last executing test programs: 17.211712896s ago: executing program 0 (id=239): eventfd2(0xfffffff3, 0x80002) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x800, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x5, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xdd) pwritev2(r6, 0x0, 0x0, 0xe7b, 0x0, 0x0) pwrite64(r5, 0x0, 0x0, 0x84fed0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = gettid() r9 = gettid() kcmp(r8, r9, 0x0, r7, r5) 9.143222765s ago: executing program 2 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xb, &(0x7f0000000040)) r0 = getpid() setrlimit(0x1, &(0x7f0000000080)={0x2, 0x6}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrlimit(0xb, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000080)=@file={0x1}, 0x6e) read$usbmon(r4, 0x0, 0x0) 9.126714546s ago: executing program 1 (id=252): r0 = syz_open_dev$vim2m(&(0x7f0000001880), 0x33a, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 7.890347565s ago: executing program 2 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x6, 0x7, [0x1, 0xffffffff, 0x400, 0x0]}}) pipe2(&(0x7f0000000000), 0x0) 7.805379557s ago: executing program 0 (id=254): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) pipe2(0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000440)=@multiplanar_userptr={0x1, 0x0, 0x4, 0x70000, 0x401, {}, {0x2, 0x4, 0x61, 0x10, 0x7, 0x2, "229b55ee"}, 0x3, 0x2, {0x0}, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4800) mq_open(&(0x7f0000001380)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) 7.440496956s ago: executing program 1 (id=255): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001140)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000e3c31100000001000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x133, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.405117066s ago: executing program 3 (id=256): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00000c00028005007c80"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 6.240796913s ago: executing program 0 (id=257): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000380)={[{@shortname_mixed}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_lower}, {@numtail}, {@utf8}, {@numtail}, {@fat=@umask={'umask', 0x3d, 0xb4}}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@utf8no}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'net/ip_mr_cache\x00'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '\x7f)'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{:&./#-%,!+{!'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x3, 0x28e, &(0x7f0000000640)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) 6.239843884s ago: executing program 2 (id=258): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a0100000000000000000000000002"], 0x50}, 0x1, 0x7}, 0x20000000) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, &(0x7f0000000000)="3f000000010000", 0x7) listen(r1, 0x4) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000280)) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r7 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r7, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 6.013533719s ago: executing program 3 (id=259): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_io_uring_setup(0x34b8, &(0x7f0000000340)={0x0, 0xcf0b, 0x80, 0x3, 0x11, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000200), 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030305a2e61303036303030302c757365725f69643da2c06f715a6fdde9f843899ef41792f020b8d232f3f2e71e22e9550d0ee7109bde0fdc971a860708667525e4e60a16dda9d1ccd96adf1dc6ce1a5b906c97f0e2eee53c1eedb43e8aa20b428f1d0fa8df229718bcd4e9b31fcac411d0f29efde5426b3cc1c480255c986f7d76021336fec643f236e07b8030433297b5b4e984a293f724ae4a59735b08cd1a06", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x78, 0x0, 0x1, {0x0, 0x7ff, 0x0, {0x5, 0x1, 0x200003, 0x4, 0x0, 0xfffffffffffffffb, 0x9e9, 0x6, 0x3f, 0x6000, 0x5, 0xffffffffffffffff, 0xee01, 0x3c, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r5) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='1', 0x1) 4.827883917s ago: executing program 1 (id=260): openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x40600, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0) 4.419869136s ago: executing program 2 (id=261): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) 4.326115638s ago: executing program 0 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xb, &(0x7f0000000040)) r0 = getpid() setrlimit(0x1, &(0x7f0000000080)={0x2, 0x6}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrlimit(0xb, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e) read$usbmon(r4, 0x0, 0x0) 4.161230973s ago: executing program 2 (id=263): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f00000003c0)='./file0\x00', 0x20, &(0x7f0000005140)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {}, {@default_permissions}], [{@measure}, {@fowner_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, '+\'!^+-('}}]}}, 0x0, 0x0, &(0x7f00000052c0)="c90c4d96b974e11d7eb8d75413daf4e0dab504d2091456583160361f7e2129ee0946d8aab75f25838b46a81bd23c7995cd711852bd8d926e35709795a6ac3461cec70dcbd2663517068b7fd128441243e0b972baeb5392d4065dea5a1a0a616ce2784604") sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2300000008000000020000ddfeff000005"], 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010101}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x70bd27, 0xfffffffe, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) 3.247554244s ago: executing program 3 (id=264): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x1, 0x0, 0xffff}) 2.95890308s ago: executing program 1 (id=265): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) pipe2(0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000440)=@multiplanar_userptr={0x1, 0x0, 0x4, 0x70000, 0x401, {}, {0x2, 0x4, 0x61, 0x10, 0x7, 0x2, "229b55ee"}, 0x3, 0x2, {0x0}, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4800) mq_open(&(0x7f0000001380)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) 2.1484754s ago: executing program 0 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x6, 0x7, [0x1, 0xffffffff, 0x400, 0x0]}}) pipe2(&(0x7f0000000000), 0x0) 2.11459507s ago: executing program 3 (id=267): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00000c00028005007c802800000004"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.375895108s ago: executing program 3 (id=268): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f00000003c0)="0400000000000000000000006e0132") ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x40, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xd0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.346208598s ago: executing program 1 (id=269): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a0100000000000000000000000002"], 0x50}, 0x1, 0x7}, 0x20000000) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, &(0x7f0000000000)="3f000000010000", 0x7) listen(r1, 0x4) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000280)) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r7 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r7, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 1.197401402s ago: executing program 2 (id=270): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./img\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000200)="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", 0x1000) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16, @ANYBLOB="0100fe02000000000000200000000c00"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='/dev/loop0,65', 0xd) 517.397207ms ago: executing program 0 (id=271): chdir(&(0x7f0000000140)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 101.514177ms ago: executing program 3 (id=272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) syz_emit_ethernet(0x46, &(0x7f00000008c0)=ANY=[], 0x0) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 0s ago: executing program 1 (id=273): openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x40600, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 80.079539][ T5762] cgroup: Unknown subsys name 'net' [ 80.216396][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.872685][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.562196][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.570265][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.579230][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.587900][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.596345][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.604473][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.612090][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.617486][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.627772][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.630719][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.638300][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.650263][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.660452][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.669080][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.676448][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.688785][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.689939][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.703397][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.719333][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.727516][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.755579][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.763842][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.772196][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.779666][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.286675][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 84.385462][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 84.415906][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 84.427802][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 84.595784][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.604296][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.611880][ T5774] bridge_slave_0: entered allmulticast mode [ 84.619156][ T5774] bridge_slave_0: entered promiscuous mode [ 84.629413][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.636582][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.643890][ T5774] bridge_slave_1: entered allmulticast mode [ 84.651369][ T5774] bridge_slave_1: entered promiscuous mode [ 84.724954][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.732363][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.739715][ T5775] bridge_slave_0: entered allmulticast mode [ 84.746708][ T5775] bridge_slave_0: entered promiscuous mode [ 84.786541][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.794153][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.801525][ T5773] bridge_slave_0: entered allmulticast mode [ 84.808827][ T5773] bridge_slave_0: entered promiscuous mode [ 84.819992][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.827225][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.834934][ T5775] bridge_slave_1: entered allmulticast mode [ 84.842604][ T5775] bridge_slave_1: entered promiscuous mode [ 84.852104][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.862036][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.869691][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.877012][ T5778] bridge_slave_0: entered allmulticast mode [ 84.884265][ T5778] bridge_slave_0: entered promiscuous mode [ 84.893340][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.901838][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.909616][ T5773] bridge_slave_1: entered allmulticast mode [ 84.916908][ T5773] bridge_slave_1: entered promiscuous mode [ 84.934788][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.946691][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.954274][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.961797][ T5778] bridge_slave_1: entered allmulticast mode [ 84.969389][ T5778] bridge_slave_1: entered promiscuous mode [ 85.034151][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.048927][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.060877][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.073190][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.124931][ T5774] team0: Port device team_slave_0 added [ 85.134212][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.146711][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.178653][ T5774] team0: Port device team_slave_1 added [ 85.197282][ T5773] team0: Port device team_slave_0 added [ 85.208363][ T5775] team0: Port device team_slave_0 added [ 85.238227][ T5773] team0: Port device team_slave_1 added [ 85.246781][ T5775] team0: Port device team_slave_1 added [ 85.287322][ T5778] team0: Port device team_slave_0 added [ 85.296697][ T5778] team0: Port