last executing test programs: 6m58.508141907s ago: executing program 0 (id=70): socket$key(0xf, 0x3, 0x2) socket$inet(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x175) socket$kcm(0x2, 0x200000000000001, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xffff, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) 6m56.968267658s ago: executing program 0 (id=74): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) shutdown(r0, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6m56.039569849s ago: executing program 0 (id=75): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec59080600"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000380)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x0, 0x2, 0xfc}, 0x0) fsopen(0x0, 0x1798c9a8637737c7) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 6m55.699765663s ago: executing program 0 (id=81): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") r0 = open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x100405, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102380, 0x18fec) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) open(0x0, 0x20802, 0xc7) 6m52.035300204s ago: executing program 0 (id=90): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r3 = socket$inet(0x2, 0x801, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r3, 0x1) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 6m51.342682182s ago: executing program 0 (id=95): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2002) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@user_xattr}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setitimer(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) fallocate(r1, 0x8, 0x4000, 0x4000) 6m49.561980807s ago: executing program 32 (id=95): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2002) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@user_xattr}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setitimer(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) fallocate(r1, 0x8, 0x4000, 0x4000) 26.467052684s ago: executing program 3 (id=988): socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_tables_names\x00') read$FUSE(r3, &(0x7f0000001900)={0x2020}, 0x2020) preadv(r3, &(0x7f0000000840), 0x0, 0x8, 0x5) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x22, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue1\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000040)={0x800100, 0x0, 0x1c, 0x100, 0x81, 0x4000003}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 23.320291224s ago: executing program 3 (id=993): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 23.055924981s ago: executing program 3 (id=994): syz_mount_image$btrfs(&(0x7f0000000280), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x55b1, &(0x7f0000005680)="$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") inotify_init1(0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) rmdir(&(0x7f0000000280)='./control\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42040, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 21.395806894s ago: executing program 5 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = openat(0xffffffffffffff9c, 0x0, 0x48241, 0x141) pwrite64(r1, &(0x7f0000000140), 0x0, 0x8000c61) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x8000000000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5}, {}, 0x7f, 0x6e6bb9, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 19.272028143s ago: executing program 5 (id=1000): openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x404000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5935959eddac4168, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x2cea, &(0x7f0000000180)={0x0, 0x7a71, 0x40, 0x0, 0x385}, &(0x7f0000000080), &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f000018a000/0x2000)=nil, 0x2000, 0x12) close(r0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) 17.503789987s ago: executing program 1 (id=1003): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x5, 0x10f5, &(0x7f0000001180)="$eJzs2DGLE0EYBuB3dgNyVWSuXw+0sJDjjvgHrlBIY2FtF6zsTKXk5/hz5Cr743qvCNgrmxgSJGKRxUB4Hlh252Xm+2bKnQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvlHwvyXmT1E3WJClJ191O75N0m/zx17ZJydv30/mrj5PX8/W09FmT0q9ajev101ondVKv68vzm2d1/unzh3anZUmXu+VidvbmYdCj9L3bQSsCAADAafh5sPGR+wMAAAD/MthFAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6uajSVKSrrud3ifpjrstAAAA4EAlTd6N9+Xra4CtF/k2LimPtsmP0s+5ypc96/+iLzk6aMMAAABwosrO//jznOXJTn6RUS4v1+PfrzzcJG2Sqz/q3C0Xs9VzsZiV/3kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAACYKgAA//87RdIO") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x32, 0x0, 0x0) r1 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xd16, @local, 0x8}}, [0x6, 0x4, 0x80000000, 0x730b, 0x0, 0x8, 0x80000000, 0xffffffff, 0x100, 0x0, 0x0, 0x218f, 0x1, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) ftruncate(0xffffffffffffffff, 0xffff) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000006c0)=0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 17.116064385s ago: executing program 3 (id=1006): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 15.965349709s ago: executing program 3 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x15) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 12.938860126s ago: executing program 2 (id=1012): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x26020480) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000200)=[{r4, 0x8760}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001080)='cubic', 0x6) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000004900), 0x4) 11.839435325s ago: executing program 2 (id=1013): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r4, 0x0, 0x0, 0x12141, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 11.838946945s ago: executing program 4 (id=1014): openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x1ff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 11.77988537s ago: executing program 5 (id=1015): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./bus\x00', 0x4812, &(0x7f00000001c0)=ANY=[], 0x1, 0x68c, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000005040)={@rand_addr=0x64010102, @loopback, 0x1}, 0x10) setuid(0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)}], 0x1, 0xe7b, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') pread64(r7, &(0x7f0000033240)=""/102400, 0x19000, 0x41e) 10.095627096s ago: executing program 2 (id=1016): syz_mount_image$nilfs2(&(0x7f0000002680), &(0x7f00000026c0)='./file0\x00', 0x0, &(0x7f0000002700), 0x1, 0x267d, &(0x7f0000002740)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffa) sendfile(r0, r0, 0x0, 0x800000009) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x6503, @private0, 0x5}}, [0x5, 0xb, 0x3, 0x2, 0x80000000, 0x9, 0xa5e, 0xb2, 0x6, 0x8, 0x7, 0x1, 0x8, 0xffffffff, 0x7]}, &(0x7f00000002c0)=0x100) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000006c0)={r5, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2}}, 0xed0, 0x7ff}, &(0x7f0000000440)=0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000040)=0x84) ftruncate(r1, 0x2007ffb) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(r6, 0x0, 0x0) 10.095208446s ago: executing program 4 (id=1017): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000000c0)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x3, 0x4f8, &(0x7f0000000140)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmsg(r1, 0x0, 0x40000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, 0x0, &(0x7f0000000640), 0x2208010, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) rmdir(0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000001c0)=@mmap={0xffffffff, 0x1, 0x4, 0x8, 0x6, {0x77359400}, {0x2, 0x0, 0x8, 0xb8, 0xd, 0xe, "c783b98c"}, 0xff, 0x1, {}, 0x400}) creat(0x0, 0xec) 9.291532075s ago: executing program 5 (id=1018): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000300)={[{@lastblock={'lastblock', 0x3d, 0x5}}, {@partition={'partition', 0x3d, 0x2}}, {@utf8}, {@unhide}, {@adinicb}, {@shortad}, {@volume={'volume', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@dmode={'dmode', 0x3d, 0x4}}, {@dmode={'dmode', 0x3d, 0x86}}]}, 0x1, 0xc59, &(0x7f0000000f40)="$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") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() prlimit64(0x0, 0x1, &(0x7f00000001c0)={0xb8, 0x9}, &(0x7f00000004c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b090c, 0x80, '\x00', @p_u32=0x0}}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x21, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 'lblcr\x00', 0x0, 0x4, 0x33}, 0x2c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)) dup3(0xffffffffffffffff, r5, 0x80000) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 9.03607421s ago: executing program 4 (id=1019): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex, 0xa, 0x0, 0x6, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r0, 0xffffffffffffffff, 0x2e, 0x0, @val=@netkit={@void, @value=r0, @void, @void, r2}}, 0x1c) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x140}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) 9.03521834s ago: executing program 1 (id=1020): ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x42}, 0x28) timer_settime(0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x1, 0x1d, 0x8c, 0x65, 0x0, 0x1, 0x11, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0x13, 0x16, [@broadcast, @empty, @local, @empty]}]}}, {0x4e21, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "0f5d28a169c98f784a0feaaff746198c71e18d262877974781f9d62ff32ea036", "c2b51f16324e0d27985fa2a74e7dc9f1", {"2c9703ca697a6ada59616447377197cb", "691f2e395babfccfaa9d9746486aed1c"}}}}}}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 7.504569471s ago: executing program 4 (id=1021): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) syz_open_dev$vim2m(0x0, 0x7, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x80ffff}, 0x18, 0x0) socket$kcm(0x10, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) 6.991571571s ago: executing program 5 (id=1022): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0xfffd, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3538, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) setrlimit(0xd, &(0x7f0000000040)={0x3, 0x800006}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) recvmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x2000, &(0x7f00000005c0)={0x77359400}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x80000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone3(&(0x7f0000000740)={0x2000, &(0x7f00000003c0), 0x0, &(0x7f0000000440), {0x21}, &(0x7f0000000500)=""/240, 0xf0, 0x0, &(0x7f0000000700)}, 0x58) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYBLOB="060000000100dafd997f1743d357a5e93e1665adc5bd7bb45ba9100ee1e22888eb14c5177556108858d35d55574c0b2a515a564c2bdeca48661afb9bcd6b796952ead7922615aada4627f43f1aa6e584964ecb885ec9aed87b8d4afac94c511e10910056bdcd6c15436c530a9edbf2ae415413548c5ff71c"]) creat(&(0x7f00000003c0)='./file0\x00', 0x194) 6.824071238s ago: executing program 1 (id=1023): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x2, 0x24, 0x0, 0x0, 0x3, 0x41, &(0x7f00000004c0)=""/65, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x1, 0x10, 0xfffffffd, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r0, r0], 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x894) 6.793984931s ago: executing program 2 (id=1024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r4, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000c40)={{}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0xfffffffffffffffc, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xeffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$kcm(0x1e, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0x7) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) readv(r5, &(0x7f0000000b80)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1) 4.57023148s ago: executing program 1 (id=1025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r6, 0xc02064a5, &(0x7f0000000a40)={r7, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x4, 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r5, r7, r8, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040b0b00c9003ac02216a150c0c9"], 0xe) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 4.554761771s ago: executing program 2 (id=1026): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 4.160046321s ago: executing program 4 (id=1027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sched_getparam(r2, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x3a) fcntl$getflags(r3, 0xb) io_setup(0x1, &(0x7f0000000b80)) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000c80)={{r1}, "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"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_opts(r5, 0x0, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 3.318989363s ago: executing program 1 (id=1028): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0xe8}}, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0x8, @private2}}, 0x0, 0x0, 0x2b, 0x0, "b2f0a98893e964946272f294c09a15300fe974f98a52762eac285169db3c25acd4b3e3b806c7a2d03ce3fbd16ea3da2fef709042301b35939c9ab423b745e42c6cca1c44a387b443a8fe8a61e1f3f39e"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x4e22, 0x8, @mcast1, 0x5f}}, 0x0, 0x0, 0x22, 0x0, "97045e8ec254b1f623a7834fc983123bbf064efda734e0c3550af8e9cf9bc192cfe58d6792802e6673f3cf315d0214fceaf7704e2b095d40f0e80cf63f34db84a6af52011ecc24de0139ac016bc44e00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001200)={@in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x22}}}, 0x0, 0x0, 0x0, 0x0, "2017c4225130a8586a605b90612fc411fd94fe6fe1a89386debe0d09ef2df84424407a38579f903710637a6a7a07ce5aa2c73a9caf2a927e479e97536510cae9a464b83e5caf672a0df34e702a4e4566"}, 0xd8) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="015100deffffffffffff3800000008000300", @ANYRES32=r3], 0x38}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0xb7, 0x0, &(0x7f0000000f00)) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x3) 1.464244156s ago: executing program 1 (id=1029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)}}], 0x1, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) syz_emit_ethernet(0xb7, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaa4e1084f84d0b71c1c97adcb2809cdb55864cc0da709025fc7aa085dfb82bc32e12dfacff4841b0d7a282195e04591b0eaf4a5535630c3aebcc43e58c685e1dc2d9decc"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 1.296095772s ago: executing program 2 (id=1030): chdir(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmget(0x3, 0x1000, 0x200, &(0x7f000013e000/0x1000)=nil) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0xffffffff, 0x0, &(0x7f0000000280)) 1.163957485s ago: executing program 4 (id=1031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000020c0), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6d932bbd7000000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x20000894) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) r8 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x0, 