last executing test programs: 6.606578823s ago: executing program 1 (id=242): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, 0x0, 0x100, 0x52) chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 5.761954165s ago: executing program 1 (id=246): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x6, 0x9, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001100)=""/4079, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() sendmsg$AUDIT_SET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x300, 0x70bd2d, 0x25dfdbff, {0x10, 0x1, 0x0, r6, 0xffff, 0xfffffffa, 0x4, 0x9, 0x0, 0x4, 0x1}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040110) sendmsg$nl_route(r5, 0x0, 0x4000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) landlock_create_ruleset(&(0x7f00000002c0)={0x9208, 0x1, 0x2}, 0x18, 0x1) ioprio_set$pid(0x1, 0x0, 0x2004) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) pipe(&(0x7f0000000000)) 4.63987056s ago: executing program 0 (id=255): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x440100, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) syz_usb_connect(0x5, 0xb1c, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="32032b8943bf95e241ad216c94f90bb912df0f378772179ff881b64b7dd3255ff3ce514a4030b3215a2abcd79930216d95d3"]}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = userfaultfd(0x801) socket(0x10, 0x803, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) 4.620726461s ago: executing program 1 (id=256): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, 0x0) 4.281999538s ago: executing program 4 (id=258): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_cancel(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c24) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) 4.083564878s ago: executing program 2 (id=259): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x3}]}}, 0x0, 0x2a, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, 0x0, 0x0, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 3.782625463s ago: executing program 0 (id=260): r0 = socket(0xa, 0x3, 0xff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0xa, 0x8001, @local}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000580)="9ee2ffb332c99223a7dfe52c1f51218200000000000a0000b57311c6bc4fb03f287f00b61f95", 0x26}, {&(0x7f0000001080)="671723", 0x3}], 0x2}, 0x20008b88) 3.705983606s ago: executing program 0 (id=261): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.697249957s ago: executing program 0 (id=262): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xffffb9e3, 0x5}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 3.680197488s ago: executing program 1 (id=263): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, 0xfffffffffffffffd) 3.593618082s ago: executing program 1 (id=264): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) fallocate(r0, 0x3, 0x7f, 0x8000c61) io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), 0x0, 0x1000000}, 0x20) r2 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x26060400) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x4}}, 0x38) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETS(r5, 0x5402, &(0x7f00000001c0)={0xff02, 0x1, 0x9, 0x8003, 0xd, "db2d496fbecfb8106700"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0xd) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x10001, @local, 0xb}, r7}}, 0x30) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0xc0045878, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x2c, r9, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x27}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xc8, r9, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffff01}]}, {0x4}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x36}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x272}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5e}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4020}, 0x1) 3.574413203s ago: executing program 0 (id=265): getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/146, 0x92) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700"], 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_timeval(r3, 0x1, 0xa, 0x0, &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x6ac000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) 3.43715952s ago: executing program 4 (id=266): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) r3 = openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 3.197886792s ago: executing program 4 (id=267): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x6, 0x9, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001100)=""/4079, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() sendmsg$AUDIT_SET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x300, 0x70bd2d, 0x25dfdbff, {0x10, 0x1, 0x0, r6, 0xffff, 0xfffffffa, 0x4, 0x9, 0x0, 0x4, 0x1}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040110) sendmsg$nl_route(r5, 0x0, 0x4000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) landlock_create_ruleset(&(0x7f00000002c0)={0x9208, 0x1, 0x2}, 0x18, 0x1) ioprio_set$pid(0x1, 0x0, 0x2004) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) pipe(&(0x7f0000000000)) 3.077994457s ago: executing program 2 (id=268): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a000005000600000000000800010000000000180025"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) syz_io_uring_setup(0x49e, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.873820588s ago: executing program 2 (id=270): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x220000d, &(0x7f0000000000), 0x2, 0x55d, &(0x7f0000000600)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0/../file0\x00', 0x20004aa, &(0x7f0000000000)={[{@data_journal}, {@grpjquota, 0x22}, {@data_journal}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@bh}, {@debug}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@dstopts_2292={{0x18}}], 0x18}, 0xc4) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) 2.42310844s ago: executing program 3 (id=272): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.387087292s ago: executing program 3 (id=273): syz_clone3(&(0x7f0000000340)={0x8020000, 0x0, &(0x7f0000000040), 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x58) 2.21796577s ago: executing program 3 (id=274): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x0, 0x20000000}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000340)="3e90a103", 0x4}], 0x1}, 0x40810) 2.104354836s ago: executing program 3 (id=275): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1013}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1, 0xc10}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x16}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.938615354s ago: executing program 2 (id=276): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_cancel(0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c24) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) 1.572885412s ago: executing program 3 (id=277): r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x1381, 0x10, 0x3, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.369814072s ago: executing program 4 (id=278): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x3}]}}, 0x0, 0x2a, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, 0x0, 0x0, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 1.306441595s ago: executing program 3 (id=279): getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/146, 0x92) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700"], 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0xa, 0x0, &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x6ac000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) 941.538104ms ago: executing program 2 (id=280): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x922, 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xa404e, &(0x7f00000004c0), 0x3, 0x451, &(0x7f0000000f80)="$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") 598.34301ms ago: executing program 1 (id=281): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@noblock_validity}, {@auto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r0, 0x1, 0x2, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 417.74028ms ago: executing program 4 (id=282): syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01864c1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000dc0)}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x2, 0x2}, {0x2, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0xb, 0x0, 0xd}]}) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000140)="02", 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 144.990343ms ago: executing program 4 (id=283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040084) 1.89941ms ago: executing program 2 (id=284): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)='M', 0x1}], 0x1}, 0x4) 0s ago: executing program 0 (id=285): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000004412800000000002400000085000000ad00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. [ 57.922043][ T4173] cgroup: Unknown subsys name 'net' [ 58.061503][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.284209][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.641004][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 60.681148][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 60.701505][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 60.761091][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.794419][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.805493][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.816296][ T4188] device bridge_slave_0 entered promiscuous mode [ 60.843270][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.850678][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.859429][ T4188] device bridge_slave_1 entered promiscuous mode [ 60.909733][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.922959][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.930268][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.938410][ T4196] device bridge_slave_0 entered promiscuous mode [ 60.952718][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.964825][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.980793][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.987979][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.995906][ T4196] device bridge_slave_1 entered promiscuous mode [ 61.003181][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.013096][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.021009][ T4193] device bridge_slave_0 entered promiscuous mode [ 61.059027][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.066618][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.074558][ T4193] device bridge_slave_1 entered promiscuous mode [ 61.098871][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.106345][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.114167][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.135437][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.148701][ T4188] team0: Port device team_slave_0 added [ 61.161949][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.169424][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.178016][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.186229][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.196993][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.207600][ T4188] team0: Port device team_slave_1 added [ 61.214940][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.263858][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.270854][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.297268][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.320800][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.327998][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.335958][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.349896][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.357997][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.365630][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.375458][ T4196] team0: Port device team_slave_0 added [ 61.381998][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.389220][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.415581][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.428755][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.440068][ T4193] team0: Port device team_slave_0 added [ 61.447580][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.463006][ T4196] team0: Port device team_slave_1 added [ 61.479934][ T4193] team0: Port device team_slave_1 added [ 61.508226][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.542287][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.549396][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.575677][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.588600][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.605332][ T4187] team0: Port device team_slave_0 added [ 61.612536][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.619805][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.645820][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.662371][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.669713][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.696161][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.712910][ T4188] device hsr_slave_0 entered promiscuous mode [ 61.719762][ T4188] device hsr_slave_1 entered promiscuous mode [ 61.735375][ T4187] team0: Port device team_slave_1 added [ 61.741727][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.748955][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.776198][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.810102][ T4186] team0: Port device team_slave_0 added [ 61.818613][ T4186] team0: Port device team_slave_1 added [ 61.865614][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.872678][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.899421][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.914707][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.921957][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.948324][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.965805][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.972947][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.999139][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.015224][ T4196] device hsr_slave_0 entered promiscuous mode [ 62.022420][ T4196] device hsr_slave_1 entered promiscuous mode [ 62.029958][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.037955][ T4196] Cannot create hsr debugfs directory [ 62.044015][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.051178][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.077501][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.129241][ T4193] device hsr_slave_0 entered promiscuous mode [ 62.136540][ T4193] device hsr_slave_1 entered promiscuous mode [ 62.142998][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.150770][ T4193] Cannot create hsr debugfs directory [ 62.195718][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.202821][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.209466][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.217253][ T4187] Cannot create hsr debugfs directory [ 62.225980][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.233411][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.240098][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.247891][ T4186] Cannot create hsr debugfs directory [ 62.406794][ T2302] Bluetooth: hci2: command 0x0409 tx timeout [ 62.413692][ T2302] Bluetooth: hci0: command 0x0409 tx timeout [ 62.426176][ T2302] Bluetooth: hci1: command 0x0409 tx timeout [ 62.432319][ T2302] Bluetooth: hci4: command 0x0409 tx timeout [ 62.445785][ T2302] Bluetooth: hci3: command 0x0409 tx timeout [ 62.551055][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.562041][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.572175][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.585241][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.631379][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.649786][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.659759][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.675417][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.719045][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.730103][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.745642][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.778525][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.812252][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.850796][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.860210][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.877345][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.893239][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.906118][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.932305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.941490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.951648][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.958983][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.977200][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.985942][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.008925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.021931][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.031346][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.041152][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.048354][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.064862][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.076998][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.089579][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.121031][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.135813][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.146856][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.154956][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.164928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.175606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.188310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.199549][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.207504][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.216725][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.229346][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.240463][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.248921][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.262286][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.280112][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.289117][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.298551][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.305682][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.314554][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.323350][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