device team_slave_1 added [ 85.326271][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.333376][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.359833][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.393958][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.403236][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.432477][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.445205][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.452659][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.480021][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.512182][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.519209][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.545927][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.559267][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.566241][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.592605][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.605135][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.612358][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.638910][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.662102][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.669196][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.695260][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.708955][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.715951][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.742093][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.806458][ T5775] hsr_slave_0: entered promiscuous mode [ 85.812934][ T5775] hsr_slave_1: entered promiscuous mode [ 85.858743][ T5774] hsr_slave_0: entered promiscuous mode [ 85.865188][ T5774] hsr_slave_1: entered promiscuous mode [ 85.871940][ T5782] Bluetooth: hci1: command tx timeout [ 85.877754][ T5782] Bluetooth: hci0: command tx timeout [ 85.878447][ T5784] Bluetooth: hci2: command tx timeout [ 85.889379][ T51] Bluetooth: hci3: command tx timeout [ 85.896863][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.904903][ T5774] Cannot create hsr debugfs directory [ 85.917552][ T5773] hsr_slave_0: entered promiscuous mode [ 85.924347][ T5773] hsr_slave_1: entered promiscuous mode [ 85.930899][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.938556][ T5773] Cannot create hsr debugfs directory [ 86.050824][ T5778] hsr_slave_0: entered promiscuous mode [ 86.057236][ T5778] hsr_slave_1: entered promiscuous mode [ 86.063795][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.071433][ T5778] Cannot create hsr debugfs directory [ 86.458017][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.471841][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.484041][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.495395][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.564927][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.600368][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.624465][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.636445][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.711057][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.722723][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.733488][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.745806][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.832514][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.843336][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.855660][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.866624][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.959389][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.096535][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.127023][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.186184][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.201363][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.208822][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.222076][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.229332][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.297227][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.304441][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.315829][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.323062][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.373749][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.428551][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.541787][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.581486][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.640002][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.647262][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.680743][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.688019][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.724648][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.732077][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.830927][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.838258][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.948723][ T5784] Bluetooth: hci3: command tx timeout [ 87.954485][ T5085] Bluetooth: hci2: command tx timeout [ 87.960234][ T5784] Bluetooth: hci0: command tx timeout [ 87.965706][ T5784] Bluetooth: hci1: command tx timeout [ 88.004143][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.179065][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.246462][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.280046][ T5774] veth0_vlan: entered promiscuous mode [ 88.322186][ T5774] veth1_vlan: entered promiscuous mode [ 88.391200][ T5773] veth0_vlan: entered promiscuous mode [ 88.418198][ T5774] veth0_macvtap: entered promiscuous mode [ 88.445063][ T5774] veth1_macvtap: entered promiscuous mode [ 88.463827][ T5773] veth1_vlan: entered promiscuous mode [ 88.525490][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.581934][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.621587][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.636286][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.646307][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.660033][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.696331][ T5773] veth0_macvtap: entered promiscuous mode [ 88.709900][ T5773] veth1_macvtap: entered promiscuous mode [ 