last executing test programs: 11.527086348s ago: executing program 4 (id=27): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r2, 0x40000000) 10.177383617s ago: executing program 4 (id=32): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.787964348s ago: executing program 4 (id=37): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f00000029c0), 0x400006d, 0x20000004) sched_setattr(0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x9}], 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000fc00000000000000000000000000000000000400000000000a0060003b0000"], 0xb8}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x13, r0, 0xec776000) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') socket(0x10, 0x3, 0x0) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000000080), 0x2}, {0x3, &(0x7f0000003fc0)=0x1000000003, 0x82}], 0x2, 0x0, 0x0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0bc6097ea4b21144735a12830b92f72efb536a6a15287aaf4cfb6908fb27e9da76aecd06afae8b6ce6b112d3b0bb3200b3dc133d723478d567083ea489f406d7a945f3669e639abd1f1c3cc6f7dafb2d372e81f02fb699a3661a07a925244990cefb61a0d3c64e16444b80e69b1a4b8bb7782733323a1ae1f738d01468bdac80ed096f047256188d80920da86a01156315519d778cd1017a8cc672b54debd86429b8e773a8fbaaca9c2bf74bf2ce3297ee7f0c9837971d4fbf8a3aaec08517274c1a52c720fccd5dfec6305a02b994341468e5", @ANYRES32=r6, @ANYRES32=r6, @ANYRES32], 0x18, 0x8000}}], 0x2, 0x0) 6.296439061s ago: executing program 0 (id=56): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) 6.223715126s ago: executing program 4 (id=57): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r2 = syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x2a020400) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000083, &(0x7f00000000c0), 0x3, 0x4f0, &(0x7f0000000940)="$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") ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000240)="178cbc373955c83052ab4d532d445c038f5f6f735c03a96e989128fcbc3e61e886e97a982d6d41666114eb9a621486e2e53a7e47eb6da5b7aed7df4e85c99475fe62486a21480caf83950145359acfc3479753192a15c657f49114b21f36b2d4c0586af0bf239e017b108e1801e4192d9fe201f8c9f39bcf82af5bd6a8ca4c38e5dc050a095919287f69643b135a3416c591812a07f94fa3bb58") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {0xa}, {0xc, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff2, 0x1}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18934}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000080}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9}, {0x0, 0xfff1}, {0xa, 0xe}}}, 0x24}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f50000000000000000000000000000000000000000eafb"], 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f00000003c0)={[{@journal_async_commit}, {@stripe={'stripe', 0x3d, 0x8000}}, {@jqfmt_vfsv0}, {@minixdf}, {@nombcache}, {@commit={'commit', 0x3d, 0x7fff}}]}, 0x1, 0x4cd, &(0x7f0000001380)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000300)=0x4000) 6.009149064s ago: executing program 0 (id=59): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCBRDELBR(r8, 0x89a1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f00000000c0), 0x4) writev(r11, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004480)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x1, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) 5.92639174s ago: executing program 3 (id=60): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e0000000000000000000000050006"], 0x70}}, 0x0) 5.764019233s ago: executing program 3 (id=61): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r2, 0x40000000) 5.084071478s ago: executing program 1 (id=65): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) ustat(0x2, &(0x7f0000001800)) 4.902306793s ago: executing program 0 (id=67): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f00000029c0), 0x400006d, 0x20000004) sched_setattr(0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x9}], 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000fc00000000000000000000000000000000000400000000000a0060003b0000"], 0xb8}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x13, r0, 0xec776000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') socket(0x10, 0x3, 0x0) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000000080), 0x2}, {0x3, &(0x7f0000003fc0)=0x1000000003, 0x82}], 0x2, 0x0, 0x0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0bc6097ea4b21144735a12830b92f72efb536a6a15287aaf4cfb6908fb27e9da76aecd06afae8b6ce6b112d3b0bb3200b3dc133d723478d567083ea489f406d7a945f3669e639abd1f1c3cc6f7dafb2d372e81f02fb699a3661a07a925244990cefb61a0d3c64e16444b80e69b1a4b8bb7782733323a1ae1f738d01468bdac80ed096f047256188d80920da86a01156315519d778cd1017a8cc672b54debd86429b8e773a8fbaaca9c2bf74bf2ce3297ee7f0c9837971d4fbf8a3aaec08517274c1a52c720fccd5dfec6305a02b994341468e5", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32], 0x18, 0x8000}}], 0x2, 0x0) 4.760093025s ago: executing program 4 (id=68): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) pause() 4.753856475s ago: executing program 1 (id=69): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) msgget$private(0x0, 0x8) 4.369208896s ago: executing program 1 (id=72): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 4.183242041s ago: executing program 1 (id=73): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x3}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xff7ffffc, 0x1000, 0x0, 0x333}, &(0x7f00000001c0), &(0x7f0000ff4000)) close_range(r0, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @empty}}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r7 = landlock_create_ruleset(&(0x7f0000000040)={0x5000, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) linkat(r6, &(0x7f00000001c0)='./mnt\x00', r6, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYRESDEC=r2], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc004) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 3.987753797s ago: executing program 3 (id=75): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) 3.450140301s ago: executing program 3 (id=78): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCBRDELBR(r8, 0x89a1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f00000000c0), 0x4) writev(r11, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004480)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x1, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) 2.898176465s ago: executing program 2 (id=79): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a01"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.687995182s ago: executing program 4 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 2.066739522s ago: executing program 32 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 2.043482064s ago: executing program 0 (id=82): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) 2.043192454s ago: executing program 2 (id=83): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) write(r2, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 1.885758037s ago: executing program 3 (id=84): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 1.696087032s ago: executing program 0 (id=85): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r2, 0x40000000) 1.652906006s ago: executing program 2 (id=86): setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x80000) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1.518783377s ago: executing program 3 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) chdir(0x0) r3 = open(0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r3) fanotify_mark(0xffffffffffffffff, 0x201, 0x4000003e, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) 1.364081399s ago: executing program 2 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 1.181037454s ago: executing program 2 (id=89): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) 1.136251117s ago: executing program 1 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 844.047741ms ago: executing program 2 (id=91): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x4000800) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x400c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000600)=""/169, 0xa9}, {&(0x7f0000000540)=""/74, 0x4a}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/227, 0xe3}], 0x6}, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x86) 46.412376ms ago: executing program 0 (id=92): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) 0s ago: executing program 1 (id=93): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x1, 0x12}, &(0x7f0000000040)=0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 52.313877][ T4254] cgroup: Unknown subsys name 'net' [ 