0x0}) dup(r6) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f0000000400)="7ab826fb409b55c64a03fb3d5c5cf0cc2c3fce1dcae07c1b2a47768b2848e86b4dec5cdc577a216766cb96b2f8bbe4df3aa56eec99b0fa13748cdf9b19caf0e909d05f4fbf73eb6b6726cc590e3d5e1f561f1d1bd6c8290544f717603723595e9f21f23ceebb29c64cc88ac7725c397d47f78850b4fa605cad930c16d2dbc289d94f3c96e114b15a4906b66ca39687229a1006dac05d8e24eaa20d09f0af88d343b67f68b1094e6a4c6ddd72bd144a93e3897691117d", 0xb6}], 0x1, 0xb) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f00000003c0)={0x1, r7}) 1.151702006s ago: executing program 5 (id=1032): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000030000008000100ac1414001ed15999d48e34ac31d07771b4b46f01f5780e083e1d1b4fc68262d1593bd7dca6fc4cec1897d373d7d8603857ae8d85c0b0ca5882648598d49944bdeebbe8a4fc30cff1dd1ca73b4c4866f306d4ca7e476fb363ed5462f93d05"], 0x24}}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x6) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r5, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) getrlimit(0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000240)='cubic', 0x6) shutdown(r5, 0x1) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x400caed0, 0x0) 0s ago: executing program 3 (id=1033): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000300)={[{@lastblock={'lastblock', 0x3d, 0x5}}, {@partition={'partition', 0x3d, 0x2}}, {@utf8}, {@unhide}, {@adinicb}, {@shortad}, {@volume={'volume', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@dmode={'dmode', 0x3d, 0x4}}, {@dmode={'dmode', 0x3d, 0x86}}]}, 0x1, 0xc59, &(0x7f0000000f40)="$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") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() prlimit64(0x0, 0x1, &(0x7f00000001c0)={0xb8, 0x9}, &(0x7f00000004c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b090c, 0x80, '\x00', @p_u32=0x0}}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x80000) write$vhost_msg_v2(r7, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000400)=""/172, 0xac, &(0x7f0000000180)=""/51, 0x3, 0x3}}, 0x48) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts. syzkaller login: [ 60.179937][ T4171] cgroup: Unknown subsys name 'net' [ 60.300724][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.848593][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.383004][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 63.446283][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.459378][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.498712][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 63.583205][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 63.597046][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.604974][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.612941][ T4182] device bridge_slave_0 entered promiscuous mode [ 63.650210][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.657396][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.666174][ T4182] device bridge_slave_1 entered promiscuous mode [ 63.684732][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.691806][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.700314][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.738949][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.746167][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.753979][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.796047][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.803177][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.811562][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.821457][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.833824][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.841799][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.849940][ T4181] device bridge_slave_0 entered promiscuous mode [ 63.866205][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.873288][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.881985][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.890596][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.911237][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.918476][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.926884][ T4181] device bridge_slave_1 entered promiscuous mode [ 63.935821][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.977638][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.995877][ T4182] team0: Port device team_slave_0 added [ 64.003459][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.036993][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.047828][ T4182] team0: Port device team_slave_1 added [ 64.060725][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.068176][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.076252][ T4194] device bridge_slave_0 entered promiscuous mode [ 64.086225][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.116749][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.123943][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.132047][ T4194] device bridge_slave_1 entered promiscuous mode [ 64.141509][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.152993][ T4189] team0: Port device team_slave_0 added [ 64.168523][ T4188] team0: Port device team_slave_0 added [ 64.190779][ T4189] team0: Port device team_slave_1 added [ 64.197730][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.204830][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.230966][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.243734][ T4188] team0: Port device team_slave_1 added [ 64.273282][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.280432][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.306584][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.327535][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.346607][ T4181] team0: Port device team_slave_0 added [ 64.352825][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.359999][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.386550][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.410705][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.421363][ T4181] team0: Port device team_slave_1 added [ 64.434026][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.441430][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.467638][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.479271][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.486548][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.514236][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.526858][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.533820][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.560085][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.618883][ T4194] team0: Port device team_slave_0 added [ 64.626925][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.633971][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.660043][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.689575][ T4189] device hsr_slave_0 entered promiscuous mode [ 64.696592][ T4189] device hsr_slave_1 entered promiscuous mode [ 64.705263][ T4194] team0: Port device team_slave_1 added [ 64.711662][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.719194][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.745375][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.793325][ T4182] device hsr_slave_0 entered promiscuous mode [ 64.800247][ T4182] device hsr_slave_1 entered promiscuous mode [ 64.807006][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.815233][ T4182] Cannot create hsr debugfs directory [ 64.851562][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.858714][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.865568][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.873223][ T4188] Cannot create hsr debugfs directory [ 64.879400][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.886533][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.912520][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.924959][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.931932][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.957980][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.048794][ T4181] device hsr_slave_0 entered promiscuous mode [ 65.056244][ T4181] device hsr_slave_1 entered promiscuous mode [ 65.062815][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.071538][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 65.074404][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 65.078443][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 65.083852][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 65.089770][ T4181] Cannot create hsr debugfs directory [ 65.117740][ T4194] device hsr_slave_0 entered promiscuous mode [ 65.128699][ T4194] device hsr_slave_1 entered promiscuous mode [ 65.135355][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.142913][ T4194] Cannot create hsr debugfs directory [ 65.148631][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 65.416455][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.428349][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.437682][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.447465][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.511590][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.522049][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.544989][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.567688][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.615666][ T4181] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.637420][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.658429][ T4181] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.671942][ T4181] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.683302][ T4181] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.708850][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.719198][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.728858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.738985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.759103][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.768792][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.782219][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.792611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.801851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.811606][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.818857][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.828810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.838359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.851193][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.858308][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.870352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.911564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.920789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.931331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.941725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.952431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.961481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.970398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.995909][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.008227][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.061443][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.071030][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.082828][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.092184][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.102770][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.118020][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.153727][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.169595][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.194553][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.202335][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.224711][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.236075][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.262541][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.273385][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.283474][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.293058][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.300166][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.312056][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.320603][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.328327][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.359480][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.370721][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.379478][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.389157][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.396244][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.404766][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.413360][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.424788][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.448681][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.462867][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.472423][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.501040][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.511944][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.521175][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.530464][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.538872][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.547587][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.559709][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.583012][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.598540][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.608151][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.617269][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.627295][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.636244][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.646184][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.653250][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.661573][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.671622][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.680158][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.687244][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.695155][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.703769][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.717117][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.724230][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.733831][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.743279][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.773349][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.785633][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.796647][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.819624][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.830968][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.841658][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.850855][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.860706][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.869675][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.880843][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.887982][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.895861][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.905070][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.913880][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.922736][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.975830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.993073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.002590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.016527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.025294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.033868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.042627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.051497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.060267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.069301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.078703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.087450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.096007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.104500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.112819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.120806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.128668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.136953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.144801][ T4255] Bluetooth: hci0: command 0x041b tx timeout [ 67.152201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.160277][ T4255] Bluetooth: hci2: command 0x041b tx timeout [ 67.161568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.167234][ T4255] Bluetooth: hci3: command 0x041b tx timeout [ 67.180560][ T4189] device veth0_vlan entered promiscuous mode [ 67.180799][ T4255] Bluetooth: hci1: command 0x041b tx timeout [ 67.198775][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.210616][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.225278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.233718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.234788][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 67.245663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.256294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.271873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.285624][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.295331][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.307744][ T4189] device veth1_vlan entered promiscuous mode [ 67.340544][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.350940][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.363774][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.372769][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.379894][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.421635][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.451747][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.462618][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.472132][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.483293][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.493420][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.500744][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.511624][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.519479][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.527068][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.536838][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.555137][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.565605][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.574094][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.583386][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.601739][ T4189] device veth0_macvtap entered promiscuous mode [ 67.627285][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.660391][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.679744][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.691967][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.703458][ T4189] device veth1_macvtap entered promiscuous mode [ 67.724357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.732786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.743060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.752300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.771947][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.786445][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.821644][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.833677][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.847844][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.859836][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.873062][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.882358][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.894601][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.908135][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.918692][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.927217][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.935959][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.945146][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.953815][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.962567][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.980372][ T4188] device veth0_vlan entered promiscuous mode [ 67.990790][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.001115][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.011379][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.027735][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.049444][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.058868][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.069223][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.084099][ T4188] device veth1_vlan entered promiscuous mode [ 68.140267][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.157465][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.175216][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.194898][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.221827][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.249985][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.267908][ T4188] device veth0_macvtap entered promiscuous mode [ 68.283049][ T4188] device veth1_macvtap entered promiscuous mode [ 68.298515][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.308138][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.316873][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.325944][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.335147][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.342915][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.354052][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.361742][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.379831][ T4181] device veth0_vlan entered promiscuous mode [ 68.400878][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.416761][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.429093][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.441248][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.453207][ T4181] device veth1_vlan entered promiscuous mode [ 68.476839][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.485408][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.493983][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.506189][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.515874][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.542189][ T4194] device veth0_vlan entered promiscuous mode [ 68.555125][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.563395][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.573196][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.601190][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.615374][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.628275][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.638953][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.650590][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.659391][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.670454][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.679108][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.688113][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.696939][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.705128][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.713782][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.739916][ T4181] device veth0_macvtap entered promiscuous mode [ 68.751438][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.760745][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.770082][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.779592][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.795653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.805162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.813912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.830555][ T4194] device veth1_vlan entered promiscuous mode [ 68.840296][ T4181] device veth1_macvtap entered promiscuous mode [ 68.863856][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.872595][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.912675][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.921480][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.948326][ T4182] device veth0_vlan entered promiscuous mode [ 68.964895][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.981606][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.991810][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.006796][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.020761][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.036483][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.046132][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.055672][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.064760][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.073280][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.082464][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.096849][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.105817][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.121724][ T4194] device veth0_macvtap entered promiscuous mode [ 69.132228][ T4194] device veth1_macvtap entered promiscuous mode [ 69.153371][ T4182] device veth1_vlan entered promiscuous mode [ 69.174920][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.194160][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.206729][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.218361][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.230473][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 69.241889][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 69.253581][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 69.256139][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.279389][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.290493][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.300387][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.312445][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.329156][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.341707][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.358986][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.371809][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.390085][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.401734][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.418732][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.430183][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.441181][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 69.448642][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 69.457061][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.469446][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.494687][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.503435][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.514081][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.522864][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.534381][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.554317][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.582658][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.657293][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.811700][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.990736][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.286270][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.300401][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.309386][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.327898][ T4181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.344180][ T4181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.353945][ T4181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.368817][ T4181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.438998][ T384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.463087][ T384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.498147][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.506887][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.520827][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.530830][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.546799][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.556311][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.576362][ T4182] device veth0_macvtap entered promiscuous mode [ 70.608651][ T4182] device veth1_macvtap entered promiscuous mode [ 70.683644][ T384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.711085][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.721796][ T384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.737308][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.753173][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.770627][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.781153][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.802580][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.812744][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.831880][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.849969][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.019014][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.031250][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.468419][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.503849][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.617542][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 71.843880][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.941695][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.964007][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.975721][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.986381][ T4255] Bluetooth: hci1: command 0x0419 tx timeout [ 71.992497][ T4255] Bluetooth: hci4: command 0x0419 tx timeout [ 71.998693][ T4255] Bluetooth: hci0: command 0x0419 tx timeout [ 72.005666][ T4255] Bluetooth: hci2: command 0x0419 tx timeout [ 72.021270][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.032650][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.044316][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.054299][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.066103][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.072041][ T4318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.084418][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.131854][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.149055][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.191372][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.217029][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.230821][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.240536][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.251592][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.277711][ T384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.280846][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.288429][ T384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.299576][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.310970][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.321119][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.351245][ T4315] device syzkaller0 entered promiscuous mode [ 72.370682][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.537122][ T384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.546240][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.569331][ T384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.584188][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.599296][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.621114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.629146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.641812][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.653240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.844824][ T4329] loop2: detected capacity change from 0 to 32768 [ 73.996385][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 74.005394][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 74.014408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!! [ 74.024165][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 74.033262][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 74.042899][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 74.077156][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 74.086236][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 74.100031][ T4329] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 74.114370][ T4329] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 74.318582][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 74.328279][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.057357][ T4337] tipc: Started in network mode [ 75.075262][ T4329] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 75.086721][ T4255] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 75.094180][ T4255] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 75.102833][ T4337] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 75.136514][ T4346] loop0: detected capacity change from 0 to 16 [ 75.154891][ T4337] tipc: Enabled bearer , priority 0 [ 75.222346][ T4346] ======================================================= [ 75.222346][ T4346] WARNING: The mand mount option has been deprecated and [ 75.222346][ T4346] and is ignored by this kernel. Remove the mand [ 75.222346][ T4346] option from the mount to silence this warning. [ 75.222346][ T4346] ======================================================= [ 75.281523][ T4255] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 187ms [ 75.316002][ T4255] gfs2: fsid=syz:syz.0: jid=0: Done [ 75.341811][ T4329] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 75.618346][ T4346] erofs: (device loop0): mounted with root inode @ nid 36. [ 76.285674][ T4364] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 76.350778][ T4288] tipc: Node number set to 11578026 [ 80.377609][ T4394] capability: warning: `syz.4.25' uses deprecated v2 capabilities in a way that may be insecure [ 81.077644][ T4398] KVM: debugfs: duplicate directory 4398-5 [ 81.144692][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 81.159961][ T4411] Cannot find set identified by id 3 to match [ 81.807707][ T4418] loop4: detected capacity change from 0 to 128 [ 82.038005][ T4424] syz.0.33 uses obsolete (PF_INET,SOCK_PACKET) [ 82.144849][ T4421] faulting far call emulation tainted memory [ 83.420897][ T4444] 9pnet_virtio: no channels available for device syz [ 85.284875][ T4466] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.493405][ T4473] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.518697][ T26] audit: type=1326 audit(1760382458.909:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 86.621025][ T1346] cfg80211: failed to load regulatory.db [ 86.718093][ T26] audit: type=1326 audit(1760382460.089:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 86.740057][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.764619][ T26] audit: type=1326 audit(1760382460.089:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 89.224113][ C0] sched: RT throttling activated [ 90.024323][ T26] audit: type=1326 audit(1760382460.089:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 90.060350][ T26] audit: type=1326 audit(1760382460.089:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 90.709621][ T4300] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.869095][ T26] audit: type=1326 audit(1760382460.089:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 90.891156][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.227207][ T26] audit: type=1326 audit(1760382460.089:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 92.484824][ T26] audit: type=1326 audit(1760382460.089:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 92.506984][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.704376][ T4300] usb 2-1: device not accepting address 2, error -71 [ 92.733466][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888062e0c000: rx timeout, send abort [ 93.247880][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880601b8800: rx timeout, send abort [ 93.256460][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888062e0c000: abort rx timeout. Force session deactivation [ 93.361659][ T4527] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.465208][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 93.756464][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880601b8800: abort rx timeout. Force session deactivation [ 94.231191][ T4546] netlink: 44 bytes leftover after parsing attributes in process `syz.4.59'. [ 94.250950][ T26] audit: type=1326 audit(1760382460.139:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 94.273058][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.305330][ T4546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.59'. [ 94.398514][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'. [ 94.494239][ T26] audit: type=1326 audit(1760382460.139:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 94.526952][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'. [ 94.655708][ T26] audit: type=1326 audit(1760382460.139:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 94.843341][ T4562] Zero length message leads to an empty skb [ 95.093483][ T4548] device syzkaller0 entered promiscuous mode [ 95.498347][ T26] audit: type=1326 audit(1760382460.139:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 95.521792][ T26] audit: type=1326 audit(1760382460.149:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 95.555701][ T26] audit: type=1326 audit(1760382460.149:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 95.577752][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.637376][ T26] audit: type=1326 audit(1760382460.149:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df2693ec9 code=0x7ffc0000 [ 99.148871][ T4603] binder: 4602:4603 ioctl c0306201 200000000080 returned -14 [ 100.263337][ T4621] loop0: detected capacity change from 0 to 2048 [ 100.315029][ T4621] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 100.779394][ T4621] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,mblk_io_submit,i_version,,errors=continue. Quota mode: none. [ 101.589777][ T4640] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 101.677447][ T4640] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #18: comm syz.0.81: mark_inode_dirty error [ 101.746764][ T4640] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 101.877699][ T4640] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #18: comm syz.0.81: mark_inode_dirty error [ 101.923503][ T4640] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 101.961735][ T4640] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #18: comm syz.0.81: mark_inode_dirty error [ 102.000218][ T4646] device syzkaller0 entered promiscuous mode [ 102.025323][ T4640] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 102.105531][ T4640] EXT4-fs error (device loop0): ext4_dirty_inode:6040: inode #18: comm syz.0.81: mark_inode_dirty error [ 102.173833][ T4640] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 102.519113][ T4640] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #18: comm syz.0.81: mark_inode_dirty error [ 103.207108][ T4656] capability: warning: `syz.3.88' uses 32-bit capabilities (legacy support in use) [ 104.348957][ T384] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.975029][ T384] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.515843][ T384] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.632562][ T384] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.176661][ T4668] loop4: detected capacity change from 0 to 32768 [ 106.479008][ T4668] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.92 (4668) [ 106.561045][ T4668] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 106.591199][ T4300] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.602044][ T4668] BTRFS info (device loop4): using free space tree [ 106.621626][ T4668] BTRFS info (device loop4): has skinny extents [ 106.858852][ T4300] usb 4-1: Using ep0 maxpacket: 16 [ 107.219139][ T4300] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 107.419205][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.458826][ T4300] usb 4-1: Product: syz [ 107.463040][ T4300] usb 4-1: Manufacturer: syz [ 107.535729][ T4300] usb 4-1: SerialNumber: syz [ 107.624067][ T4300] r8152-cfgselector 4-1: config 0 descriptor?? [ 107.749177][ T4300] hub 4-1:0.0: bad descriptor, ignoring hub [ 107.762910][ T4300] hub: probe of 4-1:0.0 failed with error -5 [ 107.914816][ T4668] BTRFS error (device loop4): open_ctree failed: -12 [ 108.762546][ T4714] chnl_net:caif_netlink_parms(): no params data found [ 108.777942][ T4300] r8152-cfgselector 4-1: Unknown version 0x0000 [ 108.814523][ T4300] r8152-cfgselector 4-1: Unknown version 0x0000 [ 108.882873][ T4300] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 109.159532][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.197121][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.245422][ T4714] device bridge_slave_0 entered promiscuous mode [ 109.267037][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.628713][ T4706] Bluetooth: hci1: command 0x0409 tx timeout [ 109.642360][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.745377][ T4714] device bridge_slave_1 entered promiscuous mode [ 111.022133][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.043231][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.468183][ T4245] Bluetooth: hci1: command 0x041b tx timeout [ 114.029490][ T4714] team0: Port device team_slave_0 added [ 114.038695][ T4714] team0: Port device team_slave_1 added [ 114.263542][ T4776] device syzkaller0 entered promiscuous mode [ 114.264242][ T4300] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.337666][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.352483][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.378449][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.393584][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.582050][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.600491][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.659990][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.784857][ T4300] usb 5-1: device not accepting address 2, error -71 [ 115.544383][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 115.728621][ T4714] device hsr_slave_0 entered promiscuous mode [ 115.754983][ T4714] device hsr_slave_1 entered promiscuous mode [ 115.783711][ T4714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.803872][ T4714] Cannot create hsr debugfs directory [ 117.121221][ T4823] ptrace attach of "./syz-executor exec"[4189] was attempted by ""[4823] [ 117.148510][ T384] device hsr_slave_0 left promiscuous mode [ 117.178006][ T384] device hsr_slave_1 left promiscuous mode [ 117.210287][ T384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.241091][ T384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.289596][ T384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.339652][ T384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.382247][ T384] device bridge_slave_1 left promiscuous mode [ 117.432241][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.624325][ T4245] Bluetooth: hci1: command 0x0419 tx timeout [ 117.667191][ T384] device bridge_slave_0 left promiscuous mode [ 117.779464][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.736192][ T384] device veth1_macvtap left promiscuous mode [ 118.742705][ T384] device veth0_macvtap left promiscuous mode [ 118.778636][ T384] device veth1_vlan left promiscuous mode [ 118.786462][ T384] device veth0_vlan left promiscuous mode [ 119.052057][ T4855] ODEBUG: Out of memory. ODEBUG disabled [ 122.386453][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 122.386468][ T26] audit: type=1326 audit(1760382495.779:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4874 comm="syz.2.134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10b4fbfec9 code=0x0 [ 122.414163][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.430059][ T384] team0 (unregistering): Port device team_slave_1 removed [ 122.460013][ T384] team0 (unregistering): Port device team_slave_0 removed [ 122.515432][ T384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.998141][ T384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.343994][ T384] bond0 (unregistering): Released all slaves [ 123.717573][ T4714] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.762805][ T4714] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.810988][ T4714] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.851210][ T4714] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.928236][ T4899] process 'syz.2.138' launched './file0' with NULL argv: empty string added [ 125.368587][ T4921] loop4: detected capacity change from 0 to 128 [ 125.486139][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.522534][ T4921] FAT-fs (loop4): Unrecognized mount option "C9:*&" or missing value [ 