.332297][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.341631][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.352866][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.361591][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.370560][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.380115][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.387215][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.398960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.407756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.431187][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.441313][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.450204][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.457432][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.469172][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.478072][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.487202][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.502888][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.513065][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.522319][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.533263][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.541789][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.548853][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.557992][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.581317][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.590269][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.601986][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.611915][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.631237][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.643130][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.660561][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.673953][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.684784][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.695022][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.726730][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.734585][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.745343][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.761849][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.784027][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.818010][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.825879][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.835235][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.844059][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.854991][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.863562][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.871083][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.887946][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.902750][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.911508][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.933069][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.944100][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.952620][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.973319][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.003490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.015034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.032516][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.039768][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.049186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.057019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.064609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.082004][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.123979][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.133141][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.142518][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.152153][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.162239][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.169364][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.177823][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.187153][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.197051][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.205271][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.214016][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.222411][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.232794][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.250109][ T4188] device veth0_vlan entered promiscuous mode [ 64.266613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.275953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.286274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.294112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.303854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.313264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.322230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.335215][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.354007][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.364395][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.373830][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.382276][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.390121][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.399212][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.409149][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.416341][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.433820][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.449168][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.461323][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.470134][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.481785][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.490756][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 64.491344][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.505296][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 64.505344][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 64.511924][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 64.518296][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.530820][ T1347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.538430][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 64.549018][ T4188] device veth1_vlan entered promiscuous mode [ 64.564994][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.574051][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.584563][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.623269][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.631217][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.641128][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.650675][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.661917][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.670683][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.679942][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.688943][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.698710][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.707624][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.716332][ T4196] device veth0_vlan entered promiscuous mode [ 64.741978][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.757215][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.765404][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.779294][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.791549][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.801510][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.811983][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.820771][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.829231][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.840543][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.848978][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.861916][ T4196] device veth1_vlan entered promiscuous mode [ 64.872039][ T4188] device veth0_macvtap entered promiscuous mode [ 64.881639][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.892945][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.903622][ T4187] device veth0_vlan entered promiscuous mode [ 64.930771][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.949616][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.965087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.975437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.995483][ T4187] device veth1_vlan entered promiscuous mode [ 65.006461][ T4188] device veth1_macvtap entered promiscuous mode [ 65.035224][ T4196] device veth0_macvtap entered promiscuous mode [ 65.044248][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.063697][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.073633][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.082244][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.090106][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.108760][ T4196] device veth1_macvtap entered promiscuous mode [ 65.130219][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.149548][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.174299][ T4187] device veth0_macvtap entered promiscuous mode [ 65.200705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.211868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.223828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.239182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.249948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.259155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.271751][ T4187] device veth1_macvtap entered promiscuous mode [ 65.284310][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.299300][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.312342][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.324769][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.333368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.342442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.351300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.361498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.370920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.390913][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.399733][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.409359][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.418963][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.428253][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.437286][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.452877][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.470952][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.485205][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.500665][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.512618][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.524510][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.535233][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.547767][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.561425][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.568681][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.578917][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.587858][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.597436][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.610368][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.619372][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.628512][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.637590][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.654592][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.665496][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.675797][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.688731][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.700372][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.732588][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.742366][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.753813][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.762913][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.773211][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.782493][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.816580][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.825767][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.894049][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.902428][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.940264][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.949796][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.959424][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.983579][ T4186] device veth0_vlan entered promiscuous mode [ 65.993736][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.002528][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.044621][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.052694][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.061003][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.070695][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.079371][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.088731][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.099729][ T4193] device veth0_vlan entered promiscuous mode [ 66.128787][ T1347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.135990][ T4186] device veth1_vlan entered promiscuous mode [ 66.142862][ T1347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.151945][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.161761][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.172291][ T4193] device veth1_vlan entered promiscuous mode [ 66.179339][ T1347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.193981][ T1347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.223504][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.236380][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.244458][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.254513][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.292242][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.302175][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.326454][ T1347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.334294][ T1347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.355066][ T4186] device veth0_macvtap entered promiscuous mode [ 66.380365][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.390990][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.401480][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.412277][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.455240][ T4193] device veth0_macvtap entered promiscuous mode [ 66.462631][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.462879][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.472243][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.490166][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.499109][ T4186] device veth1_macvtap entered promiscuous mode [ 66.509625][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.520090][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.528477][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.536387][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.545583][ T4193] device veth1_macvtap entered promiscuous mode [ 66.562999][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.574503][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 66.575022][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 66.594202][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 66.594317][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 66.602518][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.615494][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 66.616695][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.633089][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.643194][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.653889][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.667528][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.677664][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.689709][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.699828][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.710846][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.720811][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.733628][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.745193][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.758868][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.767894][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.776664][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.785549][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.794579][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.862781][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.872415][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.887464][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.899429][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.918726][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.934926][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.947688][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.962066][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.978202][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.992546][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.004734][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.032975][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.049998][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.053240][ T4276] loop3: detected capacity change from 0 to 1024 [ 67.077562][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.109284][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.130275][ T4276] ======================================================= [ 67.130275][ T4276] WARNING: The mand mount option has been deprecated and [ 67.130275][ T4276] and is ignored by this kernel. Remove the mand [ 67.130275][ T4276] option from the mount to silence this warning. [ 67.130275][ T4276] ======================================================= [ 67.130602][ T4281] loop0: detected capacity change from 0 to 256 [ 67.172891][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.183562][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.194662][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.205305][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.222290][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.235079][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.245693][ T4276] EXT4-fs (loop3): Ignoring removed oldalloc option [ 67.253257][ T4276] EXT4-fs (loop3): Ignoring removed bh option [ 67.259695][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.260301][ T4276] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 