88.741951][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.773801][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.785454][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.802874][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.822919][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.846820][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.858030][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.870628][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.923435][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.936576][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.946674][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.955856][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.016589][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.033414][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.084632][ T5778] veth0_vlan: entered promiscuous mode [ 89.105963][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.132821][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.163289][ T5778] veth1_vlan: entered promiscuous mode [ 89.223588][ T5775] veth0_vlan: entered promiscuous mode [ 89.241713][ T5775] veth1_vlan: entered promiscuous mode [ 89.282370][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.300552][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.340173][ T5778] veth0_macvtap: entered promiscuous mode [ 89.415298][ T5778] veth1_macvtap: entered promiscuous mode [ 89.429297][ T5840] 9pnet_fd: Insufficient options for proto=fd [ 89.449726][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.360853][ T5782] Bluetooth: hci1: command tx timeout [ 91.360974][ T51] Bluetooth: hci3: command tx timeout [ 91.372255][ T5085] Bluetooth: hci0: command tx timeout [ 91.378275][ T5784] Bluetooth: hci2: command tx timeout [ 91.401542][ T5775] veth0_macvtap: entered promiscuous mode [ 91.407648][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.446910][ T5775] veth1_macvtap: entered promiscuous mode [ 91.469545][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.480249][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.509517][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.534594][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.552790][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.577447][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.610672][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.623398][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.636742][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.648004][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.663040][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.675370][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.686429][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.707553][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.718913][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.729847][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.749346][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.773303][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.786006][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.802858][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.813689][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.823946][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.835048][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.847289][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.883263][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.900468][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.927797][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.936557][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.000971][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.017897][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.042170][ T790] cfg80211: failed to load regulatory.db [ 92.048497][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.057249][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.306049][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.329051][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.380442][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.419103][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.484425][ T4188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.513162][ T4188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.575609][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.586849][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.799940][ T5085] Bluetooth: hci0: unexpected cc 0x200b length: 2 > 1 [ 94.690647][ T5085] Bluetooth: hci1: command tx timeout [ 94.696133][ T5085] Bluetooth: hci3: command tx timeout [ 94.697784][ T51] Bluetooth: hci2: command tx timeout [ 94.804211][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5'. [ 95.234610][ T5875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.445605][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.477397][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.494424][ T5874] bond0 (unregistering): Released all slaves [ 98.866675][ T5904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.954739][ T5906] syz.3.24[5906]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.114248][ T5906] loop3: detected capacity change from 0 to 4096 [ 99.195707][ T5906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.381027][ T5910] loop2: detected capacity change from 0 to 4096 [ 99.458792][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.526623][ T5910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.629590][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.653370][ T9] IPVS: starting estimator thread 0... [ 99.744071][ T28] audit: type=1804 audit(1786423240.653:2): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.12" name=2F6E6577726F6F742F322F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop2" ino=18 res=1 errno=0 [ 99.826188][ T5908] bond0 (unregistering): Released all slaves [ 99.832496][ T5914] IPVS: using max 16 ests per chain, 38400 per kthread [ 99.893922][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.001950][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.350733][ T5950] loop3: detected capacity change from 0 to 256 [ 103.431836][ T5926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.731883][ T5952] loop0: detected capacity change from 0 to 2048 [ 103.841659][ T5952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.027890][ T5957] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.165328][ T5959] loop3: detected capacity change from 0 to 512 [ 104.181839][ T5959] ======================================================= [ 104.181839][ T5959] WARNING: The mand mount option has been deprecated and [ 104.181839][ T5959] and is ignored by this kernel. Remove the mand [ 104.181839][ T5959] option from the mount to silence this warning. [ 104.181839][ T5959] ======================================================= [ 104.667286][ T5965] fuse: Unknown parameter 'grou00000000000000000000' [ 104.737935][ T5959] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.40: inode has both inline data and extents flags [ 104.800307][ T5959] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.40: couldn't read orphan inode 15 (err -117) [ 104.881141][ T5959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.958228][ T5968] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 105.273550][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.364260][ T5972] overlayfs: failed to resolve './file0': -2 [ 106.087582][ C1] sched: RT throttling activated [ 107.297733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.889854][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.454581][ T5991] loop3: detected capacity change from 0 to 256 [ 110.937934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 112.228395][ T6005] fuse: Unknown parameter 'grou00000000000000000000' [ 112.877108][ T6020] tipc: Started in network mode [ 112.883779][ T6020] tipc: Node identity e666eef6de4f, cluster identity 4711 [ 112.892768][ T6020] tipc: Enabled bearer , priority 0 [ 112.901861][ T6020] syzkaller0: entered promiscuous mode [ 112.907532][ T6020] syzkaller0: entered allmulticast mode [ 112.957048][ T6020] tipc: Resetting bearer [ 112.984756][ T6019] tipc: Resetting bearer [ 113.229367][ T6014] syz.2.54 (6014) used greatest stack depth: 17896 bytes left [ 113.744058][ T6019] tipc: Disabling bearer [ 114.434230][ T6041] loop1: detected capacity change from 0 to 128 [ 114.491165][ T6041] EXT4-fs (loop1): Test dummy encryption mode enabled [ 114.509945][ T6047] fuse: Unknown parameter 'group_i00000000000000000000' [ 114.547340][ T6041] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.565238][ T6041] ext4 filesystem being mounted at /14/file0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.818878][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.705476][ T6064] tipc: Started in network mode [ 116.727941][ T6064] tipc: Node identity b2248b0d15d, cluster identity 4711 [ 116.737070][ T6064] tipc: Enabled bearer , priority 0 [ 116.779462][ T6066] syzkaller0: entered promiscuous mode [ 116.785007][ T6066] syzkaller0: entered allmulticast mode [ 116.918475][ T6064] tipc: Resetting bearer [ 116.967901][ T6060] tipc: Resetting bearer [ 117.141352][ T6060] tipc: Disabling bearer [ 117.742160][ T6083] netlink: 32 bytes leftover after parsing attributes in process `syz.3.78'. [ 120.741338][ T6098] loop3: detected capacity change from 0 to 512 [ 120.774472][ T6098] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 120.794493][ T6098] EXT4-fs (loop3): group descriptors corrupted! [ 120.886747][ T5783] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.150343][ T6107] loop2: detected capacity change from 0 to 512 [ 121.896720][ T6107] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.86: inode has both inline data and extents flags [ 122.076487][ T5784] Bluetooth: hci0: unexpected cc 0x200b length: 2 > 1 [ 122.112084][ T6107] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.86: couldn't read orphan inode 15 (err -117) [ 122.149737][ T6107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.324859][ T6117] macvlan0: entered promiscuous mode [ 122.430325][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.860111][ T6121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.782198][ T5784] Bluetooth: hci2: unexpected cc 0x200b length: 2 > 1 [ 130.253408][ T6176] loop0: detected capacity change from 0 to 1024 [ 130.341859][ T6176] autofs4:pid:6176:autofs_fill_super: called with bogus options [ 130.491370][ T6178] loop0: detected capacity change from 0 to 128 [ 130.587489][ T6178] EXT4-fs (loop0): Test dummy encryption mode enabled [ 130.770989][ T6178] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.968535][ T6178] ext4 filesystem being mounted at /24/file1/file0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.529302][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.723699][ T5784] Bluetooth: hci1: unexpected cc 0x200b length: 2 > 1 [ 131.734814][ T6190] loop2: detected capacity change from 0 to 256 [ 132.088070][ T6196] syzkaller0: entered promiscuous mode [ 132.093982][ T6196] syzkaller0: entered allmulticast mode [ 134.463303][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.470432][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.793549][ T6214] loop2: detected capacity change from 0 to 512 [ 134.801496][ T6208] loop0: detected capacity change from 0 to 8192 [ 134.843196][ T6214] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 134.906577][ T6214] EXT4-fs (loop2): group descriptors corrupted! [ 135.652698][ T6225] 9pnet_fd: Insufficient options for proto=fd [ 135.823400][ T5784] Bluetooth: hci2: unexpected cc 0x200b length: 2 > 1 [ 136.681230][ T6240] capability: warning: `syz.0.123' uses deprecated v2 capabilities in a way that may be insecure [ 138.243254][ T5784] Bluetooth: hci0: unexpected cc 0x200b length: 2 > 1 [ 138.683968][ T6268] loop2: detected capacity change from 0 to 1024 [ 138.811252][ T6268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.403570][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.600502][ T6286] 9pnet_fd: Insufficient options for proto=fd [ 139.882042][ T6276] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.900923][ T6276] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 139.976012][ T6276] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.049438][ T6276] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.080748][ T6276] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.217983][ T6276] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.264739][ T6276] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.298141][ T6276] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.321970][ T6276] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.417137][ T6276] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.499159][ T6276] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.553904][ T6276] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.574124][ T6283] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 