52.443984][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.668681][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.062093][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.073421][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.078002][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.081120][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.089641][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.096591][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.103497][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.109985][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.117769][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.125073][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.131913][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.138170][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.146535][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.153229][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.166263][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.167503][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.173803][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.181062][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.194512][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.195707][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.209344][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.216523][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.224637][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.230325][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.231970][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.241693][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.248321][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.253360][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.275848][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.296235][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.685701][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 55.702770][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 55.797498][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 55.816581][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 55.844503][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 55.909124][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.916270][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.924826][ T4267] device bridge_slave_0 entered promiscuous mode [ 55.936782][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.943931][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.952031][ T4267] device bridge_slave_1 entered promiscuous mode [ 55.996106][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.003476][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.011448][ T4266] device bridge_slave_0 entered promiscuous mode [ 56.045727][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.052970][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.061544][ T4266] device bridge_slave_1 entered promiscuous mode [ 56.070434][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.109173][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.118421][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.125949][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.134365][ T4273] device bridge_slave_0 entered promiscuous mode [ 56.147289][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.154471][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.162239][ T4271] device bridge_slave_0 entered promiscuous mode [ 56.185646][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.195519][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.203740][ T4273] device bridge_slave_1 entered promiscuous mode [ 56.218045][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.225241][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.233526][ T4265] device bridge_slave_0 entered promiscuous mode [ 56.240960][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.248058][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.256486][ T4271] device bridge_slave_1 entered promiscuous mode [ 56.264780][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.277228][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.301923][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.309213][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.317160][ T4265] device bridge_slave_1 entered promiscuous mode [ 56.342294][ T4267] team0: Port device team_slave_0 added [ 56.358678][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.379949][ T4267] team0: Port device team_slave_1 added [ 56.387514][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.399080][ T4266] team0: Port device team_slave_0 added [ 56.406456][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.431622][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.442204][ T4266] team0: Port device team_slave_1 added [ 56.455292][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.496160][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.506301][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.513455][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.539726][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.568049][ T4273] team0: Port device team_slave_0 added [ 56.582868][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.590083][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.616161][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.629620][ T4271] team0: Port device team_slave_0 added [ 56.635803][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.642973][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.668901][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.682249][ T4273] team0: Port device team_slave_1 added [ 56.688431][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.695809][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.721758][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.750414][ T4271] team0: Port device team_slave_1 added [ 56.769213][ T4265] team0: Port device team_slave_0 added [ 56.800334][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.807320][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.833457][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.860117][ T4265] team0: Port device team_slave_1 added [ 56.880570][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.887646][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.914058][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.942926][ T4266] device hsr_slave_0 entered promiscuous mode [ 56.949793][ T4266] device hsr_slave_1 entered promiscuous mode [ 56.956918][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.964016][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.991235][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.009353][ T4267] device hsr_slave_0 entered promiscuous mode [ 57.016076][ T4267] device hsr_slave_1 entered promiscuous mode [ 57.022645][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.030547][ T4267] Cannot create hsr debugfs directory [ 57.045378][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.052374][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.078575][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.090660][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.097617][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.123559][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.148059][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.155508][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.181998][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.268543][ T4273] device hsr_slave_0 entered promiscuous mode [ 57.275724][ T4273] device hsr_slave_1 entered promiscuous mode [ 57.282299][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.290220][ T4273] Cannot create hsr debugfs directory [ 57.298453][ T4271] device hsr_slave_0 entered promiscuous mode [ 57.305409][ T4271] device hsr_slave_1 entered promiscuous mode [ 57.312009][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.320545][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 57.324057][ T4271] Cannot create hsr debugfs directory [ 57.326755][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 57.338265][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 57.338320][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 57.379847][ T4265] device hsr_slave_0 entered promiscuous mode [ 57.387104][ T4265] device hsr_slave_1 entered promiscuous mode [ 57.395509][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.399237][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 57.405113][ T4265] Cannot create hsr debugfs directory [ 57.672184][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.689990][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.704734][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.717739][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.767751][ T4266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.782890][ T4266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.800689][ T4265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.811766][ T4266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.821129][ T4266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.842932][ T4265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.853473][ T4265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.868155][ T4265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.931401][ T4271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.956136][ T4271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.975810][ T4271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.985258][ T4271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.078022][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.087528][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.105698][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.121738][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.141451][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.158110][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.166214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.175645][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.189872][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.205426][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.233352][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.242454][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.252042][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.259345][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.268031][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.277590][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.286246][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.293393][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.304170][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.312341][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.320708][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.328371][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.336294][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.354597][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.364528][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.375393][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.384408][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.393841][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.402739][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.409897][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.418292][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.430141][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.459656][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.468307][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.480851][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.488242][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.496366][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.505130][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.513637][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.520721][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.528698][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.539715][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.575055][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.586389][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.595624][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.605266][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.614009][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.621152][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.629051][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.637998][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.646768][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.655871][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.664480][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.673100][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.682315][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.691872][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.705035][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.716562][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.743237][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.751113][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.759109][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.767437][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.777372][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.786503][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.795939][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.804743][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.813974][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.822998][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.832942][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.842027][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.883272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.892686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.905451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.915340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.925062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.934318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.943480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.953953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.965195][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.979978][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.998606][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.044503][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.074431][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.099985][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.142360][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.162440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.180376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.217369][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.224580][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.245900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.255196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.264762][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.271940][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.290179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.304949][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.339996][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.349717][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.386934][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.399253][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 59.399347][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 59.405273][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 59.411377][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 59.446602][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.466591][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.475944][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.484234][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 59.492883][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.542982][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.569079][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.600200][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.619544][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.628162][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.635341][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.644428][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.654526][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.664047][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.671226][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.680220][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.689512][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.698418][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.709739][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.718229][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.727611][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.736433][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.745339][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.754764][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.763410][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.772013][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.781127][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.789685][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.797322][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.805349][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.813867][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.822236][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.830319][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.838140][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.853468][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.865507][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.875547][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.885005][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.906646][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.921848][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.930038][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.945417][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.982913][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.002876][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.019087][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.073329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.092100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.113888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.132967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.184182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.196782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.214557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.223025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.234384][ T4267] device veth0_vlan entered promiscuous mode [ 60.244208][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.254723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.269998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.282732][ T4267] device veth1_vlan entered promiscuous mode [ 60.312594][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.335222][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.354031][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.379390][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.400855][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.419715][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.440402][ T4265] device veth0_vlan entered promiscuous mode [ 60.460771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.470196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.482780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.491518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.511395][ T4267] device veth0_macvtap entered promiscuous mode [ 60.520233][ T4265] device veth1_vlan entered promiscuous mode [ 60.536495][ T4273] device veth0_vlan entered promiscuous mode [ 60.553473][ T4267] device veth1_macvtap entered promiscuous mode [ 60.566212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.575397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.585199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.594142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.603760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.613758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.622039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.655417][ T4273] device veth1_vlan entered promiscuous mode [ 60.678206][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.701546][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.708574][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.717132][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.726814][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.735828][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.745450][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.753230][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.767144][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.789455][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.798518][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.807841][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.828688][ T4265] device veth0_macvtap entered promiscuous mode [ 60.838544][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.850131][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.859526][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.868245][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.883903][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.893225][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.902037][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.912390][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.923937][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.933273][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.942236][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.955874][ T4265] device veth1_macvtap entered promiscuous mode [ 60.993208][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.006508][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.015678][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.026163][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.035328][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.044762][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.058252][ T4271] device veth0_vlan entered promiscuous mode [ 61.077596][ T4271] device veth1_vlan entered promiscuous mode [ 61.088919][ T4273] device veth0_macvtap entered promiscuous mode [ 61.100105][ T4273] device veth1_macvtap entered promiscuous mode [ 61.111730][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.124863][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.136963][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.162486][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.176347][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.187540][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.197199][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.206335][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.218537][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.229670][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.241228][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.263887][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.277364][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.289750][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.300484][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.311668][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.321727][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.331978][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.340286][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.348707][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.358870][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.367525][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.376618][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.386035][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.395490][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.417836][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.427241][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.437929][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.446979][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.457706][ T4266] device veth0_vlan entered promiscuous mode [ 61.466344][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.477037][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.487065][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 61.487100][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 61.487125][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 61.489289][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 61.494823][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.522528][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.534569][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.554956][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.563329][ T4271] device veth0_macvtap entered promiscuous mode [ 61.568921][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 61.575147][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.594391][ T4266] device veth1_vlan entered promiscuous mode [ 61.602450][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.611168][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.623030][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.632376][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.640698][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.649660][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.660793][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.670528][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.679626][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.688334][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.706071][ T4271] device veth1_macvtap entered promiscuous mode [ 61.724371][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.734696][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.744306][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.767294][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.775748][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.787241][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.846345][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.861162][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.874282][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.885356][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.895571][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.906123][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.917410][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.947002][ T4266] device veth0_macvtap entered promiscuous mode [ 61.962549][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.991146][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.002110][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.016641][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.022733][ T4379] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.026521][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.064003][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.077470][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.087746][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.099692][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.109670][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.120893][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.133043][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.157888][ T4266] device veth1_macvtap entered promiscuous mode [ 62.188609][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.197604][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.211223][ T4271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.220873][ T4271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.231166][ T4271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.241398][ T4271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.282598][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.313824][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.353513][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.390152][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.403612][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.423251][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.436538][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.454936][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.465554][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.475604][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.486267][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.497828][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.522019][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.531749][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.542437][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.558628][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.569923][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.574580][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.577942][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.588776][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.599167][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.611357][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.627693][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.655349][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.665566][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.676235][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.688416][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.719789][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.727968][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.736195][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.746498][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.767221][ T4266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.776619][ T4266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.785875][ T4266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.794704][ T4266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.832197][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.842647][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.866046][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.871966][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.912500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.955053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.993057][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.997171][ T4387] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.033266][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.035259][ T4387] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 63.073424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.140021][ T4392] loop2: detected capacity change from 0 to 512 [ 63.160237][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.181220][ T4392] EXT4-fs: Ignoring removed oldalloc option [ 63.195389][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.217424][ T4392] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.239779][ T1110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.248149][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.290074][ T4392] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.310024][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.336002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.386563][ T4392] EXT4-fs (loop2): 1 truncate cleaned up [ 63.392417][ T4392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.436172][ T26] audit: type=1800 audit(1755134084.456:2): pid=4392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 63.553438][ T4392] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 63.560264][ T4392] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.569508][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 63.575922][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 63.582706][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 63.582727][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 63.598751][ T26] audit: type=1326 audit(1755134084.626:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4401 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd103b8ebe9 code=0x7ffc0000 [ 63.634579][ T26] audit: type=1326 audit(1755134084.646:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4401 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd103b8ebe9 code=0x7ffc0000 [ 63.656594][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 63.679100][ T4392] vhci_hcd vhci_hcd.0: Device attached [ 63.692815][ T26] audit: type=1326 audit(1755134084.646:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4401 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd103b8ebe9 code=0x7ffc0000 [ 63.717441][ T26] audit: type=1326 audit(1755134084.646:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4401 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd103b8ebe9 code=0x7ffc0000 [ 63.741844][ T26] audit: type=1326 audit(1755134084.646:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4401 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd103b8ebe9 code=0x7ffc0000 [ 63.766904][ T26] audit: type=1326 audit(1755134084.646:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4401 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd103b8ebe9 code=0x7ffc0000 [ 63.790428][ T26] audit: type=1326 audit(1755134084.646:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4401 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd103b8ebe9 code=0x7ffc0000 [ 63.818766][ T26] audit: type=1326 audit(1755134084.646:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4401 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd103b8ebe9 code=0x7ffc0000 [ 63.841325][ T26] audit: type=1326 audit(1755134084.646:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4401 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd103b8d550 code=0x7ffc0000 [ 63.960460][ T4331] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 63.997128][ T4403] vhci_hcd: connection reset by peer [ 64.007567][ T75] vhci_hcd: stop threads [ 64.012678][ T75] vhci_hcd: release socket [ 64.031547][ T75] vhci_hcd: disconnect device [ 64.175082][ T4418] loop4: detected capacity change from 0 to 512 [ 64.217095][ T4418] EXT4-fs: Ignoring removed oldalloc option [ 64.277754][ T4418] EXT4-fs (loop4): 1 truncate cleaned up [ 64.294418][ T4418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.295241][ T4420] loop1: detected capacity change from 0 to 1024 [ 64.380173][ T4420] ======================================================= [ 64.380173][ T4420] WARNING: The mand mount option has been deprecated and [ 64.380173][ T4420] and is ignored by this kernel. Remove the mand [ 64.380173][ T4420] option from the mount to silence this warning. [ 64.380173][ T4420] ======================================================= [ 64.442284][ T4420] EXT4-fs: Ignoring removed nobh option [ 64.460991][ T4420] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.568416][ T4420] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.648624][ T4429] Zero length message leads to an empty skb [ 64.736068][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 64.750808][ T4425] sd 0:0:1:0: device reset [ 64.971217][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 65.195357][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 65.250453][ T3654] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 65.421777][ T4344] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.462568][ T3654] usb 1-1: not running at top speed; connect to a high speed hub [ 65.478451][ T3654] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 999, setting to 64 [ 65.497189][ T3654] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 65.508312][ T3654] usb 1-1: config 1 interface 0 has no altsetting 0 [ 65.534960][ T3654] usb 1-1: string descriptor 0 read error: -22 [ 65.553565][ T3654] usb 1-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.40 [ 65.593852][ T3654] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.609024][ T4438] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 65.624575][ T4438] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 65.649016][ T4344] usb 2-1: Using ep0 maxpacket: 32 [ 65.658075][ T4344] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 65.687058][ T4344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.707686][ T4344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.753539][ T4344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.777275][ T4344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.803237][ T4344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.826095][ T4344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.859302][ T4344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.906945][ T4344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.935916][ T4344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.978261][ T4344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.001537][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 66.020457][ T4344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.032002][ T4344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.068649][ T4344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.110480][ T4344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.122475][ T4438] loop0: detected capacity change from 0 to 1024 [ 66.157035][ T4344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.175228][ T4438] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 66.248643][ T4344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.258056][ T4438] EXT4-fs error (device loop0): ext4_get_journal_inode:5735: comm syz.0.17: inode #100663328: comm syz.0.17: iget: illegal inode # [ 66.303788][ T4344] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.325655][ T4438] EXT4-fs (loop0): no journal found [ 66.336320][ T4344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=106 [ 66.355271][ T4438] EXT4-fs (loop0): can't get journal size [ 66.364780][ T4344] usb 2-1: Product: syz [ 66.369950][ T4344] usb 2-1: Manufacturer: syz [ 66.376410][ T4344] usb 2-1: SerialNumber: syz [ 66.384376][ T4438] EXT4-fs (loop0): failed to initialize system zone (-22) [ 66.398333][ T4438] EXT4-fs (loop0): mount failed [ 66.616011][ T4344] usb 2-1: 0:2 : does not exist [ 66.705061][ T4344] usb 2-1: USB disconnect, device number 2 [ 66.718999][ T4314] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 66.790373][ T4463] udevd[4463]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.894854][ T3654] usbhid 1-1:1.0: can't add hid device: -71 [ 66.914885][ T3654] usbhid: probe of 1-1:1.0 failed with error -71 [ 66.933810][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.935157][ T3654] usb 1-1: USB disconnect, device number 2 [ 66.968950][ T4314] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 66.978132][ T4314] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 66.987365][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.031492][ T4314] usb 3-1: config 0 descriptor?? [ 67.041392][ T4314] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 67.048315][ T4314] dvb-usb: bulk message failed: -22 (3/0) [ 67.112257][ T4314] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 67.132967][ T4314] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 67.153945][ T4314] usb 3-1: media controller created [ 67.175367][ T4314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 67.184322][ T4318] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.225459][ T4314] dvb-usb: bulk message failed: -22 (6/0) [ 67.237569][ T4314] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 67.246330][ T4460] dvb-usb: bulk message failed: -22 (2/0) [ 67.309999][ T4314] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 67.346749][ T4314] dvb-usb: schedule remote query interval to 150 msecs. [ 67.365060][ T4314] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 67.378993][ T4318] usb 4-1: Using ep0 maxpacket: 16 [ 67.386403][ T4318] usb 4-1: config 0 has an invalid interface number: 40 but max is 0 [ 67.436323][ T4314] usb 3-1: USB disconnect, device number 2 [ 67.448651][ T4318] usb 4-1: config 0 has no interface number 0 [ 67.456518][ T4318] usb 4-1: config 0 interface 40 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 67.467326][ T4318] usb 4-1: config 0 interface 40 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 67.477561][ T4318] usb 4-1: config 0 interface 40 has no altsetting 0 [ 67.506732][ T4318] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 67.516671][ T4314] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 67.525281][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.544355][ T4318] usb 4-1: Product: syz [ 67.569956][ T4318] usb 4-1: Manufacturer: syz [ 67.574729][ T4318] usb 4-1: SerialNumber: syz [ 67.586651][ T4318] usb 4-1: config 0 descriptor?? [ 67.593612][ T4467] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 67.603699][ T4467] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 67.723056][ T4475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26'. [ 67.817901][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 67.829990][ T4467] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 67.837635][ T4467] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 67.846113][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.912592][ T4314] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 67.950394][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.984038][ T4482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 68.097788][ T4480] netlink: 'syz.0.26': attribute type 4 has an invalid length. [ 68.105710][ T4314] usb 3-1: Using ep0 maxpacket: 16 [ 68.113516][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.152080][ T4486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26'. [ 68.177311][ T4314] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 68.219192][ T4314] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 68.256378][ T4318] CoreChips: probe of 4-1:0.40 failed with error -22 [ 68.267793][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.320685][ T4314] usb 3-1: config 0 descriptor?? [ 68.346888][ T4314] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 68.364683][ T4314] dvb-usb: bulk message failed: -22 (3/0) [ 68.396557][ T4314] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 68.458785][ T4314] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 68.483159][ T4314] usb 3-1: media controller created [ 68.523764][ T4314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 68.609805][ T4314] dvb-usb: bulk message failed: -22 (6/0) [ 68.631953][ T4314] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 68.658026][ T4314] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 68.696890][ T4314] dvb-usb: schedule remote query interval to 150 msecs. [ 68.742326][ T4314] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 68.793512][ T4314] usb 3-1: USB disconnect, device number 3 [ 68.884255][ T4314] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 69.083384][ T4331] vhci_hcd: vhci_device speed not set [ 69.532268][ T4527] netlink: 14 bytes leftover after parsing attributes in process `syz.1.39'. [ 69.541714][ T4527] device hsr_slave_0 left promiscuous mode [ 69.548129][ T4527] device hsr_slave_1 left promiscuous mode [ 69.632331][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 69.632344][ T26] audit: type=1326 audit(1755134090.656:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714b98ebe9 code=0x7ffc0000 [ 69.712716][ T26] audit: type=1326 audit(1755134090.686:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f714b990b07 code=0x7ffc0000 [ 69.747100][ T26] audit: type=1326 audit(1755134090.686:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f714b990a7c code=0x7ffc0000 [ 69.771780][ T26] audit: type=1326 audit(1755134090.686:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f714b9909b4 code=0x7ffc0000 [ 69.794307][ T26] audit: type=1326 audit(1755134090.686:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f714b9909b4 code=0x7ffc0000 [ 69.818220][ T4533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.40'. [ 69.872782][ T4318] usb 4-1: USB disconnect, device number 2 [ 69.886338][ T4537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 69.925366][ T4537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.935632][ T26] audit: type=1326 audit(1755134090.686:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f714b98d84a code=0x7ffc0000 [ 70.075274][ T26] audit: type=1326 audit(1755134090.686:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714b98ebe9 code=0x7ffc0000 [ 70.140894][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 70.186107][ T4537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.201631][ T26] audit: type=1326 audit(1755134090.686:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f714b98ebe9 code=0x7ffc0000 [ 70.307405][ T26] audit: type=1326 audit(1755134090.686:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714b98ebe9 code=0x7ffc0000 [ 70.381495][ T4538] netlink: 'syz.1.40': attribute type 4 has an invalid length. [ 70.432275][ T4551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.40'. [ 70.465941][ T26] audit: type=1326 audit(1755134090.686:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.2.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f714b98ebe9 code=0x7ffc0000 [ 70.799090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.878937][ T4318] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 71.102479][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.129606][ T4318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 71.139104][ T4318] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 71.148314][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.162895][ T4318] usb 3-1: config 0 descriptor?? [ 71.174630][ T4318] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 71.181973][ T4318] dvb-usb: bulk message failed: -22 (3/0) [ 71.200868][ T4318] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 71.234950][ T4318] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 71.250619][ T4318] usb 3-1: media controller created [ 71.265967][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.318922][ T4318] dvb-usb: bulk message failed: -22 (6/0) [ 71.325389][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.332723][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.404132][ T4556] dvb-usb: bulk message failed: -22 (2/0) [ 71.430145][ T4318] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 71.486636][ T4318] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 71.584440][ T4318] dvb-usb: schedule remote query interval to 150 msecs. [ 71.629390][ T4318] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 71.675950][ T4318] usb 3-1: USB disconnect, device number 4 [ 71.781614][ T4318] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 71.859600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.054809][ T4584] loop1: detected capacity change from 0 to 8192 [ 72.065322][ T4586] loop3: detected capacity change from 0 to 512 [ 72.109805][ T4586] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.116309][ T4586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.188891][ T4318] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 72.197129][ T4586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.226417][ T4586] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.398926][ T4318] usb 3-1: Using ep0 maxpacket: 16 [ 72.406560][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.418221][ T4318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 72.418352][ T4586] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.54: Allocating blocks 41-42 which overlap fs metadata [ 72.427543][ T4318] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 72.465144][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.475761][ T4318] usb 3-1: config 0 descriptor?? [ 72.491527][ T4586] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.54: Failed to acquire dquot type 1 [ 72.510141][ T4318] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 72.517741][ T4586] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 72.540182][ T4318] dvb-usb: bulk message failed: -22 (3/0) [ 72.561435][ T4318] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 72.587764][ T4586] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #12: comm syz.3.54: corrupted inode contents [ 72.632751][ T4318] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 72.684581][ T4318] usb 3-1: media controller created [ 72.691955][ T4586] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #12: comm syz.3.54: mark_inode_dirty error [ 72.709612][ T4586] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #12: comm syz.3.54: corrupted inode contents [ 72.725819][ T4586] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.54: mark_inode_dirty error [ 72.730178][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.737878][ T4586] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #12: comm syz.3.54: corrupted inode contents [ 72.763810][ T4586] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 72.774211][ T4586] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #12: comm syz.3.54: corrupted inode contents [ 72.791940][ T4586] EXT4-fs error (device loop3): ext4_truncate:4312: inode #12: comm syz.3.54: mark_inode_dirty error [ 72.806388][ T4586] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 72.816334][ T4586] EXT4-fs (loop3): 1 truncate cleaned up [ 72.822808][ T4586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 72.871752][ T4318] dvb-usb: bulk message failed: -22 (6/0) [ 72.896888][ T4586] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 72.918373][ T4318] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 72.961626][ T4318] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 73.026588][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 73.030498][ T4318] dvb-usb: schedule remote query interval to 150 msecs. [ 73.045093][ T4318] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 73.058203][ T4318] usb 3-1: USB disconnect, device number 5 [ 73.119894][ T4318] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 73.216284][ T4601] loop4: detected capacity change from 0 to 1024 [ 73.288566][ T4601] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 73.315484][ T4601] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.322881][ T4605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.59'. [ 73.485668][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 73.533552][ T4610] netlink: 'syz.0.59': attribute type 4 has an invalid length. [ 73.548475][ T4613] loop1: detected capacity change from 0 to 512 [ 73.580012][ T4613] EXT4-fs: Ignoring removed bh option [ 73.635419][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 73.692608][ T4613] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.734743][ T4613] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 73.743290][ T4619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.59'. [ 73.797976][ T4613] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 73.832842][ T4613] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 73.854732][ T4613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 73.939696][ T4613] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 74.110812][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 74.166585][ T4610] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 74.422596][ T4266] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /7/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 74.484032][ T4266] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /7/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 74.602718][ T4646] qrtr: Invalid version 79 [ 74.630378][ T4266] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 74.663093][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 74.663106][ T26] audit: type=1326 audit(1755134095.686:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bda78ebe9 code=0x7ffc0000 [ 74.766940][ T26] audit: type=1326 audit(1755134095.686:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bda78ebe9 code=0x7ffc0000 [ 74.803268][ T4266] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /7/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 74.829339][ T26] audit: type=1326 audit(1755134095.716:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bda78ebe9 code=0x7ffc0000 [ 74.899587][ T4266] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 74.948875][ T26] audit: type=1326 audit(1755134095.716:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f5bda78ebe9 code=0x7ffc0000 [ 75.020187][ T4266] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /7/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 75.058881][ T26] audit: type=1326 audit(1755134095.716:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bda78ebe9 code=0x7ffc0000 [ 75.138123][ T26] audit: type=1326 audit(1755134095.716:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4647 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bda78ebe9 code=0x7ffc0000 [ 75.202916][ T4266] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 75.286786][ T4266] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /7/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 75.349174][ T4266] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 75.412850][ T4331] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 75.428771][ T4266] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /7/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 75.667318][ T4331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.690303][ T4331] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 75.711061][ T4331] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 75.721080][ T4331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.751434][ T4331] usb 2-1: config 0 descriptor?? [ 75.767389][ T4331] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 75.791195][ T4331] dvb-usb: bulk message failed: -22 (3/0) [ 75.839653][ T4331] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 75.883356][ T4331] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 75.935696][ T4331] usb 2-1: media controller created [ 75.966871][ T4658] dvb-usb: bulk message failed: -22 (2/0) [ 75.977051][ T4331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.032858][ T4331] dvb-usb: bulk message failed: -22 (6/0) [ 76.043758][ T4671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.78'. [ 76.072022][ T4331] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 76.111999][ T4331] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 76.124940][ T4673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 76.139566][ T4350] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 76.147149][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.186114][ T4350] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.186114][ T4350] [ 76.208717][ T4331] dvb-usb: schedule remote query interval to 150 msecs. [ 76.257315][ T4331] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 76.295177][ T75] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 76.316598][ T75] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.316598][ T75] [ 76.336925][ T4331] usb 2-1: USB disconnect, device number 3 [ 76.344409][ T4677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 76.394305][ T4331] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 76.395195][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 76.443222][ T127] cfg80211: failed to load regulatory.db [ 76.460847][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.501293][ T4681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.79'. [ 76.849262][ T4331] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.908124][ T4677] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 77.049097][ T4331] usb 2-1: Using ep0 maxpacket: 16 [ 77.062671][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.086812][ T4331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.121323][ T4674] netlink: 'syz.3.78': attribute type 4 has an invalid length. [ 77.136370][ T4331] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 77.146617][ T4678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.78'. [ 77.166259][ T4331] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 77.207803][ T4331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.231740][ T26] audit: type=1326 audit(1755134098.256:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4687 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5470d8ebe9 code=0x7ffc0000 [ 77.270604][ T4331] usb 2-1: config 0 descriptor?? [ 77.283729][ T4331] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 77.301326][ T4331] dvb-usb: bulk message failed: -22 (3/0) [ 77.310867][ T26] audit: type=1326 audit(1755134098.306:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4687 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5470d8ebe9 code=0x7ffc0000 [ 77.326955][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.360589][ T4331] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 77.383897][ T4331] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 77.399298][ T26] audit: type=1326 audit(1755134098.306:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4687 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f5470d8ebe9 code=0x7ffc0000 [ 77.449011][ T4331] usb 2-1: media controller created [ 77.449013][ T26] audit: type=1326 audit(1755134098.306:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4687 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5470d8ebe9 code=0x7ffc0000 [ 77.561748][ T4331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.599586][ T4331] dvb-usb: bulk message failed: -22 (6/0) [ 77.625873][ T4331] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 77.670499][ T4331] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 77.692910][ T4331] dvb-usb: schedule remote query interval to 150 msecs. [ 77.705345][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.739611][ T4331] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 77.786660][ T4331] usb 2-1: USB disconnect, device number 4 [ 77.815579][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.830828][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.839381][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.847937][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.855626][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.863822][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.875656][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.987841][ T4331] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 78.193638][ T4711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.89'. [ 78.869109][ T4700] chnl_net:caif_netlink_parms(): no params data found [ 79.292482][ T4700] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.316192][ T4700] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.363926][ T4700] device bridge_slave_0 entered promiscuous mode [ 79.551881][ T4739] serio: Serial port ptm0 [ 79.959009][ T4268] Bluetooth: hci1: command 0x0409 tx timeout [ 82.038930][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 84.124353][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 86.198924][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 110.999689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.009761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.019074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 111.029081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 111.037441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 111.046013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 111.054428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 111.062843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 184.738824][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 184.745859][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4735/1:b..l [ 184.754032][ C1] (detected by 1, t=10502 jiffies, g=10253, q=251 ncpus=2) [ 184.761363][ C1] task:sed state:R running task stack:24352 pid:4735 ppid:4734 flags:0x00004000 [ 184.772866][ C1] Call Trace: [ 184.776130][ C1] [ 184.779050][ C1] __schedule+0x10ec/0x40b0 [ 184.783547][ C1] ? kmem_cache_free+0xf7/0x290 [ 184.788411][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 184.794288][ C1] ? lock_chain_count+0x20/0x20 [ 184.799130][ C1] ? mark_lock+0x94/0x320 [ 184.803444][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 184.808744][ C1] preempt_schedule_irq+0xb1/0x150 [ 184.813852][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 184.819564][ C1] ? rcu_is_watching+0x11/0xa0 [ 184.827361][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 184.833333][ C1] irqentry_exit+0x63/0x70 [ 184.837733][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 184.843694][ C1] RIP: 0010:kasan_check_range+0x7b/0x290 [ 184.849327][ C1] Code: 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe 10 7f 26 4d 85 f6 0f 84 39 01 00 00 48 f7 d3 4c 01 db 41 80 39 00 <0f> 85 c1 01 00 00 49 ff c1 48 ff c3 75 ee e9 1c 01 00 00 44 89 cb [ 184.868928][ C1] RSP: 0018:ffffc900034ef180 EFLAGS: 00000202 [ 184.874975][ C1] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff8a03c68e [ 184.882925][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff97053000 [ 184.890877][ C1] RBP: ffffc900034ef370 R08: dffffc0000000000 R09: fffffbfff2e0a600 [ 184.898849][ C1] R10: fffffbfff2e0a601 R11: 1ffffffff2e0a600 R12: 0000000000000003 [ 184.906826][ C1] R13: ffff88802995bc00 R14: 0000000000000001 R15: dffffc0000000001 [ 184.914790][ C1] ? mt_validate+0xdfe/0x4c90 [ 184.919474][ C1] mt_validate+0xdfe/0x4c90 [ 184.923970][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.930020][ C1] ? mt_validate+0xf2/0x4c90 [ 184.934592][ C1] ? mt_cache_shrink+0x20/0x20 [ 184.939341][ C1] ? mas_destroy+0x24e7/0x2c60 [ 184.944111][ C1] validate_mm_mt+0xcd/0x420 [ 184.948699][ C1] ? mas_store_prealloc+0x400/0x400 [ 184.953889][ C1] ? __split_vma+0x500/0x500 [ 184.958468][ C1] ? __vma_adjust+0x12b6/0x1c50 [ 184.963317][ C1] ? uprobe_mmap+0x17a/0x10b0 [ 184.968003][ C1] validate_mm+0xcc/0x2b0 [ 184.972403][ C1] ? vma_expand+0x880/0x880 [ 184.976914][ C1] ? preempt_count_add+0x8d/0x190 [ 184.981949][ C1] ? up_write+0x1bb/0x420 [ 184.986280][ C1] ? vma_mas_store+0xcc/0x2f0 [ 184.990942][ C1] __vma_adjust+0x17bf/0x1c50 [ 184.995626][ C1] ? validate_mm+0x2b0/0x2b0 [ 185.000199][ C1] ? slab_post_alloc_hook+0x67/0x480 [ 185.005500][ C1] ? anon_vma_name+0xf7/0x170 [ 185.010157][ C1] ? vm_area_dup+0x11f/0x1a0 [ 185.014732][ C1] __split_vma+0x3a7/0x500 [ 185.019136][ C1] do_mas_align_munmap+0x762/0x1220 [ 185.024320][ C1] ? do_mas_munmap+0x2b0/0x2b0 [ 185.029071][ C1] ? mtree_range_walk+0x672/0x7b0 [ 185.034105][ C1] ? mas_walk+0x15f/0x180 [ 185.038419][ C1] ? mas_find+0x1e8/0x230 [ 185.042844][ C1] do_mas_munmap+0x240/0x2b0 [ 185.047508][ C1] mmap_region+0x713/0x1d30 [ 185.052028][ C1] ? arch_get_unmapped_area_topdown+0xd7/0x5a0 [ 185.058197][ C1] ? file_mmap_ok+0x170/0x170 [ 185.062875][ C1] ? cap_mmap_addr+0x165/0x2e0 [ 185.067722][ C1] ? file_mmap_ok+0x11c/0x170 [ 185.072425][ C1] do_mmap+0x894/0xf30 [ 185.076513][ C1] ? mlock_future_check+0x100/0x100 [ 185.081713][ C1] ? ima_file_mmap+0x8e/0x150 [ 185.086403][ C1] ? ima_file_free+0x3e0/0x3e0 [ 185.091160][ C1] ? common_file_perm+0x171/0x1c0 [ 185.096198][ C1] vm_mmap_pgoff+0x1b2/0x2b0 [ 185.100783][ C1] ? account_locked_vm+0xe0/0xe0 [ 185.105718][ C1] ksys_mmap_pgoff+0x516/0x6f0 [ 185.110468][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 185.115666][ C1] do_syscall_64+0x4c/0xa0 [ 185.120077][ C1] ? clear_bhb_loop+0x60/0xb0 [ 185.124747][ C1] ? clear_bhb_loop+0x60/0xb0 [ 185.129419][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.135317][ C1] RIP: 0033:0x7f2105c69242 [ 185.139730][ C1] RSP: 002b:00007ffe4c115318 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 185.148126][ C1] RAX: ffffffffffffffda RBX: 00007f210598f000 RCX: 00007f2105c69242 [ 185.156079][ C1] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007f210598f000 [ 185.164043][ C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000004000 [ 185.172005][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffe4c1153a0 [ 185.179955][ C1] R13: 00007f2105c46050 R14: 00007ffe4c115750 R15: 00000fffc9822a66 [ 185.187914][ C1] [ 185.190933][ C1] rcu: rcu_preempt kthread starved for 9316 jiffies! g10253 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 185.202016][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 185.211965][ C1] rcu: RCU grace-period kthread stack dump: [ 185.217836][ C1] task:rcu_preempt state:R running task stack:27464 pid:16 ppid:2 flags:0x00004000 [ 185.228622][ C1] Call Trace: [ 185.231932][ C1] [ 185.234854][ C1] __schedule+0x10ec/0x40b0 [ 185.239362][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 185.245264][ C1] schedule+0xb9/0x180 [ 185.249349][ C1] schedule_timeout+0x15c/0x280 [ 185.254190][ C1] ? console_conditional_schedule+0x40/0x40 [ 185.260172][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 185.266065][ C1] ? update_process_times+0x1b0/0x1b0 [ 185.271462][ C1] ? prepare_to_swait_event+0x335/0x350 [ 185.277039][ C1] rcu_gp_fqs_loop+0x2f2/0x1310 [ 185.282436][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 185.288575][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 185.293762][ C1] ? rcu_gp_init+0x14b0/0x14b0 [ 185.298503][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 185.304407][ C1] ? finish_swait+0xc3/0x1d0 [ 185.309010][ C1] rcu_gp_kthread+0x95/0x380 [ 185.313600][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 185.318700][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 185.324582][ C1] ? __kthread_parkme+0x162/0x1c0 [ 185.329679][ C1] kthread+0x29d/0x330 [ 185.333725][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 185.338832][ C1] ? kthread_blkcg+0xd0/0xd0 [ 185.343414][ C1] ret_from_fork+0x1f/0x30 [ 185.347813][ C1] [ 185.350812][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 185.357206][ C1] Sending NMI from CPU 1 to CPUs 0: [ 185.362410][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10