125.573729][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.598894][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.836205][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.363629][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.407226][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.477017][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.484197][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.493195][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.535561][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.603995][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.679144][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.686331][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.291667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.360504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.430141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.441606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.487989][ T4954] device syzkaller0 entered promiscuous mode [ 127.532056][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.620615][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.643061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.662885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.675278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.694478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.714426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.735013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.743799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.777920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.948153][ T4965] loop2: detected capacity change from 0 to 2048 [ 129.067491][ T4965] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.084276][ T4965] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.108978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.124589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.138726][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.778951][ T4999] loop3: detected capacity change from 0 to 40427 [ 131.306875][ T4999] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.459089][ T4999] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 132.776720][ T5018] attempt to access beyond end of device [ 132.776720][ T5018] loop3: rw=2049, want=45104, limit=40427 [ 132.946210][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.967394][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.982640][ T4188] attempt to access beyond end of device [ 132.982640][ T4188] loop3: rw=2049, want=45112, limit=40427 [ 133.084385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.095631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.172019][ T4714] device veth0_vlan entered promiscuous mode [ 133.205158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.245788][ T21] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 133.246877][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.262669][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.305907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.327737][ T4714] device veth1_vlan entered promiscuous mode [ 133.452883][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.498639][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.544744][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.613372][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.683880][ T4714] device veth0_macvtap entered promiscuous mode [ 133.818933][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 133.954309][ T21] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 133.978123][ T5026] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.329293][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.393016][ T4714] device veth1_macvtap entered promiscuous mode [ 134.498924][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.507056][ T21] usb 3-1: Product: syz [ 134.511253][ T21] usb 3-1: Manufacturer: syz [ 134.515948][ T21] usb 3-1: SerialNumber: syz [ 134.522596][ T21] usb 3-1: config 0 descriptor?? [ 134.610048][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.665615][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.706325][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.754128][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.784387][ T21] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 134.800609][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.844428][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.891199][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.904337][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.946571][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.966318][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.985455][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.025805][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.056494][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.090532][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.111461][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.152817][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.199759][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.231931][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.299761][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.450911][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.604960][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.685916][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.909016][ T4714] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.938392][ T4714] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.994328][ T4714] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.074199][ T4714] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.201085][ T5055] loop4: detected capacity change from 0 to 2048 [ 136.265630][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.294197][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.303393][ T5055] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 136.328991][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.368388][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.392126][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.423681][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.433407][ T5055] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,nomblk_io_submit,grpjquota=,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 136.504060][ T5055] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.976801][ T21] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 138.055993][ T4269] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:5: bg 0: block 345: padding at end of block bitmap is not set [ 138.061118][ T21] usb 3-1: USB disconnect, device number 2 [ 138.137134][ T4269] EXT4-fs (loop4): Remounting filesystem read-only [ 140.466118][ T5109] input: syz1 as /devices/virtual/input/input5 [ 141.385189][ T26] audit: type=1326 audit(1760382514.779:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f01dfec9 code=0x7ffc0000 [ 142.375979][ T26] audit: type=1326 audit(1760382514.779:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa6f01dfec9 code=0x7ffc0000 [ 142.398103][ T26] audit: type=1326 audit(1760382514.779:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f01dfec9 code=0x7ffc0000 [ 142.421598][ T26] audit: type=1326 audit(1760382514.779:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa6f01dfec9 code=0x7ffc0000 [ 142.444697][ T26] audit: type=1326 audit(1760382514.779:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f01dfec9 code=0x7ffc0000 [ 142.467272][ T26] audit: type=1326 audit(1760382514.779:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa6f01dfec9 code=0x7ffc0000 [ 142.491289][ T26] audit: type=1326 audit(1760382514.779:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f01dfec9 code=0x7ffc0000 [ 142.544155][ T26] audit: type=1326 audit(1760382514.779:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f01dfec9 code=0x7ffc0000 [ 142.730535][ T5128] loop1: detected capacity change from 0 to 4096 [ 142.738872][ T26] audit: type=1326 audit(1760382514.799:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa6f01dfec9 code=0x7ffc0000 [ 142.761061][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.355439][ T26] audit: type=1326 audit(1760382514.799:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f01dfec9 code=0x7ffc0000 [ 143.379276][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.613430][ T5140] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.649350][ T5170] overlayfs: failed to resolve './file1': -2 [ 149.043274][ T5226] binder: BINDER_SET_CONTEXT_MGR already set [ 149.073016][ T5226] binder: 5225:5226 ioctl 4018620d 200000000100 returned -16 [ 149.124785][ T5226] binder: BINDER_SET_CONTEXT_MGR already set [ 149.158227][ T5226] binder: 5225:5226 ioctl 4018620d 2000000002c0 returned -16 [ 152.524342][ T5263] device syzkaller0 entered promiscuous mode [ 155.770832][ T5311] binder: BINDER_SET_CONTEXT_MGR already set [ 155.786327][ T5311] binder: 5310:5311 ioctl 4018620d 200000000100 returned -16 [ 155.825895][ T5311] binder: BINDER_SET_CONTEXT_MGR already set [ 155.842519][ T5311] binder: 5310:5311 ioctl 4018620d 200000004a80 returned -16 [ 155.918600][ T5313] loop5: detected capacity change from 0 to 2048 [ 156.060222][ T5313] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.129827][ T5313] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.075981][ T5332] device syzkaller0 entered promiscuous mode [ 158.183363][ T5309] loop4: detected capacity change from 0 to 40427 [ 158.409020][ T5309] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 158.431511][ T5309] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 158.714651][ T5309] F2FS-fs (loop4): Found nat_bits in checkpoint [ 160.131262][ T5362] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 160.157443][ T5362] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 160.541714][ T5374] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=75501696 (151003392 ns) > initial count (56 ns). Using initial count to start timer. [ 162.367032][ T5424] overlayfs: workdir and upperdir must reside under the same mount [ 162.459383][ T5427] loop1: detected capacity change from 0 to 2048 [ 162.562641][ T5427] GPT:first_usable_lbas don't match. [ 162.591294][ T5427] GPT:34 != 290 [ 162.613653][ T5427] GPT: Use GNU Parted to correct GPT errors. [ 162.649668][ T5427] loop1: p1 p2 p3 [ 162.877491][ T5407] loop4: detected capacity change from 0 to 32768 [ 163.379448][ T5407] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 163.928205][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 163.944341][ T4553] udevd[4553]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 163.957848][ T4551] udevd[4551]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 164.381966][ T4194] (syz-executor,4194,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 164.933504][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 165.208165][ T5435] loop3: detected capacity change from 0 to 32768 [ 165.264913][ T5435] XFS: attr2 mount option is deprecated. [ 165.315091][ T5470] binder_alloc: 5461: binder_alloc_buf, no vma [ 165.448584][ T5435] XFS (loop3): Mounting V5 Filesystem [ 165.599996][ T5435] XFS (loop3): Ending clean mount [ 165.709979][ T5435] XFS (loop3): Quotacheck needed: Please wait. [ 165.839633][ T5435] XFS (loop3): Quotacheck: Done. [ 165.893438][ T4188] XFS (loop3): Unmounting Filesystem [ 167.280767][ T5507] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 167.288946][ T5507] netlink: 'syz.1.255': attribute type 2 has an invalid length. [ 167.297117][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 169.902688][ T4183] Bluetooth: Wrong link type (-22) [ 171.539371][ T5525] loop4: detected capacity change from 0 to 32768 [ 171.713176][ T5557] loop1: detected capacity change from 0 to 128 [ 171.851391][ T5557] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.890901][ T5557] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.892822][ T5557] fscrypt: Error allocating hmac(sha512): -2 [ 175.615527][ T5586] loop4: detected capacity change from 0 to 32768 [ 175.897046][ T5586] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.269 (5586) [ 176.153896][ T5586] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 176.194625][ T5586] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 176.223969][ T5586] BTRFS info (device loop4): use lzo compression, level 0 [ 176.244207][ T5586] BTRFS info (device loop4): using free space tree [ 176.251844][ T5586] BTRFS info (device loop4): has skinny extents [ 176.835875][ T5586] BTRFS error (device loop4): open_ctree failed: -12 [ 176.844536][ T5651] KVM: debugfs: duplicate directory 5651-5 [ 179.101953][ T5685] syzkaller0: create flow: hash 1925465801 index 2 [ 180.223899][ T4223] syzkaller0: tun_net_xmit 76 [ 180.249780][ T4223] syzkaller0: tun_net_xmit 48 [ 180.310306][ T4343] syzkaller0: tun_net_xmit 76 [ 180.355214][ T4223] syzkaller0: tun_net_xmit 76 [ 180.686555][ T5687] syzkaller0: delete flow: hash 1925465801 index 2 [ 183.112570][ T5730] KVM: debugfs: duplicate directory 5730-5 [ 185.944373][ T4706] Bluetooth: hci4: command 0x0406 tx timeout [ 185.954201][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 185.958075][ T4706] Bluetooth: hci2: command 0x0406 tx timeout [ 185.966814][ T4706] Bluetooth: hci3: command 0x0406 tx timeout [ 186.030112][ T5760] device syzkaller0 entered promiscuous mode [ 186.842446][ T5781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.307'. [ 187.288245][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 188.332446][ T5801] loop4: detected capacity change from 0 to 128 [ 188.434280][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.588935][ T5808] loop1: detected capacity change from 0 to 256 [ 188.611571][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.734925][ T23] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 188.749366][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 188.773078][ T23] usb 3-1: SerialNumber: syz [ 190.409043][ T23] usb 3-1: 0:2 : does not exist [ 190.613536][ T23] usb 3-1: unit 255 not found! [ 191.729745][ T23] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 192.072050][ T23] usb 3-1: USB disconnect, device number 3 [ 192.419389][ T5853] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 194.114160][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.120537][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.363964][ T5864] loop1: detected capacity change from 0 to 1024 [ 194.729444][ T4551] udevd[4551]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.869450][ T5864] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.066762][ T5877] binder: BINDER_SET_CONTEXT_MGR already set [ 195.087298][ T5877] binder: 5876:5877 ioctl 4018620d 2000000002c0 returned -16 [ 195.189947][ T5877] binder: 5876:5877 ioctl c0306201 200000000240 returned -11 [ 195.214911][ T5877] binder: 5876:5877 ioctl c0306201 2000000004c0 returned -14 [ 199.121020][ T5910] loop3: detected capacity change from 0 to 2048 [ 199.174316][ T5920] loop5: detected capacity change from 0 to 128 [ 199.281705][ T5920] FAT-fs (loop5): Unrecognized mount option "C9:*&" or missing value [ 199.381846][ T5910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.458082][ T5910] overlayfs: upper fs needs to support d_type. [ 199.475780][ T5910] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 199.509436][ T5910] overlayfs: failed to set xattr on upper [ 199.534147][ T5910] overlayfs: ...falling back to index=off,metacopy=off. [ 199.568165][ T5910] overlayfs: failed to resolve './file0': -2 [ 199.655347][ T5925] loop4: detected capacity change from 0 to 8192 [ 199.744804][ T4551] loop4: p1 p2 p3 p4[EZD] [ 199.755758][ T4551] loop4: partition table partially beyond EOD, truncated [ 199.771880][ T4551] loop4: p3 start 331777 is beyond EOD, truncated [ 199.820878][ T4551] loop4: p4 size 262912 extends beyond EOD, truncated [ 199.852050][ T5925] loop4: p1 p2 p3 p4[EZD] [ 199.860030][ T5925] loop4: partition table partially beyond EOD, truncated [ 199.877434][ T5925] loop4: p3 start 331777 is beyond EOD, truncated [ 199.884672][ T5925] loop4: p4 size 262912 extends beyond EOD, truncated [ 203.177011][ T5964] loop3: detected capacity change from 0 to 40427 [ 203.901050][ T5964] F2FS-fs (loop3): invalid crc value [ 204.157616][ T5979] loop5: detected capacity change from 0 to 1024 [ 204.177756][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 204.198314][ T4551] udevd[4551]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 204.222845][ T4553] udevd[4553]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 204.356616][ T5964] F2FS-fs (loop3): Found nat_bits in checkpoint [ 204.469421][ T5964] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 206.117348][ T4551] udevd[4551]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 206.138592][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 206.162971][ T4553] udevd[4553]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 206.563121][ T4188] attempt to access beyond end of device [ 206.563121][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 211.692036][ T6040] syz.1.370 (6040): drop_caches: 2 [ 221.242587][ T6112] loop1: detected capacity change from 0 to 32768 [ 221.269359][ T6112] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.391 (6112) [ 221.281676][ T4343] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 222.044248][ T4343] usb 5-1: Using ep0 maxpacket: 8 [ 222.115432][ T6112] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 222.135942][ T6123] loop5: detected capacity change from 0 to 512 [ 222.146050][ T6112] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 222.157189][ T6112] BTRFS info (device loop1): use zstd compression, level 3 [ 222.164614][ T6112] BTRFS info (device loop1): using free space tree [ 222.172040][ T6112] BTRFS info (device loop1): has skinny extents [ 222.384867][ T4343] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 222.483569][ T4343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.668175][ T4343] usb 5-1: Product: syz [ 222.783836][ T4343] usb 5-1: Manufacturer: syz [ 223.004176][ T4343] usb 5-1: SerialNumber: syz [ 223.293136][ T4343] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 223.411314][ T6112] BTRFS info (device loop1): enabling ssd optimizations [ 223.960243][ T7] usb 5-1: USB disconnect, device number 4 [ 224.037427][ T7] usblp0: removed [ 230.586868][ T6213] loop2: detected capacity change from 0 to 131072 [ 230.705195][ T6213] F2FS-fs (loop2): invalid crc value [ 230.969710][ T6213] F2FS-fs (loop2): Found nat_bits in checkpoint [ 231.012360][ T6213] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 231.823756][ T6213] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 232.064271][ T4240] Bluetooth: hci1: command 0x0406 tx timeout [ 233.269487][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 233.269506][ T26] audit: type=1800 audit(1760382606.109:52): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.412" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 235.425888][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 236.229987][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.237367][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.342312][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.424'. [ 236.468926][ T6277] loop3: detected capacity change from 0 to 1024 [ 236.491474][ T6273] loop4: detected capacity change from 0 to 4096 [ 236.551857][ T6277] EXT4-fs (loop3): Ignoring removed bh option [ 236.584486][ T6277] EXT4-fs (loop3): inline encryption not supported [ 236.611660][ T6278] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.734866][ T6277] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm syz.3.427: lblock 2 mapped to illegal pblock 2 (length 1) [ 236.819452][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 236.843799][ T6277] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 236.854788][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 236.864349][ T6277] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.427: lblock 0 mapped to illegal pblock 48 (length 1) [ 236.880949][ T6286] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.339380][ T6288] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 237.351721][ T6277] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 237.384386][ T6277] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.427: Failed to acquire dquot type 0 [ 237.408298][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 237.446793][ T6277] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 237.459861][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 237.529456][ T6277] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #11: comm syz.3.427: mark_inode_dirty error [ 237.606543][ T6277] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 237.619322][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 237.652091][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 237.705764][ T6284] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 237.748110][ T6277] EXT4-fs (loop3): 1 orphan inode deleted [ 237.787177][ T6277] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x0000000000000001,nodelalloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 237.806175][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.708997][ T384] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 238.810246][ T384] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 239.235484][ T384] EXT4-fs error (device loop3): ext4_release_dquot:6245: comm kworker/u4:3: Failed to release dquot type 0 [ 240.166470][ T4188] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 240.418033][ T4188] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 240.435869][ T4188] EXT4-fs error (device loop3): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 240.724199][ T4183] Bluetooth: Wrong link type (-22) [ 244.334654][ T6362] loop3: detected capacity change from 0 to 1024 [ 244.420615][ T6394] netlink: 'syz.1.441': attribute type 12 has an invalid length. [ 245.378182][ T6362] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 246.361296][ T6423] loop4: detected capacity change from 0 to 512 [ 246.445180][ T6423] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 246.609569][ T6423] block device autoloading is deprecated and will be removed. [ 246.642927][ T6423] EXT4-fs (loop4): external journal has bad superblock [ 248.333158][ T6452] loop4: detected capacity change from 0 to 16 [ 248.419402][ T6452] erofs: (device loop4): mounted with root inode @ nid 36. [ 250.475315][ T6466] binder: BINDER_SET_CONTEXT_MGR already set [ 250.495818][ T6466] binder: 6465:6466 ioctl 4018620d 2000000002c0 returned -16 [ 250.585434][ T6466] binder: 6465:6466 ioctl c0306201 200000000240 returned -11 [ 252.499126][ T6477] kvm: emulating exchange as write [ 255.053137][ T6504] loop4: detected capacity change from 0 to 1024 [ 255.857939][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.865725][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.446328][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 257.468261][ T6544] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 258.902292][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 258.975616][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 258.984348][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 258.995947][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 259.167088][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 259.211882][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 259.241248][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 259.261909][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 260.172454][ T6561] loop5: detected capacity change from 0 to 512 [ 260.553273][ T6561] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 260.567030][ T6561] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 260.873818][ T6561] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 260.983056][ T6561] EXT4-fs (loop5): 1 truncate cleaned up [ 261.016372][ T6561] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 263.017761][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.487'. [ 263.069979][ T6583] loop1: detected capacity change from 0 to 1024 [ 264.620034][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.633179][ T6596] loop5: detected capacity change from 0 to 512 [ 264.716572][ T6586] bond0: (slave rose0): Enslaving as an active interface with an up link [ 264.751316][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 264.771491][ T6596] EXT4-fs (loop5): inline encryption not supported [ 264.794198][ T6596] EXT4-fs (loop5): Mount option "nodelalloc" incompatible with ext3 [ 265.659656][ T6611] netlink: 'syz.3.493': attribute type 12 has an invalid length. [ 267.590568][ T6626] loop3: detected capacity change from 0 to 512 [ 268.436126][ T6632] tipc: Started in network mode [ 268.441101][ T6632] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 268.454313][ T6632] tipc: Enabled bearer , priority 0 [ 270.774542][ T6626] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 270.845052][ T6626] EXT4-fs (loop3): external journal has bad superblock [ 270.877071][ T4300] tipc: Node number set to 11578026 [ 271.251295][ T6655] netlink: 'syz.4.506': attribute type 1 has an invalid length. [ 271.259017][ T6655] netlink: 'syz.4.506': attribute type 2 has an invalid length. [ 271.266727][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 273.214116][ T6295] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 273.274368][ T6662] loop1: detected capacity change from 0 to 8 [ 273.482822][ T6662] SQUASHFS error: Failed to read block 0x62: -5 [ 273.527096][ T6662] squashfs image failed sanity check [ 274.645191][ T6696] binder: BINDER_SET_CONTEXT_MGR already set [ 274.733399][ T6696] binder: 6694:6696 ioctl 4018620d 200000004a80 returned -16 [ 280.230224][ T6756] fuse: Bad value for 'fd' [ 282.604075][ C0] hrtimer: interrupt took 48238 ns [ 289.588855][ T6870] loop4: detected capacity change from 0 to 512 [ 290.537446][ T6870] EXT4-fs (loop4): Ignoring removed nobh option [ 290.623537][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'. [ 290.636833][ T6870] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 290.736441][ T6880] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 290.784732][ T6870] EXT4-fs (loop4): 1 truncate cleaned up [ 290.794291][ T6870] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 291.246085][ T6890] loop1: detected capacity change from 0 to 40427 [ 292.075663][ T6890] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 292.083641][ T6890] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 292.095281][ T6890] F2FS-fs (loop1): invalid crc value [ 292.299877][ T6890] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.462083][ T6890] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 292.470125][ T6890] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 292.742543][ T6894] device syzkaller0 entered promiscuous mode [ 297.831671][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 299.119949][ T6954] loop4: detected capacity change from 0 to 256 [ 300.016118][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 300.749588][ T6972] tipc: Enabling of bearer rejected, failed to enable media [ 301.707833][ T6988] tipc: Enabled bearer , priority 0 [ 301.749204][ T6988] tipc: Resetting bearer [ 301.795701][ T6985] tipc: Disabling bearer [ 301.929110][ T6997] loop3: detected capacity change from 0 to 2048 [ 302.033383][ T6997] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 302.619458][ T7017] loop1: detected capacity change from 0 to 8 [ 302.744806][ T7017] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 303.305845][ T4551] udevd[4551]: incorrect cramfs checksum on /dev/loop1 [ 304.510387][ T4551] udevd[4551]: incorrect cramfs checksum on /dev/loop1 [ 304.525520][ T7022] loop4: detected capacity change from 0 to 4096 [ 304.849334][ T7039] loop5: detected capacity change from 0 to 256 [ 305.090763][ T7043] input: syz0 as /devices/virtual/input/input6 [ 305.115768][ T7039] exfat: Unknown parameter '"' [ 305.712540][ T4962] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 305.817802][ T7053] loop4: detected capacity change from 0 to 4096 [ 305.860448][ T7053] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 306.140414][ T4962] usb 2-1: Using ep0 maxpacket: 16 [ 306.289893][ T7058] hub 1-0:1.0: USB hub found [ 306.296781][ T7058] hub 1-0:1.0: 1 port detected [ 306.899609][ T4962] usb 2-1: config 252 has an invalid interface number: 176 but max is 0 [ 306.931503][ T4962] usb 2-1: config 252 has no interface number 0 [ 306.937959][ T4962] usb 2-1: config 252 interface 176 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 307.006488][ T7004] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 307.129879][ T7065] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 307.156224][ T4962] usb 2-1: New USB device found, idVendor=045e, idProduct=122a, bcdDevice=b6.af [ 307.165394][ T4962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.206204][ T4962] usb 2-1: Product: syz [ 307.222503][ T4962] usb 2-1: Manufacturer: syz [ 307.227271][ T4962] usb 2-1: SerialNumber: syz [ 307.436931][ T4297] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1292 with error 28 [ 307.460860][ T4297] EXT4-fs (loop3): This should not happen!! Data will be lost [ 307.460860][ T4297] [ 307.481960][ T4297] EXT4-fs (loop3): Total free blocks count 0 [ 307.496684][ T4297] EXT4-fs (loop3): Free/Dirty block details [ 307.512707][ T1108] usb 2-1: USB disconnect, device number 5 [ 307.524911][ T4297] EXT4-fs (loop3): free_blocks=0 [ 307.562765][ T4297] EXT4-fs (loop3): dirty_blocks=1296 [ 307.568185][ T4297] EXT4-fs (loop3): Block reservation details [ 307.575888][ T4297] EXT4-fs (loop3): i_reserved_data_blocks=81 [ 308.449383][ T7074] ip6t_srh: unknown srh invflags 4000 [ 309.108382][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.601'. [ 311.168186][ T7097] tipc: Enabling of bearer rejected, failed to enable media [ 312.759531][ T7113] tipc: Enabling of bearer rejected, failed to enable media [ 312.842229][ T7119] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 314.112315][ T7128] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 315.091741][ T7132] loop3: detected capacity change from 0 to 512 [ 315.352215][ T7132] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 316.632441][ T7132] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.534831][ T7149] tipc: Started in network mode [ 318.595719][ T7149] tipc: Node identity 0614b118ace4, cluster identity 4711 [ 318.715965][ T7149] tipc: Enabled bearer , priority 0 [ 319.013507][ T7156] device syzkaller0 entered promiscuous mode [ 319.271193][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.277564][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.298214][ T7160] tipc: Resetting bearer [ 319.323026][ T7148] tipc: Resetting bearer [ 319.432146][ T7163] loop3: detected capacity change from 0 to 16 [ 319.456046][ T7163] erofs: (device loop3): mounted with root inode @ nid 36. [ 319.501133][ T4187] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 319.532057][ T7163] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 319.554627][ T26] audit: type=1800 audit(1760382690.747:53): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.622" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 319.693150][ T7148] tipc: Disabling bearer [ 322.083580][ T7174] loop1: detected capacity change from 0 to 128 [ 322.203258][ T7181] loop3: detected capacity change from 0 to 512 [ 323.446848][ T7181] EXT4-fs (loop3): Mount option "noload" incompatible with ext2 [ 325.132024][ T7204] loop4: detected capacity change from 0 to 32768 [ 325.427767][ T7204] (syz.4.634,7204,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 326.294926][ T7204] (syz.4.634,7204,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 326.364693][ T7204] JBD2: Ignoring recovery information on journal [ 326.470794][ T7204] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 327.074919][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 336.099964][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.140965][ T7285] loop5: detected capacity change from 0 to 256 [ 336.185961][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.571617][ T7214] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.580604][ T7214] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.589629][ T7214] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.598616][ T7214] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.756571][ T7247] tipc: Enabling of bearer rejected, failed to enable media [ 338.221126][ T7302] syz.3.654 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 340.833594][ T7323] tipc: Enabled bearer , priority 0 [ 340.856378][ T7323] device syzkaller0 entered promiscuous mode [ 341.006602][ T7323] tipc: Resetting bearer [ 341.093579][ T7320] tipc: Resetting bearer [ 341.124817][ T7320] tipc: Disabling bearer [ 341.301017][ T7330] loop3: detected capacity change from 0 to 32768 [ 341.858564][ T26] audit: type=1800 audit(1760382711.550:54): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.664" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 342.714986][ T7336] kvm [7335]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x7a00000000 [ 344.148845][ T7365] loop1: detected capacity change from 0 to 256 [ 345.573635][ T7372] loop5: detected capacity change from 0 to 16 [ 345.677829][ T7374] netlink: 'syz.2.672': attribute type 10 has an invalid length. [ 346.393715][ T7374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.404003][ T7374] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 346.477857][ T7372] erofs: (device loop5): mounted with root inode @ nid 36. [ 346.869099][ T7379] hub 9-0:1.0: USB hub found [ 346.874199][ T7379] hub 9-0:1.0: 1 port detected [ 348.432192][ T7386] tipc: Enabled bearer , priority 0 [ 348.476077][ T7386] device syzkaller0 entered promiscuous mode [ 348.564984][ T7386] tipc: Resetting bearer [ 348.618169][ T7385] tipc: Resetting bearer [ 348.856871][ T7385] tipc: Disabling bearer [ 351.798044][ T7398] loop4: detected capacity change from 0 to 2048 [ 356.042286][ T7434] binder: BINDER_SET_CONTEXT_MGR already set [ 356.060508][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 356.095700][ T7434] binder: 7432:7434 ioctl 4018620d 200000000100 returned -16 [ 356.123163][ T7436] device bond_slave_0 entered promiscuous mode [ 356.130000][ T7436] device bond_slave_1 entered promiscuous mode [ 356.136340][ T7436] device batadv0 entered promiscuous mode [ 356.174642][ T7436] device macvtap1 entered promiscuous mode [ 356.181266][ T7436] device bond0 entered promiscuous mode [ 356.203974][ T7436] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 356.214919][ T7437] binder: BINDER_SET_CONTEXT_MGR already set [ 356.224542][ T7437] binder: 7432:7437 ioctl 4018620d 200000004a80 returned -16 [ 356.436415][ T7446] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 356.484795][ T7452] loop3: detected capacity change from 0 to 256 [ 356.503732][ T7450] tipc: Enabling of bearer rejected, failed to enable media [ 356.550617][ T7445] loop4: detected capacity change from 0 to 32768 [ 357.124477][ T7445] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.694 (7445) [ 357.784973][ T7445] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 357.793803][ T7445] BTRFS info (device loop4): using free space tree [ 357.800496][ T7445] BTRFS info (device loop4): has skinny extents [ 359.081708][ T7445] BTRFS info (device loop4): enabling ssd optimizations [ 360.028974][ T26] audit: type=1800 audit(1760382728.182:55): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.694" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 362.507702][ T7510] fuse: Bad value for 'fd' [ 362.641758][ T7519] tipc: Enabling of bearer rejected, failed to enable media [ 370.609202][ T7586] tipc: Started in network mode [ 370.633745][ T7586] tipc: Node identity d2a6c3394b5a, cluster identity 4711 [ 370.671648][ T7586] tipc: Enabled bearer , priority 0 [ 370.710676][ T7587] device syzkaller0 entered promiscuous mode [ 370.808320][ T7586] tipc: Resetting bearer [ 370.854365][ T7585] tipc: Resetting bearer [ 370.865548][ T7585] tipc: Disabling bearer [ 371.932591][ T7576] loop5: detected capacity change from 0 to 32768 [ 372.195935][ T7576] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.723 (7576) [ 373.149724][ T7576] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 373.192011][ T7576] BTRFS info (device loop5): using free space tree [ 373.198683][ T7576] BTRFS info (device loop5): has skinny extents [ 374.006612][ T7576] BTRFS error (device loop5): open_ctree failed: -12 [ 375.254797][ T7640] loop5: detected capacity change from 0 to 32768 [ 378.157541][ T7668] ptrace attach of "./syz-executor exec"[4189] was attempted by "./syz-executor exec"[7668] [ 379.937800][ T7684] netlink: 96 bytes leftover after parsing attributes in process `syz.5.747'. [ 382.798916][ T1324] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 382.822868][ T7706] loop5: detected capacity change from 0 to 1024 [ 382.842540][ T1324] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 383.245964][ T7706] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 383.564662][ T7706] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 383.572632][ T7706] EXT4-fs (loop5): Unrecognized mount option "smackfshat=jqfmt=vfsv0" or missing value [ 384.549295][ T7721] fido_id[7721]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 385.300852][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.309883][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.487900][ T7743] tipc: Enabled bearer , priority 0 [ 387.507335][ T7743] device syzkaller0 entered promiscuous mode [ 387.798590][ T7759] tipc: Resetting bearer [ 388.022988][ T7742] tipc: Resetting bearer [ 390.506272][ T7742] tipc: Disabling bearer [ 392.890985][ T7812] loop5: detected capacity change from 0 to 2048 [ 396.799960][ T7812] NILFS (loop5): error -4 creating segctord thread [ 400.734096][ T26] audit: type=1107 audit(1760382765.364:56): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 400.956875][ T7847] loop3: detected capacity change from 0 to 8 [ 409.946738][ T7909] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 410.117035][ T7919] overlayfs: overlapping lowerdir path [ 411.509791][ T7928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.813'. [ 417.211708][ T7974] fuse: Unknown parameter 'user_id00000000000000000000' [ 421.580955][ T8003] xt_socket: unknown flags 0x48 [ 423.879943][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 423.892642][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 424.730556][ T8033] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 432.657457][ T8109] overlayfs: failed to clone upperpath [ 434.696007][ T8129] loop5: detected capacity change from 0 to 164 [ 436.845431][ T8139] netlink: 'syz.4.866': attribute type 10 has an invalid length. [ 438.569101][ T8156] loop3: detected capacity change from 0 to 1024 [ 438.608165][ T4240] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 438.825816][ T8156] EXT4-fs (loop3): Ignoring removed nobh option [ 439.879670][ T8156] EXT4-fs (loop3): Ignoring removed bh option [ 440.005205][ T8156] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 440.148077][ T4240] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 440.198881][ T4240] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.223433][ T8156] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,dioread_nolock,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 440.233611][ T4240] usb 6-1: Product: syz [ 440.934270][ T4240] usb 6-1: Manufacturer: syz [ 440.944608][ T4240] usb 6-1: SerialNumber: syz [ 441.138823][ T8183] loop5: detected capacity change from 0 to 1024 [ 441.169121][ T8183] EXT4-fs (loop5): Ignoring removed bh option [ 441.178566][ T8183] EXT4-fs (loop5): inline encryption not supported [ 441.195548][ T4240] usb 6-1: config 0 descriptor?? [ 441.216359][ T4240] usb 6-1: can't set config #0, error -71 [ 441.230285][ T4240] usb 6-1: USB disconnect, device number 2 [ 441.291263][ T8183] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 441.805525][ T8195] netlink: set zone limit has 8 unknown bytes [ 442.007696][ T8183] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 2: comm syz.5.880: lblock 2 mapped to illegal pblock 2 (length 1) [ 442.242702][ T8183] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 442.250972][ T8183] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 48: comm syz.5.880: lblock 0 mapped to illegal pblock 48 (length 1) [ 442.339663][ T8200] sock: sock_set_timeout: `syz.2.883' (pid 8200) tries to set negative timeout [ 442.450286][ T8183] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 442.956002][ T8183] EXT4-fs error (device loop5): ext4_acquire_dquot:6209: comm syz.5.880: Failed to acquire dquot type 0 [ 443.021279][ T8183] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 443.108775][ T8183] EXT4-fs error (device loop5): ext4_evict_inode:282: inode #11: comm syz.5.880: mark_inode_dirty error [ 443.120548][ T8183] EXT4-fs warning (device loop5): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 443.140641][ T8183] EXT4-fs (loop5): 1 orphan inode deleted [ 443.146422][ T8183] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 443.176288][ T4367] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 443.328167][ T4367] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 443.364734][ T4367] EXT4-fs error (device loop5): ext4_release_dquot:6245: comm kworker/u4:10: Failed to release dquot type 0 [ 444.185348][ T8221] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 444.264086][ T8227] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 1: comm syz.5.880: lblock 1 mapped to illegal pblock 1 (length 1) [ 445.011077][ T8227] Quota error (device loop5): find_next_id: Can't read quota tree block 1 [ 445.249819][ T4714] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 445.275294][ T4714] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 445.289936][ T4714] EXT4-fs error (device loop5): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 448.075390][ T8247] macvlan2: mtu less than device minimum [ 450.337110][ T8247] IPVS: sh: TCP [::]:0 - no destination available [ 450.615038][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.631278][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.785525][ T8301] loop5: detected capacity change from 0 to 2048 [ 453.912186][ T8301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.888235][ T8315] netlink: 'syz.3.913': attribute type 10 has an invalid length. [ 455.925787][ T8315] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 458.816897][ T8343] syz.2.918 (8343) used greatest stack depth: 17416 bytes left [ 460.781725][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.926'. [ 462.970609][ T8387] loop5: detected capacity change from 0 to 2048 [ 463.125350][ T8387] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 463.140006][ T8387] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.830577][ T8408] netlink: 104 bytes leftover after parsing attributes in process `syz.5.934'. [ 465.007730][ T8409] atomic_op ffff888023429998 conn xmit_atomic 0000000000000000 [ 466.273005][ T8423] xt_hashlimit: max too large, truncated to 1048576 [ 467.391860][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.929653][ T7] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 475.942855][ T8481] loop5: detected capacity change from 0 to 128 [ 476.018534][ T8481] EXT4-fs (loop5): Ignoring removed nobh option [ 476.708626][ T8481] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 476.721810][ T8481] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 476.821248][ T8494] hub 9-0:1.0: USB hub found [ 476.826084][ T8494] hub 9-0:1.0: 1 port detected [ 483.047329][ T8533] overlayfs: failed to clone lowerpath [ 483.072408][ T8533] overlayfs: failed to clone upperpath [ 483.154216][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.970'. [ 483.168960][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.970'. [ 484.006009][ T8536] loop3: detected capacity change from 0 to 4096 [ 484.311085][ T8536] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 484.319934][ T8540] loop5: detected capacity change from 0 to 128 [ 485.002700][ T8556] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 485.017562][ T8556] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 485.025728][ T8556] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 485.033770][ T8556] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 485.042088][ T8556] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 485.050193][ T8556] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 485.127747][ T8556] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 485.355902][ T8536] EXT4-fs (loop3): Test dummy encryption mode enabled [ 485.376520][ T8536] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,noinit_itable,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 486.587260][ T8573] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 488.359770][ T8573] orangefs_mount: mount request failed with -4 [ 488.497291][ T8600] loop5: detected capacity change from 0 to 16 [ 488.544800][ T8600] erofs: (device loop5): mounted with root inode @ nid 36. [ 488.646197][ T8605] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 488.656512][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 488.665907][ T8605] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 488.675362][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 488.686550][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 488.894914][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 488.904245][ T8605] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 488.913973][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 488.923516][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 488.932685][ T8605] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 488.942378][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 488.951611][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 488.960881][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 488.970985][ T8605] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 488.981555][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 488.991284][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 489.000673][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 489.010082][ T8605] erofs: (device loop5): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 489.020188][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 489.029388][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 489.040158][ T8605] erofs: (device loop5): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 489.049632][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 489.058829][ T8605] erofs: (device loop5): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 489.069110][ T8605] erofs: (device loop5): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 489.079314][ T8605] attempt to access beyond end of device [ 489.079314][ T8605] loop5: rw=524288, want=848, limit=16 [ 489.091479][ T8605] attempt to access beyond end of device [ 489.091479][ T8605] loop5: rw=524288, want=13478624104, limit=16 [ 489.103899][ T8605] attempt to access beyond end of device [ 489.103899][ T8605] loop5: rw=524288, want=13478624080, limit=16 [ 489.116408][ T8605] attempt to access beyond end of device [ 489.116408][ T8605] loop5: rw=524288, want=32, limit=16 [ 489.130998][ T4187] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 493.472664][ T8627] overlayfs: failed to clone upperpath [ 493.765977][ T8625] loop3: detected capacity change from 0 to 32768 [ 493.787219][ T8625] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.994 (8625) [ 495.727442][ T8625] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 495.753373][ T8625] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 495.802800][ T8625] BTRFS info (device loop3): use lzo compression, level 0 [ 495.817620][ T8625] BTRFS info (device loop3): using free space tree [ 495.832728][ T8625] BTRFS info (device loop3): has skinny extents [ 497.763495][ T8625] BTRFS error (device loop3): open_ctree failed: -12 [ 498.209326][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'. [ 498.396650][ T8682] device vlan2 entered promiscuous mode [ 498.402442][ T8682] device gretap0 entered promiscuous mode [ 502.615850][ T8716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 504.361525][ T8728] loop5: detected capacity change from 0 to 1024 [ 505.965358][ T8739] loop5: detected capacity change from 0 to 2048 [ 506.017847][ T8739] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 506.559696][ T8747] IPVS: set_ctl: invalid protocol: 33 172.30.1.6:0 [ 511.737601][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1028'. [ 515.063941][ T8803] loop3: detected capacity change from 0 to 2048 [ 627.179319][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 627.186341][ C0] rcu: 1-...!: (1 GPs behind) idle=74f/1/0x4000000000000000 softirq=22189/22193 fqs=5 [ 627.197771][ C0] (detected by 0, t=10502 jiffies, g=26457, q=249) [ 627.204400][ C0] Sending NMI from CPU 0 to CPUs 1: [ 627.209630][ C1] NMI backtrace for cpu 1 [ 627.209653][ C1] CPU: 1 PID: 8789 Comm: syz.1.1029 Not tainted syzkaller #0 [ 627.209670][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 627.209688][ C1] RIP: 0010:__lock_acquire+0xb22/0x7c60 [ 627.209716][ C1] Code: c1 0f 8c f5 fe ff ff 48 c7 c7 48 c9 69 8d e8 e5 29 60 00 49 b8 00 00 00 00 00 fc ff df e9 da fe ff ff 44 38 ac 24 c8 00 00 00 <4c> 8b 6c 24 30 4c 8b 64 24 18 4c 8b 7c 24 78 76 38 e8 08 a8 7b 02 [ 627.209731][ C1] RSP: 0018:ffffc90000dd08c0 EFLAGS: 00000097 [ 627.209746][ C1] RAX: 0000000000000000 RBX: ffff88807ae928a8 RCX: 0000000000000001 [ 627.209758][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ffbd0c0 [ 627.209769][ C1] RBP: ffffc90000dd0b10 R08: dffffc0000000000 R09: fffffbfff1ff7a19 [ 627.209782][ C1] R10: fffffbfff1ff7a19 R11: 1ffffffff1ff7a18 R12: 0000000000000000 [ 627.209794][ C1] R13: ffff88807ae92802 R14: 0000000000000001 R15: ffff88807ae92894 [ 627.209806][ C1] FS: 00007fc5e160d6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 627.209822][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 627.209834][ C1] CR2: 000000110c29a24b CR3: 000000007f3cd000 CR4: 00000000003506e0 [ 627.209849][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 627.209859][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 627.209869][ C1] Call Trace: [ 627.209876][ C1] [ 627.209892][ C1] ? mark_lock+0x94/0x320 [ 627.209912][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 627.209930][ C1] ? verify_lock_unused+0x140/0x140 [ 627.209949][ C1] ? verify_lock_unused+0x140/0x140 [ 627.209966][ C1] ? mark_lock+0x94/0x320 [ 627.209992][ C1] lock_acquire+0x197/0x3f0 [ 627.210010][ C1] ? rcu_lock_acquire+0x5/0x30 [ 627.210032][ C1] ? read_lock_is_recursive+0x10/0x10 [ 627.210050][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 627.210067][ C1] ? __rwlock_init+0x140/0x140 [ 627.210083][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 627.210101][ C1] rcu_lock_acquire+0x2a/0x30 [ 627.210117][ C1] ? rcu_lock_acquire+0x5/0x30 [ 627.210133][ C1] advance_sched+0x6ca/0x940 [ 627.210161][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 627.210184][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 627.210206][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 627.210224][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 627.210244][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 627.210273][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 627.210291][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 627.210311][ C1] [ 627.210315][ C1] [ 627.210321][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 627.210339][ C1] RIP: 0010:unix_wait_for_peer+0x14c/0x2e0 [ 627.210358][ C1] Code: 4c 89 ee 48 83 e6 01 31 ff e8 20 bb ee f8 49 83 e5 01 0f 85 b0 00 00 00 4d 8d af 80 04 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 18 <84> c0 0f 85 29 01 00 00 45 0f b6 6d 00 44 89 ee 83 e6 01 31 ff e8 [ 627.210371][ C1] RSP: 0018:ffffc90003d4f680 EFLAGS: 00000a06 [ 627.210386][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88807ae91dc0 [ 627.210399][ C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 627.210409][ C1] RBP: ffffc90003d4f770 R08: dffffc0000000000 R09: ffffed100f703a0d [ 627.210421][ C1] R10: ffffed100f703a0d R11: 1ffff1100f703a0c R12: ffff88807b81d6c0 [ 627.210434][ C1] R13: ffff88807b81d480 R14: 1ffff920007a9ed4 R15: ffff88807b81d000 [ 627.210456][ C1] ? unix_find_other+0x820/0x820 [ 627.210472][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 627.210488][ C1] ? init_wait_entry+0xd0/0xd0 [ 627.210507][ C1] ? __rwlock_init+0x140/0x140 [ 627.210522][ C1] ? unix_dgram_sendmsg+0xa67/0x1890 [ 627.210540][ C1] ? bpf_lsm_unix_may_send+0x5/0x10 [ 627.210559][ C1] unix_dgram_sendmsg+0x106f/0x1890 [ 627.210585][ C1] ? unix_dgram_poll+0x660/0x660 [ 627.210601][ C1] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 627.210625][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 627.210642][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 627.210659][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 627.210674][ C1] ? unix_dgram_poll+0x660/0x660 [ 627.210691][ C1] ____sys_sendmsg+0x5a2/0x8c0 [ 627.210713][ C1] ? memset+0x1e/0x40 [ 627.210731][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 627.210750][ C1] ? rcu_is_watching+0x11/0xa0 [ 627.210766][ C1] ? import_iovec+0x6f/0xa0 [ 627.210786][ C1] ___sys_sendmsg+0x1f0/0x260 [ 627.210807][ C1] ? __sys_sendmsg+0x250/0x250 [ 627.210838][ C1] ? __might_fault+0xb3/0x110 [ 627.210855][ C1] __sys_sendmmsg+0x27c/0x4a0 [ 627.210875][ C1] ? __ia32_sys_sendmsg+0x80/0x80 [ 627.210896][ C1] ? __context_tracking_exit+0x4c/0x80 [ 627.210919][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 627.210939][ C1] ? lock_chain_count+0x20/0x20 [ 627.210957][ C1] ? vtime_user_exit+0x2dc/0x400 [ 627.210978][ C1] __x64_sys_sendmmsg+0x9c/0xb0 [ 627.210996][ C1] do_syscall_64+0x4c/0xa0 [ 627.211011][ C1] ? clear_bhb_loop+0x30/0x80 [ 627.211026][ C1] ? clear_bhb_loop+0x30/0x80 [ 627.211042][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 627.211059][ C1] RIP: 0033:0x7fc5e33a5ec9 [ 627.211082][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.211095][ C1] RSP: 002b:00007fc5e160d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 627.211111][ C1] RAX: ffffffffffffffda RBX: 00007fc5e35fcfa0 RCX: 00007fc5e33a5ec9 [ 627.211124][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 627.211134][ C1] RBP: 00007fc5e3428f91 R08: 0000000000000000 R09: 0000000000000000 [ 627.211150][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.211160][ C1] R13: 00007fc5e35fd038 R14: 00007fc5e35fcfa0 R15: 00007ffeb4e82348 [ 627.211179][ C1] [ 627.211625][ C0] rcu: rcu_preempt kthread starved for 10485 jiffies! g26457 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 627.786104][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 627.796091][ C0] rcu: RCU grace-period kthread stack dump: [ 627.801984][ C0] task:rcu_preempt state:R running task stack:28032 pid: 15 ppid: 2 flags:0x00004000 [ 627.812780][ C0] Call Trace: [ 627.816082][ C0] [ 627.819040][ C0] __schedule+0x11bb/0x4390 [ 627.823569][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 627.828966][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 627.834877][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 627.840792][ C0] ? _raw_spin_unlock+0x40/0x40 [ 627.845660][ C0] ? rcu_is_watching+0x11/0xa0 [ 627.850438][ C0] ? release_firmware_map_entry+0x190/0x190 [ 627.856369][ C0] schedule+0x11b/0x1e0 [ 627.860544][ C0] schedule_timeout+0x15c/0x280 [ 627.865421][ C0] ? console_conditional_schedule+0x40/0x40 [ 627.871332][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 627.877254][ C0] ? update_process_times+0x200/0x200 [ 627.882649][ C0] ? prepare_to_swait_event+0x331/0x350 [ 627.888223][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 627.893100][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 627.899275][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 627.904063][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 627.909273][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 627.914490][ C0] rcu_gp_kthread+0x98/0x350 [ 627.919221][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 627.924362][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 627.930281][ C0] ? __kthread_parkme+0x157/0x1b0 [ 627.935340][ C0] kthread+0x436/0x520 [ 627.939428][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 627.944560][ C0] ? kthread_blkcg+0xd0/0xd0 [ 627.949173][ C0] ret_from_fork+0x1f/0x30 [ 627.953625][ C0] [ 627.956655][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 627.962991][ C0] NMI backtrace for cpu 0 [ 627.967324][ C0] CPU: 0 PID: 8803 Comm: syz.3.1033 Not tainted syzkaller #0 [ 627.974708][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 627.984772][ C0] Call Trace: [ 627.988060][ C0] [ 627.990939][ C0] dump_stack_lvl+0x168/0x230 [ 627.995642][ C0] ? show_regs_print_info+0x20/0x20 [ 628.000857][ C0] ? load_image+0x3b0/0x3b0 [ 628.005385][ C0] ? irq_work_queue+0xbf/0x140 [ 628.010177][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 628.015130][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 628.021298][ C0] ? _printk+0xcc/0x110 [ 628.025472][ C0] ? cpu_online+0x1d/0x30 [ 628.029832][ C0] ? load_image+0x3b0/0x3b0 [ 628.034352][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 628.040444][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 628.046454][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 628.052623][ C0] print_other_cpu_stall+0x10c8/0x1220 [ 628.058110][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 628.063062][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 628.068369][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 628.073418][ C0] rcu_sched_clock_irq+0x831/0x1110 [ 628.078640][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 628.083506][ C0] ? account_process_tick+0x227/0x3a0 [ 628.088900][ C0] update_process_times+0x193/0x200 [ 628.094119][ C0] tick_sched_timer+0x37d/0x560 [ 628.098986][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 628.104207][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 628.109780][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 628.114914][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 628.120999][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 628.125985][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 628.131994][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 628.137650][ C0] [ 628.140587][ C0] [ 628.143527][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 628.149522][ C0] RIP: 0010:smp_call_function_many_cond+0xb98/0xd70 [ 628.156132][ C0] Code: 89 de 83 e6 01 31 ff e8 66 49 0b 00 83 e3 01 75 07 e8 fc 45 0b 00 eb 43 f3 90 48 b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 <84> c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 d5 45 0b 00 eb d9 44 [ 628.175754][ C0] RSP: 0018:ffffc9000339f8c0 EFLAGS: 00000246 [ 628.181841][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000080000 [ 628.189834][ C0] RDX: ffffc9000e43b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 628.197906][ C0] RBP: ffffc9000339f9f0 R08: dffffc0000000000 R09: fffffbfff1ff7a4e [ 628.205887][ C0] R10: fffffbfff1ff7a4e R11: 1ffffffff1ff7a4d R12: ffff8880b91405c8 [ 628.213889][ C0] R13: 1ffff110172280b9 R14: ffff8880b903b3c0 R15: 0000000000000001 [ 628.221899][ C0] ? invalidate_bh_lrus+0x30/0x30 [ 628.226940][ C0] ? __bread_gfp+0x380/0x380 [ 628.231543][ C0] ? smp_call_function_many+0x30/0x30 [ 628.236945][ C0] ? __bread_gfp+0x380/0x380 [ 628.241547][ C0] ? invalidate_bh_lrus+0x30/0x30 [ 628.246585][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 628.251718][ C0] set_blocksize+0x2eb/0x370 [ 628.256334][ C0] sb_set_blocksize+0x45/0xe0 [ 628.261148][ C0] udf_load_vrs+0x85/0xad0 [ 628.265582][ C0] ? udf_get_last_session+0xfe/0x200 [ 628.270882][ C0] ? udf_do_extend_file+0x1030/0x1030 [ 628.276276][ C0] udf_fill_super+0x69f/0x18f0 [ 628.281052][ C0] ? vsnprintf+0x1905/0x1a00 [ 628.285669][ C0] ? udf_mount+0x40/0x40 [ 628.289933][ C0] ? vscnprintf+0x80/0x80 [ 628.294279][ C0] ? set_blocksize+0x1f1/0x370 [ 628.299070][ C0] ? sb_set_blocksize+0xa5/0xe0 [ 628.304033][ C0] mount_bdev+0x287/0x3c0 [ 628.308388][ C0] ? udf_mount+0x40/0x40 [ 628.312647][ C0] legacy_get_tree+0xe6/0x180 [ 628.317351][ C0] ? lvid_get_unique_id+0x320/0x320 [ 628.322566][ C0] vfs_get_tree+0x88/0x270 [ 628.327001][ C0] do_new_mount+0x24a/0xa40 [ 628.331527][ C0] __se_sys_mount+0x2d6/0x3c0 [ 628.336223][ C0] ? __x64_sys_mount+0xc0/0xc0 [ 628.341095][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 628.346310][ C0] ? __x64_sys_mount+0x1c/0xc0 [ 628.351103][ C0] do_syscall_64+0x4c/0xa0 [ 628.355538][ C0] ? clear_bhb_loop+0x30/0x80 [ 628.360235][ C0] ? clear_bhb_loop+0x30/0x80 [ 628.364930][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 628.370835][ C0] RIP: 0033:0x7fa6f01e166a [ 628.375262][ C0] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.394973][ C0] RSP: 002b:00007fa6ee446e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 628.403407][ C0] RAX: ffffffffffffffda RBX: 00007fa6ee446ef0 RCX: 00007fa6f01e166a [ 628.411394][ C0] RDX: 0000200000000f00 RSI: 00002000000000c0 RDI: 00007fa6ee446eb0 [ 628.419379][ C0] RBP: 0000200000000f00 R08: 00007fa6ee446ef0 R09: 0000000000a00000 [ 628.427364][ C0] R10: 0000000000a00000 R11: 0000000000000246 R12: 00002000000000c0 [ 628.435355][ C0] R13: 00007fa6ee446eb0 R14: 0000000000000c59 R15: 0000200000000300 [ 628.443355][ C0]