140.782187][ T6293] loop0: detected capacity change from 0 to 512 [ 140.852571][ T6293] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 140.877765][ T6293] EXT4-fs (loop0): group descriptors corrupted! [ 141.154875][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.107682][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.267958][ T5784] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.427797][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.122522][ T6319] loop3: detected capacity change from 0 to 256 [ 143.232635][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.485298][ T6326] gadgetfs: bound to dummy_udc driver [ 143.509985][ T6328] 9pnet_fd: Insufficient options for proto=fd [ 144.197778][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.357722][ T5784] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.521749][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.337944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 146.367647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 146.589915][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.596041][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.597867][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.602356][ T5085] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.612176][ T6367] loop3: detected capacity change from 0 to 512 [ 147.673317][ T6363] loop0: detected capacity change from 0 to 4096 [ 147.728968][ T6367] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 147.758608][ T6367] EXT4-fs (loop3): group descriptors corrupted! [ 147.858695][ T6363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.184066][ T2199] IPVS: starting estimator thread 0... [ 148.298343][ T6372] IPVS: using max 19 ests per chain, 45600 per kthread [ 149.337873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 151.349941][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.565832][ T6382] loop1: detected capacity change from 0 to 512 [ 151.603389][ T6382] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 151.828326][ T4188] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 151.845088][ T4188] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1 [ 151.845196][ T6382] EXT4-fs (loop1): 1 orphan inode deleted [ 151.926864][ T6382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.953544][ T6382] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.292189][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.464393][ T6396] 9pnet_fd: Insufficient options for proto=fd [ 152.970867][ T6408] Zero length message leads to an empty skb [ 154.416986][ T6404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.484117][ T6404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.509330][ T6404] bond0 (unregistering): Released all slaves [ 156.015532][ T6421] loop2: detected capacity change from 0 to 512 [ 156.151979][ T6421] EXT4-fs (loop2): 1 orphan inode deleted [ 156.160768][ T6421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.174089][ T11] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 156.214492][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 156.309953][ T6421] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.539206][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.469121][ T6449] 9pnet_fd: Insufficient options for proto=fd [ 159.973424][ T6459] loop1: detected capacity change from 0 to 512 [ 160.036451][ T6459] EXT4-fs (loop1): 1 orphan inode deleted [ 160.050370][ T78] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 160.095968][ T6459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.099253][ T78] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 1 [ 160.135793][ T6459] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.254386][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.494715][ T6469] loop3: detected capacity change from 0 to 256 [ 163.867773][ T6503] nbd2: detected capacity change from 0 to 8 [ 164.320854][ T6510] 9pnet_fd: Insufficient options for proto=fd [ 164.846510][ T6507] block nbd2: shutting down sockets [ 164.919606][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.929105][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 164.937110][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.950116][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 164.980397][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.989692][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 165.000005][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.010055][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 165.021837][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.031290][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 165.039649][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.049143][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 165.057216][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.066706][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 165.075091][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.084226][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 165.092298][ T5788] ldm_validate_partition_table(): Disk read failed. [ 165.107659][ T5788] Dev nbd2: unable to read RDB block 0 [ 165.113211][ T5788] nbd2: unable to read partition table [ 165.119549][ T5788] nbd2: partition table beyond EOD, truncated [ 166.421263][ T6533] loop1: detected capacity change from 0 to 512 [ 166.498194][ T6533] EXT4-fs (loop1): 1 orphan inode deleted [ 166.532800][ T4188] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 166.536896][ T6540] loop0: detected capacity change from 0 to 512 [ 166.577806][ T4188] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1 [ 166.590526][ T6533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.628049][ T6533] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.658585][ T6540] EXT4-fs: inline encryption not supported [ 167.695701][ T6540] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #15: comm syz.0.209: corrupted inode contents [ 167.763175][ T6540] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 167.783221][ T6540] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #15: comm syz.0.209: corrupted inode contents [ 167.810481][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.820281][ T6540] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.209: mark_inode_dirty error [ 167.835069][ T6540] EXT4-fs (loop0): 1 orphan inode deleted [ 167.909359][ T6540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.069402][ T5784] Bluetooth: hci1: unexpected event for opcode 0x204e [ 169.209158][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.499511][ T6560] loop1: detected capacity change from 0 to 4096 [ 169.611312][ T6560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.812427][ T5817] IPVS: starting estimator thread 0... [ 169.941477][ T6568] loop3: detected capacity change from 0 to 512 [ 169.948436][ T6566] IPVS: using max 18 ests per chain, 43200 per kthread [ 170.005712][ T6568] EXT4-fs: inline encryption not supported [ 170.114437][ T6568] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 170.219793][ T6568] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.218: corrupted in-inode xattr: e_value size too large [ 170.331545][ T6568] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.218: couldn't read orphan inode 15 (err -117) [ 170.375612][ T6568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.721115][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.794314][ T6575] loop0: detected capacity change from 0 to 512 [ 171.122371][ T6575] EXT4-fs (loop0): 1 orphan inode deleted [ 171.264299][ T6575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.294949][ T78] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 171.306114][ T78] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 1 [ 171.939032][ T6581] tty tty3: ldisc open failed (-12), clearing slot 2 [ 172.112463][ T6575] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.954307][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.394282][ T6593] loop3: detected capacity change from 0 to 512 [ 173.453869][ T6593] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.224: iget: bad i_size value: 38620345925642 [ 173.492032][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.507453][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.650278][ T6593] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.224: couldn't read orphan inode 15 (err -117) [ 173.740117][ T6597] netlink: 'syz.0.223': attribute type 16 has an invalid length. [ 173.748867][ T6593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.798543][ T6597] netlink: 'syz.0.223': attribute type 17 has an invalid length. [ 173.850676][ T6599] 9pnet_fd: Insufficient options for proto=fd [ 174.040062][ T6597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.937800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 175.226682][ T6538] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 175.753097][ T78] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1344 with error 28 [ 175.930080][ T78] EXT4-fs (loop3): This should not happen!! Data will be lost [ 175.930080][ T78] [ 175.978105][ T78] EXT4-fs (loop3): Total free blocks count 0 [ 175.984353][ T78] EXT4-fs (loop3): Free/Dirty block details [ 176.019042][ T78] EXT4-fs (loop3): free_blocks=0 [ 176.024126][ T78] EXT4-fs (loop3): dirty_blocks=1348 [ 176.037785][ T78] EXT4-fs (loop3): Block reservation details [ 176.060571][ T78] EXT4-fs (loop3): i_reserved_data_blocks=1348 [ 176.189530][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.288825][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.665656][ T6617] Bluetooth: MGMT ver 1.22 [ 180.689561][ T6630] 9pnet_fd: Insufficient options for proto=fd [ 184.198779][ T6647] loop3: detected capacity change from 0 to 512 [ 184.276136][ T6647] EXT4-fs (loop3): 1 orphan inode deleted [ 184.288423][ T78] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 184.309608][ T6647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.326392][ T78] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 1 [ 184.362359][ T6647] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.397966][ T6652] loop1: detected capacity change from 0 to 512 [ 184.577923][ T6652] EXT4-fs: inline encryption not supported [ 184.692452][ T6652] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 185.251089][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.271489][ T6652] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.240: corrupted in-inode xattr: e_value size too large [ 185.379778][ T6652] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.240: couldn't read orphan inode 15 (err -117) [ 185.583348][ T6652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.768581][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.075693][ T6671] 9pnet_fd: Insufficient options for proto=fd [ 186.407566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 187.328251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 187.737839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 188.807084][ T28] audit: type=1326 audit(1786423329.723:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.2.245" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b6b9e0d9 code=0x7fc00000 [ 190.053068][ T6691] loop2: detected capacity change from 0 to 512 [ 190.192223][ T6698] loop1: detected capacity change from 0 to 512 [ 190.218145][ T6691] EXT4-fs (loop2): 1 orphan inode deleted [ 190.225298][ T6691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.248915][ T6698] EXT4-fs: inline encryption not supported [ 190.265555][ T6698] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 190.275907][ T78] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 190.295241][ T6691] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.329124][ T6698] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.250: corrupted in-inode xattr: e_value size too large [ 190.339348][ T78] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 1 [ 190.387738][ T6698] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.250: couldn't read orphan inode 15 (err -117) [ 190.635809][ T6698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.162634][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.240101][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.568234][ T6708] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.587103][ T6708] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.747977][ T6708] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.754137][ T6708] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.206685][ T6728] loop0: detected capacity change from 0 to 256 [ 194.252556][ T6728] FAT-fs (loop0): Unrecognized mount option "smackfsf" or missing value [ 195.018380][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.024770][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.408011][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.414188][ T5782] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.431174][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout [ 195.442149][ T5085] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.849986][ T6734] loop1: detected capacity change from 0 to 512 [ 195.903655][ T6734] EXT4-fs (loop1): 1 orphan inode deleted [ 195.927739][ T42] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 195.934507][ T6734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.941001][ T42] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 1 [ 196.079520][ T6734] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.323747][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.243919][ T6777] loop0: detected capacity change from 0 to 8 [ 200.330467][ T6777] block2mtd: erasesize must be a divisor of device size [ 200.384886][ T5783] ------------[ cut here ]------------ [ 200.390867][ T5783] WARNING: CPU: 1 PID: 5783 at block/bdev.c:643 blkdev_flush_mapping+0xac/0x290 [ 200.400277][ T5783] Modules linked in: [ 200.404303][ T5783] CPU: 1 PID: 5783 Comm: udevd Not tainted syzkaller #0 [ 200.411510][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.421786][ T5783] RIP: 0010:blkdev_flush_mapping+0xac/0x290 [ 200.427881][ T5783] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 8f 32 cc fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 5b bf a1 fd eb 11 e8 44 af 73 fd <0f> 0b 48 85 db 75 9f e8 38 af 73 fd 48 89 1c 24 4c 8d b3 80 00 00 [ 200.448259][ T5783] RSP: 0018:ffffc9000455fda0 EFLAGS: 00010293 [ 200.454385][ T5783] RAX: ffffffff8413c2dc RBX: ffff888148db5240 RCX: ffff88807d9a1e00 [ 200.462764][ T5783] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 200.471024][ T5783] RBP: 0000000000000002 R08: ffff888148db527b R09: 1ffff110291b6a4f [ 200.479181][ T5783] R10: dffffc0000000000 R11: ffffed10291b6a50 R12: dffffc0000000000 [ 200.487208][ T5783] R13: dffffc0000000000 R14: ffff888148db5374 R15: ffff888148db5278 [ 200.495341][ T5783] FS: 00007f3d10fdb880(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 200.504402][ T5783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.511868][ T5783] CR2: 00007f3d10fda000 CR3: 00000000251fe000 CR4: 00000000003506e0 [ 200.519963][ T5783] Call Trace: [ 200.523324][ T5783] [ 200.526300][ T5783] ? blkdev_put+0x492/0x7a0 [ 200.530936][ T5783] blkdev_put+0x49a/0x7a0 [ 200.535330][ T5783] blkdev_release+0x84/0x90 [ 200.540539][ T5783] ? blkdev_open+0x360/0x360 [ 200.545185][ T5783] __fput+0x221/0x940 [ 200.549412][ T5783] __se_sys_close+0x15c/0x1e0 [ 200.554159][ T5783] do_syscall_64+0x55/0xb0 [ 200.558691][ T5783] ? clear_bhb_loop+0x40/0x90 [ 200.563420][ T5783] ? clear_bhb_loop+0x40/0x90 [ 200.568213][ T5783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.574167][ T5783] RIP: 0033:0x7f3d108a7407 [ 200.578706][ T5783] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 200.598451][ T5783] RSP: 002b:00007ffd2aae95b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 200.606967][ T5783] RAX: ffffffffffffffda RBX: 00007f3d10fdb880 RCX: 00007f3d108a7407 [ 200.615143][ T5783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 200.623233][ T5783] RBP: 00007f3d10fdb6e8 R08: 0000000000000000 R09: 0000000000000000 [ 200.631318][ T5783] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 200.639784][ T5783] R13: 000055e7194fe410 R14: 0000000000000008 R15: 000055e719509c80 [ 200.648306][ T5783] [ 200.651372][ T5783] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 200.658715][ T5783] CPU: 1 PID: 5783 Comm: udevd Not tainted syzkaller #0 [ 200.665782][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.675880][ T5783] Call Trace: [ 200.679194][ T5783] [ 200.682203][ T5783] dump_stack_lvl+0x18c/0x250 [ 200.686935][ T5783] ? show_regs_print_info+0x20/0x20 [ 200.692202][ T5783] ? load_image+0x420/0x420 [ 200.696797][ T5783] panic+0x2ca/0x720 [ 200.700785][ T5783] ? bpf_jit_dump+0xd0/0xd0 [ 200.705376][ T5783] __warn+0x2e0/0x470 [ 200.709422][ T5783] ? blkdev_flush_mapping+0xac/0x290 [ 200.714780][ T5783] ? blkdev_flush_mapping+0xac/0x290 [ 200.720121][ T5783] report_bug+0x2be/0x4f0 [ 200.724519][ T5783] ? blkdev_flush_mapping+0xac/0x290 [ 200.729903][ T5783] ? blkdev_flush_mapping+0xac/0x290 [ 200.735246][ T5783] ? blkdev_flush_mapping+0xae/0x290 [ 200.740591][ T5783] handle_bug+0xcf/0x120 [ 200.744898][ T5783] exc_invalid_op+0x1a/0x50 [ 200.749457][ T5783] asm_exc_invalid_op+0x1a/0x20 [ 200.754374][ T5783] RIP: 0010:blkdev_flush_mapping+0xac/0x290 [ 200.760338][ T5783] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 8f 32 cc fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 5b bf a1 fd eb 11 e8 44 af 73 fd <0f> 0b 48 85 db 75 9f e8 38 af 73 fd 48 89 1c 24 4c 8d b3 80 00 00 [ 200.780004][ T5783] RSP: 0018:ffffc9000455fda0 EFLAGS: 00010293 [ 200.786131][ T5783] RAX: ffffffff8413c2dc RBX: ffff888148db5240 RCX: ffff88807d9a1e00 [ 200.794159][ T5783] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 200.802220][ T5783] RBP: 0000000000000002 R08: ffff888148db527b R09: 1ffff110291b6a4f [ 200.810243][ T5783] R10: dffffc0000000000 R11: ffffed10291b6a50 R12: dffffc0000000000 [ 200.818267][ T5783] R13: dffffc0000000000 R14: ffff888148db5374 R15: ffff888148db5278 [ 200.826491][ T5783] ? blkdev_flush_mapping+0xac/0x290 [ 200.831850][ T5783] ? blkdev_put+0x492/0x7a0 [ 200.836411][ T5783] blkdev_put+0x49a/0x7a0 [ 200.840811][ T5783] blkdev_release+0x84/0x90 [ 200.845377][ T5783] ? blkdev_open+0x360/0x360 [ 200.850027][ T5783] __fput+0x221/0x940 [ 200.854089][ T5783] __se_sys_close+0x15c/0x1e0 [ 200.858864][ T5783] do_syscall_64+0x55/0xb0 [ 200.863372][ T5783] ? clear_bhb_loop+0x40/0x90 [ 200.868106][ T5783] ? clear_bhb_loop+0x40/0x90 [ 200.872836][ T5783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.878766][ T5783] RIP: 0033:0x7f3d108a7407 [ 200.883250][ T5783] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 200.902895][ T5783] RSP: 002b:00007ffd2aae95b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 200.911441][ T5783] RAX: ffffffffffffffda RBX: 00007f3d10fdb880 RCX: 00007f3d108a7407 [ 200.919555][ T5783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 200.927561][ T5783] RBP: 00007f3d10fdb6e8 R08: 0000000000000000 R09: 0000000000000000 [ 200.935562][ T5783] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 200.943558][ T5783] R13: 000055e7194fe410 R14: 0000000000000008 R15: 000055e719509c80 [ 200.951581][ T5783] [ 200.954775][ T5783] Kernel Offset: disabled [ 200.959183][ T5783] Rebooting in 86400 seconds..