67.275663][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.298379][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.307894][ T4281] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.328422][ T4276] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 67.376317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.385117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.418462][ T4281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 67.471776][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.491106][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.514762][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.532136][ T4286] loop1: detected capacity change from 0 to 1024 [ 67.540211][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.644893][ T4286] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 67.656292][ T26] audit: type=1326 audit(1773949587.918:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4291 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1740cd1799 code=0x7ffc0000 [ 67.680206][ T4286] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 67.703204][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.725054][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.731642][ T4286] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 67.775136][ T26] audit: type=1326 audit(1773949587.948:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4291 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1740cd1799 code=0x7ffc0000 [ 67.815411][ T1347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.826628][ T26] audit: type=1326 audit(1773949587.978:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4291 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1740cd1799 code=0x7ffc0000 [ 67.852599][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.876186][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.918432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.927458][ T26] audit: type=1326 audit(1773949587.978:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4291 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1740cd1799 code=0x7ffc0000 [ 67.940685][ T4298] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.953665][ T26] audit: type=1326 audit(1773949587.988:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4291 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1740cd1799 code=0x7ffc0000 [ 68.000512][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.022739][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.053488][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.074852][ T26] audit: type=1326 audit(1773949587.988:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4291 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1740cd1799 code=0x7ffc0000 [ 68.099531][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.149345][ T26] audit: type=1326 audit(1773949587.988:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4291 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1740cd1799 code=0x7ffc0000 [ 68.170721][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.185878][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 68.209353][ T26] audit: type=1326 audit(1773949588.008:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4291 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1740cd1799 code=0x7ffc0000 [ 68.234112][ T26] audit: type=1326 audit(1773949588.008:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4291 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1740cd1799 code=0x7ffc0000 [ 68.236991][ T4307] device bond0 entered promiscuous mode [ 68.263225][ T4307] device bond_slave_0 entered promiscuous mode [ 68.269738][ T4307] device bond_slave_1 entered promiscuous mode [ 68.269811][ T26] audit: type=1326 audit(1773949588.018:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4291 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1740cd3007 code=0x7ffc0000 [ 68.298787][ T4307] device gretap0 entered promiscuous mode [ 68.306880][ T4307] device hsr1 entered promiscuous mode [ 68.313685][ T147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.650949][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 68.657100][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 68.663145][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 68.671557][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 68.678568][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 68.905798][ T4327] 9pnet: Insufficient options for proto=fd [ 69.066248][ T4263] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.073546][ T4336] loop2: detected capacity change from 0 to 512 [ 69.142240][ T4339] loop3: detected capacity change from 0 to 512 [ 69.167364][ T4336] EXT4-fs (loop2): Ignoring removed nobh option [ 69.175352][ T4336] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.222393][ T4336] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.277369][ T4336] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 69.304721][ T4336] EXT4-fs (loop2): 1 truncate cleaned up [ 69.310879][ T4336] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,,errors=continue. Quota mode: none. [ 69.346171][ T4263] usb 1-1: Using ep0 maxpacket: 32 [ 69.466466][ T4263] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 69.474955][ T4263] usb 1-1: config 0 has no interface number 0 [ 69.496301][ T4263] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 69.848173][ T4263] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 69.922022][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.087992][ T4263] usb 1-1: Product: syz [ 70.160325][ T4263] usb 1-1: Manufacturer: syz [ 70.247723][ T4263] usb 1-1: SerialNumber: syz [ 70.408704][ T4263] usb 1-1: config 0 descriptor?? [ 70.460830][ T4263] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 70.536642][ T4365] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.557008][ T4263] em28xx 1-1:0.132: Video interface 132 found: [ 70.615909][ T4365] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 70.646274][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.655270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.664212][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.673258][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.682341][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.691562][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.700552][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.709708][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.718702][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 70.727838][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.010144][ T4370] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 71.020673][ T4370] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 71.040936][ T4325] udc-core: couldn't find an available UDC or it's busy [ 71.063471][ T4325] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.136840][ T4263] em28xx 1-1:0.132: chip ID is em2710/2820 [ 71.380009][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.387421][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.456418][ T4263] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 71.465505][ T4263] em28xx 1-1:0.132: board has no eeprom [ 71.641187][ T4263] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 71.660007][ T4263] em28xx 1-1:0.132: analog set to bulk mode. [ 71.709139][ T4263] usb 1-1: USB disconnect, device number 2 [ 71.729998][ T4236] em28xx 1-1:0.132: Registering V4L2 extension [ 71.745976][ T4263] em28xx 1-1:0.132: Disconnecting em28xx [ 72.804675][ T4236] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 72.826063][ T4236] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 72.840751][ T4236] em28xx 1-1:0.132: No AC97 audio processor [ 72.860135][ T4236] usb 1-1: Decoder not found [ 72.865461][ T4236] em28xx 1-1:0.132: failed to create media graph [ 72.865518][ T4236] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 72.888676][ T4236] em28xx 1-1:0.132: Remote control support is not available for this card. [ 72.899143][ T4263] em28xx 1-1:0.132: Closing input extension [ 72.939975][ T4263] em28xx 1-1:0.132: Freeing device [ 73.007437][ T4422] loop1: detected capacity change from 0 to 512 [ 73.094655][ T4422] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.116443][ T4426] loop3: detected capacity change from 0 to 512 [ 73.142192][ T4429] netlink: 144 bytes leftover after parsing attributes in process `syz.0.52'. [ 73.154188][ T4422] EXT4-fs (loop1): filesystem is read-only [ 73.255447][ T4426] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.51: bg 0: block 255: padding at end of block bitmap is not set [ 73.274652][ T4426] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 73.284457][ T4426] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.51: invalid indirect mapped block 65536 (level 0) [ 73.298720][ T4426] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.51: invalid indirect mapped block 32768 (level 2) [ 73.328544][ T4426] EXT4-fs (loop3): 1 truncate cleaned up [ 73.334494][ T4426] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: none. [ 73.638063][ T4449] loop1: detected capacity change from 0 to 512 [ 73.929091][ T4449] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 74.198910][ T4449] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 74.349112][ T4449] System zones: 1-12 [ 74.445022][ T4449] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.459710][ T4449] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.57: bg 0: block 361: padding at end of block bitmap is not set [ 74.490046][ T4449] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 74.530248][ T4449] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.57: attempt to clear invalid blocks 33619980 len 1 [ 74.649872][ T4449] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.57: invalid indirect mapped block 1811939328 (level 0) [ 74.674748][ T4465] netlink: 212 bytes leftover after parsing attributes in process `syz.3.59'. [ 74.762359][ T4449] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.57: invalid indirect mapped block 2 (level 2) [ 74.846833][ T4449] EXT4-fs (loop1): 1 truncate cleaned up [ 74.875812][ T4449] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,bsddf,noquota,inode_readahead_blks=0x0000000000040000,user_xattr,errors=continue. Quota mode: none. [ 74.998254][ T4474] loop0: detected capacity change from 0 to 1024 [ 75.163212][ T4474] EXT4-fs (loop0): Ignoring removed oldalloc option [ 75.177782][ T4474] EXT4-fs (loop0): Ignoring removed bh option [ 75.214845][ T4474] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.661291][ T4474] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,data_err=abort,nodelalloc,usrquota,data_err=ignore,init_itable,oldalloc,grpquota,discard,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 76.162597][ T4475] 9pnet: Insufficient options for proto=fd [ 76.196758][ T4504] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.263357][ T4494] loop3: detected capacity change from 0 to 8192 [ 77.410150][ T4520] capability: warning: `syz.4.74' uses deprecated v2 capabilities in a way that may be insecure [ 77.841751][ T4539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.80'. [ 77.879880][ T4539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.80'. [ 77.899391][ T4539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.80'. [ 77.934057][ T4542] tipc: Started in network mode [ 77.956138][ T4542] tipc: Node identity 728237d25aea, cluster identity 4711 [ 77.983928][ T4542] tipc: Enabled bearer , priority 0 [ 78.016877][ T4545] device syzkaller0 entered promiscuous mode [ 78.097695][ T4542] tipc: Resetting bearer [ 78.144281][ T4541] tipc: Resetting bearer [ 78.179499][ T4541] tipc: Disabling bearer [ 78.628578][ T4567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 79.722744][ T4582] 9pnet: Insufficient options for proto=fd [ 82.740768][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.871263][ T4620] hub 9-0:1.0: USB hub found [ 82.878463][ T4620] hub 9-0:1.0: 1 port detected [ 83.566285][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 83.683653][ T4630] loop1: detected capacity change from 0 to 512 [ 83.686303][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.745835][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 83.768884][ T4630] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,quota,quota,stripe=0x0000000000000003,lazytime,,errors=continue. Quota mode: writeback. [ 83.786326][ T4630] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.830350][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 83.924366][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 84.099929][ T4641] loop2: detected capacity change from 0 to 7 [ 84.137460][ T23] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 84.147771][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 84.153431][ T4179] loop2: [ 84.166874][ T4179] loop2: partition table partially beyond EOD, truncated [ 84.180821][ T23] usb 3-1: Product: syz [ 84.203964][ T23] usb 3-1: Manufacturer: syz [ 84.227305][ T23] usb 3-1: SerialNumber: syz [ 84.248982][ T4641] loop2: [ 84.252065][ T4641] loop2: partition table partially beyond EOD, truncated [ 84.273384][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.282692][ T23] usb 3-1: config 0 descriptor?? [ 84.338348][ T23] usb 3-1: no audio or video endpoints found [ 84.352494][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.434881][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.545172][ T4234] usb 3-1: USB disconnect, device number 2 [ 84.603817][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 85.164344][ T4675] netlink: 48 bytes leftover after parsing attributes in process `syz.2.109'. [ 85.216367][ T4676] 9pnet: Insufficient options for proto=fd [ 85.484378][ T4675] device team0 entered promiscuous mode [ 85.490625][ T4675] device team_slave_0 entered promiscuous mode [ 85.498595][ T4675] device team_slave_1 entered promiscuous mode [ 85.626801][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.794435][ T4675] syz.2.109 (4675) used greatest stack depth: 19920 bytes left [ 86.008915][ T4696] loop0: detected capacity change from 0 to 128 [ 86.181045][ T4699] loop2: detected capacity change from 0 to 512 [ 86.227023][ T4699] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.116: inode has both inline data and extents flags [ 86.251812][ T4701] Zero length message leads to an empty skb [ 86.281014][ T4699] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.116: couldn't read orphan inode 15 (err -117) [ 86.307167][ T4699] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.729449][ T1110] cfg80211: failed to load regulatory.db [ 87.371138][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.379444][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.195026][ T4715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.279697][ T4715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.032370][ T4715] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.046434][ T4715] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.055331][ T4715] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.088338][ T4715] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.297588][ T4746] capability: warning: `syz.0.127' uses 32-bit capabilities (legacy support in use) [ 89.374347][ T4746] program syz.0.127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.726939][ T4764] tipc: Started in network mode [ 89.732171][ T4764] tipc: Node identity 56ed5670418d, cluster identity 4711 [ 89.756838][ T4764] tipc: Enabled bearer , priority 0 [ 89.775161][ T4764] device syzkaller0 entered promiscuous mode [ 89.813129][ T4764] tipc: Resetting bearer [ 89.907839][ T4769] netlink: 68 bytes leftover after parsing attributes in process `syz.0.136'. [ 90.557310][ T4761] tipc: Resetting bearer [ 90.642749][ T4761] tipc: Disabling bearer [ 92.234250][ T4811] loop0: detected capacity change from 0 to 512 [ 92.273615][ T4811] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.341470][ T4811] EXT4-fs (loop0): 1 truncate cleaned up [ 92.347875][ T4811] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 93.289857][ T4832] loop3: detected capacity change from 0 to 128 [ 93.620792][ T4832] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.650251][ T4832] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.663326][ T4828] device vlan2 entered promiscuous mode [ 93.676386][ T4828] device bond0 entered promiscuous mode [ 93.712508][ T4828] device bond_slave_0 entered promiscuous mode [ 93.744480][ T4828] device bond_slave_1 entered promiscuous mode [ 93.873003][ T4835] loop1: detected capacity change from 0 to 2048 [ 93.953474][ T4835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.159'. [ 94.018123][ T4840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.159'. [ 94.158701][ T4842] TC_ACT_REPEAT abuse ? [ 94.476127][ T4236] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.756282][ T2302] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.776143][ T4236] usb 4-1: Using ep0 maxpacket: 32 [ 94.809330][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 94.921729][ T4236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.932877][ T4236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.948735][ T4236] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 94.960434][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.982809][ T4236] usb 4-1: config 0 descriptor?? [ 95.016539][ T2302] usb 2-1: Using ep0 maxpacket: 32 [ 95.037777][ T4236] hub 4-1:0.0: USB hub found [ 95.136208][ T2302] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.146689][ T2302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 95.156716][ T2302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 95.167061][ T2302] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 95.409413][ T2302] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 95.426068][ T2302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 95.440809][ T4844] udc-core: couldn't find an available UDC or it's busy [ 95.444439][ T2302] usb 2-1: Product: syz [ 95.451971][ T2302] usb 2-1: Manufacturer: syz [ 95.456865][ T4844] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 95.476302][ T2302] usb 2-1: SerialNumber: syz [ 95.496180][ T4236] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 95.509060][ T2302] usb 2-1: config 0 descriptor?? [ 95.548470][ T2302] usb 2-1: no audio or video endpoints found [ 95.626195][ T4236] usbhid 4-1:0.0: can't add hid device: -71 [ 95.632447][ T4236] usbhid: probe of 4-1:0.0 failed with error -71 [ 95.676809][ T4236] usb 4-1: USB disconnect, device number 2 [ 95.753507][ T4232] usb 2-1: USB disconnect, device number 2 [ 96.919671][ T4878] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 97.064794][ T4886] loop2: detected capacity change from 0 to 1024 [ 97.077655][ T4886] EXT4-fs (loop2): inline encryption not supported [ 97.085101][ T4886] EXT4-fs (loop2): Ignoring removed nobh option [ 97.100400][ T4886] EXT4-fs (loop2): Ignoring removed nobh option [ 97.109863][ T4886] EXT4-fs (loop2): Ignoring removed bh option [ 97.118490][ T4886] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.142393][ T4886] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,nobh,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 97.220169][ T4886] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3885: comm syz.2.180: Allocating blocks 385-513 which overlap fs metadata [ 97.243972][ T4886] EXT4-fs (loop2): pa ffff888070f52620: logic 16, phys. 129, len 24 [ 97.252480][ T4886] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 8 [ 97.368116][ T4232] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.441540][ T4902] netlink: 76 bytes leftover after parsing attributes in process `syz.2.186'. [ 97.464610][ T4902] netlink: 52 bytes leftover after parsing attributes in process `syz.2.186'. [ 97.480167][ T4902] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.488440][ T4902] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.616235][ T4232] usb 5-1: Using ep0 maxpacket: 8 [ 97.702298][ T4912] netlink: 'syz.3.191': attribute type 12 has an invalid length. [ 97.736638][ T4232] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 97.755214][ T4232] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.767809][ T4232] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.779235][ T4232] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 97.790791][ T4232] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.820899][ T4232] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.848367][ T4917] 9pnet: Insufficient options for proto=fd [ 97.874283][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.947547][ T4232] usbtmc 5-1:16.0: bulk endpoints not found [ 98.697660][ T4943] udc-core: couldn't find an available UDC or it's busy [ 98.732615][ T4943] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 100.141896][ T4232] usb 5-1: USB disconnect, device number 2 [ 100.179036][ T4964] loop3: detected capacity change from 0 to 1024 [ 100.513727][ T4953] syz.0.203 (4953): drop_caches: 2 [ 100.782870][ T4982] tipc: Started in network mode [ 100.799441][ T4982] tipc: Node identity 9271caea2829, cluster identity 4711 [ 100.816217][ T4954] syz.0.203 (4954): drop_caches: 2 [ 100.821950][ T4982] tipc: Enabled bearer , priority 0 [ 100.854176][ T4986] device syzkaller0 entered promiscuous mode [ 100.886354][ T4964] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.944313][ T4982] tipc: Resetting bearer [ 100.995800][ T4981] tipc: Resetting bearer [ 101.009268][ T4981] tipc: Disabling bearer [ 102.549197][ T5026] loop4: detected capacity change from 0 to 128 [ 104.414773][ T5023] sched: RT throttling activated [ 105.827153][ T5031] tipc: Enabled bearer , priority 0 [ 105.888507][ T5034] device syzkaller0 entered promiscuous mode [ 105.964473][ T5031] tipc: Resetting bearer [ 105.992237][ T5030] tipc: Resetting bearer [ 106.072648][ T5030] tipc: Disabling bearer [ 107.039466][ T5057] loop4: detected capacity change from 0 to 128 [ 107.236994][ T5070] loop1: detected capacity change from 0 to 512 [ 107.306407][ T5070] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.462221][ T5070] EXT4-fs (loop1): 1 orphan inode deleted [ 107.668480][ T5070] EXT4-fs (loop1): 1 truncate cleaned up [ 107.682782][ T5070] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 107.790590][ T5070] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.242: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 107.819372][ T5070] EXT4-fs (loop1): Remounting filesystem read-only [ 107.841494][ T5070] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.1.242: path /40/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 107.878004][ T5070] EXT4-fs (loop1): Remounting filesystem read-only [ 108.422188][ T5100] 9pnet: Insufficient options for proto=fd [ 109.133742][ T5115] loop6: detected capacity change from 0 to 8 [ 109.203171][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.209103][ T5117] loop4: detected capacity change from 0 to 4096 [ 109.214449][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.250133][ T5117] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 109.270675][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.281834][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.290848][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.301850][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.314266][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.325229][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.336917][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.347874][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.360543][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.371612][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.379903][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.391028][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.399858][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.410922][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.420343][ T5115] ldm_validate_partition_table(): Disk read failed. [ 109.453048][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.464095][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.480047][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.491329][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.507671][ T5115] Dev loop6: unable to read RDB block 0 [ 109.558263][ T5115] loop6: unable to read partition table [ 109.565541][ T5115] loop6: partition table beyond EOD, truncated [ 109.572638][ T5115] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 109.579728][ T4179] ldm_validate_partition_table(): Disk read failed. [ 109.593571][ T4179] Dev loop6: unable to read RDB block 0 [ 109.600559][ T4179] loop6: unable to read partition table [ 109.607729][ T4179] loop6: partition table beyond EOD, truncated [ 109.624033][ T5120] ldm_validate_partition_table(): Disk read failed. [ 109.654343][ T5120] Dev loop6: unable to read RDB block 0 [ 109.721288][ T5120] loop6: unable to read partition table [ 109.739630][ T5120] loop6: partition table beyond EOD, truncated [ 109.935106][ T5120] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 110.351522][ T5142] infiniband syz1: set active [ 110.361089][ T5142] infiniband syz1: added syz_tun [ 110.514206][ T5142] RDS/IB: syz1: added [ 110.521396][ T5142] smc: adding ib device syz1 with port count 1 [ 110.528405][ T5142] smc: ib device syz1 port 1 has pnetid [ 110.700087][ T5154] netlink: 'syz.2.268': attribute type 12 has an invalid length. [ 110.727494][ T5154] netlink: 'syz.2.268': attribute type 29 has an invalid length. [ 110.759539][ T5154] netlink: 148 bytes leftover after parsing attributes in process `syz.2.268'. [ 110.851042][ T5160] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 110.889645][ T5162] loop2: detected capacity change from 0 to 512 [ 110.924848][ T5157] kvm: pic: single mode not supported [ 110.925131][ T5157] kvm: pic: non byte read [ 110.964550][ T5157] kvm: pic: non byte read [ 111.065980][ T5162] EXT4-fs (loop2): orphan cleanup on readonly fs [ 111.117112][ T5162] __quota_error: 94 callbacks suppressed [ 111.117129][ T5162] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 111.139874][ T5166] 9pnet: Insufficient options for proto=fd [ 111.167370][ T5162] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 111.184313][ T5162] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.270: Failed to acquire dquot type 1 [ 111.263202][ T5162] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 111.366392][ T5162] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 111.382779][ T5162] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.270: Failed to acquire dquot type 1 [ 111.435803][ T5162] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.270: bg 0: block 248: padding at end of block bitmap is not set [ 111.521563][ T5162] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 111.537886][ T5162] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 111.555764][ T5162] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 111.579713][ T5162] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.270: Failed to acquire dquot type 1 [ 111.601365][ T5162] EXT4-fs (loop2): 1 orphan inode deleted [ 111.618507][ T5162] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.810905][ T5192] loop2: detected capacity change from 0 to 512 [ 112.941229][ T5192] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.996382][ T5192] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.255067][ T5197] block device autoloading is deprecated and will be removed. [ 113.322054][ T5199] loop1: detected capacity change from 0 to 1024 [ 113.388901][ T5199] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noblock_validity,auto_da_alloc,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none. [ 113.447224][ T5201] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 113.469619][ T5201] kvm: pic: non byte read [ 113.474440][ T5201] kvm: pic: non byte read [ 113.479313][ T5201] kvm: pic: non byte read [ 113.484102][ T5201] kvm: pic: non byte read [ 113.488866][ T5201] kvm: pic: non byte read [ 113.493619][ T5201] kvm: pic: non byte read [ 113.498538][ T5201] kvm: pic: level sensitive irq not supported [ 113.498623][ T5201] kvm: pic: non byte read [ 113.504614][ T5199] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.504994][ T5201] kvm: pic: level sensitive irq not supported [ 113.520980][ T5201] kvm: pic: non byte read [ 113.539638][ T5199] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm syz.1.281: lblock 0 mapped to illegal pblock 0 (length 1) [ 113.612880][ T5199] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.281: bg 0: block 112: padding at end of block bitmap is not set [ 113.706874][ T5199] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 113.747259][ T5199] EXT4-fs (loop1): This should not happen!! Data will be lost [ 113.747259][ T5199] [ 113.799221][ T4193] [ 113.801717][ T4193] ====================================================== [ 113.808902][ T4193] WARNING: possible circular locking dependency detected [ 113.815926][ T4193] syzkaller #0 Not tainted [ 113.820334][ T4193] ------------------------------------------------------ [ 113.827620][ T4193] syz-executor/4193 is trying to acquire lock: [ 113.833767][ T4193] ffff8880242a6938 ((wq_completion)loop2){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 113.844065][ T4193] [ 113.844065][ T4193] but task is already holding lock: [ 113.851513][ T4193] ffff88802023c468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 113.860499][ T4193] [ 113.860499][ T4193] which lock already depends on the new lock. [ 113.860499][ T4193] [ 113.870884][ T4193] [ 113.870884][ T4193] the existing dependency chain (in reverse order) is: [ 113.880052][ T4193] [ 113.880052][ T4193] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 113.887851][ T4193] __mutex_lock_common+0x1e3/0x2400 [ 113.893571][ T4193] mutex_lock_killable_nested+0x17/0x20 [ 113.899707][ T4193] lo_open+0x6a/0x100 [ 113.904188][ T4193] blkdev_get_whole+0x90/0x390 [ 113.909455][ T4193] blkdev_get_by_dev+0x2d0/0xa60 [ 113.915333][ T4193] blkdev_open+0x12d/0x2c0 [ 113.920517][ T4193] do_dentry_open+0x7ff/0xf80 [ 113.925787][ T4193] path_openat+0x26f5/0x2fa0 [ 113.930969][ T4193] do_filp_open+0x1e2/0x410 [ 113.936065][ T4193] do_sys_openat2+0x150/0x4b0 [ 113.941253][ T4193] __x64_sys_openat+0x135/0x160 [ 113.946609][ T4193] do_syscall_64+0x4c/0xa0 [ 113.951526][ T4193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.957919][ T4193] [ 113.957919][ T4193] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 113.965802][ T4193] __mutex_lock_common+0x1e3/0x2400 [ 113.971508][ T4193] mutex_lock_nested+0x17/0x20 [ 113.976864][ T4193] blkdev_get_by_dev+0x157/0xa60 [ 113.982389][ T4193] swsusp_check+0xa1/0x2b0 [ 113.987398][ T4193] software_resume+0xc6/0x3b0 [ 113.992607][ T4193] resume_store+0xe4/0x130 [ 113.997526][ T4193] kernfs_fop_write_iter+0x379/0x4c0 [ 114.003321][ T4193] vfs_write+0x745/0xd60 [ 114.008065][ T4193] ksys_write+0x152/0x260 [ 114.012899][ T4193] do_syscall_64+0x4c/0xa0 [ 114.017827][ T4193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.024224][ T4193] [ 114.024224][ T4193] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 114.032902][ T4193] __mutex_lock_common+0x1e3/0x2400 [ 114.038902][ T4193] mutex_lock_nested+0x17/0x20 [ 114.044256][ T4193] software_resume+0x7c/0x3b0 [ 114.049869][ T4193] resume_store+0xe4/0x130 [ 114.054786][ T4193] kernfs_fop_write_iter+0x379/0x4c0 [ 114.060574][ T4193] vfs_write+0x745/0xd60 [ 114.065319][ T4193] ksys_write+0x152/0x260 [ 114.070146][ T4193] do_syscall_64+0x4c/0xa0 [ 114.075061][ T4193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.081470][ T4193] [ 114.081470][ T4193] -> #3 (&of->mutex){+.+.}-{3:3}: [ 114.088836][ T4193] __mutex_lock_common+0x1e3/0x2400 [ 114.094537][ T4193] mutex_lock_nested+0x17/0x20 [ 114.099807][ T4193] kernfs_seq_start+0x51/0x3c0 [ 114.105076][ T4193] seq_read_iter+0x3c4/0xd50 [ 114.110167][ T4193] vfs_read+0x759/0xd60 [ 114.114825][ T4193] ksys_read+0x152/0x260 [ 114.119572][ T4193] do_syscall_64+0x4c/0xa0 [ 114.124488][ T4193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.130882][ T4193] [ 114.130882][ T4193] -> #2 (&p->lock){+.+.}-{3:3}: [ 114.137893][ T4193] __mutex_lock_common+0x1e3/0x2400 [ 114.143594][ T4193] mutex_lock_nested+0x17/0x20 [ 114.148859][ T4193] seq_read_iter+0xad/0xd50 [ 114.153864][ T4193] do_iter_readv_writev+0x47e/0x5f0 [ 114.159561][ T4193] do_iter_read+0x20b/0x7c0 [ 114.164566][ T4193] loop_process_work+0x16dd/0x24a0 [ 114.170265][ T4193] process_one_work+0x85f/0x1010 [ 114.175706][ T4193] worker_thread+0xaa6/0x1290 [ 114.180882][ T4193] kthread+0x436/0x520 [ 114.185451][ T4193] ret_from_fork+0x1f/0x30 [ 114.190373][ T4193] [ 114.190373][ T4193] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 114.199557][ T4193] process_one_work+0x7bb/0x1010 [ 114.205100][ T4193] worker_thread+0xaa6/0x1290 [ 114.210369][ T4193] kthread+0x436/0x520 [ 114.214937][ T4193] ret_from_fork+0x1f/0x30 [ 114.220039][ T4193] [ 114.220039][ T4193] -> #0 ((wq_completion)loop2){+.+.}-{0:0}: [ 114.228103][ T4193] __lock_acquire+0x2c42/0x7d10 [ 114.233807][ T4193] lock_acquire+0x19e/0x400 [ 114.238809][ T4193] flush_workqueue+0x16c/0x13d0 [ 114.244161][ T4193] drain_workqueue+0xcf/0x380 [ 114.249435][ T4193] destroy_workqueue+0x7b/0xb20 [ 114.254796][ T4193] __loop_clr_fd+0x234/0xb90 [ 114.259974][ T4193] blkdev_put+0x53f/0x7d0 [ 114.264813][ T4193] deactivate_locked_super+0x93/0xf0 [ 114.270689][ T4193] cleanup_mnt+0x42d/0x4e0 [ 114.275610][ T4193] task_work_run+0x125/0x1a0 [ 114.280705][ T4193] exit_to_user_mode_loop+0x10f/0x130 [ 114.286580][ T4193] exit_to_user_mode_prepare+0xee/0x180 [ 114.292628][ T4193] syscall_exit_to_user_mode+0x16/0x40 [ 114.298599][ T4193] do_syscall_64+0x58/0xa0 [ 114.303603][ T4193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.310083][ T4193] [ 114.310083][ T4193] other info that might help us debug this: [ 114.310083][ T4193] [ 114.320372][ T4193] Chain exists of: [ 114.320372][ T4193] (wq_completion)loop2 --> &disk->open_mutex --> &lo->lo_mutex [ 114.320372][ T4193] [ 114.333822][ T4193] Possible unsafe locking scenario: [ 114.333822][ T4193] [ 114.341341][ T4193] CPU0 CPU1 [ 114.346684][ T4193] ---- ---- [ 114.352028][ T4193] lock(&lo->lo_mutex); [ 114.356248][ T4193] lock(&disk->open_mutex); [ 114.363684][ T4193] lock(&lo->lo_mutex); [ 114.370429][ T4193] lock((wq_completion)loop2); [ 114.375348][ T4193] [ 114.375348][ T4193] *** DEADLOCK *** [ 114.375348][ T4193] [ 114.383555][ T4193] 2 locks held by syz-executor/4193: [ 114.388815][ T4193] #0: ffff888020117d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 114.398106][ T4193] #1: ffff88802023c468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 114.407308][ T4193] [ 114.407308][ T4193] stack backtrace: [ 114.413197][ T4193] CPU: 0 PID: 4193 Comm: syz-executor Not tainted syzkaller #0 [ 114.420720][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.430858][ T4193] Call Trace: [ 114.434134][ T4193] [ 114.437050][ T4193] dump_stack_lvl+0x188/0x250 [ 114.441800][ T4193] ? load_image+0x400/0x400 [ 114.446285][ T4193] ? show_regs_print_info+0x20/0x20 [ 114.451471][ T4193] ? print_circular_bug+0x12b/0x1a0 [ 114.456656][ T4193] check_noncircular+0x296/0x330 [ 114.461576][ T4193] ? add_chain_block+0x940/0x940 [ 114.466591][ T4193] ? lockdep_lock+0xf1/0x1f0 [ 114.471167][ T4193] ? mark_lock+0x94/0x320 [ 114.475482][ T4193] __lock_acquire+0x2c42/0x7d10 [ 114.480425][ T4193] ? verify_lock_unused+0x140/0x140 [ 114.485607][ T4193] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 114.491572][ T4193] ? verify_lock_unused+0x140/0x140 [ 114.496752][ T4193] ? verify_lock_unused+0x140/0x140 [ 114.501935][ T4193] ? memset+0x1e/0x40 [ 114.506079][ T4193] lock_acquire+0x19e/0x400 [ 114.510659][ T4193] ? flush_workqueue+0x150/0x13d0 [ 114.515669][ T4193] ? __mutex_trylock_common+0x155/0x260 [ 114.521198][ T4193] ? read_lock_is_recursive+0x10/0x10 [ 114.526553][ T4193] ? __init_swait_queue_head+0xa5/0x150 [ 114.532082][ T4193] flush_workqueue+0x16c/0x13d0 [ 114.536915][ T4193] ? flush_workqueue+0x150/0x13d0 [ 114.541933][ T4193] ? __lock_acquire+0x7d10/0x7d10 [ 114.546943][ T4193] ? lock_chain_count+0x20/0x20 [ 114.551775][ T4193] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 114.557217][ T4193] ? lockdep_hardirqs_off+0x70/0x100 [ 114.562582][ T4193] ? rcu_work_rcufn+0x120/0x120 [ 114.567415][ T4193] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 114.573176][ T4193] ? finish_wait+0xc0/0x1d0 [ 114.577758][ T4193] drain_workqueue+0xcf/0x380 [ 114.582504][ T4193] destroy_workqueue+0x7b/0xb20 [ 114.587340][ T4193] __loop_clr_fd+0x234/0xb90 [ 114.591915][ T4193] ? lo_release+0x172/0x1f0 [ 114.596408][ T4193] ? lo_open+0x100/0x100 [ 114.600653][ T4193] blkdev_put+0x53f/0x7d0 [ 114.604969][ T4193] deactivate_locked_super+0x93/0xf0 [ 114.610247][ T4193] cleanup_mnt+0x42d/0x4e0 [ 114.614646][ T4193] ? lockdep_hardirqs_on+0x94/0x140 [ 114.619929][ T4193] task_work_run+0x125/0x1a0 [ 114.624519][ T4193] exit_to_user_mode_loop+0x10f/0x130 [ 114.629880][ T4193] exit_to_user_mode_prepare+0xee/0x180 [ 114.635523][ T4193] syscall_exit_to_user_mode+0x16/0x40 [ 114.640983][ T4193] do_syscall_64+0x58/0xa0 [ 114.645409][ T4193] ? clear_bhb_loop+0x30/0x80 [ 114.650243][ T4193] ? clear_bhb_loop+0x30/0x80 [ 114.655001][ T4193] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.660887][ T4193] RIP: 0033:0x7fa36f2739d7 [ 114.665383][ T4193] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 114.685233][ T4193] RSP: 002b:00007ffd6d833a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 114.693639][ T4193] RAX: 0000000000000000 RBX: 00007fa36f308050 RCX: 00007fa36f2739d7 [ 114.701679][ T4193] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6d833b40 [ 114.709719][ T4193] RBP: 00007ffd6d833b40 R08: 00007ffd6d834b40 R09: 00000000ffffffff [ 114.717681][ T4193] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6d834bd0 [ 114.725728][ T4193] R13: 00007fa36f308050 R14: 000000000001bbc7 R15: 00007ffd6d834c10 [ 114.733774][ T4193] [ 114.933101][ T5220] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue