpf_trace_run2+0x2d0/0x2d0 [ 297.065630][ C1] ? packet_rcv+0x16a/0x1210 [ 297.070310][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 297.075495][ C1] ? packet_rcv+0x16a/0x1210 [ 297.080221][ C1] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 297.085849][ C1] ? packet_rcv+0x16a/0x1210 [ 297.090428][ C1] kmem_cache_free+0x1e7/0x210 [ 297.095169][ C1] ? skb_release_head_state+0x1e7/0x240 [ 297.100690][ C1] packet_rcv+0x16a/0x1210 [ 297.105081][ C1] ? packet_sock_destruct+0x160/0x160 [ 297.110425][ C1] dev_queue_xmit_nit+0xa69/0xb00 [ 297.115423][ C1] dev_hard_start_xmit+0x13e/0x7e0 [ 297.120596][ C1] sch_direct_xmit+0x24e/0x4a0 [ 297.125370][ C1] ? mrp_pdu_append_vecattr_event+0x1590/0x1590 [ 297.131582][ C1] __dev_queue_xmit+0x170e/0x2ed0 [ 297.136581][ C1] ? dev_queue_xmit+0x20/0x20 [ 297.141229][ C1] ? mark_lock+0x94/0x320 [ 297.145532][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 297.151570][ C1] ? lock_chain_count+0x20/0x20 [ 297.156392][ C1] ? rcu_lock_acquire+0x30/0x30 [ 297.161238][ C1] ? ip_finish_output2+0x8e6/0x1080 [ 297.166412][ C1] ip_finish_output2+0xc69/0x1080 [ 297.171413][ C1] ? ip_fragment+0x210/0x210 [ 297.175982][ C1] ? ip_skb_dst_mtu+0x584/0x9b0 [ 297.180815][ C1] ? ip_finish_output+0x3e8/0x4b0 [ 297.185824][ C1] __ip_queue_xmit+0x11c3/0x1c00 [ 297.190735][ C1] __tcp_transmit_skb+0x1ced/0x31c0 [ 297.195953][ C1] ? __tcp_send_ack+0x5d0/0x5d0 [ 297.200776][ C1] ? __tcp_send_ack+0x172/0x5d0 [ 297.205601][ C1] tcp_delack_timer_handler+0x32e/0x730 [ 297.211121][ C1] tcp_delack_timer+0x188/0x2e0 [ 297.215944][ C1] ? tcp_write_timer+0x280/0x280 [ 297.220849][ C1] call_timer_fn+0x16c/0x530 [ 297.225410][ C1] ? tcp_write_timer+0x280/0x280 [ 297.230316][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 297.236265][ C1] ? __run_timers+0x7c0/0x7c0 [ 297.240911][ C1] ? rcu_is_watching+0x11/0xa0 [ 297.245641][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 297.250811][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 297.255976][ C1] ? tcp_write_timer+0x280/0x280 [ 297.260885][ C1] __run_timers+0x525/0x7c0 [ 297.265361][ C1] ? detach_timer+0x2b0/0x2b0 [ 297.270011][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 297.275977][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 297.280804][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 297.286150][ C1] run_timer_softirq+0x63/0xf0 [ 297.290888][ C1] handle_softirqs+0x328/0x820 [ 297.295623][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 297.300450][ C1] ? do_softirq+0x200/0x200 [ 297.304939][ C1] __irq_exit_rcu+0x12f/0x220 [ 297.309583][ C1] ? irq_exit_rcu+0x20/0x20 [ 297.314058][ C1] irq_exit_rcu+0x5/0x20 [ 297.318290][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 297.323896][ C1] [ 297.326806][ C1] [ 297.329710][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 297.335669][ C1] RIP: 0010:__kernel_text_address+0x3/0x100 [ 297.341532][ C1] Code: b1 66 0f 1f 44 00 00 48 81 ff 00 00 e0 8b 0f 93 c0 48 81 ff 40 a7 6b 8d 0f 92 c1 20 c1 0f b6 c1 c3 66 0f 1f 44 00 00 55 41 57 <41> 56 53 48 81 ff 00 00 00 81 0f 93 c0 48 81 ff c3 7d e0 89 0f 92 [ 297.361109][ C1] RSP: 0018:ffffc900033bec50 EFLAGS: 00000246 [ 297.367168][ C1] RAX: 0000000000000000 RBX: ffffc900033becd0 RCX: 0000000080000000 [ 297.375136][ C1] RDX: ffffc900033bec01 RSI: ffffc900033bfe30 RDI: ffffffff81ae2900 [ 297.383402][ C1] RBP: ffffc900033bed10 R08: dffffc0000000000 R09: ffffc900033becd8 [ 297.391363][ C1] R10: fffff52000677d9d R11: 1ffff92000677d9b R12: ffff888025870000 [ 297.400097][ C1] R13: 1ffff92000677dbc R14: dffffc0000000000 R15: 1ffff92000677d9a [ 297.408052][ C1] ? ksys_mmap_pgoff+0x140/0x780 [ 297.412980][ C1] unwind_get_return_address+0x49/0x80 [ 297.418412][ C1] ? stack_trace_save+0xe0/0xe0 [ 297.423232][ C1] arch_stack_walk+0xf2/0x140 [ 297.427903][ C1] ? ksys_mmap_pgoff+0x140/0x780 [ 297.432834][ C1] stack_trace_save+0x98/0xe0 [ 297.437669][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 297.442778][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 297.448736][ C1] ? lock_chain_count+0x20/0x20 [ 297.453567][ C1] save_stack+0xf3/0x1e0 [ 297.457781][ C1] ? __reset_page_owner+0x180/0x180 [ 297.463393][ C1] ? get_page_from_freelist+0x1b77/0x1c60 [ 297.469264][ C1] ? __alloc_pages+0x1e1/0x470 [ 297.474004][ C1] ? alloc_pages_vma+0x393/0x7c0 [ 297.478950][ C1] ? shmem_alloc_and_acct_page+0x427/0xb70 [ 297.484741][ C1] ? shmem_getpage_gfp+0x14f4/0x2d40 [ 297.490113][ C1] ? shmem_fault+0x1a9/0x520 [ 297.494681][ C1] ? __do_fault+0x141/0x330 [ 297.499162][ C1] ? handle_mm_fault+0x2946/0x43b0 [ 297.504258][ C1] ? __get_user_pages+0x93e/0x11c0 [ 297.509342][ C1] ? populate_vma_page_range+0x213/0x290 [ 297.514948][ C1] ? __mm_populate+0x26f/0x3a0 [ 297.519685][ C1] ? vm_mmap_pgoff+0x203/0x2b0 [ 297.524424][ C1] ? lock_chain_count+0x20/0x20 [ 297.529247][ C1] ? preempt_count_add+0x8d/0x190 [ 297.534254][ C1] __set_page_owner+0x41/0x2d0 [ 297.538992][ C1] ? post_alloc_hook+0x106/0x220 [ 297.543903][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 297.549424][ C1] ? __might_sleep+0xf0/0xf0 [ 297.553994][ C1] ? mark_lock+0x94/0x320 [ 297.558301][ C1] ? __alloc_pages+0x470/0x470 [ 297.563120][ C1] ? prepare_alloc_pages+0x368/0x5f0 [ 297.568391][ C1] __alloc_pages+0x1e1/0x470 [ 297.572968][ C1] ? zone_statistics+0x170/0x170 [ 297.577915][ C1] ? verify_lock_unused+0x140/0x140 [ 297.583087][ C1] alloc_pages_vma+0x393/0x7c0 [ 297.587827][ C1] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 297.593622][ C1] shmem_alloc_and_acct_page+0x427/0xb70 [ 297.599227][ C1] ? shmem_swapin_page+0x2140/0x2140 [ 297.604486][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 297.609485][ C1] ? xas_descend+0x210/0x3b0 [ 297.614046][ C1] ? xas_load+0x127/0x140 [ 297.618354][ C1] ? pagecache_get_page+0xbff/0xef0 [ 297.623722][ C1] ? page_cache_prev_miss+0x360/0x360 [ 297.629061][ C1] ? mark_lock+0x94/0x320 [ 297.633364][ C1] ? verify_lock_unused+0x140/0x140 [ 297.638546][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 297.643542][ C1] shmem_getpage_gfp+0x14f4/0x2d40 [ 297.648644][ C1] shmem_fault+0x1a9/0x520 [ 297.653030][ C1] ? shmem_fallocate+0xe20/0xe20 [ 297.657938][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 297.663016][ C1] ? count_memcg_event_mm+0x311/0x360 [ 297.668359][ C1] __do_fault+0x141/0x330 [ 297.672658][ C1] handle_mm_fault+0x2946/0x43b0 [ 297.677571][ C1] ? get_page+0xe0/0xe0 [ 297.681695][ C1] ? follow_page_mask+0xa6e/0x12d0 [ 297.686781][ C1] __get_user_pages+0x93e/0x11c0 [ 297.691694][ C1] ? populate_vma_page_range+0x290/0x290 [ 297.697296][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 297.703246][ C1] ? read_lock_is_recursive+0x10/0x10 [ 297.708590][ C1] ? lock_chain_count+0x20/0x20 [ 297.713410][ C1] populate_vma_page_range+0x213/0x290 [ 297.718839][ C1] __mm_populate+0x26f/0x3a0 [ 297.723398][ C1] ? check_vma_flags+0x480/0x480 [ 297.728305][ C1] ? preempt_count_add+0x8d/0x190 [ 297.733296][ C1] ? up_write+0x1bb/0x420 [ 297.737595][ C1] vm_mmap_pgoff+0x203/0x2b0 [ 297.742160][ C1] ? account_locked_vm+0xe0/0xe0 [ 297.747069][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 297.752061][ C1] ksys_mmap_pgoff+0x140/0x780 [ 297.756797][ C1] ? mmap_region+0x1660/0x1660 [ 297.761528][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 297.766694][ C1] do_syscall_64+0x4c/0xa0 [ 297.771078][ C1] ? clear_bhb_loop+0x30/0x80 [ 297.775723][ C1] ? clear_bhb_loop+0x30/0x80 [ 297.780371][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.786246][ C1] RIP: 0033:0x7f1b992eb6c9 [ 297.790644][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.810313][ C1] RSP: 002b:00007f1b97552038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 297.818707][ C1] RAX: ffffffffffffffda RBX: 00007f1b99541fa0 RCX: 00007f1b992eb6c9 [ 297.827639][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 297.835583][ C1] RBP: 00007f1b9936df91 R08: ffffffffffffffff R09: 0000000000000000 [ 297.843524][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 297.851641][ C1] R13: 00007f1b99542038 R14: 00007f1b99541fa0 R15: 00007ffeab091f28 [ 297.859638][ C1]